[ { "indicator": " \"07f1f906cc3c81db1aeffa3850258d46b78c5c02131bf01d35aaa5fa3a1362c0\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"03629a1aadcaa89a630ec5acc0995310a8f15167692a2be690d1f58aab976a76\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"77c723bd33028739522fc2cffa5b1c2cdf9c08993fd09810907577c28714c712\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"15c7d386f2324dc0c0ddf58ead72f8b2c268ba994d1bd1b0b94f071c462ff4b1\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"201cf8213fddeeb683d886fd79172325fb43d5879f46b974595e15481bf0b5d1\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"f6e63a680606f0cfdce4a37aaa97cc7a1ec0ea57351c45fd681f80273a15cc7b\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"017ba68aa41ff6416707ea9fe1482dc231a6c6e2740961f5107c88695e9c4362\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"AsyncRAT\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"c87a93fd7c57e88b359888dd5e6c589a720b100c1177789381f4ec3f88a9ac93\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Mirai\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"ff3e64769793f229ef263a04df3a0bed5e4c7e73f71cfdab6b914b323fe63dea\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Mirai\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"63d0255437c890a4b13a8e8fb02c3b3edf8f8af3bb08293026076bfe626ef4df\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"d8fae1f3303be955e67ee1ef8a823c7879a796023e6e23790492cd3af0e551b0\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"5c2d6c1df40a89776f6f28869249214d6f4d6e0ef4708b0eff1671bb1ce77933\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"9af5f415cea6ce948b4829575b74c7ba1e8a003675deb73296807f25af0b419d\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Mirai\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"a9d29e1627f0aa70741cc6ea1795b29317b1ba47a6e7f49ecba24808d1b62a7d\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"b9fc06697cabacbbadea8a4a80bf6681c5dd2e984f1ebe067e790531b347b886\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Mirai\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"f2559c75597cd7ab5ad85ff689191d0f8fd91f0c1e2af541c341baf6db8d32d7\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"db12eb6667462487e69e9e31fd946cd3d3b5ef5777e3bf45d0d9c797aa6e87be\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"0e328f948e2b12a2fd760bfa48675972448d73b9ebda89c7cf5433612faafd24\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"1bfc10e53f29b9c4d41d1956f6bd2e805370014c853574e04885921d0afa6537\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"18f79e4032e8ad64ac4c25aed4f2e9e6e510582d45a6126b9184a307a9ca480a\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"4a24649eec01af56d826ae375fc7ccea839ba2c7f1c89207e3f6a2e83153ab81\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"d171ff9bc17c1d9109580ca46060b3bb7d30827243ad79f34d3a169fc634bac0\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"253ee9fe2fbbd0447a186724de9a352c229872e3e46fd61197c322bc7c9878aa\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Mirai\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"ee66b4aee73634ea0ccb47755bbdab86acb77db866335a30126505c9e820af5c\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"126a550686490b9354cfb51fa2d4d4703b469b8eec2497889d017ce4f32f38e4\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"4a7064202e47848c09c0261f4b6c9a69487408c54ed7f5942cbcd775489aa00b\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"6ef76a6dae246d7956eb401f621034f1ec14ac7721cbd6175e50f2b715ab789d\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"c319582f5055ba85151a0c7c2d4a5705ae5fafe23f0427d91a269b200a0843d8\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Smoke Loader\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"c75b512cabcd93a14c3561deeb3a42c1437a12b20d46042a869bef99c2c252a0\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Smoke Loader\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"89e61df4394e3c3dc11cdb293aeb00155f371b0f1c2ade5f07fbc8732d86ba17\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"59b65b4f5058e38b42ec3fe79c5f05b4c29a61d00ddc6052bbbf074c99f75fef\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"ValleyRAT\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"777879027fbff0c83199938c8701e8553a0ead748b9c4a7687e06a6bd654817e\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"52e68fa2bb9568bb3039f0b0e820022e8aa02d46ac2c000ebf0deb49d2b3be1a\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"9d8373d9bccb3ba200e4c1aae48c083736298c4eb3a37feb17896bcf5cb02616\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"149bf791a0d8a880ebdd777389bfa7a96570c121749aed03721d3af7d0e9aa28\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"AgentTesla\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"6d06806ccee64d3baa5b9da63019c3ac7a23dfe210747fbdbc048a84196325c5\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"917cde4f5dfde864c07a412e586e218f65826b71810083bffb086c3518dec645\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"392fd5c341138983db810342dd1395fa0b079f956d4d41a3e266967fa4768e42\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"acb43101cf206f93d177aff2ef5231e9406d0cd3faf62cf30c2ef1295c9b0d05\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"2f77b32d357ee32396ed1724ed88c5c5f9fd8db8cedbd1b07a1bb1d58989862a\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"1962b1acb673b0019006aa41c27fd05b25c978625a0e4851632c1cd93f2840f4\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Amadey\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"22af12cb639b2fd1e3c0fff93230c98fe07b519eabcd4d902d09458e71bbefec\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"8336adc553a0125327261148e748e1143d1d82a185046949fcc5a153eb8ba925\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Amadey\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"ab1363201d0897ab7c55dceb1f8664a58ac65fe4aee3c9600c5d7659f8ae58a9\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"SpyNote\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"15839ac050341de16481e5e425f5f1a791547651d4aeda398217f823f0f321f9\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"SpyNote\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"5328d99bad0b89076b0028784010330e88ec4dbbcaa8bb365d8805c59f1e05f0\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"88b5390aee059fb8c0d521bdba9cf870f77d197ee25765747c61c4f3c1ae7bb5\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"741508351f8b822d9ce3ecd6d380ac5a37b598b7114c3db5e77a2bacd709c7c8\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"AsyncRAT\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"78bce4dbf9353aa8ae56ca337525186d17c39b59baba1e0b5589dd5466aaa2b4\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"21b6b9c7262fe39d2f2ce49115c9c22f50d3e5b0b083a0f8c1ddd776c369ffd3\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"SpyNote\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"1daade171b2f029c80787880db2ce893e5f1252facb6980fb7a93cb0dbb014c3\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"154193e63ac4a577d609d0b8ef99417d8c2fd6c62bf307d6a733f29c295322b5\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"e4854563e30c099c8e4169fb64909d3076e1142509463f69020cb179cd2a32b8\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Mirai\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"a183418d37308ca42402a5557474f97a3bea299a1d7c0d9dd5b197727ab9b58d\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"00e8f28233776a2ebe59cd547694b83012d5d9697a5f021a7b6e7e9aa9553922\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"NetSupport\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"108ca43c5a62640b5e3d71df33c00549c46634c1109c1ac6690df89fbc4211fd\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"SpyNote\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"1815bcfa86c90d0a4d6b1bdd6d04ee38fb259d1f34a69e4b53a9771263c7d58e\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"NetSupport\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"678ee44afb89903d3199378f2e6d9de0b4167c23e548bf4d7f863e1545ef912e\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"SpyNote\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"3a36197052dff82fd2c6a42d234e0482325f3f610136d58587cf466a569a6a96\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"d3cc5fceeda8d98795d9d813921368620d5e98f2682b76e635c5b567985a3abe\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"RustyStealer\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"8b7ab7f5a37f55fa529ca5b1470b9bccf219b0f3b62928c85eb140d7d4d805d2\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"89d8a5c61f78e93fb13f9aaf424161b02cc7f9508f69d8d2209cca2a5c2ed12e\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"c1643ec1b857dde1f1b7ee06a217de9b29efb1ebd13b2d59d078aa9743952913\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Mirai\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"1344477db0b4c89aba141ffcddc04db45d33d785923092b688dbe368ba8ff1e1\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Mirai\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"aeabe2302b00c6bf7688e44d8c1abaeeb4aa803ada23f8a5c71004cc06431433\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Mirai\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"a831f00feecaaca1e0b3c2f665fe181380b41f25bef875e96c18d4ba4e56c91f\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Mirai\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"64f756e9ec3b4ef50dd9f844a3ecd3fd0ac834eeb29778f702c29f64b50127e7\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Mirai\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"2f23d74eafdb3a2d175d93c793a82fb837ab3319317658bd7681b723c082a2b7\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Mirai\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"48515854a0b948442e97d8bbbe26bcab9aa095c71fff2b3ad2424368945cbf91\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Mirai\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"4e3b462c48cd70da96ff71ccbc477e51dfdf6c2c9caccc88af24f8ffc3022832\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Mirai\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"b6f3c909b03cb77db83da429adad2ab06c6634dde3129b146230cf6ee5e7946e\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Mirai\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"3676fcf94cc76987f4e5cd06e78efd9e7556faae301318c76823a3e5495b2be1\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Mirai\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"fc713295897316a62ac2f072ab22775c4be9ae5147fb94af48bd7e657a8d18b0\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Mirai\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"dc69bcb799a502c9bb8e9f03576a08a5a7a803149e8b301ebad474cdbf608355\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Mirai\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"bf274f6580e032bb802de68316f9d8accfdd55187cab378a806ad43296c4be90\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Mirai\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"d66a8eff096d72081b02ec2b4c2037e724da13305d024b7de4a4c3738c23b19e\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Mirai\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"9247f48ab49076166d113e0711fab7c7f421784ecf8e7a7f5639b717f2db357e\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Mirai\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"46326534553b3c5307d4c0347c12919b93b2699f9670593885cf52182a28180f\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"SpyNote\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"828a8180829f047507ad1052f14633cd9d4908037cf49c1d8b3c9799acce170d\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"SpyNote\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"b9fb2177e55ad47b2df74ff642bd3ee5058d392c3e2e272b93bec263aa30eeef\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"SpyNote\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"2cb1969ccab20338ba96687a793a6371bf27ea16cb14da93c9ed5717a9184cfb\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"LummaStealer\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"89a2daf2e8712482207dbc2d62923d139446b0379aa8c5219b2937ada300c486\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"b600af54745d2cf6529d048e701b579368af19ff69a08b5ae26d1f0d0a706047\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"SpyNote\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"5d4972e846d795b495d70fa054821c53678d2335b6879b4bf9a9116e101a8826\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"SpyNote\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"1aeae34c264bbfbd4eed6d92a94ac788bfb9b050a54032fde811402d63f18bf8\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"SpyNote\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"79f56edc1bb111c0323762dc0c25d9c50c9a62ec4dedc2cf2e0c2010e518b6b4\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"SpyNote\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"43b95f486c2b33c46164bfecff67648f033ef5451b304fd4806ed1e37e6d2390\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"b4693f478bc03f719ad19a2724e3219cd0310f7180fcc4e59c796774ce40234b\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"8707fd8e92ef45148e0494c8ca7f85b47cecc765f171834c95114dbfe4d95d5d\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"bdff9411d45a403a9b163ad48562752f67bf768ea6e268f08da4c3c16c1a52c5\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"72ccec2734d6dfc44ae0937c1fbefea6b7b41027f5e5184e843bb8b6e6e3970f\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"918c3bc3c730d9d75adad76d38951beca4f940bc223562098165d743d6159527\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"f561ac8aa7a8ec788938248c24b532788eba83846ee2e6e443a81c119123ed69\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"331b762517f3b2f1a5b91feeca08f7ced6c805c85daa205b141ccea7cda3f689\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"428213518a401592645e0bb0217584d8785424a33111ef1e4c7350259a315571\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"d3dee510f632c6252641192f50367dfb68628ae7a0c9b604ed8dd5fe0207f187\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"9f33efdeabd35154a3c3f6bba7955ffdf840e68f07cfae982e9fb4f04fb36750\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"DCRat\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"3a72983b2e794cb07417a16d2a7bd77210d7cff3840c183578c8318e91e933c5\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"a10d746078824c081e27887a5db174a58d7526c407b9b42221c601b231cfbd13\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"462758bbe01916452f127d1c937f42819ed1676d490bb9d1cdd3070537ae191f\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"f5056d55f44c071a2d99b0dcc4ecb93e5b945c8327d2ddb64b2e624fc01c62be\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"0b014555196d3200ff9a28efb49591f617c0ec9904da44b9348a4c27c4edc2de\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"njrat\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"25adf9ffbf6b0a1b8fe6fd2df6d091db286449529d3104d43c36e32e41fc55a3\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"36cfccc84b21d9bb8b3eb93589870aea0b146fd9ba649b785d44bb8dafd82656\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"0dc35c7d039cbd947630d7915022df44c9b5c6e849f93b5d597c1c93f171e79e\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"10f4ce434c34aafa6e53e4869235a3314ec679daf38dbea6b2f1b219d4d83d06\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"2b71cc2d38c47f9bad917201b6e510eb5658bf9ec6836d780662559d54f97432\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"0bb0fa1f70e5ea93c596465e26ade61c02cd597af649368ad6a3c01544224e1e\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"8bd46e4d069be47dddc1c267ac5c5eee52766f7c81675108c80c47bd8d947d06\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"0b6b36a1ea647ccec195ef2b642aad2ff2fac4e4c53208cb9ee70ffcea6c81f4\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"7b56f314650a2b9042ad6cad383b71ba9d2a9cddb5edfc73d2100bb47c809786\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Smoke Loader\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"70ec84b5e252557f7f7ee7fb362d0d1f40569385185ac48b6adbce81a2d58a3e\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"8f98052bcf23cf01f22be1a52297c20d1b3db3e98867757008eead3dbe504ef1\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"4c651b8bfa5c28f1c0236e53ff9037a2738a40902e765464abbbd96cae6a131e\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Mirai\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"d3c7c81f534b213150c0acfabb6476cfb4ebeeae891a16cb76cc26a864f0bd0c\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Mirai\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"83e7e3e8a8d8514ea24c9083df68acb5b7e6be3ca259c95d33bb31f9d5aaec2d\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Mirai\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"a8a600d0fc39e006205b4e850fd54f342d2e0d22bd9ff2152cbbcc65849dde53\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Mirai\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"eac165a583f11b00a25417752c26d7b5b82a49fb881509b9502b80a3528352cf\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Mirai\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"608ae3e738ea063633ebcc68822aad47b57eee8f5b83b6a7300e41c93511288f\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Mirai\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"39f753b15006c92bbd0392098518cd1c00615b9a80af75a077867046e5ecf218\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"826536353e28abcbbb992cfd874830dee6f9ffe94ccbb1c65ea4d57800710458\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Mirai\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"af40853f4f25f55ac2239bb15e945d5c97b6ad9d218c34307b1ad4c659efb0a7\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Mirai\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"65c13bf969ae825fe3ca65cd72a4165d187146a8f9ebbde88e1c15bf0d48c513\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"706f044dae810939a637a2144c2714f2899affe4649e8297ffb66d808e54ae76\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"ScarfaceStealer\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"fe0673443f05bf3f8aa907f7875012035f5599b2011df3553dba2908803ca8f2\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"9561aa5c7785d63596a71c468450ebbb78dca4958720af000e2f9f01093fbc08\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"1a0aa69d37db035fb7097451b002324c811d5bf857f90b4da5853d8cfb0fdae3\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"69b641635a37fd961410402f8c7e66bd072d51e26f9a6be7d03f185eb344f746\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"17ef90287357375f65849773176f5da3490080403170ccbdaa1358f3db767d15\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"61cab707c0869212b0ee594da70e668821803db6e9fcb3a3ec8a414dbe80c63e\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"255ad359962cccd9b48e81c5ea98bb71e2f212ec175b731a2625314bcce7711c\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"604697c8a05c31f1135e03c625fead61c11e3a1d4c03a7c721b292a196b26a89\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"1c42aa0cc6870aaf3e8d796423e00b2d0f60742674ffc3156d07957ed3dc7052\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"3d9cf30c5e02300cb05c27dd3f1b5cac4acf6fa0a550cf384ff09647b73c0381\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"f81ecb59f4088e9c98ed5722b5835ccd1aab215cb79671c095bccb754801f0cb\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"RustyStealer\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"ae9922b4b6ad2cfae21a02d29cccbff0353f83073b408b09efa1a21b34940389\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Mirai\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"5940e5fbcb9f26a53b3ce07017f14152166a172d80123454bc59af5b245d320e\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Mirai\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"882f861200690ffc956dad07f185a088de7a480fc141bc03e7e7d1164d126624\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"d906e3af0250cd073fc95562043bde0d89b86232765ccfab8ee0c2836642de78\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"XWorm\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"582a625083229573709b5df4f3d71b701759873df3eaff7ffe8ceec84c5828ec\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"XWorm\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"09dda73200a8456cdf684707e212326f9a96a6aaf0daa80dbf2e21a26564b457\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Socks5Systemz\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"3f96d585497d116fb57e304be408f5f14504a90b4b956b1c4017908274db9d53\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"ValleyRAT\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"0be4b693eea4b551de0044d8303c31749df873e005756db5a1d68db8c9a516fd\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Phorpiex\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"11fbaa9f11fb195b7a2da2030dfd8e29770f46646fd783c4b969a79374be2cb2\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Phorpiex\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"7754fc3ae79dd10fdb5f3a04251eb2e87ecf281597c058b27ae852083cf71ab4\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"DarkTortilla\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"db4973d865880696e334cd7ce2a7ff7255c24b9921dd526280bd1de6bb03753e\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"8d76a3dbb53c4750cd0c699011ddad9c5f595ab2ebb2d6d70fbb6b061bcdcb02\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"d64bc0975e32b85b1d5f927f62cbeb56316ceebad70a78bbf233f515d3067c06\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Adware.Techsnab\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"63fa8cd20986bc21a1a54ecb9db2dfe0db9618a3f0917e46d44f64317e7213b8\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"4fe1a58eba35e2e861aa508d45ea5d572e0529587bb1a9000875dbddf7f59bf9\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"ValleyRAT\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"5c5ec5d6dfd71e58caea479080fa48b5cfa8aba80cb35c7f0418f5006d7076ce\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"ValleyRAT\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"4e5777574f81eadada40188796507da424f5d32cba7ac6c00e13a9f55fd2da66\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"PhantomStealer\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"39c0224697ee5275d2809a95f0ea0316eb82500c13eb8a61337f760348e87689\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"ValleyRAT\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"de1f0c95e384774d387b2249b92d7e231a7a5f6c530d94453ca154fcc7d88155\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"AgentTesla\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"11bf8c110a1318e8cf0d72d634fdc6a9a012586d782bda04c64cb58a45bd997c\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"AgentTesla\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"3a139ac630e5af279e0d286171b50dfc24a02191d9b8ffb19cf426adbcc6320d\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"AgentTesla\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"ecac6d81c925b0677dce8e7072391e43db3902e5b05e4e2a64a92d646af686fe\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"AgentTesla\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"e20f675c8df2bf4abbe8868e0cf7e16869473c9d4fe22e8b8e52d458e9880ac6\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"db1576a9cb41e351930b758965b3a886b8647d880d20724184db31880601db57\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Prometei\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"d2846c8f6d56f5d638cf701d2b0862540003956629aa174516fbae90c3fbcc16\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"e5b5b5bfd73a6ad251eb3d95f71f228c0e96d9f55388084f518c7d686210f6ff\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Prometei\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"8c6d0728e65864923a9dd9cf1cb512ab65c3d80b69505818a52563a1efe4b59f\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"34e9982ee33cd630b7a9dd4070225ced552dff25e6284233c65aa4e6d6c51186\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Prometei\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"207a7e0a93ff730c9618409f15f75280299b3020b92bfc4fb6ee8c73476c3f92\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Prometei\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"1a9ab8ac2712aaafe991ce5d3b177e42b460810dd8799535d4301498107dbfff\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"eaacfba8b114f37a73c29f6cdd7e3a3707bbde3aaed2f423c71401479d580960\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"810926f89430144fd258ed4a95f1d77215f657a4e7dac2ce0c410bcffbdca99e\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Hydra\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"3ab9575225e00a83a4ac2b534da5a710bdcf6eb72884944c437b5fbe5c5c9235\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"3fafbee7a3b7259db3cb16b1ea7ebf7c12a61ced08e8f71c5e85258090d8b6cf\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Gafgyt\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"a231b7617c57c8d17d3552579e4cd14b82aa112c632ec830643a9bde2034a1f2\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Mirai\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"62eb5f17ab59b57daf4270d5bb25ab109f23f13ce8a62f45bc2ee2bb84d5507f\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"b6e6dc4ff0e24d915692b113a1f1414518503e92ff21a394e9f38d1ca2ab4275\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"bbe32a257e3aefb42f557ca65ae171faedb5718283801348e3ea990015ec2db9\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"LummaStealer\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"e08610b28e637679feaf243622adf3386a04bd24c915fe64c908d4d68b9fd203\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"33d2ede41373ccb57c46aa7f608f7b8610cff511500eaa80c24427a1de11bcb0\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"LummaStealer\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"4049b11974d4b950885ae93bc9af3c9352b70a064b373fab60f4c99542f71b20\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"3b85ecfe621924eba4d16d5993b2beece2a07fbedc7ef15850bcfdd44c4f39f9\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"912fcd1ba138a8af6ada02a5d62a5a918ff06d4618c041dbf075a60ea37d4d09\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"1d0f3505e3db852b90782ee60f0e458dc35877f6fbd77bbc2990fb4ea5e56c34\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"df16101db6081c19469f5d5de0d51c6d9bd4143be1ca7c4884cdd5196fb1214c\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Mirai\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"9dc074e77be3d762879a3e447bf191892e917d876c3664a3581c42d33fb98893\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"459c5374a9c6b6109a19bda99e4ab4b81239a53fbd0b9915cb1a51b34e2ccb4d\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"7d979e19ebb28eb9e3c473dc130288526f950afea202b4ecaaaa74683c8c4758\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"GenesisStealer\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"90fd9b7f029dd2968c69a03d98fd8f86dd529b0c507898e687abf39807eaed2e\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"c8836a733b3df2b4bfd861b81e3452a0bc169ffe707f483a06f7ad89a4cc2965\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"cf0c14da713bd05284beb4aec55498c7e38425dc53f36963cd6fdbc21626c9ba\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"437816447dd69f712003ef332ff71e1a23e7ead9d5b7eff39c547159cfb60697\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"c0a738bc221d179d788329e18996be3f53717c14f71cce3e1f4de4f316f61320\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"91d15b3e6836b112cc7507af46553e95fcb40960c6d71494a20513ce3d552d94\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"ValleyRAT\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"0748253bb84d8fd3277d926bee9aae97560c37921ccb3d1dbf3199fae3e62a20\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"47f92d2b9a3091d80834f06dd54880f99936aa1337590d640478e23067ef6bff\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"OffLoader\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"d5c71eced224608ee3d1a612a29108ea8719f3eb5511267e23755ae191224a16\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"MillenuimRAT\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"7c52867f025f47deb82cc3eb92588e0081e2bf7a2d463f1406a92f93286d6a3f\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"MillenuimRAT\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"2db76251333918e6bc5d8960aad6e2a2f7b8a01abaea32350c58530d3a818a8e\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Mirai\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"94bb90c005e7b800f08fdb094e7880c0ebbc1b19b4f1cbcdac20d9227ab4d85e\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"87db3765294c73cd1f3d7bf5292e20a152b0edbcc0318dd14d7105d3a4ee2592\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"798dbfdbdd49ed89de9ee9d5a2e336fc89b331cd79cf6a2f244bdd629b8e7415\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"d5a6edb8c1ded3a8ba12d39d7c017815cb2a4899c5c40c7c9e64db4cdb034770\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"0f3ea31d07858c51cb58b8fa1c675922f35f9717c9423bf33fcc780ab4bc2471\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"9f4d29c8279dba9f147b7450e8f1000e0a96fa23bf99ed807d21248cf41df1d4\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-03", "last_seen": "2026-04-03", "sightings": 1 }, { "indicator": " \"ca12c3dbdf0464609e15bd297af41a15657c13465e907f88b8267dfda7641fd1\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"b96648e8a12038a947a00027f3147193268c80a2f42b63c331dea059a7b3cd72\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"94f02f4c2af27b6b131208ac26b9647a0df303c134eafa6d6dd7c499567f3116\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"2816414c2fcfa443d614b66be879dcce5ed506bd816334911954ce3ce8213aac\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"SyncroRMM\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"2280cfb15d560a94cddab186221fac94f967dfe7359d1c083bf66eab85380fbf\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"5ddd3491dcc659e208b08b8b9c430a34ac3ab9f909282c27fc7320b9f8f86e96\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"njrat\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"42caae0666649bd94561b64d976c762bf990ca592f66eb13a68ca9ab3f3b825e\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"RustyStealer\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"7ec55920de034940d8a0a058a717dfab5e3587d827c2a46fed60b09ae69dfde5\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"b769c834523acfc208548b071df9b51d415235da4604420ee29864c0660e7d30\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"RedLineStealer\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"2c0ed7f8bff17cbcefed1a170fd8b29723538fba2588bafb91be66cdfa81d242\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"njrat\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"4b025fe6f45e606628df3987e6aefcdc19220c9dd9711be20dbdbfce23c4d742\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"54a2d3b7976f1a6436075f55320fff3ab30f459c48130e1e86c05ca07687b93f\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"9b2fa50d5f4813ac0b77e8573bf66cac02f74ca3a95ae5512013d1f765893942\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Smoke Loader\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"b784ac0f60fbd5cffa089ae00089bb651fcbf4acfe44c6e318b7b64f43e90e00\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"9469c0ecb56d97235377a1ef66799767e5c437e1c933a070276468cf47d1228a\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"QuasarRAT\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"1713b425157a02715f62c250ab2ca039f02923be43ed8715044a99f9947c7be3\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Smoke Loader\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"cf6bc4cf461ee794f21f5e4786048a3afdac85e74efa4a461f232f1137b6589e\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"DCRat\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"217a5cd208e22b37784fb81ae87ee4227fa01c52cb5839b6a3516e47f985d285\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Smoke Loader\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"79fa34a1078a6cf6f248aa23131efdcde7b6a0ba4c0e2581c1486fbcd826fdd3\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"3c4485a4eb1a0655a521bb3274e8c81c0358a33a0348f1e8292a6f94df36c3b1\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"04d8f7258ab93a2ec9c18e14636b5d0d1fb6fa0ac7c82b29973d213473c57602\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"WraithBot\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"7c995c884d4e3b0d38157c510bcc37cd7a8ca35ae24eb1ea0c7e52d76b8a7dca\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"4920f87d77a06d39793db7f6badae775702facb6bf848ef2f2868a2e022911b3\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"RustyStealer\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"aa074b990ef39f77e3d07f2a3ead60e1d87b5c073ea6ec5e3760356d131cd15f\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"SyncroRMM\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"cb8ed8faa43d39df05659bd1396cc2d037401b386c05471b2ce9f0dfac86c711\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Phorpiex\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"93a3412e427dbe3690a625219166d9e494593cd600932dface8584b3efe2b9ad\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Phorpiex\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"981006af72be89f4b18b8b870aa77ea10a46a9373b621f655ba4a3c37cbfada1\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Phorpiex\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"432c47f7cf9e99bd12f0403e6700f561d5070a6fd887faa6bf90957e7b231979\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Phorpiex\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"ffb7c4765dad2e804e6249b05334d8475fffb66dfc1b5984b285ebeceb5d17aa\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"CoinMiner\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"dce7346008cc7d3088246fe8bb2924315673e66ee6f939941d4ce73c2de16b08\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"AsyncRAT\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"067eca89df2fad3905ea5987350f68362fba8b2241393c2c79522f11736e3192\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"CoinMiner\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"2f4afbe3f6077e7d91cbcf5ab027a2fba73b2ed02c2cbf3e918bf170e5a1f9b6\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"CoinMiner\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"b63078647279770a6ee5e73c5b78f6958acfa5cca56951dc2807f2ddf601f9db\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"7a20096b331a5bc550856b045406f06704d8a5ae515c6e9f977e69148ceb33e7\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Phorpiex\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"54d788b1af6ba0343256e528aadfaae30e2ad214e7a6915dc08f0dddc23b2f2c\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"5722bae97daf54f30f3fcca10ced0c88ec0e64f5c1de3152c332e6178b64acf2\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"AsyncRAT\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"94b755e6ccb233824a2797bfa93ee4a1f7eaf04d161e997f9c81a47f38a3629d\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Phorpiex\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"e5301437e8a76f87a45f98fae2d0f0888701c18833a3368e81632a651c71beff\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Phorpiex\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"8bbb128612a98149a1ae752210ae24b807af7d9217b544fa6a4a0563a8b03b0a\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"fe0184cd17b02eb0fb6b1fd83e9ff5bbd7ce34c455abe93c4f5b78e6df1553c8\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"LummaStealer\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"8ef463592cbf5e37d83f9bdfa74feee4ba1722e6ef5a417c6976758b6c991747\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"LummaStealer\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"ebf93fa97159a29f88d1b04df6d55b7f485c86c7193d685a25e731c2f9f9aeeb\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"1e5f4b3055968c4c7ca140c4ffa06c318472481a1717a9887a62dc2a509859f8\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"189af922b12f73d17d9c1e169861f99b2bc9b57634fe5fbec76881ce57d20f0f\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"1c84c50d8537855b9c9f58a238d81d2077e65ebc32088c9afeaf2ed1a8badf30\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"242f5497cb5d2a3135834603ded729506fe11e61ba45451a2de134eb28668284\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"42640106825fa9c712f27e3720839a8319e3f965659bc988ec241f4bf19ca55f\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"4fd6e716ce4b6767ddad2415f77b4f9b6d1546750b0c03280e19756eb1b85e7d\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"50f8ad0216e3456ea52403844ec2b93edd40b5dc6fda77b129c721d95f5f7090\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"683822bf87d3e85c3c9f759e586431e72ec03699c2a9ad98bc3a86d80149fe06\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"6feb2c9e611ab9546efb5f818522430bbe7f8bdffd29e9c36e591bf8db578900\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"8f0aacc93b282b3910be2333edea3fa93eaff90d562366fc7bfb9d76533e73eb\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"a87de00ece3af7a75561f28fc3ffacdbc95dbd61a3449a90b6d5867eded5ea89\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"c97ad0fbb6c08c88881730836d18dfad203cbb52dc3343ca14048bf7ed15c6c1\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"d02d82f2057f4794a71bf376a9ee24f012f996c7a5904f219dbe15aff95f4a0e\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"f529edcd2da8c7199f553d98664be691ae5e3810af703665840c06aa10f6e920\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"76a24ce8aa64b364da2da2feca560e8a0901f5e44d8d8df2a844a67274ad5b27\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"e0090765e0ede7abc1c864f565024bf14c07d7feec22803538f6e5a9881b0807\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"d92c99455afba2324b3fbd7ba540e76657fabe022b118896509d71eb6599827a\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"CoinMiner\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"ee04c3c25cbee4fd131f65239b60c2c94db0428e86607c0685e7c610376b34c6\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Phorpiex\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"d5171d3dfcfdb37e920e0c9a305ea9a28c419483321ec244a6f2fdfceacb5249\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Phorpiex\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"708f81337be07609f0e6ee7042bd14b56042cc42164d926ec5aa3df70b395abe\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"njrat\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"0960616a0aeb78083983043d46d7fb6283550f5ea6335a5e88a3194fed9afdf4\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Oscorp\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"34e11dc3d0a4d95e8e7bc520b140f7028f44788b0be359cddf435fa0582365f1\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Phorpiex\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"0c65c5d4d1d138293df6b106eaf3ca73bac9c9f834f2821276b6fe816ca20ca0\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Phorpiex\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"8bde0f38b2eafbdbe2c33f4f7352029b2890e345cdcda3cc171e1e1246535814\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"LummaStealer\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"26541cd26b08929911eaf9d3d09d2bdf06ae314b3c76bd02d2a75248033c875f\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"LummaStealer\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"4a86870712c9738c2782342ca0ec40922d022999f0f3140a8fecf7f001392b78\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Mirai\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"9e2e9d9ed43545a8727d7b6772dd56b286de9b5536540650d299d50c51df0097\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"a4f4382f361ea243b90e22e62036afbc81324fde48b33f9c8483ccc0f783de82\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"4aed0f0c266ad694c47c0661bb5c0a4519d02fdeb9d76abade9145ec6791f77f\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Heodo\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"1794dda4c20bd94854d5d6c6ee535f5769d7662dd7130ecd16a27487af94af48\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Mirai\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"bf24277400cc453d530e4277d3bd24e96c5e409adef6970518bdc59205aa0241\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Stealc\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"8cea42f129b341c9bedf132cb14bf360a4fc596d336016381c655154d0819acb\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"4054e6f4b770317d3c847281ce6ea8b19c2fe7efeb4cfd26105eb994cbfa9c4c\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"ExelaStealer\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"c1d06468a2f089b4f6efbd51f4a140be40283e2efc76d25712e63471bca9f235\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"02f1f39c71e42de51997b8a2f1495d8ff9862a42cb77ce3d4cbcd035fff95d92\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"7ba205886073ee06a8fd711812ba7e655657a16ef7e6363100aa89428f270cc5\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Phorpiex\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"690459835383c4eb733c2817d8f9add7417312f7938e150e2429d0b5e2b4b2d0\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"eeaca1b194058fb37aeaeef21ab455c2f54b798a1f7128f767bae38e1d7a638f\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Mirai\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"0ab588dcfdaa58554066e74f2af1820d2ec7e8349d2c6b3b2064dd51c502b14b\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Vidar\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"e5eff5e950264f13829017e37e9dcef8a747e6da6486955476a463ec87f88631\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"8d7252df516b2151ac14532a7baf6ffc3eb745f33b8f247b593eb0172ec8f971\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"AgentTesla\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"43c3894d7d44499a767bb843f6f16a1946071a0543ff0d121f6cf3aa4f88ef65\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Grandoreiro\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"9339cc4f2b1d6adf42c05512cc6f3ec26ed7c6303187b2aaa4f90e8ff7dddc40\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Mirai\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"48c9892a21b88e4fa0235ee89452c6060a5209113149e44de9ff4041386ed292\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Mirai\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"81311e5997d5614d70b47b6ff730f1242582da0bc50975348878564c280a9530\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Mirai\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"8194de3dd9492cc9b096a3d03de521da61f7dc935a38960e1040e6cfc32a0e75\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Mirai\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"db5cd5ec74a616f4b4e653dd63d6564a99cb9d073c1dc2d8db192af5c1beb52c\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Mirai\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"ea30784fdd6b41e70695c26f603a19f4535ea8548bb0b0189728e4b7e531ce4c\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Mirai\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"79f7cc37bf931761a087da2d2998f7ffca5e4a434495f86eea06cf1e34d42c45\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Mirai\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"0ef7afad81d11926f72f2d639e430c23e77cdf94d2b53bb4c59c5ef40ed8d538\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Vidar\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"909a9da9a1f47e503c348d59216494ade8d1fed8fd97e1435be1b0f98e156835\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"AsyncRAT\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"4a89dceadd396eae52f77e7a0db39248bfc0421c6615f732ace330affc9440da\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Mirai\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"f004e582d80431ba890cb4be7fa18d512de32c386b4356005b467874a5904f0d\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Mirai\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"6cbdbecf9532279610ae6425b31349cc7ad67367df970bfd3815bb32171f23aa\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"PhantomStealer\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"7e8b87b8fe7ccb490bd1e16e65b58287a6ef7782a5a7c79fa329f0ca2e96b366\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"a310Logger\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"cac99b68a7c79ca1fa023def49d430f478e2b47be0fb96f40fc68b717b4a9b2c\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"1ff47164250163792113c7fb4aacbd4f43d5bcb75622e8fd23e92d9049555394\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"njrat\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"3956cc41fa0eeb99e07dab7f27178d8d392d2275183c9812312348eef1b80f89\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Mirai\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"1c2219f1d3badcd05f2a7a148016dccce79d21dd5659278ea3741ed364f44035\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Mirai\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"6f63e080b5af38f25373d58b18d478189eca4998864517035b1c6667a21028da\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Mirai\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"f0a0ede5c82707f50968e5778d1f5c690f5d2b11281339d8f38300a60dbfa982\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"c8691b3712398775089267718fb9b470164fd65935c832570581eb87513127d1\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Phorpiex\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"a6a2de606b094f7c4d35cd7cb02f5a512f72981110981fab2bf737ad52bc4506\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"ea4043b07992e4aefb3e15b2ef3ddd71de315109c01b4230585cc213ab6ec3dd\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"354e069edf6d52b43326a8f6408e95c0bd4c5cb6da3a81971036e18f8b2ca8c6\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"0d8cc1710212924a9233cca7d2917676479bd6203cf671849f81e5d9c7448e8b\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"beca148fe90dcb06dc2aedfffc5b7098453b1489f1cc6e69febb520e2e253ce4\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"LummaStealer\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"aeeeda70cbbea0074f171b0da50aead64e9280d94e95714263d47d720eb7c71c\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"SyncroRMM\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"bd52309c600df9be82a2e8afd09bfd19ba20a303ecc05a85e550afd426906283\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"LummaStealer\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"eaf789000af11f99a7ce38d5532de054e0812b828cf079859550be8abd710af8\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"2bedd77cc5402b2a151ae4f4d9743dbdd12d6368ac16dcf86678bd185315957e\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"9a5af44af5dcf614cecb9d6a14f1412e6e59355b980dd1c28325aa3c31de24a1\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"5e2bc42694b4eddb372a8370937a19cd71db11c8275a0a12ade339f2862fac55\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Mirai\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"50190feceb5d7db701e0f0b312a2c81b7b2455c06471b16412e1d508867aa562\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"09702ee08682153ab1862d45e2374699a62b6b3929a34ba30778f971ed09ef26\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"SpyNote\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"6450be29aa887d5e3aa882df387d5896bec18b85b6b1338b1b9d82a1a51d5303\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"679b43410a4208582ae4fadba31d4b032359a66edb42c3f6994ebd6ac22a84e6\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"42533fbb40fe274c96a31c948ae6e84b6c103f9da6f27c9d1dc5c011f7b719d0\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"f36542b449e0b164bf0927d48bd934aa0e66bd2fab483f532cf2010f3fc9d02b\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"fce33b1a8006abe1863eaeb2799a1ef81fcfca9fedbdae45d27f92eae68d0464\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"3c5ca1d037d3d3ac89fb1415a4b374e4ead9f36c466b7917fa4f009e0a834b5f\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"e8ef50a1799265d3aa15294e41b66a143205f010e74efdb7915dec21f4bae063\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"4dc4f0f7d86ce580ec9d5afe792681d8c4ce473e96f21cfaa11cec93b1cf2ae6\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"d17c10cf0975ffbc60f7d6a0b6446524e1608be0aa1fbd2ea0cc39d8388fc9bd\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"65d10ce7d4cbda9b316b4a4e1d82e0cd111f741b8aa2cf595fd9183de6364a34\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Mirai\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"cd23460d5c3991ca0138bae65707de8280e32e071169d3f5560d341a0edc54ea\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"3877ef81288520aca410885207b0647c79955655adb023a0c50df0255a8e8b00\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"1e2815e66bf6bf2604368349d86435e5e648ae44910e196e323ca09375e8e1f5\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"RustyStealer\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"ee0b9fbdcfcf4fed1f2e960539b06e76cdc600240596b186f24561028691c34e\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Vi\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"7d9b565d51db33717821737a374b450beb95ccefe0905e9cc50260a8250b0d7c\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"QuasarRAT\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"d7c45659ac5f9756b918654b96d16a2bd46e628f3a0768ec9bb69f205daac3f2\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"RemcosRAT\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"3cb55b5a027163e2a3ed05770386a1bd80577f37a4085f30ae46a23fde8bb737\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"ScarfaceStealer\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"8edeadbfe641a0d4c1f190f3fb050125f92c5c9d65b0cc588bc0f0c5795c72cd\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"CobaltStrike\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"2fe91ae0e4839ae3fb202495f0ab07bdd08c0f06209de131a1660d9a0c834836\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"QuasarRAT\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"574d5ae7f5c7fd8ffa275e755f285f3a92f2a232a015113eef0329e64e72609e\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"LummaStealer\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"ce8cb74b3db1bac186ae57524e82d34d247104b43d0623c09712706938dc0642\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"542feb5ab4ad77196b837adf10e237947ca01c4a69eac7613f8ebafba2d45908\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"9cd82a50053ee9555d2b2dd68acd0a52d998bf6299cdd46554ee1a57770cf6fe\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"be6d91050814c3b6b096261ca67d73bbab4d1185843c61fa3db3a5ed2f18b6aa\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"ConnectWise\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"1310cb173cb1d94c4facda56a406768eb2937679d013069eab327cf4bfa4d30b\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"273220ff86844cef705dca2fed8a434b2a1546ba1f249a48af9140525371e3e1\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"ScarfaceStealer\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"37c5b6a429b149fa9542c544aa30d6651d9572e713e081f64582eba0aaac1269\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"ScarfaceStealer\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"b72b4e75c8e746ad265aa81aec5d2651af071590dfb5ffbb970d235b2182c584\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"a310Logger\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"b165e67a074e2b3b60e046b5ad566c4d0d22eff1c5c3713d82838fe60b0f47a5\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"dc451dc92ca8c94781031a73a04ff4da5081de8b8e8a5aeb19ac0712d37435d8\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"AgentTesla\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"a8e8d4768f4c1a93922bca30e84501538f0fc4666fc1fe7db9cdd1d591781e17\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Formbook\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"1e371ac1c69da56b193dd34c2eef06e64279be9d31ee517890f3898a46815c44\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"cc97f068f53b20a3072d5c63553609d02916716fcc9f4f333a173a5a3c0aa830\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"AgentTesla\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"02347caafa65553288f340c64964dae9706cde2b7da0272baa1698c68261f20f\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"AgentTesla\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"52d09137de267243774fec5ae08b065471e2cf4e0c2e3c6de5cec222abd84314\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"dc1d06957dd9b29e4c55ed5a779fdf4b45a34dacb86f31611f5f129bb4942191\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"d091e01ba92b9257cf7dc69f8bd46b918907de74226d0760a732eab6249a7059\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"06941db07504f7009da0493b394d4a7c32207b310af2eb8a3bdc620538b9bd6f\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"CryptOne\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"77b0b59d2733125c03a25e10bdd7b1b5629cbf80b8627c9aec61b07164d984d0\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Mirai\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"d33beeecfba29be529d7793b6bfd897d95a8c24b7d42acb49653a338b69fc05c\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Mirai\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"4207fdf47060617945453e6e5a38c91a5c7740b07dfe30725f84b30369a7fb0f\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Mirai\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"eb594c3643e6a3f402cbe04539b8526374acfe261e7a150a48ed3d5d7f4ec655\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Mirai\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"b32f8bbfb58c14f3a5cc8ccb48ce6382d0f056c483ebf10613bd6b6c7c339ad4\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Mirai\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"ae164e666d4752c40f28d0a75adf03cc16e9123ce965fd60d7267745405f76a6\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Mirai\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"207df8bd9aeb27d73e67f4219d8ac9694f81ab8440dbd9a2d8214a34a85a8e0c\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Mirai\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"4f10d73baf67716fabc2fe86b8d603523b70f716fc19d77af3e040870b148072\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Mirai\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"d4508bda632b5eb652735bdeddd6e444d69659baf3051e8121bceed0a1765835\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Mirai\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"e79bce3e2cae2cea2a701e3eb11e8adcbe268173251dc4717ea2ff1e3affe737\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Mirai\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"867f65c80da50d56351e70941935ba9eace1550ab862d7b16817e701446b1c40\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Mirai\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"54259a989665b0c068340caa523157c730d421f0e5e40f05e87168ce55fd3b02\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"c9b26587fce571edf1f08903ac33ff8551778002272a95d85aeab28f3cd849b6\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Mirai\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"96287c6c40b8806dce675dc2d1773ddccbdd9e6709374bd6e48f4b9fe2ed0b27\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Mirai\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"48d2f14841dd0d8ca049ae1739fd06a7af7629569afde82cfaff8ca41a8e22b6\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Mirai\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"12ead33440cbf019a3731d09bbdb9de0fb97316323d3758a12ab9caa69eee154\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Mirai\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"0d0c3335d2e29a6b7d121727fe015d53ab8179c4fc0930e7ee5d7f899199a8c1\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Mirai\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"f4d2cb8b8ff03d8a29cbfd94cf862b69a84cc9f62d0ea9fb57f925b86685c2ef\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Mirai\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"e3637f0db2bd19be2eecbe94ff4ff34e35bce8a4d2f3325c0eabac2811fd47bc\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Mirai\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"5a11d08ab62f97ead0f6a5137563e71dd60955a8b1968854c3845448eb282e29\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Mirai\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"f590872fa139fcb92eafbe13fadbcb5362d5e59420586f35d0d3cf6609f5efff\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Mirai\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"91ffec6d9e24ed26bb502c531f1ac24035eeb11997ba13c960d45dcac465c32a\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Mirai\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"a64b89f5c5b128af2e9511b8884cef3d416baf44448e8afb286b2fc2a07cd5e7\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Mirai\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"58f1158fc19f60eb48009af7a9398042ad8a61f091a84fea72ffa0ed28e5968d\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Mirai\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"483ca942ed5a4c55ea812950ef0aa48f9844a303b7b1240fa1468d340c93e768\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Mirai\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"255d5d2364463b66f6682e0062273376bfd53edb192547c68466f47565da19eb\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Mirai\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"ef6a8cef23056da7bc68c5337a291d6427a66edaf3a4561e6d0ae798bf458c64\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Mirai\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"645d2fc37a391a513e4fc2cf41fb00aa196c9365f5e18fc1301366c9abc4663f\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Mirai\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"8108f37ecb81c14d47d741bdc98f3b4c008c69eab0352d52f9804724663886e6\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Mirai\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"0d2cb19d3edbc84bb321695479263f8dca95f3666a5c085efc6760f3ebc39326\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Mirai\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"5186c9f224236fcd06a7e44e54836cdc3766e0c943b6c280fb5f57fdca1a5ac7\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Mirai\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"76f508f8c3b732a544afb16124eb7683b40f9c29ed1f363674aa57a4ba82e43a\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"ScarfaceStealer\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"18a1f4ed77c4b109d3bddf21854abc26376f8846d7d43af248e44341fab7012d\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"QuasarRAT\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"780c37d0d64d8b78b6ad63d846b83d257982ca5663288593d9953833b275a2b4\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"331e362687d355e7421082e8657b8d6be3aef012825205329e0b956f1b391ebb\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"e138cd5302d28a0a83734a3f0b4796e92b38346c4db858b9adb2f2a78c055358\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"ScarfaceStealer\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"f36d7b6412cf3015a34d2595e90e3bcf15ad23655de4d07864b164abe95b0240\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Vidar\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"37a85dfc3f11a29ef6097819ab914eabbf08e4509cb48e19a5d803611060607b\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Mirai\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"802a54ffe397f1de652d720d2d99bddde6e789d17afe337d749eb4bde9837b7d\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Vidar\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"666e31dee445064bdba82e2f209e4aeb8ae314f03e77fc6e743a0d0f83fc31c4\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"f89b857ef81e292e31e9d41adb60a6e70d3f1469f983de15d24bb081e20597e8\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"RemcosRAT\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"a059d70e4f9095f167bd34ea4dfdab33be8f599907daefbd05f2ba3f2d6302be\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"8289c8db41f3396a4353a982e715bba0a2d8b272b5d915f2462ac0578847d76a\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"AsyncRAT\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"70124c2df46ebe1e32a860462c8fe7b31eed825c66180f5abd8abe841b4059ee\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"fd8144fa9fadab3ce862d6e42da69e1f81e98906fe097ec884cc1ae9a73a5fd5\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"PhantomStealer\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"fb6d4ce94013385b31b30ec1ab8f1a6b2c34252a13062f880eae47b2b5cfc4e7\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"AsyncRAT\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"33e0e57bf00686dee10f561befa34d584dbcdf9877534c8e206ce1cb132d3d34\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"STRRAT\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"81f2b17e9a5ff6aeaa3fdee584c3b60698c2b9960c8b06a33bb50569f05745ab\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"2181f44279af82a7099775c2dbdb78b0e0533bceec02c43db5dbe58d9dbbc641\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"ChromElevator\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"37b5b05b16bd471e6395cafe355c8abab118fe4693baa7e869036238c220812d\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"RatonRAT\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"2184da03ffbf70aebf7d2beff4d47acff05db867ae078fc900b046cef73ea171\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"e0a99e3ce69173a84146020c48bb3360680a1ffbc85d05ed4548a045176c2584\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Joker\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"67f8d4097eb2a5294526c5991ec6c021ae5c23292bee25265ca6622e35ffb203\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"QuasarRAT\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"9a935b4b167cbf82cc4d001be3846456ed65dc3fe4f9ffec84c46190f055eb05\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"e358721387a20f276f3c84c48838b653fadae24e2b939df590cb3ea56a0bc203\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"7110645f873201e28271b9e28ac11d5f4e826bee1be26c59062a3ebe0dce6731\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Joker\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"3d83173d1a4cd927066a324926b4f5001f2e98825c480de180b6f9eb492cacfe\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Mirai\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"159c73d8e746064ba1187265ac47ac3bdd35642275c68a10d8fe45722652d336\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Mirai\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"d767060b7b8f808367f3f0eb2f5fdf59143c057a09f0fb8e5d9ca8414d061158\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Mirai\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"49f04a1e271194e9c68ed8251f5235ffc7dda72b902daa9d83a16a03285b9dfb\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Mirai\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"e0bc750d98934bbe4012098b1c6888cf87556d7fe329c1119fd4f3917224d9fc\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"e3517161e4c12d2af77b34a6289954416f3aca76ccc176247ac5599d27743e24\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"953779109c84c5136c1e4430120482dde9983f5f35a9ab8ef3c72f0709556f25\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"VIPKeylogger\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"d0bb2127686e97c5f0823315a63bf31c0e5fdc2a49bf148684491ad11299fe3d\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"RemcosRAT\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"c28c763242295975584de541e9dd18bde860b95d61b66dc3fb5114baffb6fd44\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"c90728a79d70f90ae768dada42cc29a5a03427fa18a0cad875a799b8dd67c92d\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"StrelaStealer\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"55344b5a814d9a4b560d7f1062c27f758349da39719f2a67a02a5587d9be6948\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"PhantomStealer\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"b8af4830d1c00082588109443abc5f31218e71d35b718127b65fe3817cbff0f4\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"PhantomStealer\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"4d6fa2e2bc8964159cf4bbd71095dbb3cc7e9ffa91a9416c2b96970d3615e064\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"SyncroRMM\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"8e8bbab35467e6e1043eafde81780944ff43ceeaa9cbd2d22f845404987e77ba\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"0dfed1b9b09e103d363e6a9ee3371cf99db771f4d7b1f4b350255e3faf333327\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"LummaStealer\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"d91f2a957889f74f01498d1c4fcf55b2d2fa66f689af9090362a568be8582b0a\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"LummaStealer\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"3c59bb045893542c46ab33820401577b30423d26f56f326414e15c54ea38e311\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"CryptOne\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"01f70dc5175c6daae296b4dbba49897b1fb6e5a294f26b045a6debf7b49faa11\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"RemcosRAT\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"3dc175bf861340b97aa3de7ba407113cd540fd4b0b4525f5ee1792932f5785f0\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Formbook\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"5070a67e1b10b7b538a9a6fca744157691bea8ea6070b81b6741da8e08490ba9\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"dcc0f652104d6d7f9a078126a3439dabb9d97f2848df64b0bc62f195aa422284\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Mirai\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"4bda75eedbe6b367acf6dfad1046847f5dd74968580a2a76e76f51c48d9a4309\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"AgentTesla\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"b68de150b2ac4d6ca6bb83eaa5cf4f65600dabc3d4745d88444e4708d60554db\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Mirai\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"711894300f071611dd6eb4507772d579bce69bea33487875f6f31f2f08c1b615\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"02ddca944cc81683d08173ff92d36f61ffd154fd6b4060e4128341a186fd3830\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"63c985f2f40a9c970016a15a20f6229942bc7fcdd70a3e77083fa516fe985b93\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"e052bbaba494f4af95ccdd394bfe009ed34d445ad6dc1e249b34eb3a0013f27f\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"RustyStealer\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"a0f64f3bb700ae9170efc662301196fe5d635dbbc72985164537a87602d6bf16\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"AgentTesla\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"fc712cf58e061f02875bec6e886fecd10fa22dd5b81a73d5a59cc06169aaccaf\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"2b6ed5e201539bd8a9d407080e38cb9e50091395f4d077f21c0a3c6c4475a1b7\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"RatonRAT\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"184582c73e42035e4db9c0a298f65cda04dd19c5bc5faf02b47700c8e158b9cb\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Mirai\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"d9b7c50da76ee74e92bcbb5498308e1144b02c0502348caf0b9ba1ba47491006\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Mirai\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"bd68729f0f1c1ed5b36551f0b32f9f46a91d3370a7c4f79a5cd7c0450791c109\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Mirai\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"919617505b2c7c72e4e3cccfe1fdcd0bcc52e441ef7fdf95a74dfcfd78838abf\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Mirai\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"dae399b45c54e875bc81ab3d05f994ffa14f79d9de1ebc4747a255a73545fd9c\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Mirai\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"746730d05e45ef4a29e690d5b7c5f1a36db788b3e168debb3989983c47eefb70\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Mirai\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"e7c9694251858e8272691b8ff1293b16af2b38cb1cd3e12e324d2d115e60b1f9\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Mirai\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"079c423edfb7021aa08ab7a315deebad704958d78df5b781b398869379cda7a7\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Mirai\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"9038666d4d8453c9ff139103ff6ab135183c4154396db9b3e5c60700cba168a0\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Mirai\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"821367d17c3c39749516508534078680561b68bf156b82226b3dba555bc53caa\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Mirai\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"171fff8f86c59aec72d7f18456f115da2aafa67cbe87de69e8a47f80d7ee3d1f\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Tofsee\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"8eff5e25a365f6cedc964b8629cb26362aeaaba3d72fd85b9c3de9092e60f95d\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"n/a\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"fcee7a5d8a023d329be815b882ea2410ad397e4d37025a16e17321ebc7d15cc8\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"Vidar\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"55684278ed162f10379c34fada191127a6378b3280ca334dc29e87ca8a119130\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"HijackLoader\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"16fcea9cd0ef8a938844eef02a00ee9a92d64bee83456e5e204179b093619b07\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"SyncroRMM\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": " \"751aa9279400039aaf388e904302bed35a9ccf131ea38c46b652287f75ad7830\"", "indicator_type": "hash", "source": "MalwareBazaar", "tags": [ " \"AgentTesla\"" ], "first_seen": "2026-04-02", "last_seen": "2026-04-02", "sightings": 1 }, { "indicator": "162.243.103.246", "indicator_type": "ip", "source": "FeodoTracker", "tags": [ "Emotet" ], "first_seen": "2026-04-04", "last_seen": "2026-04-04", "sightings": 1 }, { "indicator": "50.16.16.211", "indicator_type": "ip", "source": "FeodoTracker", "tags": [ "QakBot" ], "first_seen": "2026-04-04", "last_seen": "2026-04-04", "sightings": 1 }, { "indicator": "34.204.119.63", "indicator_type": "ip", "source": "FeodoTracker", "tags": [ "QakBot" ], "first_seen": "2026-04-04", "last_seen": "2026-04-04", "sightings": 1 }, { "indicator": "178.62.3.223", "indicator_type": "ip", "source": "FeodoTracker", "tags": [ "QakBot" ], "first_seen": "2026-04-04", "last_seen": "2026-04-04", "sightings": 1 }, { "indicator": "27.133.154.218", "indicator_type": "ip", "source": "FeodoTracker", "tags": [ "QakBot" ], "first_seen": "2026-04-04", "last_seen": "2026-04-04", "sightings": 1 }, { "indicator": "http://117.205.92.162:46969/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-04 01:09:20 UTC", "last_seen": "2026-04-04 01:09:20 UTC", "sightings": 1 }, { "indicator": "http://110.37.39.129:47038/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-04 01:04:09 UTC", "last_seen": "2026-04-04 01:04:09 UTC", "sightings": 1 }, { "indicator": "http://42.226.71.194:34944/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-04 01:04:09 UTC", "last_seen": "2026-04-04 01:04:09 UTC", "sightings": 1 }, { "indicator": "http://42.230.39.28:35105/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-04 01:01:16 UTC", "last_seen": "2026-04-04 01:01:16 UTC", "sightings": 1 }, { "indicator": "http://182.116.50.155:41497/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-04 01:00:20 UTC", "last_seen": "2026-04-04 01:00:20 UTC", "sightings": 1 }, { "indicator": "http://85.226.212.168:51430/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-04 00:58:16 UTC", "last_seen": "2026-04-04 00:58:16 UTC", "sightings": 1 }, { "indicator": "http://182.121.195.225:55643/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-04-04 00:47:11 UTC", "last_seen": "2026-04-04 00:47:11 UTC", "sightings": 1 }, { "indicator": "http://27.222.44.125:38293/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-04-04 00:42:07 UTC", "last_seen": "2026-04-04 00:42:07 UTC", "sightings": 1 }, { "indicator": "http://60.3.44.167:59151/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-04 00:40:19 UTC", "last_seen": "2026-04-04 00:40:19 UTC", "sightings": 1 }, { "indicator": "http://42.230.39.28:35105/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-04 00:38:09 UTC", "last_seen": "2026-04-04 00:38:09 UTC", "sightings": 1 }, { "indicator": "http://182.116.50.155:41497/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-04 00:35:20 UTC", "last_seen": "2026-04-04 00:35:20 UTC", "sightings": 1 }, { "indicator": "http://182.118.240.201:55074/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-04 00:31:08 UTC", "last_seen": "2026-04-04 00:31:08 UTC", "sightings": 1 }, { "indicator": "http://103.63.231.168:44606/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-04 00:25:23 UTC", "last_seen": "2026-04-04 00:25:23 UTC", "sightings": 1 }, { "indicator": "http://85.226.212.168:51430/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-04 00:25:21 UTC", "last_seen": "2026-04-04 00:25:21 UTC", "sightings": 1 }, { "indicator": "http://42.226.71.194:34944/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-04 00:15:10 UTC", "last_seen": "2026-04-04 00:15:10 UTC", "sightings": 1 }, { "indicator": "http://60.3.44.167:59151/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-04 00:09:25 UTC", "last_seen": "2026-04-04 00:09:25 UTC", "sightings": 1 }, { "indicator": "http://110.37.39.129:47038/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-04 00:04:16 UTC", "last_seen": "2026-04-04 00:04:16 UTC", "sightings": 1 }, { "indicator": "http://170.244.180.22:60885/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-04-03 23:57:07 UTC", "last_seen": "2026-04-03 23:57:07 UTC", "sightings": 1 }, { "indicator": "http://119.179.238.229:46840/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-04-03 23:57:06 UTC", "last_seen": "2026-04-03 23:57:06 UTC", "sightings": 1 }, { "indicator": "http://27.215.77.105:42770/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-04-03 23:57:06 UTC", "last_seen": "2026-04-03 23:57:06 UTC", "sightings": 1 }, { "indicator": "http://115.63.200.200:57273/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 23:48:17 UTC", "last_seen": "2026-04-03 23:48:17 UTC", "sightings": 1 }, { "indicator": "http://45.153.34.161:8080/apt0.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "CoinMiner", "opendir", "sh", "ua-wget" ], "first_seen": "2026-04-03 23:47:10 UTC", "last_seen": "2026-04-03 23:47:10 UTC", "sightings": 1 }, { "indicator": "http://110.36.70.136:48297/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-03 23:46:17 UTC", "last_seen": "2026-04-03 23:46:17 UTC", "sightings": 1 }, { "indicator": "http://27.37.108.110:42841/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 23:45:12 UTC", "last_seen": "2026-04-03 23:45:12 UTC", "sightings": 1 }, { "indicator": "http://119.179.238.229:46840/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-04-03 23:37:08 UTC", "last_seen": "2026-04-03 23:37:08 UTC", "sightings": 1 }, { "indicator": "http://119.185.158.1:52275/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-04-03 23:37:07 UTC", "last_seen": "2026-04-03 23:37:07 UTC", "sightings": 1 }, { "indicator": "http://95.9.35.137:44304/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-04-03 23:32:07 UTC", "last_seen": "2026-04-03 23:32:07 UTC", "sightings": 1 }, { "indicator": "http://112.253.117.78:51454/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 23:31:39 UTC", "last_seen": "2026-04-03 23:31:39 UTC", "sightings": 1 }, { "indicator": "http://123.235.72.116:57923/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-03 23:29:13 UTC", "last_seen": "2026-04-03 23:29:13 UTC", "sightings": 1 }, { "indicator": "http://125.41.106.222:44249/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-04-03 23:17:06 UTC", "last_seen": "2026-04-03 23:17:06 UTC", "sightings": 1 }, { "indicator": "http://110.36.70.136:48297/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-03 23:16:11 UTC", "last_seen": "2026-04-03 23:16:11 UTC", "sightings": 1 }, { "indicator": "http://125.41.106.222:44249/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-04-03 23:12:07 UTC", "last_seen": "2026-04-03 23:12:07 UTC", "sightings": 1 }, { "indicator": "http://119.185.158.1:52275/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-04-03 23:12:07 UTC", "last_seen": "2026-04-03 23:12:07 UTC", "sightings": 1 }, { "indicator": "http://95.9.35.137:44304/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-04-03 23:12:06 UTC", "last_seen": "2026-04-03 23:12:06 UTC", "sightings": 1 }, { "indicator": "http://182.127.167.135:35866/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-04-03 23:12:06 UTC", "last_seen": "2026-04-03 23:12:06 UTC", "sightings": 1 }, { "indicator": "http://115.63.200.200:57273/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 23:11:18 UTC", "last_seen": "2026-04-03 23:11:18 UTC", "sightings": 1 }, { "indicator": "http://110.37.68.195:49535/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 23:09:09 UTC", "last_seen": "2026-04-03 23:09:09 UTC", "sightings": 1 }, { "indicator": "http://110.37.68.195:49535/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 23:08:16 UTC", "last_seen": "2026-04-03 23:08:16 UTC", "sightings": 1 }, { "indicator": "http://175.146.87.186:50595/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 22:53:22 UTC", "last_seen": "2026-04-03 22:53:22 UTC", "sightings": 1 }, { "indicator": "http://182.127.167.135:35866/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-04-03 22:52:08 UTC", "last_seen": "2026-04-03 22:52:08 UTC", "sightings": 1 }, { "indicator": "http://123.7.239.121:39726/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 22:36:22 UTC", "last_seen": "2026-04-03 22:36:22 UTC", "sightings": 1 }, { "indicator": "http://115.58.143.228:54558/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 22:30:20 UTC", "last_seen": "2026-04-03 22:30:20 UTC", "sightings": 1 }, { "indicator": "http://59.97.249.189:38137/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-04-03 22:27:08 UTC", "last_seen": "2026-04-03 22:27:08 UTC", "sightings": 1 }, { "indicator": "http://36.70.33.7:35382/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-03 22:17:21 UTC", "last_seen": "2026-04-03 22:17:21 UTC", "sightings": 1 }, { "indicator": "http://115.63.14.247:52744/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 22:16:21 UTC", "last_seen": "2026-04-03 22:16:21 UTC", "sightings": 1 }, { "indicator": "http://60.162.206.206:43250/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-03 22:09:19 UTC", "last_seen": "2026-04-03 22:09:19 UTC", "sightings": 1 }, { "indicator": "http://123.7.239.121:39726/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 22:09:19 UTC", "last_seen": "2026-04-03 22:09:19 UTC", "sightings": 1 }, { "indicator": "http://101.109.236.218:59787/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-03 22:01:18 UTC", "last_seen": "2026-04-03 22:01:18 UTC", "sightings": 1 }, { "indicator": "http://106.59.120.149:40649/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-03 21:58:39 UTC", "last_seen": "2026-04-03 21:58:39 UTC", "sightings": 1 }, { "indicator": "http://60.162.206.206:43250/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-03 21:42:21 UTC", "last_seen": "2026-04-03 21:42:21 UTC", "sightings": 1 }, { "indicator": "http://105.186.204.59:52383/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-04-03 21:27:06 UTC", "last_seen": "2026-04-03 21:27:06 UTC", "sightings": 1 }, { "indicator": "http://103.245.195.38:36912/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 21:25:19 UTC", "last_seen": "2026-04-03 21:25:19 UTC", "sightings": 1 }, { "indicator": "http://105.186.204.59:52383/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-04-03 21:12:07 UTC", "last_seen": "2026-04-03 21:12:07 UTC", "sightings": 1 }, { "indicator": "http://65.99.181.12:49304/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-04-03 21:12:06 UTC", "last_seen": "2026-04-03 21:12:06 UTC", "sightings": 1 }, { "indicator": "http://123.14.36.191:50947/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 21:05:08 UTC", "last_seen": "2026-04-03 21:05:08 UTC", "sightings": 1 }, { "indicator": "http://117.205.168.128:50851/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 21:02:18 UTC", "last_seen": "2026-04-03 21:02:18 UTC", "sightings": 1 }, { "indicator": "http://103.245.195.38:36912/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 21:02:16 UTC", "last_seen": "2026-04-03 21:02:16 UTC", "sightings": 1 }, { "indicator": "http://125.167.189.139:50290/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-03 20:40:18 UTC", "last_seen": "2026-04-03 20:40:18 UTC", "sightings": 1 }, { "indicator": "http://59.96.140.247:55099/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 20:40:18 UTC", "last_seen": "2026-04-03 20:40:18 UTC", "sightings": 1 }, { "indicator": "http://94.156.166.84:57307/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-03 20:39:21 UTC", "last_seen": "2026-04-03 20:39:21 UTC", "sightings": 1 }, { "indicator": "http://110.139.32.232:58976/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-03 20:33:16 UTC", "last_seen": "2026-04-03 20:33:16 UTC", "sightings": 1 }, { "indicator": "http://123.14.36.191:50947/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 20:30:22 UTC", "last_seen": "2026-04-03 20:30:22 UTC", "sightings": 1 }, { "indicator": "http://42.234.204.17:33134/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 20:30:21 UTC", "last_seen": "2026-04-03 20:30:21 UTC", "sightings": 1 }, { "indicator": "http://87.121.112.57/dipndotsk", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mips", "mirai", "ua-wget" ], "first_seen": "2026-04-03 20:29:09 UTC", "last_seen": "2026-04-03 20:29:09 UTC", "sightings": 1 }, { "indicator": "http://219.157.63.131:58936/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 20:18:24 UTC", "last_seen": "2026-04-03 20:18:24 UTC", "sightings": 1 }, { "indicator": "http://94.156.166.84:57307/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-03 20:18:13 UTC", "last_seen": "2026-04-03 20:18:13 UTC", "sightings": 1 }, { "indicator": "http://85.239.147.6/files/Leetootoo/random.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-04-03 20:18:05 UTC", "last_seen": "2026-04-03 20:18:05 UTC", "sightings": 1 }, { "indicator": "http://170.239.144.160:51271/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-03 20:10:24 UTC", "last_seen": "2026-04-03 20:10:24 UTC", "sightings": 1 }, { "indicator": "http://110.139.32.232:58976/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-03 20:09:11 UTC", "last_seen": "2026-04-03 20:09:11 UTC", "sightings": 1 }, { "indicator": "http://42.234.204.17:33134/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 20:06:20 UTC", "last_seen": "2026-04-03 20:06:20 UTC", "sightings": 1 }, { "indicator": "http://117.209.16.233:48305/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-04-03 20:02:07 UTC", "last_seen": "2026-04-03 20:02:07 UTC", "sightings": 1 }, { "indicator": "http://85.12.229.54:60779/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-04-03 19:52:05 UTC", "last_seen": "2026-04-03 19:52:05 UTC", "sightings": 1 }, { "indicator": "http://85.12.251.50:39891/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 19:35:16 UTC", "last_seen": "2026-04-03 19:35:16 UTC", "sightings": 1 }, { "indicator": "http://196.190.69.149:56763/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-03 19:33:17 UTC", "last_seen": "2026-04-03 19:33:17 UTC", "sightings": 1 }, { "indicator": "http://45.92.1.50/rondo.aqg.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "sh", "ua-wget" ], "first_seen": "2026-04-03 19:33:16 UTC", "last_seen": "2026-04-03 19:33:16 UTC", "sightings": 1 }, { "indicator": "http://27.215.53.172:51607/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 19:20:19 UTC", "last_seen": "2026-04-03 19:20:19 UTC", "sightings": 1 }, { "indicator": "http://196.188.135.20:60445/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-03 19:18:08 UTC", "last_seen": "2026-04-03 19:18:08 UTC", "sightings": 1 }, { "indicator": "http://60.214.240.96:47132/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 19:14:09 UTC", "last_seen": "2026-04-03 19:14:09 UTC", "sightings": 1 }, { "indicator": "http://170.239.144.160:51271/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-03 19:11:17 UTC", "last_seen": "2026-04-03 19:11:17 UTC", "sightings": 1 }, { "indicator": "http://196.190.69.149:56763/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-03 19:08:09 UTC", "last_seen": "2026-04-03 19:08:09 UTC", "sightings": 1 }, { "indicator": "http://62.60.226.159/run.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "282234", "dropped-by-amadey" ], "first_seen": "2026-04-03 19:02:12 UTC", "last_seen": "2026-04-03 19:02:12 UTC", "sightings": 1 }, { "indicator": "http://62.60.226.159/Psd8eZaW/Plugins/cred64.dll", "indicator_type": "url", "source": "URLhaus", "tags": [ "282234", "Amadey", "cred64.dll", "dropped-by-amadey", "plugin" ], "first_seen": "2026-04-03 19:01:07 UTC", "last_seen": "2026-04-03 19:01:07 UTC", "sightings": 1 }, { "indicator": "http://62.60.226.159/Psd8eZaW/Plugins/cred.dll", "indicator_type": "url", "source": "URLhaus", "tags": [ "282234", "Amadey", "cred.dll", "dropped-by-amadey", "plugin" ], "first_seen": "2026-04-03 19:01:07 UTC", "last_seen": "2026-04-03 19:01:07 UTC", "sightings": 1 }, { "indicator": "http://27.215.53.172:51607/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 18:51:19 UTC", "last_seen": "2026-04-03 18:51:19 UTC", "sightings": 1 }, { "indicator": "http://123.11.78.220:39505/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 18:28:07 UTC", "last_seen": "2026-04-03 18:28:07 UTC", "sightings": 1 }, { "indicator": "http://168.227.66.240:44373/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-03 18:18:19 UTC", "last_seen": "2026-04-03 18:18:19 UTC", "sightings": 1 }, { "indicator": "http://110.37.72.176:41418/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 18:12:16 UTC", "last_seen": "2026-04-03 18:12:16 UTC", "sightings": 1 }, { "indicator": "http://168.227.66.240:44373/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-03 18:11:16 UTC", "last_seen": "2026-04-03 18:11:16 UTC", "sightings": 1 }, { "indicator": "http://87.121.112.57/dipndots", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mips", "mirai", "ua-wget" ], "first_seen": "2026-04-03 18:03:21 UTC", "last_seen": "2026-04-03 18:03:21 UTC", "sightings": 1 }, { "indicator": "http://123.11.78.220:39505/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 18:02:19 UTC", "last_seen": "2026-04-03 18:02:19 UTC", "sightings": 1 }, { "indicator": "http://60.23.194.17:48843/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 17:57:18 UTC", "last_seen": "2026-04-03 17:57:18 UTC", "sightings": 1 }, { "indicator": "http://115.55.191.129:45751/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-04-03 17:52:07 UTC", "last_seen": "2026-04-03 17:52:07 UTC", "sightings": 1 }, { "indicator": "http://110.37.28.119:58071/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 17:41:32 UTC", "last_seen": "2026-04-03 17:41:32 UTC", "sightings": 1 }, { "indicator": "http://119.179.238.14:54287/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 17:36:19 UTC", "last_seen": "2026-04-03 17:36:19 UTC", "sightings": 1 }, { "indicator": "http://218.13.149.41:47684/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 17:36:19 UTC", "last_seen": "2026-04-03 17:36:19 UTC", "sightings": 1 }, { "indicator": "http://60.23.194.17:48843/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 17:35:16 UTC", "last_seen": "2026-04-03 17:35:16 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.102/bins/yakuza.arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai" ], "first_seen": "2026-04-03 17:35:14 UTC", "last_seen": "2026-04-03 17:35:14 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.102/bins/yakuza.mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai" ], "first_seen": "2026-04-03 17:35:14 UTC", "last_seen": "2026-04-03 17:35:14 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.102/bins/yakuza.arm", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai" ], "first_seen": "2026-04-03 17:35:14 UTC", "last_seen": "2026-04-03 17:35:14 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.102/bins/yakuza.ppc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai" ], "first_seen": "2026-04-03 17:35:09 UTC", "last_seen": "2026-04-03 17:35:09 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.102/bins/yakuza.arm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai" ], "first_seen": "2026-04-03 17:34:21 UTC", "last_seen": "2026-04-03 17:34:21 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.102/bins/yakuza.arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai" ], "first_seen": "2026-04-03 17:34:21 UTC", "last_seen": "2026-04-03 17:34:21 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.102/bins/yakuza.x86", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai" ], "first_seen": "2026-04-03 17:34:21 UTC", "last_seen": "2026-04-03 17:34:21 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.102/bins/yakuza.mpsl", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai" ], "first_seen": "2026-04-03 17:34:21 UTC", "last_seen": "2026-04-03 17:34:21 UTC", "sightings": 1 }, { "indicator": "http://180.253.222.93:39707/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-03 17:29:13 UTC", "last_seen": "2026-04-03 17:29:13 UTC", "sightings": 1 }, { "indicator": "http://113.94.31.173:56330/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 17:23:18 UTC", "last_seen": "2026-04-03 17:23:18 UTC", "sightings": 1 }, { "indicator": "http://110.37.28.119:58071/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 17:16:10 UTC", "last_seen": "2026-04-03 17:16:10 UTC", "sightings": 1 }, { "indicator": "http://218.13.149.41:47684/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 17:10:19 UTC", "last_seen": "2026-04-03 17:10:19 UTC", "sightings": 1 }, { "indicator": "http://42.226.68.107:54260/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 17:06:15 UTC", "last_seen": "2026-04-03 17:06:15 UTC", "sightings": 1 }, { "indicator": "http://114.218.212.110:60017/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 16:52:24 UTC", "last_seen": "2026-04-03 16:52:24 UTC", "sightings": 1 }, { "indicator": "http://222.127.208.188:38362/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-03 16:51:19 UTC", "last_seen": "2026-04-03 16:51:19 UTC", "sightings": 1 }, { "indicator": "http://110.37.72.176:41418/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 16:45:16 UTC", "last_seen": "2026-04-03 16:45:16 UTC", "sightings": 1 }, { "indicator": "http://119.179.238.14:54287/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 16:39:16 UTC", "last_seen": "2026-04-03 16:39:16 UTC", "sightings": 1 }, { "indicator": "http://42.7.222.67:50929/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-04-03 16:37:08 UTC", "last_seen": "2026-04-03 16:37:08 UTC", "sightings": 1 }, { "indicator": "http://42.226.68.107:54260/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 16:36:19 UTC", "last_seen": "2026-04-03 16:36:19 UTC", "sightings": 1 }, { "indicator": "http://45.177.32.104:59470/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-03 16:36:17 UTC", "last_seen": "2026-04-03 16:36:17 UTC", "sightings": 1 }, { "indicator": "http://42.7.222.67:50929/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-04-03 16:22:08 UTC", "last_seen": "2026-04-03 16:22:08 UTC", "sightings": 1 }, { "indicator": "http://219.157.55.95:50373/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 16:17:23 UTC", "last_seen": "2026-04-03 16:17:23 UTC", "sightings": 1 }, { "indicator": "http://45.177.32.104:59470/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-03 16:13:11 UTC", "last_seen": "2026-04-03 16:13:11 UTC", "sightings": 1 }, { "indicator": "http://219.157.55.95:50373/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 16:02:19 UTC", "last_seen": "2026-04-03 16:02:19 UTC", "sightings": 1 }, { "indicator": "http://180.157.252.62:42975/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-03 15:55:22 UTC", "last_seen": "2026-04-03 15:55:22 UTC", "sightings": 1 }, { "indicator": "http://222.127.68.115:33474/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-04-03 15:37:07 UTC", "last_seen": "2026-04-03 15:37:07 UTC", "sightings": 1 }, { "indicator": "http://180.157.252.62:42975/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-03 15:30:23 UTC", "last_seen": "2026-04-03 15:30:23 UTC", "sightings": 1 }, { "indicator": "http://85.239.147.6/files/5851730241/IQEr4wy.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-04-03 15:29:05 UTC", "last_seen": "2026-04-03 15:29:05 UTC", "sightings": 1 }, { "indicator": "http://222.127.68.115:33474/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-04-03 15:22:08 UTC", "last_seen": "2026-04-03 15:22:08 UTC", "sightings": 1 }, { "indicator": "http://175.10.24.108:44847/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-03 15:19:11 UTC", "last_seen": "2026-04-03 15:19:11 UTC", "sightings": 1 }, { "indicator": "http://42.234.208.154:56228/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 15:08:16 UTC", "last_seen": "2026-04-03 15:08:16 UTC", "sightings": 1 }, { "indicator": "http://223.112.189.134:45930/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 15:06:17 UTC", "last_seen": "2026-04-03 15:06:17 UTC", "sightings": 1 }, { "indicator": "http://105.186.163.239:51413/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-03 14:54:16 UTC", "last_seen": "2026-04-03 14:54:16 UTC", "sightings": 1 }, { "indicator": "http://223.112.189.134:45930/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 14:42:19 UTC", "last_seen": "2026-04-03 14:42:19 UTC", "sightings": 1 }, { "indicator": "http://85.239.147.6/files/8405865752/bThXxmv.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-04-03 14:33:05 UTC", "last_seen": "2026-04-03 14:33:05 UTC", "sightings": 1 }, { "indicator": "http://113.239.206.240:53385/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 14:28:20 UTC", "last_seen": "2026-04-03 14:28:20 UTC", "sightings": 1 }, { "indicator": "http://115.49.123.219:48348/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-04-03 14:27:07 UTC", "last_seen": "2026-04-03 14:27:07 UTC", "sightings": 1 }, { "indicator": "http://195.178.110.204/y", "indicator_type": "url", "source": "URLhaus", "tags": [ "sh", "ua-wget" ], "first_seen": "2026-04-03 14:25:20 UTC", "last_seen": "2026-04-03 14:25:20 UTC", "sightings": 1 }, { "indicator": "http://36.70.33.7:35382/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-03 14:21:19 UTC", "last_seen": "2026-04-03 14:21:19 UTC", "sightings": 1 }, { "indicator": "http://105.186.163.239:51413/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-03 14:20:19 UTC", "last_seen": "2026-04-03 14:20:19 UTC", "sightings": 1 }, { "indicator": "http://212.64.201.57/main_x86_64", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-03 14:10:22 UTC", "last_seen": "2026-04-03 14:10:22 UTC", "sightings": 1 }, { "indicator": "http://212.64.201.57/main_arm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-03 14:10:21 UTC", "last_seen": "2026-04-03 14:10:21 UTC", "sightings": 1 }, { "indicator": "http://212.64.201.57/main_ppc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-03 14:10:18 UTC", "last_seen": "2026-04-03 14:10:18 UTC", "sightings": 1 }, { "indicator": "http://212.64.201.57/main_m68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-03 14:10:18 UTC", "last_seen": "2026-04-03 14:10:18 UTC", "sightings": 1 }, { "indicator": "http://212.64.201.57/main_x86", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-03 14:10:16 UTC", "last_seen": "2026-04-03 14:10:16 UTC", "sightings": 1 }, { "indicator": "http://212.64.201.57/main_arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-03 14:10:16 UTC", "last_seen": "2026-04-03 14:10:16 UTC", "sightings": 1 }, { "indicator": "http://42.224.151.199:50227/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-03 14:09:18 UTC", "last_seen": "2026-04-03 14:09:18 UTC", "sightings": 1 }, { "indicator": "http://37.48.254.120/mipsel", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mips", "mirai", "opendir", "ua-wget" ], "first_seen": "2026-04-03 13:54:18 UTC", "last_seen": "2026-04-03 13:54:18 UTC", "sightings": 1 }, { "indicator": "http://37.48.254.120/mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mips", "mirai", "opendir", "ua-wget" ], "first_seen": "2026-04-03 13:54:10 UTC", "last_seen": "2026-04-03 13:54:10 UTC", "sightings": 1 }, { "indicator": "http://85.12.205.35:36010/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 13:39:10 UTC", "last_seen": "2026-04-03 13:39:10 UTC", "sightings": 1 }, { "indicator": "http://59.97.246.171:41803/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 13:06:17 UTC", "last_seen": "2026-04-03 13:06:17 UTC", "sightings": 1 }, { "indicator": "http://117.207.82.146:38403/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 13:05:17 UTC", "last_seen": "2026-04-03 13:05:17 UTC", "sightings": 1 }, { "indicator": "http://123.5.184.173:40185/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 13:02:22 UTC", "last_seen": "2026-04-03 13:02:22 UTC", "sightings": 1 }, { "indicator": "http://42.87.252.165:36677/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 12:49:20 UTC", "last_seen": "2026-04-03 12:49:20 UTC", "sightings": 1 }, { "indicator": "http://60.18.62.126:45414/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 12:42:19 UTC", "last_seen": "2026-04-03 12:42:19 UTC", "sightings": 1 }, { "indicator": "http://85.166.152.13:41396/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-04-03 12:37:19 UTC", "last_seen": "2026-04-03 12:37:19 UTC", "sightings": 1 }, { "indicator": "http://117.205.93.132:49301/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 12:36:09 UTC", "last_seen": "2026-04-03 12:36:09 UTC", "sightings": 1 }, { "indicator": "http://221.225.31.105:33747/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-03 12:30:22 UTC", "last_seen": "2026-04-03 12:30:22 UTC", "sightings": 1 }, { "indicator": "http://221.225.31.105:33747/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-03 12:02:21 UTC", "last_seen": "2026-04-03 12:02:21 UTC", "sightings": 1 }, { "indicator": "http://117.205.93.132:49301/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 12:00:20 UTC", "last_seen": "2026-04-03 12:00:20 UTC", "sightings": 1 }, { "indicator": "http://179.43.182.70/ln8cw1ox1f", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-04-03 11:58:12 UTC", "last_seen": "2026-04-03 11:58:12 UTC", "sightings": 1 }, { "indicator": "http://123.148.129.27:51569/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-03 11:57:14 UTC", "last_seen": "2026-04-03 11:57:14 UTC", "sightings": 1 }, { "indicator": "http://115.49.123.219:48348/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-04-03 11:47:07 UTC", "last_seen": "2026-04-03 11:47:07 UTC", "sightings": 1 }, { "indicator": "http://124.6.169.46:60288/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-03 11:39:07 UTC", "last_seen": "2026-04-03 11:39:07 UTC", "sightings": 1 }, { "indicator": "http://123.148.129.27:51569/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-04-03 11:32:08 UTC", "last_seen": "2026-04-03 11:32:08 UTC", "sightings": 1 }, { "indicator": "http://115.56.64.172:44064/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 11:29:15 UTC", "last_seen": "2026-04-03 11:29:15 UTC", "sightings": 1 }, { "indicator": "http://120.28.214.232:52798/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-03 11:25:14 UTC", "last_seen": "2026-04-03 11:25:14 UTC", "sightings": 1 }, { "indicator": "http://177.39.122.214:34457/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-03 11:23:08 UTC", "last_seen": "2026-04-03 11:23:08 UTC", "sightings": 1 }, { "indicator": "http://177.39.122.214:34457/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-03 11:22:16 UTC", "last_seen": "2026-04-03 11:22:16 UTC", "sightings": 1 }, { "indicator": "http://110.36.15.1:48126/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-04-03 11:12:06 UTC", "last_seen": "2026-04-03 11:12:06 UTC", "sightings": 1 }, { "indicator": "http://124.6.169.46:60288/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-03 11:08:13 UTC", "last_seen": "2026-04-03 11:08:13 UTC", "sightings": 1 }, { "indicator": "http://115.48.4.205:46066/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-04-03 11:02:06 UTC", "last_seen": "2026-04-03 11:02:06 UTC", "sightings": 1 }, { "indicator": "http://210.10.133.11:53222/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 10:57:13 UTC", "last_seen": "2026-04-03 10:57:13 UTC", "sightings": 1 }, { "indicator": "http://39.61.48.86:34028/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 10:55:21 UTC", "last_seen": "2026-04-03 10:55:21 UTC", "sightings": 1 }, { "indicator": "http://31.148.232.118:52048/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 10:53:16 UTC", "last_seen": "2026-04-03 10:53:16 UTC", "sightings": 1 }, { "indicator": "http://156.229.118.146:38281/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-04-03 10:52:07 UTC", "last_seen": "2026-04-03 10:52:07 UTC", "sightings": 1 }, { "indicator": "http://115.48.4.205:46066/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-04-03 10:47:07 UTC", "last_seen": "2026-04-03 10:47:07 UTC", "sightings": 1 }, { "indicator": "http://119.109.241.175:32919/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 10:44:18 UTC", "last_seen": "2026-04-03 10:44:18 UTC", "sightings": 1 }, { "indicator": "http://223.105.50.190:41719/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-04-03 10:42:07 UTC", "last_seen": "2026-04-03 10:42:07 UTC", "sightings": 1 }, { "indicator": "http://115.63.8.36:57548/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-04-03 10:42:06 UTC", "last_seen": "2026-04-03 10:42:06 UTC", "sightings": 1 }, { "indicator": "http://117.212.53.12:41803/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 10:34:23 UTC", "last_seen": "2026-04-03 10:34:23 UTC", "sightings": 1 }, { "indicator": "http://121.231.246.118:36800/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-04-03 10:32:08 UTC", "last_seen": "2026-04-03 10:32:08 UTC", "sightings": 1 }, { "indicator": "http://115.57.51.138:32909/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 10:30:20 UTC", "last_seen": "2026-04-03 10:30:20 UTC", "sightings": 1 }, { "indicator": "http://45.183.184.74:56089/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-03 10:30:17 UTC", "last_seen": "2026-04-03 10:30:17 UTC", "sightings": 1 }, { "indicator": "http://210.10.133.11:53222/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 10:27:19 UTC", "last_seen": "2026-04-03 10:27:19 UTC", "sightings": 1 }, { "indicator": "http://182.114.32.67:42919/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 10:24:09 UTC", "last_seen": "2026-04-03 10:24:09 UTC", "sightings": 1 }, { "indicator": "http://115.63.8.36:57548/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-04-03 10:17:21 UTC", "last_seen": "2026-04-03 10:17:21 UTC", "sightings": 1 }, { "indicator": "http://121.231.246.118:36800/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-04-03 10:17:08 UTC", "last_seen": "2026-04-03 10:17:08 UTC", "sightings": 1 }, { "indicator": "http://182.114.32.67:42919/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 10:15:19 UTC", "last_seen": "2026-04-03 10:15:19 UTC", "sightings": 1 }, { "indicator": "http://223.105.50.190:41719/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-04-03 10:12:06 UTC", "last_seen": "2026-04-03 10:12:06 UTC", "sightings": 1 }, { "indicator": "http://191.210.133.134:42696/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 10:09:14 UTC", "last_seen": "2026-04-03 10:09:14 UTC", "sightings": 1 }, { "indicator": "http://119.109.241.175:32919/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 10:03:12 UTC", "last_seen": "2026-04-03 10:03:12 UTC", "sightings": 1 }, { "indicator": "http://36.70.142.105:39717/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-03 10:02:10 UTC", "last_seen": "2026-04-03 10:02:10 UTC", "sightings": 1 }, { "indicator": "http://42.234.208.154:56228/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 10:02:08 UTC", "last_seen": "2026-04-03 10:02:08 UTC", "sightings": 1 }, { "indicator": "http://182.113.205.149:48259/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 10:02:07 UTC", "last_seen": "2026-04-03 10:02:07 UTC", "sightings": 1 }, { "indicator": "http://117.205.81.75:51731/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 10:00:17 UTC", "last_seen": "2026-04-03 10:00:17 UTC", "sightings": 1 }, { "indicator": "http://120.28.180.87:53047/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-03 09:48:07 UTC", "last_seen": "2026-04-03 09:48:07 UTC", "sightings": 1 }, { "indicator": "http://110.37.95.117:58994/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 09:41:08 UTC", "last_seen": "2026-04-03 09:41:08 UTC", "sightings": 1 }, { "indicator": "http://182.113.205.149:48259/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 09:37:18 UTC", "last_seen": "2026-04-03 09:37:18 UTC", "sightings": 1 }, { "indicator": "http://180.243.178.175:59096/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-04-03 09:37:08 UTC", "last_seen": "2026-04-03 09:37:08 UTC", "sightings": 1 }, { "indicator": "http://120.28.180.87:53047/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-03 09:30:11 UTC", "last_seen": "2026-04-03 09:30:11 UTC", "sightings": 1 }, { "indicator": "http://125.46.244.168:45897/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 09:22:16 UTC", "last_seen": "2026-04-03 09:22:16 UTC", "sightings": 1 }, { "indicator": "http://182.114.197.8:35114/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-04-03 09:22:06 UTC", "last_seen": "2026-04-03 09:22:06 UTC", "sightings": 1 }, { "indicator": "http://110.37.95.117:58994/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 09:15:14 UTC", "last_seen": "2026-04-03 09:15:14 UTC", "sightings": 1 }, { "indicator": "http://42.56.209.122:46011/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 09:09:15 UTC", "last_seen": "2026-04-03 09:09:15 UTC", "sightings": 1 }, { "indicator": "http://60.22.49.72:48413/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 09:09:13 UTC", "last_seen": "2026-04-03 09:09:13 UTC", "sightings": 1 }, { "indicator": "http://125.46.244.168:45897/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 09:05:08 UTC", "last_seen": "2026-04-03 09:05:08 UTC", "sightings": 1 }, { "indicator": "http://160.30.142.2:41761/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 09:04:15 UTC", "last_seen": "2026-04-03 09:04:15 UTC", "sightings": 1 }, { "indicator": "http://160.30.142.2:41761/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 09:01:15 UTC", "last_seen": "2026-04-03 09:01:15 UTC", "sightings": 1 }, { "indicator": "http://182.114.197.8:35114/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-04-03 08:57:07 UTC", "last_seen": "2026-04-03 08:57:07 UTC", "sightings": 1 }, { "indicator": "http://116.25.133.33:54382/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 08:50:15 UTC", "last_seen": "2026-04-03 08:50:15 UTC", "sightings": 1 }, { "indicator": "http://60.22.49.72:48413/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 08:48:13 UTC", "last_seen": "2026-04-03 08:48:13 UTC", "sightings": 1 }, { "indicator": "http://119.116.20.61:60639/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 08:40:07 UTC", "last_seen": "2026-04-03 08:40:07 UTC", "sightings": 1 }, { "indicator": "http://42.7.148.66:60047/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 08:25:17 UTC", "last_seen": "2026-04-03 08:25:17 UTC", "sightings": 1 }, { "indicator": "http://60.161.59.219:36235/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-03 08:19:13 UTC", "last_seen": "2026-04-03 08:19:13 UTC", "sightings": 1 }, { "indicator": "http://42.7.148.66:60047/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 08:19:12 UTC", "last_seen": "2026-04-03 08:19:12 UTC", "sightings": 1 }, { "indicator": "http://39.79.148.134:50951/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 08:16:13 UTC", "last_seen": "2026-04-03 08:16:13 UTC", "sightings": 1 }, { "indicator": "http://59.94.123.245:37046/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 08:00:18 UTC", "last_seen": "2026-04-03 08:00:18 UTC", "sightings": 1 }, { "indicator": "http://39.79.148.134:50951/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 07:52:15 UTC", "last_seen": "2026-04-03 07:52:15 UTC", "sightings": 1 }, { "indicator": "http://103.94.142.84:59168/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-04-03 07:52:11 UTC", "last_seen": "2026-04-03 07:52:11 UTC", "sightings": 1 }, { "indicator": "http://220.235.234.170:48142/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-04-03 07:52:09 UTC", "last_seen": "2026-04-03 07:52:09 UTC", "sightings": 1 }, { "indicator": "http://220.235.234.170:48142/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-04-03 07:52:09 UTC", "last_seen": "2026-04-03 07:52:09 UTC", "sightings": 1 }, { "indicator": "http://110.37.78.177:49365/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-04-03 07:52:08 UTC", "last_seen": "2026-04-03 07:52:08 UTC", "sightings": 1 }, { "indicator": "http://59.94.123.245:37046/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 07:38:08 UTC", "last_seen": "2026-04-03 07:38:08 UTC", "sightings": 1 }, { "indicator": "http://221.229.190.242:44573/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-04-03 07:22:08 UTC", "last_seen": "2026-04-03 07:22:08 UTC", "sightings": 1 }, { "indicator": "http://110.37.78.177:49365/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-04-03 07:22:06 UTC", "last_seen": "2026-04-03 07:22:06 UTC", "sightings": 1 }, { "indicator": "http://192.176.50.190:34558/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-04-03 07:22:06 UTC", "last_seen": "2026-04-03 07:22:06 UTC", "sightings": 1 }, { "indicator": "http://122.148.184.156:48791/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-03 07:16:16 UTC", "last_seen": "2026-04-03 07:16:16 UTC", "sightings": 1 }, { "indicator": "http://42.178.151.189:41892/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 07:05:13 UTC", "last_seen": "2026-04-03 07:05:13 UTC", "sightings": 1 }, { "indicator": "http://192.176.50.190:34558/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 06:59:13 UTC", "last_seen": "2026-04-03 06:59:13 UTC", "sightings": 1 }, { "indicator": "http://117.209.14.146:54672/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 06:57:14 UTC", "last_seen": "2026-04-03 06:57:14 UTC", "sightings": 1 }, { "indicator": "http://122.148.184.156:48791/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-03 06:56:10 UTC", "last_seen": "2026-04-03 06:56:10 UTC", "sightings": 1 }, { "indicator": "http://42.178.151.189:41892/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 06:55:14 UTC", "last_seen": "2026-04-03 06:55:14 UTC", "sightings": 1 }, { "indicator": "http://42.5.64.226:41730/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 06:49:14 UTC", "last_seen": "2026-04-03 06:49:14 UTC", "sightings": 1 }, { "indicator": "http://59.94.122.240:43824/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 06:47:08 UTC", "last_seen": "2026-04-03 06:47:08 UTC", "sightings": 1 }, { "indicator": "http://125.45.54.191:60222/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-04-03 06:47:08 UTC", "last_seen": "2026-04-03 06:47:08 UTC", "sightings": 1 }, { "indicator": "http://221.229.190.242:44573/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-04-03 06:47:08 UTC", "last_seen": "2026-04-03 06:47:08 UTC", "sightings": 1 }, { "indicator": "http://117.209.14.146:54672/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 06:31:14 UTC", "last_seen": "2026-04-03 06:31:14 UTC", "sightings": 1 }, { "indicator": "http://39.90.149.135:49136/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 06:18:21 UTC", "last_seen": "2026-04-03 06:18:21 UTC", "sightings": 1 }, { "indicator": "http://221.0.215.182:35556/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-04-03 06:07:07 UTC", "last_seen": "2026-04-03 06:07:07 UTC", "sightings": 1 }, { "indicator": "http://115.56.64.172:44064/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-04-03 06:02:08 UTC", "last_seen": "2026-04-03 06:02:08 UTC", "sightings": 1 }, { "indicator": "http://83.168.107.189:886/wo125u1gmn/x86", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-03 06:01:07 UTC", "last_seen": "2026-04-03 06:01:07 UTC", "sightings": 1 }, { "indicator": "http://222.140.183.50:51885/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 06:00:17 UTC", "last_seen": "2026-04-03 06:00:17 UTC", "sightings": 1 }, { "indicator": "http://59.96.142.205:52390/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 05:56:13 UTC", "last_seen": "2026-04-03 05:56:13 UTC", "sightings": 1 }, { "indicator": "http://39.90.149.135:49136/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 05:54:08 UTC", "last_seen": "2026-04-03 05:54:08 UTC", "sightings": 1 }, { "indicator": "http://182.115.78.213:38088/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-04-03 05:52:07 UTC", "last_seen": "2026-04-03 05:52:07 UTC", "sightings": 1 }, { "indicator": "http://36.77.235.248:60331/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-04-03 05:52:07 UTC", "last_seen": "2026-04-03 05:52:07 UTC", "sightings": 1 }, { "indicator": "http://42.7.147.185:45835/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 05:45:29 UTC", "last_seen": "2026-04-03 05:45:29 UTC", "sightings": 1 }, { "indicator": "http://124.235.250.108:39147/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-03 05:44:16 UTC", "last_seen": "2026-04-03 05:44:16 UTC", "sightings": 1 }, { "indicator": "http://119.185.242.118:36562/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 05:43:13 UTC", "last_seen": "2026-04-03 05:43:13 UTC", "sightings": 1 }, { "indicator": "http://200.52.230.179:44408/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-03 05:42:11 UTC", "last_seen": "2026-04-03 05:42:11 UTC", "sightings": 1 }, { "indicator": "http://200.52.230.179:44408/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-03 05:38:07 UTC", "last_seen": "2026-04-03 05:38:07 UTC", "sightings": 1 }, { "indicator": "http://59.96.142.205:52390/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 05:33:10 UTC", "last_seen": "2026-04-03 05:33:10 UTC", "sightings": 1 }, { "indicator": "http://124.235.250.108:39147/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-03 05:32:21 UTC", "last_seen": "2026-04-03 05:32:21 UTC", "sightings": 1 }, { "indicator": "http://120.28.195.161:50875/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-03 05:27:13 UTC", "last_seen": "2026-04-03 05:27:13 UTC", "sightings": 1 }, { "indicator": "http://61.168.181.44:42131/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 05:20:18 UTC", "last_seen": "2026-04-03 05:20:18 UTC", "sightings": 1 }, { "indicator": "http://110.36.80.162:43865/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 05:19:12 UTC", "last_seen": "2026-04-03 05:19:12 UTC", "sightings": 1 }, { "indicator": "http://125.167.189.139:50290/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-04-03 05:17:07 UTC", "last_seen": "2026-04-03 05:17:07 UTC", "sightings": 1 }, { "indicator": "http://182.127.127.23:35343/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 05:13:15 UTC", "last_seen": "2026-04-03 05:13:15 UTC", "sightings": 1 }, { "indicator": "http://115.53.27.166:38187/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-03 05:04:17 UTC", "last_seen": "2026-04-03 05:04:17 UTC", "sightings": 1 }, { "indicator": "http://45.185.93.184:57359/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-03 05:04:16 UTC", "last_seen": "2026-04-03 05:04:16 UTC", "sightings": 1 }, { "indicator": "http://42.7.147.185:45835/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 05:03:14 UTC", "last_seen": "2026-04-03 05:03:14 UTC", "sightings": 1 }, { "indicator": "http://1.10.255.96:34611/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-03 04:40:08 UTC", "last_seen": "2026-04-03 04:40:08 UTC", "sightings": 1 }, { "indicator": "http://5.79.150.232:60829/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 04:38:15 UTC", "last_seen": "2026-04-03 04:38:15 UTC", "sightings": 1 }, { "indicator": "http://59.182.216.4:53961/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 04:35:19 UTC", "last_seen": "2026-04-03 04:35:19 UTC", "sightings": 1 }, { "indicator": "http://85.166.152.13:41396/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-03 04:33:10 UTC", "last_seen": "2026-04-03 04:33:10 UTC", "sightings": 1 }, { "indicator": "http://117.209.16.140:41104/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 04:20:18 UTC", "last_seen": "2026-04-03 04:20:18 UTC", "sightings": 1 }, { "indicator": "http://42.55.214.201:36062/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 04:16:27 UTC", "last_seen": "2026-04-03 04:16:27 UTC", "sightings": 1 }, { "indicator": "http://1.10.255.96:34611/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-03 04:15:17 UTC", "last_seen": "2026-04-03 04:15:17 UTC", "sightings": 1 }, { "indicator": "http://117.209.16.140:41104/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 03:58:13 UTC", "last_seen": "2026-04-03 03:58:13 UTC", "sightings": 1 }, { "indicator": "http://42.58.215.64:39046/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 03:52:13 UTC", "last_seen": "2026-04-03 03:52:13 UTC", "sightings": 1 }, { "indicator": "http://222.142.205.250:53198/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-04-03 03:47:07 UTC", "last_seen": "2026-04-03 03:47:07 UTC", "sightings": 1 }, { "indicator": "http://185.9.139.117:45260/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-04-03 03:37:05 UTC", "last_seen": "2026-04-03 03:37:05 UTC", "sightings": 1 }, { "indicator": "http://222.142.205.250:53198/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-04-03 03:22:08 UTC", "last_seen": "2026-04-03 03:22:08 UTC", "sightings": 1 }, { "indicator": "http://185.9.139.117:45260/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-04-03 03:22:06 UTC", "last_seen": "2026-04-03 03:22:06 UTC", "sightings": 1 }, { "indicator": "http://115.55.254.179:58225/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 03:13:07 UTC", "last_seen": "2026-04-03 03:13:07 UTC", "sightings": 1 }, { "indicator": "http://42.58.215.64:39046/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 03:12:14 UTC", "last_seen": "2026-04-03 03:12:14 UTC", "sightings": 1 }, { "indicator": "http://27.215.181.162:38925/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-04-03 03:12:07 UTC", "last_seen": "2026-04-03 03:12:07 UTC", "sightings": 1 }, { "indicator": "http://117.235.99.62:49224/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-03 03:10:18 UTC", "last_seen": "2026-04-03 03:10:18 UTC", "sightings": 1 }, { "indicator": "http://115.55.254.179:58225/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 03:08:07 UTC", "last_seen": "2026-04-03 03:08:07 UTC", "sightings": 1 }, { "indicator": "http://182.114.193.94:38189/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 03:08:06 UTC", "last_seen": "2026-04-03 03:08:06 UTC", "sightings": 1 }, { "indicator": "http://59.52.56.85:42783/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-03 03:07:12 UTC", "last_seen": "2026-04-03 03:07:12 UTC", "sightings": 1 }, { "indicator": "http://105.184.6.122:33275/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-03 03:04:15 UTC", "last_seen": "2026-04-03 03:04:15 UTC", "sightings": 1 }, { "indicator": "http://105.184.6.122:33275/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-03 03:03:07 UTC", "last_seen": "2026-04-03 03:03:07 UTC", "sightings": 1 }, { "indicator": "http://36.72.41.89:56754/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-03 03:00:15 UTC", "last_seen": "2026-04-03 03:00:15 UTC", "sightings": 1 }, { "indicator": "http://27.215.181.162:38925/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-04-03 02:47:07 UTC", "last_seen": "2026-04-03 02:47:07 UTC", "sightings": 1 }, { "indicator": "http://117.235.99.62:49224/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-03 02:45:13 UTC", "last_seen": "2026-04-03 02:45:13 UTC", "sightings": 1 }, { "indicator": "http://36.72.41.89:56754/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-03 02:32:17 UTC", "last_seen": "2026-04-03 02:32:17 UTC", "sightings": 1 }, { "indicator": "http://42.4.29.184:41439/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-04-03 02:22:07 UTC", "last_seen": "2026-04-03 02:22:07 UTC", "sightings": 1 }, { "indicator": "http://42.238.111.225:37405/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 02:05:14 UTC", "last_seen": "2026-04-03 02:05:14 UTC", "sightings": 1 }, { "indicator": "http://110.37.40.215:33448/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-04-03 02:02:06 UTC", "last_seen": "2026-04-03 02:02:06 UTC", "sightings": 1 }, { "indicator": "http://196.189.104.106:47335/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-03 01:47:13 UTC", "last_seen": "2026-04-03 01:47:13 UTC", "sightings": 1 }, { "indicator": "http://110.37.40.215:33448/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-04-03 01:47:06 UTC", "last_seen": "2026-04-03 01:47:06 UTC", "sightings": 1 }, { "indicator": "http://125.42.33.171:33525/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-03 01:39:08 UTC", "last_seen": "2026-04-03 01:39:08 UTC", "sightings": 1 }, { "indicator": "http://222.127.48.186:60345/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-03 01:29:10 UTC", "last_seen": "2026-04-03 01:29:10 UTC", "sightings": 1 }, { "indicator": "http://117.212.56.152:34374/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 01:28:21 UTC", "last_seen": "2026-04-03 01:28:21 UTC", "sightings": 1 }, { "indicator": "http://37.28.179.42:57783/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 01:28:14 UTC", "last_seen": "2026-04-03 01:28:14 UTC", "sightings": 1 }, { "indicator": "http://119.183.55.10:50528/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-04-03 01:27:07 UTC", "last_seen": "2026-04-03 01:27:07 UTC", "sightings": 1 }, { "indicator": "http://42.238.111.225:37405/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 01:22:14 UTC", "last_seen": "2026-04-03 01:22:14 UTC", "sightings": 1 }, { "indicator": "http://196.189.104.106:47335/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-03 01:22:13 UTC", "last_seen": "2026-04-03 01:22:13 UTC", "sightings": 1 }, { "indicator": "http://112.248.184.19:43652/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 01:18:07 UTC", "last_seen": "2026-04-03 01:18:07 UTC", "sightings": 1 }, { "indicator": "http://196.190.10.252:58294/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-03 01:15:13 UTC", "last_seen": "2026-04-03 01:15:13 UTC", "sightings": 1 }, { "indicator": "http://125.42.33.171:33525/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-03 01:13:13 UTC", "last_seen": "2026-04-03 01:13:13 UTC", "sightings": 1 }, { "indicator": "http://222.140.183.50:51885/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-04-03 01:13:08 UTC", "last_seen": "2026-04-03 01:13:08 UTC", "sightings": 1 }, { "indicator": "http://196.190.10.252:58294/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-03 01:12:15 UTC", "last_seen": "2026-04-03 01:12:15 UTC", "sightings": 1 }, { "indicator": "http://119.183.55.10:50528/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-04-03 01:12:07 UTC", "last_seen": "2026-04-03 01:12:07 UTC", "sightings": 1 }, { "indicator": "http://42.178.25.159:56402/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-04-03 01:12:06 UTC", "last_seen": "2026-04-03 01:12:06 UTC", "sightings": 1 }, { "indicator": "http://222.127.48.186:60345/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-03 01:03:15 UTC", "last_seen": "2026-04-03 01:03:15 UTC", "sightings": 1 }, { "indicator": "http://112.248.184.19:43652/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 00:58:34 UTC", "last_seen": "2026-04-03 00:58:34 UTC", "sightings": 1 }, { "indicator": "http://140.237.39.28:52208/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-03 00:35:15 UTC", "last_seen": "2026-04-03 00:35:15 UTC", "sightings": 1 }, { "indicator": "http://117.212.63.82:41803/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 00:34:26 UTC", "last_seen": "2026-04-03 00:34:26 UTC", "sightings": 1 }, { "indicator": "http://125.41.143.65:60094/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 00:33:08 UTC", "last_seen": "2026-04-03 00:33:08 UTC", "sightings": 1 }, { "indicator": "http://85.239.147.6/files/8514679081/S5M3ryz.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-04-03 00:33:05 UTC", "last_seen": "2026-04-03 00:33:05 UTC", "sightings": 1 }, { "indicator": "http://36.249.194.64:58270/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-04-03 00:22:08 UTC", "last_seen": "2026-04-03 00:22:08 UTC", "sightings": 1 }, { "indicator": "http://37.48.254.120/arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "arm", "elf", "mirai", "opendir", "ua-wget" ], "first_seen": "2026-04-03 00:21:09 UTC", "last_seen": "2026-04-03 00:21:09 UTC", "sightings": 1 }, { "indicator": "http://140.237.39.28:52208/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-03 00:12:18 UTC", "last_seen": "2026-04-03 00:12:18 UTC", "sightings": 1 }, { "indicator": "http://125.41.143.65:60094/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-03 00:07:13 UTC", "last_seen": "2026-04-03 00:07:13 UTC", "sightings": 1 }, { "indicator": "http://193.187.101.68:41533/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-02 23:59:11 UTC", "last_seen": "2026-04-02 23:59:11 UTC", "sightings": 1 }, { "indicator": "http://105.186.248.234:56787/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-02 23:58:14 UTC", "last_seen": "2026-04-02 23:58:14 UTC", "sightings": 1 }, { "indicator": "http://120.61.88.48:55791/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-04-02 23:57:07 UTC", "last_seen": "2026-04-02 23:57:07 UTC", "sightings": 1 }, { "indicator": "http://42.224.234.25:58113/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 23:53:13 UTC", "last_seen": "2026-04-02 23:53:13 UTC", "sightings": 1 }, { "indicator": "http://36.249.194.64:58270/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-04-02 23:52:07 UTC", "last_seen": "2026-04-02 23:52:07 UTC", "sightings": 1 }, { "indicator": "http://190.109.227.235:55274/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-02 23:50:16 UTC", "last_seen": "2026-04-02 23:50:16 UTC", "sightings": 1 }, { "indicator": "http://105.186.248.234:56787/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-02 23:44:13 UTC", "last_seen": "2026-04-02 23:44:13 UTC", "sightings": 1 }, { "indicator": "http://182.114.193.94:38189/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 23:41:14 UTC", "last_seen": "2026-04-02 23:41:14 UTC", "sightings": 1 }, { "indicator": "http://120.61.88.48:55791/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-04-02 23:37:12 UTC", "last_seen": "2026-04-02 23:37:12 UTC", "sightings": 1 }, { "indicator": "http://193.187.101.68:41533/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-02 23:33:11 UTC", "last_seen": "2026-04-02 23:33:11 UTC", "sightings": 1 }, { "indicator": "http://105.187.37.109:59153/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-02 23:32:16 UTC", "last_seen": "2026-04-02 23:32:16 UTC", "sightings": 1 }, { "indicator": "http://115.62.144.231:58457/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-04-02 23:32:06 UTC", "last_seen": "2026-04-02 23:32:06 UTC", "sightings": 1 }, { "indicator": "http://105.187.37.109:59153/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-02 23:24:16 UTC", "last_seen": "2026-04-02 23:24:16 UTC", "sightings": 1 }, { "indicator": "http://115.62.144.231:58457/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-04-02 23:02:09 UTC", "last_seen": "2026-04-02 23:02:09 UTC", "sightings": 1 }, { "indicator": "http://120.28.169.156:39346/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-02 23:02:07 UTC", "last_seen": "2026-04-02 23:02:07 UTC", "sightings": 1 }, { "indicator": "http://175.147.157.129:55169/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 22:58:14 UTC", "last_seen": "2026-04-02 22:58:14 UTC", "sightings": 1 }, { "indicator": "http://110.137.156.231:38338/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-04-02 22:57:07 UTC", "last_seen": "2026-04-02 22:57:07 UTC", "sightings": 1 }, { "indicator": "http://119.185.242.118:36562/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-04-02 22:47:09 UTC", "last_seen": "2026-04-02 22:47:09 UTC", "sightings": 1 }, { "indicator": "http://59.88.239.123:55029/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-04-02 22:47:08 UTC", "last_seen": "2026-04-02 22:47:08 UTC", "sightings": 1 }, { "indicator": "http://42.224.234.25:58113/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 22:42:19 UTC", "last_seen": "2026-04-02 22:42:19 UTC", "sightings": 1 }, { "indicator": "http://120.28.189.182:36703/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-02 22:35:14 UTC", "last_seen": "2026-04-02 22:35:14 UTC", "sightings": 1 }, { "indicator": "http://110.137.156.231:38338/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-04-02 22:32:07 UTC", "last_seen": "2026-04-02 22:32:07 UTC", "sightings": 1 }, { "indicator": "http://59.88.239.123:55029/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-04-02 22:27:09 UTC", "last_seen": "2026-04-02 22:27:09 UTC", "sightings": 1 }, { "indicator": "http://119.117.246.47:36823/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 22:18:06 UTC", "last_seen": "2026-04-02 22:18:06 UTC", "sightings": 1 }, { "indicator": "http://1.22.175.162:57210/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 22:14:16 UTC", "last_seen": "2026-04-02 22:14:16 UTC", "sightings": 1 }, { "indicator": "http://105.186.73.34:44849/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-02 22:12:16 UTC", "last_seen": "2026-04-02 22:12:16 UTC", "sightings": 1 }, { "indicator": "http://182.121.231.132:33070/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-04-02 22:02:06 UTC", "last_seen": "2026-04-02 22:02:06 UTC", "sightings": 1 }, { "indicator": "http://39.88.91.26:47182/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-04-02 21:47:08 UTC", "last_seen": "2026-04-02 21:47:08 UTC", "sightings": 1 }, { "indicator": "http://119.117.246.47:36823/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 21:45:13 UTC", "last_seen": "2026-04-02 21:45:13 UTC", "sightings": 1 }, { "indicator": "http://182.121.231.132:33070/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-04-02 21:37:07 UTC", "last_seen": "2026-04-02 21:37:07 UTC", "sightings": 1 }, { "indicator": "http://27.207.124.219:42184/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-04-02 21:37:07 UTC", "last_seen": "2026-04-02 21:37:07 UTC", "sightings": 1 }, { "indicator": "http://115.55.172.194:45672/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 21:35:17 UTC", "last_seen": "2026-04-02 21:35:17 UTC", "sightings": 1 }, { "indicator": "http://115.57.233.64:45200/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 21:32:10 UTC", "last_seen": "2026-04-02 21:32:10 UTC", "sightings": 1 }, { "indicator": "https://securrty.cfd/files/EventVPcard_PU1KQZvw_installer.msi", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-04-02 21:28:38 UTC", "last_seen": "2026-04-02 21:28:38 UTC", "sightings": 1 }, { "indicator": "http://102.214.109.147:37361/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-04-02 21:27:08 UTC", "last_seen": "2026-04-02 21:27:08 UTC", "sightings": 1 }, { "indicator": "http://27.207.124.219:42184/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-04-02 21:22:07 UTC", "last_seen": "2026-04-02 21:22:07 UTC", "sightings": 1 }, { "indicator": "http://110.36.86.83:35225/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 21:21:06 UTC", "last_seen": "2026-04-02 21:21:06 UTC", "sightings": 1 }, { "indicator": "http://115.61.9.1:43745/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 21:20:20 UTC", "last_seen": "2026-04-02 21:20:20 UTC", "sightings": 1 }, { "indicator": "http://222.141.13.217:42757/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 21:19:17 UTC", "last_seen": "2026-04-02 21:19:17 UTC", "sightings": 1 }, { "indicator": "http://115.57.233.64:45200/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 21:08:07 UTC", "last_seen": "2026-04-02 21:08:07 UTC", "sightings": 1 }, { "indicator": "http://115.55.172.194:45672/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 21:07:11 UTC", "last_seen": "2026-04-02 21:07:11 UTC", "sightings": 1 }, { "indicator": "http://85.239.147.6/files/unique5/random.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-04-02 21:06:05 UTC", "last_seen": "2026-04-02 21:06:05 UTC", "sightings": 1 }, { "indicator": "http://115.61.9.1:43745/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 20:57:08 UTC", "last_seen": "2026-04-02 20:57:08 UTC", "sightings": 1 }, { "indicator": "http://221.15.214.185:59599/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-04-02 20:57:06 UTC", "last_seen": "2026-04-02 20:57:06 UTC", "sightings": 1 }, { "indicator": "http://85.239.147.6/files/77546367/5akgVVn.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-04-02 20:56:05 UTC", "last_seen": "2026-04-02 20:56:05 UTC", "sightings": 1 }, { "indicator": "http://85.239.147.6/files/8536096438/X9OhMaZ.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-04-02 20:56:05 UTC", "last_seen": "2026-04-02 20:56:05 UTC", "sightings": 1 }, { "indicator": "http://222.141.13.217:42757/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 20:55:10 UTC", "last_seen": "2026-04-02 20:55:10 UTC", "sightings": 1 }, { "indicator": "http://219.156.21.147:46171/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 20:53:18 UTC", "last_seen": "2026-04-02 20:53:18 UTC", "sightings": 1 }, { "indicator": "http://110.36.86.83:35225/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 20:52:21 UTC", "last_seen": "2026-04-02 20:52:21 UTC", "sightings": 1 }, { "indicator": "http://221.203.170.228:55528/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 20:44:19 UTC", "last_seen": "2026-04-02 20:44:19 UTC", "sightings": 1 }, { "indicator": "http://85.239.147.6/files/6728144278/5nhlM0r.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-04-02 20:32:05 UTC", "last_seen": "2026-04-02 20:32:05 UTC", "sightings": 1 }, { "indicator": "http://120.86.71.216:43364/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 20:28:09 UTC", "last_seen": "2026-04-02 20:28:09 UTC", "sightings": 1 }, { "indicator": "http://221.15.214.185:59599/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-04-02 20:28:08 UTC", "last_seen": "2026-04-02 20:28:08 UTC", "sightings": 1 }, { "indicator": "http://110.37.78.200:33432/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-04-02 20:22:07 UTC", "last_seen": "2026-04-02 20:22:07 UTC", "sightings": 1 }, { "indicator": "http://106.56.146.69:35466/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-04-02 20:17:30 UTC", "last_seen": "2026-04-02 20:17:30 UTC", "sightings": 1 }, { "indicator": "http://222.219.74.77:58121/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-02 19:43:21 UTC", "last_seen": "2026-04-02 19:43:21 UTC", "sightings": 1 }, { "indicator": "http://58.47.19.241:40081/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-02 19:37:08 UTC", "last_seen": "2026-04-02 19:37:08 UTC", "sightings": 1 }, { "indicator": "http://110.36.15.1:48126/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 19:35:08 UTC", "last_seen": "2026-04-02 19:35:08 UTC", "sightings": 1 }, { "indicator": "http://222.127.153.46:54050/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-02 19:34:17 UTC", "last_seen": "2026-04-02 19:34:17 UTC", "sightings": 1 }, { "indicator": "http://115.63.59.213:33143/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-04-02 19:22:08 UTC", "last_seen": "2026-04-02 19:22:08 UTC", "sightings": 1 }, { "indicator": "http://175.147.157.168:49936/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-04-02 19:17:07 UTC", "last_seen": "2026-04-02 19:17:07 UTC", "sightings": 1 }, { "indicator": "http://182.127.0.211:47285/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 19:11:11 UTC", "last_seen": "2026-04-02 19:11:11 UTC", "sightings": 1 }, { "indicator": "http://77.247.92.12:47602/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-02 19:10:19 UTC", "last_seen": "2026-04-02 19:10:19 UTC", "sightings": 1 }, { "indicator": "http://222.127.153.46:54050/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-02 19:08:07 UTC", "last_seen": "2026-04-02 19:08:07 UTC", "sightings": 1 }, { "indicator": "http://46.163.184.136:49029/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 19:08:06 UTC", "last_seen": "2026-04-02 19:08:06 UTC", "sightings": 1 }, { "indicator": "http://178.16.54.109/peinf.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-Phorpiex", "phorpiex" ], "first_seen": "2026-04-02 19:03:06 UTC", "last_seen": "2026-04-02 19:03:06 UTC", "sightings": 1 }, { "indicator": "http://58.47.19.241:40081/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-02 19:02:20 UTC", "last_seen": "2026-04-02 19:02:20 UTC", "sightings": 1 }, { "indicator": "http://27.207.103.54:53082/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-04-02 19:02:08 UTC", "last_seen": "2026-04-02 19:02:08 UTC", "sightings": 1 }, { "indicator": "http://222.127.68.197:40059/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-02 18:59:19 UTC", "last_seen": "2026-04-02 18:59:19 UTC", "sightings": 1 }, { "indicator": "http://42.87.252.165:36677/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 18:55:20 UTC", "last_seen": "2026-04-02 18:55:20 UTC", "sightings": 1 }, { "indicator": "http://85.239.147.6/files/8408827406/f1srZt6.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-04-02 18:46:05 UTC", "last_seen": "2026-04-02 18:46:05 UTC", "sightings": 1 }, { "indicator": "http://175.147.157.168:49936/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-04-02 18:42:10 UTC", "last_seen": "2026-04-02 18:42:10 UTC", "sightings": 1 }, { "indicator": "http://5.166.170.106:3536/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 18:40:15 UTC", "last_seen": "2026-04-02 18:40:15 UTC", "sightings": 1 }, { "indicator": "http://37.28.179.42:57783/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 18:36:11 UTC", "last_seen": "2026-04-02 18:36:11 UTC", "sightings": 1 }, { "indicator": "http://222.127.68.197:40059/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-02 18:33:18 UTC", "last_seen": "2026-04-02 18:33:18 UTC", "sightings": 1 }, { "indicator": "http://5.166.170.106:3536/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 18:14:17 UTC", "last_seen": "2026-04-02 18:14:17 UTC", "sightings": 1 }, { "indicator": "http://42.224.174.48:52075/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 17:50:16 UTC", "last_seen": "2026-04-02 17:50:16 UTC", "sightings": 1 }, { "indicator": "http://182.113.38.165:49027/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 17:29:08 UTC", "last_seen": "2026-04-02 17:29:08 UTC", "sightings": 1 }, { "indicator": "http://42.224.174.48:52075/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 17:27:13 UTC", "last_seen": "2026-04-02 17:27:13 UTC", "sightings": 1 }, { "indicator": "http://123.129.129.124:50675/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 17:24:09 UTC", "last_seen": "2026-04-02 17:24:09 UTC", "sightings": 1 }, { "indicator": "http://124.94.112.193:33574/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 17:22:21 UTC", "last_seen": "2026-04-02 17:22:21 UTC", "sightings": 1 }, { "indicator": "http://178.16.54.109/st.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-Phorpiex", "Stealc" ], "first_seen": "2026-04-02 17:01:07 UTC", "last_seen": "2026-04-02 17:01:07 UTC", "sightings": 1 }, { "indicator": "http://222.136.22.57:40679/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 16:49:21 UTC", "last_seen": "2026-04-02 16:49:21 UTC", "sightings": 1 }, { "indicator": "http://222.142.208.17:54537/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 16:38:23 UTC", "last_seen": "2026-04-02 16:38:23 UTC", "sightings": 1 }, { "indicator": "http://176.116.56.92:21885/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 16:29:21 UTC", "last_seen": "2026-04-02 16:29:21 UTC", "sightings": 1 }, { "indicator": "http://27.217.198.91:45909/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-02 16:26:29 UTC", "last_seen": "2026-04-02 16:26:29 UTC", "sightings": 1 }, { "indicator": "http://105.225.84.58:53869/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-02 16:20:31 UTC", "last_seen": "2026-04-02 16:20:31 UTC", "sightings": 1 }, { "indicator": "http://123.5.184.173:40185/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 16:14:20 UTC", "last_seen": "2026-04-02 16:14:20 UTC", "sightings": 1 }, { "indicator": "http://222.142.208.17:54537/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 16:14:19 UTC", "last_seen": "2026-04-02 16:14:19 UTC", "sightings": 1 }, { "indicator": "http://123.8.11.87:37644/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 16:03:25 UTC", "last_seen": "2026-04-02 16:03:25 UTC", "sightings": 1 }, { "indicator": "http://85.239.147.6/files/7709864361/n1XRh0P.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-04-02 16:02:05 UTC", "last_seen": "2026-04-02 16:02:05 UTC", "sightings": 1 }, { "indicator": "http://85.239.147.6/files/8042875554/jv3aQju.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-04-02 16:00:07 UTC", "last_seen": "2026-04-02 16:00:07 UTC", "sightings": 1 }, { "indicator": "http://196.191.137.44:52649/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-02 15:58:13 UTC", "last_seen": "2026-04-02 15:58:13 UTC", "sightings": 1 }, { "indicator": "http://196.191.137.44:52649/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-02 15:44:07 UTC", "last_seen": "2026-04-02 15:44:07 UTC", "sightings": 1 }, { "indicator": "http://110.37.72.176:58953/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 15:38:18 UTC", "last_seen": "2026-04-02 15:38:18 UTC", "sightings": 1 }, { "indicator": "http://115.57.194.234:53768/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 15:37:25 UTC", "last_seen": "2026-04-02 15:37:25 UTC", "sightings": 1 }, { "indicator": "http://123.8.11.87:37644/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 15:35:22 UTC", "last_seen": "2026-04-02 15:35:22 UTC", "sightings": 1 }, { "indicator": "http://119.117.252.128:44711/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 15:35:21 UTC", "last_seen": "2026-04-02 15:35:21 UTC", "sightings": 1 }, { "indicator": "http://120.28.212.118:42550/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-02 15:20:28 UTC", "last_seen": "2026-04-02 15:20:28 UTC", "sightings": 1 }, { "indicator": "http://176.116.56.92:21885/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 15:17:07 UTC", "last_seen": "2026-04-02 15:17:07 UTC", "sightings": 1 }, { "indicator": "http://105.186.73.34:44849/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-02 15:15:17 UTC", "last_seen": "2026-04-02 15:15:17 UTC", "sightings": 1 }, { "indicator": "http://110.37.72.176:58953/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 15:13:10 UTC", "last_seen": "2026-04-02 15:13:10 UTC", "sightings": 1 }, { "indicator": "http://115.57.194.234:53768/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 15:11:08 UTC", "last_seen": "2026-04-02 15:11:08 UTC", "sightings": 1 }, { "indicator": "http://119.117.252.128:44711/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 15:07:16 UTC", "last_seen": "2026-04-02 15:07:16 UTC", "sightings": 1 }, { "indicator": "http://216.249.4.20:35913/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-04-02 14:57:06 UTC", "last_seen": "2026-04-02 14:57:06 UTC", "sightings": 1 }, { "indicator": "http://59.101.92.130:53222/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 14:45:27 UTC", "last_seen": "2026-04-02 14:45:27 UTC", "sightings": 1 }, { "indicator": "https://audipoint.cz/downloads/Burst.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "Smoke Loader" ], "first_seen": "2026-04-02 14:43:18 UTC", "last_seen": "2026-04-02 14:43:18 UTC", "sightings": 1 }, { "indicator": "http://jin.com.my/patch/1117.exe", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-04-02 14:43:09 UTC", "last_seen": "2026-04-02 14:43:09 UTC", "sightings": 1 }, { "indicator": "http://103.172.186.141:56628/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-02 14:42:22 UTC", "last_seen": "2026-04-02 14:42:22 UTC", "sightings": 1 }, { "indicator": "https://themaintechnician.us/Bin/ScreenConnect.ClientSetup.msi", "indicator_type": "url", "source": "URLhaus", "tags": [ "connectwise" ], "first_seen": "2026-04-02 14:42:16 UTC", "last_seen": "2026-04-02 14:42:16 UTC", "sightings": 1 }, { "indicator": "https://pub-ec081eb0fab74385a17d8d77afeeda3b.r2.dev/Rsvp_invite%23903388.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "DattoRMM" ], "first_seen": "2026-04-02 14:42:12 UTC", "last_seen": "2026-04-02 14:42:12 UTC", "sightings": 1 }, { "indicator": "https://lejrmakei.net/WORDPRESS%202026.zip", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-04-02 14:42:12 UTC", "last_seen": "2026-04-02 14:42:12 UTC", "sightings": 1 }, { "indicator": "https://app-trust-wallet.com/trust.apk", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-04-02 14:42:11 UTC", "last_seen": "2026-04-02 14:42:11 UTC", "sightings": 1 }, { "indicator": "https://mailer-kjermjs.net/WORDPRESS%202026.zip", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-04-02 14:42:11 UTC", "last_seen": "2026-04-02 14:42:11 UTC", "sightings": 1 }, { "indicator": "https://www.az-partners.net/apps/driver-hub/download?ap=28&driver-hub-install.exe.", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-04-02 14:42:11 UTC", "last_seen": "2026-04-02 14:42:11 UTC", "sightings": 1 }, { "indicator": "https://racing-shop-schuller.de/webRTC_driver_20260111_x64.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "Amadey" ], "first_seen": "2026-04-02 14:42:09 UTC", "last_seen": "2026-04-02 14:42:09 UTC", "sightings": 1 }, { "indicator": "http://46.165.215.116/imbosomed.deploy", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-04-02 14:42:09 UTC", "last_seen": "2026-04-02 14:42:09 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/babka98/horinis/refs/heads/main/lykis.msi", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-04-02 14:42:09 UTC", "last_seen": "2026-04-02 14:42:09 UTC", "sightings": 1 }, { "indicator": "https://mailer-kjermjs.com/WORDPRESS%202026.zip", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-04-02 14:42:08 UTC", "last_seen": "2026-04-02 14:42:08 UTC", "sightings": 1 }, { "indicator": "http://105.225.206.203:44439/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-04-02 14:42:08 UTC", "last_seen": "2026-04-02 14:42:08 UTC", "sightings": 1 }, { "indicator": "https://keilo-jermailer.com/WORDPRESS%202026.zip", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-04-02 14:42:08 UTC", "last_seen": "2026-04-02 14:42:08 UTC", "sightings": 1 }, { "indicator": "https://e0-adobemodule-pdreaderl-w002-0llx00-uv0a0acr0bt-patch-dl0.pages.dev/portable_reader_acrbat_v23_01_p2.vbs", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-04-02 14:42:08 UTC", "last_seen": "2026-04-02 14:42:08 UTC", "sightings": 1 }, { "indicator": "https://audipoint.cz/downloads/kontakt.txt", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-04-02 14:42:07 UTC", "last_seen": "2026-04-02 14:42:07 UTC", "sightings": 1 }, { "indicator": "https://audipoint.cz/downloads/info.txt", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-04-02 14:42:07 UTC", "last_seen": "2026-04-02 14:42:07 UTC", "sightings": 1 }, { "indicator": "http://46.165.215.116/JNG2.txt", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-04-02 14:42:07 UTC", "last_seen": "2026-04-02 14:42:07 UTC", "sightings": 1 }, { "indicator": "http://46.165.215.116/Porcate.cmd", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-04-02 14:42:06 UTC", "last_seen": "2026-04-02 14:42:06 UTC", "sightings": 1 }, { "indicator": "http://46.165.215.116/JNG1.txt", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-04-02 14:42:06 UTC", "last_seen": "2026-04-02 14:42:06 UTC", "sightings": 1 }, { "indicator": "http://123.129.132.142:54242/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 14:34:15 UTC", "last_seen": "2026-04-02 14:34:15 UTC", "sightings": 1 }, { "indicator": "http://60.18.70.11:35060/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 14:29:17 UTC", "last_seen": "2026-04-02 14:29:17 UTC", "sightings": 1 }, { "indicator": "http://219.157.240.70:44856/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 14:28:19 UTC", "last_seen": "2026-04-02 14:28:19 UTC", "sightings": 1 }, { "indicator": "http://123.129.132.142:54242/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 14:18:20 UTC", "last_seen": "2026-04-02 14:18:20 UTC", "sightings": 1 }, { "indicator": "http://103.172.186.141:56628/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-02 14:17:21 UTC", "last_seen": "2026-04-02 14:17:21 UTC", "sightings": 1 }, { "indicator": "http://61.52.147.80:34068/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "mirai" ], "first_seen": "2026-04-02 14:15:21 UTC", "last_seen": "2026-04-02 14:15:21 UTC", "sightings": 1 }, { "indicator": "http://60.18.70.11:35060/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 14:08:19 UTC", "last_seen": "2026-04-02 14:08:19 UTC", "sightings": 1 }, { "indicator": "http://110.37.58.152:54537/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-02 14:07:09 UTC", "last_seen": "2026-04-02 14:07:09 UTC", "sightings": 1 }, { "indicator": "http://121.234.248.74:43372/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-02 13:58:17 UTC", "last_seen": "2026-04-02 13:58:17 UTC", "sightings": 1 }, { "indicator": "http://45.171.177.193:41280/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-04-02 13:57:09 UTC", "last_seen": "2026-04-02 13:57:09 UTC", "sightings": 1 }, { "indicator": "http://61.52.147.80:34068/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "mirai" ], "first_seen": "2026-04-02 13:50:23 UTC", "last_seen": "2026-04-02 13:50:23 UTC", "sightings": 1 }, { "indicator": "http://115.50.36.202:52253/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 13:50:17 UTC", "last_seen": "2026-04-02 13:50:17 UTC", "sightings": 1 }, { "indicator": "http://59.182.145.1:46980/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 13:49:22 UTC", "last_seen": "2026-04-02 13:49:22 UTC", "sightings": 1 }, { "indicator": "http://219.157.240.70:44856/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 13:48:19 UTC", "last_seen": "2026-04-02 13:48:19 UTC", "sightings": 1 }, { "indicator": "http://110.37.58.152:54537/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-02 13:40:10 UTC", "last_seen": "2026-04-02 13:40:10 UTC", "sightings": 1 }, { "indicator": "http://59.182.145.1:46980/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 13:27:27 UTC", "last_seen": "2026-04-02 13:27:27 UTC", "sightings": 1 }, { "indicator": "http://45.171.177.193:41280/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-04-02 13:22:08 UTC", "last_seen": "2026-04-02 13:22:08 UTC", "sightings": 1 }, { "indicator": "http://222.141.122.224:40114/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 13:21:17 UTC", "last_seen": "2026-04-02 13:21:17 UTC", "sightings": 1 }, { "indicator": "http://222.141.122.224:40114/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 13:20:22 UTC", "last_seen": "2026-04-02 13:20:22 UTC", "sightings": 1 }, { "indicator": "http://115.50.36.202:52253/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 13:18:20 UTC", "last_seen": "2026-04-02 13:18:20 UTC", "sightings": 1 }, { "indicator": "http://110.36.24.172:45475/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 13:14:19 UTC", "last_seen": "2026-04-02 13:14:19 UTC", "sightings": 1 }, { "indicator": "http://110.36.24.172:45475/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 13:13:19 UTC", "last_seen": "2026-04-02 13:13:19 UTC", "sightings": 1 }, { "indicator": "http://117.215.50.214:54675/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 12:58:25 UTC", "last_seen": "2026-04-02 12:58:25 UTC", "sightings": 1 }, { "indicator": "http://195.178.110.204/mips64", "indicator_type": "url", "source": "URLhaus", "tags": [ "195-178-110-204", "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-02 12:48:20 UTC", "last_seen": "2026-04-02 12:48:20 UTC", "sightings": 1 }, { "indicator": "http://42.237.1.75:42849/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 12:47:22 UTC", "last_seen": "2026-04-02 12:47:22 UTC", "sightings": 1 }, { "indicator": "http://117.215.50.214:54675/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 12:40:22 UTC", "last_seen": "2026-04-02 12:40:22 UTC", "sightings": 1 }, { "indicator": "http://117.241.61.219:48586/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-04-02 12:37:15 UTC", "last_seen": "2026-04-02 12:37:15 UTC", "sightings": 1 }, { "indicator": "http://117.214.238.164:53862/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-02 12:35:25 UTC", "last_seen": "2026-04-02 12:35:25 UTC", "sightings": 1 }, { "indicator": "http://120.28.189.182:36703/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-02 12:29:17 UTC", "last_seen": "2026-04-02 12:29:17 UTC", "sightings": 1 }, { "indicator": "http://125.47.243.29:42407/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-04-02 12:22:10 UTC", "last_seen": "2026-04-02 12:22:10 UTC", "sightings": 1 }, { "indicator": "http://110.37.27.87:39856/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 12:13:18 UTC", "last_seen": "2026-04-02 12:13:18 UTC", "sightings": 1 }, { "indicator": "http://110.137.153.129:53872/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-02 12:13:18 UTC", "last_seen": "2026-04-02 12:13:18 UTC", "sightings": 1 }, { "indicator": "http://105.225.206.203:44439/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-02 12:12:16 UTC", "last_seen": "2026-04-02 12:12:16 UTC", "sightings": 1 }, { "indicator": "http://182.116.121.227:38044/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 12:09:11 UTC", "last_seen": "2026-04-02 12:09:11 UTC", "sightings": 1 }, { "indicator": "http://87.121.84.18/multi/bins/x86_64", "indicator_type": "url", "source": "URLhaus", "tags": [ "87-121-84-18", "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-02 12:01:06 UTC", "last_seen": "2026-04-02 12:01:06 UTC", "sightings": 1 }, { "indicator": "http://87.121.84.18/multi/bins/arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "87-121-84-18", "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-02 12:01:06 UTC", "last_seen": "2026-04-02 12:01:06 UTC", "sightings": 1 }, { "indicator": "http://87.121.84.18/multi/bins/mipsel", "indicator_type": "url", "source": "URLhaus", "tags": [ "87-121-84-18", "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-02 12:00:17 UTC", "last_seen": "2026-04-02 12:00:17 UTC", "sightings": 1 }, { "indicator": "http://87.121.84.18/multi/bins/arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "87-121-84-18", "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-02 12:00:17 UTC", "last_seen": "2026-04-02 12:00:17 UTC", "sightings": 1 }, { "indicator": "http://87.121.84.18/multi/bins/mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "87-121-84-18", "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-02 12:00:17 UTC", "last_seen": "2026-04-02 12:00:17 UTC", "sightings": 1 }, { "indicator": "http://87.121.84.18/wget.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "87-121-84-18", "sh", "ua-wget" ], "first_seen": "2026-04-02 12:00:17 UTC", "last_seen": "2026-04-02 12:00:17 UTC", "sightings": 1 }, { "indicator": "http://87.121.84.18/lol.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "87-121-84-18", "sh", "ua-wget" ], "first_seen": "2026-04-02 11:59:15 UTC", "last_seen": "2026-04-02 11:59:15 UTC", "sightings": 1 }, { "indicator": "http://87.121.84.18/c.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "87-121-84-18", "sh", "ua-wget" ], "first_seen": "2026-04-02 11:59:14 UTC", "last_seen": "2026-04-02 11:59:14 UTC", "sightings": 1 }, { "indicator": "http://117.209.86.165:57357/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 11:58:20 UTC", "last_seen": "2026-04-02 11:58:20 UTC", "sightings": 1 }, { "indicator": "http://87.121.84.19/all.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "87-121-84-19", "mirai", "sh", "ua-wget" ], "first_seen": "2026-04-02 11:57:18 UTC", "last_seen": "2026-04-02 11:57:18 UTC", "sightings": 1 }, { "indicator": "http://87.121.84.78/nuclear.arc", "indicator_type": "url", "source": "URLhaus", "tags": [ "87-121-84-78", "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-02 11:55:23 UTC", "last_seen": "2026-04-02 11:55:23 UTC", "sightings": 1 }, { "indicator": "http://87.121.84.78/nuclear.i686", "indicator_type": "url", "source": "URLhaus", "tags": [ "87-121-84-78", "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-02 11:55:23 UTC", "last_seen": "2026-04-02 11:55:23 UTC", "sightings": 1 }, { "indicator": "http://87.121.84.78/nuclear.sh4", "indicator_type": "url", "source": "URLhaus", "tags": [ "87-121-84-78", "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-02 11:55:23 UTC", "last_seen": "2026-04-02 11:55:23 UTC", "sightings": 1 }, { "indicator": "http://87.121.84.78/nuclear.x86", "indicator_type": "url", "source": "URLhaus", "tags": [ "87-121-84-78", "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-02 11:55:23 UTC", "last_seen": "2026-04-02 11:55:23 UTC", "sightings": 1 }, { "indicator": "http://87.121.84.78/nuclear.x86_64", "indicator_type": "url", "source": "URLhaus", "tags": [ "87-121-84-78", "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-02 11:55:23 UTC", "last_seen": "2026-04-02 11:55:23 UTC", "sightings": 1 }, { "indicator": "http://87.121.84.78/nuclear.arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "87-121-84-78", "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-02 11:55:23 UTC", "last_seen": "2026-04-02 11:55:23 UTC", "sightings": 1 }, { "indicator": "http://87.121.84.78/nuclear.arm", "indicator_type": "url", "source": "URLhaus", "tags": [ "87-121-84-78", "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-02 11:55:23 UTC", "last_seen": "2026-04-02 11:55:23 UTC", "sightings": 1 }, { "indicator": "http://87.121.84.78/nuclear.arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "87-121-84-78", "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-02 11:55:23 UTC", "last_seen": "2026-04-02 11:55:23 UTC", "sightings": 1 }, { "indicator": "http://87.121.84.78/nuclear.m68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "87-121-84-78", "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-02 11:55:23 UTC", "last_seen": "2026-04-02 11:55:23 UTC", "sightings": 1 }, { "indicator": "http://87.121.84.78/nuclear.mpsl", "indicator_type": "url", "source": "URLhaus", "tags": [ "87-121-84-78", "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-02 11:55:23 UTC", "last_seen": "2026-04-02 11:55:23 UTC", "sightings": 1 }, { "indicator": "http://87.121.84.78/nuclear.mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "87-121-84-78", "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-02 11:55:23 UTC", "last_seen": "2026-04-02 11:55:23 UTC", "sightings": 1 }, { "indicator": "http://87.121.84.78/nuclear.ppc", "indicator_type": "url", "source": "URLhaus", "tags": [ "87-121-84-78", "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-02 11:55:23 UTC", "last_seen": "2026-04-02 11:55:23 UTC", "sightings": 1 }, { "indicator": "http://87.121.84.78/nuclear.arm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "87-121-84-78", "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-02 11:55:20 UTC", "last_seen": "2026-04-02 11:55:20 UTC", "sightings": 1 }, { "indicator": "http://87.121.84.78/nuclear.spc", "indicator_type": "url", "source": "URLhaus", "tags": [ "87-121-84-78", "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-02 11:55:20 UTC", "last_seen": "2026-04-02 11:55:20 UTC", "sightings": 1 }, { "indicator": "http://182.116.121.227:38044/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 11:54:39 UTC", "last_seen": "2026-04-02 11:54:39 UTC", "sightings": 1 }, { "indicator": "http://87.121.84.19/titanjr.arm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "87-121-84-19", "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-02 11:50:13 UTC", "last_seen": "2026-04-02 11:50:13 UTC", "sightings": 1 }, { "indicator": "http://87.121.84.19/titanjr.arc", "indicator_type": "url", "source": "URLhaus", "tags": [ "87-121-84-19", "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-02 11:50:13 UTC", "last_seen": "2026-04-02 11:50:13 UTC", "sightings": 1 }, { "indicator": "http://87.121.84.19/titanjr.arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "87-121-84-19", "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-02 11:49:10 UTC", "last_seen": "2026-04-02 11:49:10 UTC", "sightings": 1 }, { "indicator": "http://87.121.84.19/titanjr.m68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "87-121-84-19", "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-02 11:49:10 UTC", "last_seen": "2026-04-02 11:49:10 UTC", "sightings": 1 }, { "indicator": "http://219.157.20.200:45955/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 11:49:01 UTC", "last_seen": "2026-04-02 11:49:01 UTC", "sightings": 1 }, { "indicator": "http://87.121.84.19/titanjr.arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "87-121-84-19", "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-02 11:48:13 UTC", "last_seen": "2026-04-02 11:48:13 UTC", "sightings": 1 }, { "indicator": "http://87.121.84.19/titanjr.ppc", "indicator_type": "url", "source": "URLhaus", "tags": [ "87-121-84-19", "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-02 11:47:25 UTC", "last_seen": "2026-04-02 11:47:25 UTC", "sightings": 1 }, { "indicator": "http://87.121.84.19/titanjr.spc", "indicator_type": "url", "source": "URLhaus", "tags": [ "87-121-84-19", "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-02 11:47:23 UTC", "last_seen": "2026-04-02 11:47:23 UTC", "sightings": 1 }, { "indicator": "http://87.121.84.19/titanjr.mipsl", "indicator_type": "url", "source": "URLhaus", "tags": [ "87-121-84-19", "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-02 11:47:23 UTC", "last_seen": "2026-04-02 11:47:23 UTC", "sightings": 1 }, { "indicator": "http://87.121.84.19/titanjr.i686", "indicator_type": "url", "source": "URLhaus", "tags": [ "87-121-84-19", "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-02 11:47:23 UTC", "last_seen": "2026-04-02 11:47:23 UTC", "sightings": 1 }, { "indicator": "http://87.121.84.19/titanjr.ppc440", "indicator_type": "url", "source": "URLhaus", "tags": [ "87-121-84-19", "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-02 11:47:23 UTC", "last_seen": "2026-04-02 11:47:23 UTC", "sightings": 1 }, { "indicator": "http://87.121.84.19/main_ppc", "indicator_type": "url", "source": "URLhaus", "tags": [ "87-121-84-19", "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-02 11:47:23 UTC", "last_seen": "2026-04-02 11:47:23 UTC", "sightings": 1 }, { "indicator": "http://87.121.84.19/main_mpsl", "indicator_type": "url", "source": "URLhaus", "tags": [ "87-121-84-19", "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-02 11:47:22 UTC", "last_seen": "2026-04-02 11:47:22 UTC", "sightings": 1 }, { "indicator": "http://87.121.84.19/main_spc", "indicator_type": "url", "source": "URLhaus", "tags": [ "87-121-84-19", "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-02 11:47:22 UTC", "last_seen": "2026-04-02 11:47:22 UTC", "sightings": 1 }, { "indicator": "http://87.121.84.19/main_x86", "indicator_type": "url", "source": "URLhaus", "tags": [ "87-121-84-19", "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-02 11:47:22 UTC", "last_seen": "2026-04-02 11:47:22 UTC", "sightings": 1 }, { "indicator": "http://87.121.84.19/main_mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "87-121-84-19", "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-02 11:47:22 UTC", "last_seen": "2026-04-02 11:47:22 UTC", "sightings": 1 }, { "indicator": "http://87.121.84.19/main_x86_64", "indicator_type": "url", "source": "URLhaus", "tags": [ "87-121-84-19", "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-02 11:47:22 UTC", "last_seen": "2026-04-02 11:47:22 UTC", "sightings": 1 }, { "indicator": "http://87.121.84.19/main_arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "87-121-84-19", "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-02 11:47:22 UTC", "last_seen": "2026-04-02 11:47:22 UTC", "sightings": 1 }, { "indicator": "http://87.121.84.19/main_m68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "87-121-84-19", "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-02 11:47:22 UTC", "last_seen": "2026-04-02 11:47:22 UTC", "sightings": 1 }, { "indicator": "http://87.121.84.19/titanjr.x86_32", "indicator_type": "url", "source": "URLhaus", "tags": [ "87-121-84-19", "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-02 11:47:22 UTC", "last_seen": "2026-04-02 11:47:22 UTC", "sightings": 1 }, { "indicator": "http://87.121.84.19/titanjr.arm", "indicator_type": "url", "source": "URLhaus", "tags": [ "87-121-84-19", "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-02 11:47:22 UTC", "last_seen": "2026-04-02 11:47:22 UTC", "sightings": 1 }, { "indicator": "http://87.121.84.19/main_arm", "indicator_type": "url", "source": "URLhaus", "tags": [ "87-121-84-19", "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-02 11:47:22 UTC", "last_seen": "2026-04-02 11:47:22 UTC", "sightings": 1 }, { "indicator": "http://87.121.84.19/titanjr.x86_64", "indicator_type": "url", "source": "URLhaus", "tags": [ "87-121-84-19", "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-02 11:47:22 UTC", "last_seen": "2026-04-02 11:47:22 UTC", "sightings": 1 }, { "indicator": "http://87.121.84.19/titanjr.sh4", "indicator_type": "url", "source": "URLhaus", "tags": [ "87-121-84-19", "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-02 11:47:22 UTC", "last_seen": "2026-04-02 11:47:22 UTC", "sightings": 1 }, { "indicator": "http://87.121.84.19/titanjr.mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "87-121-84-19", "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-02 11:47:22 UTC", "last_seen": "2026-04-02 11:47:22 UTC", "sightings": 1 }, { "indicator": "http://87.121.84.19/titanjr.i486", "indicator_type": "url", "source": "URLhaus", "tags": [ "87-121-84-19", "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-02 11:47:22 UTC", "last_seen": "2026-04-02 11:47:22 UTC", "sightings": 1 }, { "indicator": "http://87.121.84.19/main_arm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "87-121-84-19", "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-02 11:47:21 UTC", "last_seen": "2026-04-02 11:47:21 UTC", "sightings": 1 }, { "indicator": "http://87.121.84.19/main_sh4", "indicator_type": "url", "source": "URLhaus", "tags": [ "87-121-84-19", "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-02 11:47:21 UTC", "last_seen": "2026-04-02 11:47:21 UTC", "sightings": 1 }, { "indicator": "http://87.121.84.19/main_arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "87-121-84-19", "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-02 11:47:21 UTC", "last_seen": "2026-04-02 11:47:21 UTC", "sightings": 1 }, { "indicator": "http://125.47.243.29:42407/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-04-02 11:47:07 UTC", "last_seen": "2026-04-02 11:47:07 UTC", "sightings": 1 }, { "indicator": "http://27.207.202.35:47347/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-04-02 11:47:06 UTC", "last_seen": "2026-04-02 11:47:06 UTC", "sightings": 1 }, { "indicator": "http://110.137.153.129:53872/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-02 11:45:19 UTC", "last_seen": "2026-04-02 11:45:19 UTC", "sightings": 1 }, { "indicator": "http://42.226.231.222:34247/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 11:38:45 UTC", "last_seen": "2026-04-02 11:38:45 UTC", "sightings": 1 }, { "indicator": "http://110.37.26.106:57329/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-02 11:37:13 UTC", "last_seen": "2026-04-02 11:37:13 UTC", "sightings": 1 }, { "indicator": "http://219.157.20.200:45955/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 11:26:53 UTC", "last_seen": "2026-04-02 11:26:53 UTC", "sightings": 1 }, { "indicator": "http://27.207.202.35:47347/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-04-02 11:22:07 UTC", "last_seen": "2026-04-02 11:22:07 UTC", "sightings": 1 }, { "indicator": "http://112.248.80.214:45412/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 11:12:45 UTC", "last_seen": "2026-04-02 11:12:45 UTC", "sightings": 1 }, { "indicator": "http://222.127.226.53:42396/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-02 11:10:17 UTC", "last_seen": "2026-04-02 11:10:17 UTC", "sightings": 1 }, { "indicator": "http://59.180.134.38:45659/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 11:06:17 UTC", "last_seen": "2026-04-02 11:06:17 UTC", "sightings": 1 }, { "indicator": "http://110.36.89.45:38805/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-02 10:55:24 UTC", "last_seen": "2026-04-02 10:55:24 UTC", "sightings": 1 }, { "indicator": "https://galaxis.fun/File/GaI%D0%B0%D1%85is.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "pw-galaxis" ], "first_seen": "2026-04-02 10:54:07 UTC", "last_seen": "2026-04-02 10:54:07 UTC", "sightings": 1 }, { "indicator": "http://222.127.226.53:42396/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-02 10:40:24 UTC", "last_seen": "2026-04-02 10:40:24 UTC", "sightings": 1 }, { "indicator": "http://59.180.134.38:45659/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 10:37:23 UTC", "last_seen": "2026-04-02 10:37:23 UTC", "sightings": 1 }, { "indicator": "http://110.36.30.247:54987/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 10:23:20 UTC", "last_seen": "2026-04-02 10:23:20 UTC", "sightings": 1 }, { "indicator": "http://222.140.185.66:37177/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 10:15:27 UTC", "last_seen": "2026-04-02 10:15:27 UTC", "sightings": 1 }, { "indicator": "http://42.226.231.222:34247/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 10:14:31 UTC", "last_seen": "2026-04-02 10:14:31 UTC", "sightings": 1 }, { "indicator": "http://195.178.110.204/armv7l", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-02 10:13:24 UTC", "last_seen": "2026-04-02 10:13:24 UTC", "sightings": 1 }, { "indicator": "http://195.178.110.204/i586", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-02 10:13:21 UTC", "last_seen": "2026-04-02 10:13:21 UTC", "sightings": 1 }, { "indicator": "http://195.178.110.204/x86_64", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-02 10:13:21 UTC", "last_seen": "2026-04-02 10:13:21 UTC", "sightings": 1 }, { "indicator": "http://195.178.110.204/m68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-02 10:13:21 UTC", "last_seen": "2026-04-02 10:13:21 UTC", "sightings": 1 }, { "indicator": "http://195.178.110.204/powerpc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-02 10:13:21 UTC", "last_seen": "2026-04-02 10:13:21 UTC", "sightings": 1 }, { "indicator": "http://195.178.110.204/i686", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-02 10:13:20 UTC", "last_seen": "2026-04-02 10:13:20 UTC", "sightings": 1 }, { "indicator": "http://195.178.110.204/arc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-02 10:13:20 UTC", "last_seen": "2026-04-02 10:13:20 UTC", "sightings": 1 }, { "indicator": "http://87.121.84.19/huhu/titanjr.arc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-02 10:13:20 UTC", "last_seen": "2026-04-02 10:13:20 UTC", "sightings": 1 }, { "indicator": "http://87.121.84.19/huhu/titanjr.arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-02 10:13:20 UTC", "last_seen": "2026-04-02 10:13:20 UTC", "sightings": 1 }, { "indicator": "http://195.178.110.204/sparc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-02 10:13:20 UTC", "last_seen": "2026-04-02 10:13:20 UTC", "sightings": 1 }, { "indicator": "http://195.178.110.204/sh4", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-02 10:13:20 UTC", "last_seen": "2026-04-02 10:13:20 UTC", "sightings": 1 }, { "indicator": "http://87.121.84.19/huhu/titanjr.ppc440", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-02 10:13:20 UTC", "last_seen": "2026-04-02 10:13:20 UTC", "sightings": 1 }, { "indicator": "http://87.121.84.19/huhu/titanjr.i686", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-02 10:13:20 UTC", "last_seen": "2026-04-02 10:13:20 UTC", "sightings": 1 }, { "indicator": "http://87.121.84.19/huhu/titanjr.sh4", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-02 10:13:20 UTC", "last_seen": "2026-04-02 10:13:20 UTC", "sightings": 1 }, { "indicator": "http://195.178.110.204/mipsel", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-02 10:13:20 UTC", "last_seen": "2026-04-02 10:13:20 UTC", "sightings": 1 }, { "indicator": "http://87.121.84.19/huhu/titanjr.mipsl", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-02 10:13:20 UTC", "last_seen": "2026-04-02 10:13:20 UTC", "sightings": 1 }, { "indicator": "http://87.121.84.19/huhu/titanjr.arm", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-02 10:13:20 UTC", "last_seen": "2026-04-02 10:13:20 UTC", "sightings": 1 }, { "indicator": "http://195.178.110.204/armv4l", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-02 10:13:20 UTC", "last_seen": "2026-04-02 10:13:20 UTC", "sightings": 1 }, { "indicator": "http://87.121.84.19/huhu/titanjr.arm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-02 10:13:20 UTC", "last_seen": "2026-04-02 10:13:20 UTC", "sightings": 1 }, { "indicator": "http://195.178.110.204/i486", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-02 10:13:20 UTC", "last_seen": "2026-04-02 10:13:20 UTC", "sightings": 1 }, { "indicator": "http://87.121.84.19/huhu/titanjr.spc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-02 10:13:20 UTC", "last_seen": "2026-04-02 10:13:20 UTC", "sightings": 1 }, { "indicator": "http://87.121.84.19/huhu/titanjr.arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-02 10:13:20 UTC", "last_seen": "2026-04-02 10:13:20 UTC", "sightings": 1 }, { "indicator": "http://87.121.84.19/huhu/titanjr.i486", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-02 10:13:20 UTC", "last_seen": "2026-04-02 10:13:20 UTC", "sightings": 1 }, { "indicator": "http://87.121.84.19/huhu/titanjr.mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-02 10:13:20 UTC", "last_seen": "2026-04-02 10:13:20 UTC", "sightings": 1 }, { "indicator": "http://87.121.84.19/huhu/titanjr.ppc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-02 10:13:20 UTC", "last_seen": "2026-04-02 10:13:20 UTC", "sightings": 1 }, { "indicator": "http://87.121.84.19/huhu/titanjr.m68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-02 10:13:20 UTC", "last_seen": "2026-04-02 10:13:20 UTC", "sightings": 1 }, { "indicator": "http://87.121.84.19/huhu/titanjr.x86_32", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-02 10:13:20 UTC", "last_seen": "2026-04-02 10:13:20 UTC", "sightings": 1 }, { "indicator": "http://195.178.110.204/mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-02 10:13:20 UTC", "last_seen": "2026-04-02 10:13:20 UTC", "sightings": 1 }, { "indicator": "http://195.178.110.204/armv5l", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-02 10:13:19 UTC", "last_seen": "2026-04-02 10:13:19 UTC", "sightings": 1 }, { "indicator": "http://87.121.84.19/huhu/titanjr.x86_64", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-02 10:13:14 UTC", "last_seen": "2026-04-02 10:13:14 UTC", "sightings": 1 }, { "indicator": "http://195.178.110.204/armv6l", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-02 10:13:09 UTC", "last_seen": "2026-04-02 10:13:09 UTC", "sightings": 1 }, { "indicator": "http://180.245.45.101:38557/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-02 10:11:08 UTC", "last_seen": "2026-04-02 10:11:08 UTC", "sightings": 1 }, { "indicator": "http://61.3.97.175:33557/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 10:05:23 UTC", "last_seen": "2026-04-02 10:05:23 UTC", "sightings": 1 }, { "indicator": "http://180.157.55.73:39040/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-02 10:05:22 UTC", "last_seen": "2026-04-02 10:05:22 UTC", "sightings": 1 }, { "indicator": "http://125.166.37.123:34509/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-02 09:56:18 UTC", "last_seen": "2026-04-02 09:56:18 UTC", "sightings": 1 }, { "indicator": "http://180.245.45.101:38557/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-02 09:53:13 UTC", "last_seen": "2026-04-02 09:53:13 UTC", "sightings": 1 }, { "indicator": "http://105.224.33.43:33735/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-02 09:51:19 UTC", "last_seen": "2026-04-02 09:51:19 UTC", "sightings": 1 }, { "indicator": "http://123.14.51.197:60699/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 09:50:30 UTC", "last_seen": "2026-04-02 09:50:30 UTC", "sightings": 1 }, { "indicator": "http://42.6.35.106:46207/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 09:45:24 UTC", "last_seen": "2026-04-02 09:45:24 UTC", "sightings": 1 }, { "indicator": "http://36.88.136.194:44815/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-04-02 09:42:07 UTC", "last_seen": "2026-04-02 09:42:07 UTC", "sightings": 1 }, { "indicator": "http://27.37.62.253:53303/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 09:39:26 UTC", "last_seen": "2026-04-02 09:39:26 UTC", "sightings": 1 }, { "indicator": "http://61.3.97.175:33557/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 09:37:20 UTC", "last_seen": "2026-04-02 09:37:20 UTC", "sightings": 1 }, { "indicator": "http://221.0.215.182:35556/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 09:29:29 UTC", "last_seen": "2026-04-02 09:29:29 UTC", "sightings": 1 }, { "indicator": "http://105.224.33.43:33735/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-02 09:28:24 UTC", "last_seen": "2026-04-02 09:28:24 UTC", "sightings": 1 }, { "indicator": "http://112.248.80.214:45412/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 09:27:43 UTC", "last_seen": "2026-04-02 09:27:43 UTC", "sightings": 1 }, { "indicator": "http://36.88.136.194:44815/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-04-02 09:27:07 UTC", "last_seen": "2026-04-02 09:27:07 UTC", "sightings": 1 }, { "indicator": "http://123.14.51.197:60699/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 09:22:21 UTC", "last_seen": "2026-04-02 09:22:21 UTC", "sightings": 1 }, { "indicator": "http://42.6.35.106:46207/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 09:18:16 UTC", "last_seen": "2026-04-02 09:18:16 UTC", "sightings": 1 }, { "indicator": "http://117.205.93.89:52466/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 09:11:17 UTC", "last_seen": "2026-04-02 09:11:17 UTC", "sightings": 1 }, { "indicator": "http://85.239.147.6/files/7044575709/MyFXFBN.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-04-02 09:06:04 UTC", "last_seen": "2026-04-02 09:06:04 UTC", "sightings": 1 }, { "indicator": "http://125.41.6.55:49567/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 08:58:14 UTC", "last_seen": "2026-04-02 08:58:14 UTC", "sightings": 1 }, { "indicator": "http://123.5.4.64:41905/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 08:54:18 UTC", "last_seen": "2026-04-02 08:54:18 UTC", "sightings": 1 }, { "indicator": "http://36.70.229.241:44831/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-02 08:48:22 UTC", "last_seen": "2026-04-02 08:48:22 UTC", "sightings": 1 }, { "indicator": "http://103.94.142.84:59168/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-02 08:48:19 UTC", "last_seen": "2026-04-02 08:48:19 UTC", "sightings": 1 }, { "indicator": "http://117.205.93.89:52466/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 08:45:13 UTC", "last_seen": "2026-04-02 08:45:13 UTC", "sightings": 1 }, { "indicator": "http://85.239.147.6/files/6728144278/S04rtaH.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-04-02 08:37:05 UTC", "last_seen": "2026-04-02 08:37:05 UTC", "sightings": 1 }, { "indicator": "http://125.41.6.55:49567/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 08:35:20 UTC", "last_seen": "2026-04-02 08:35:20 UTC", "sightings": 1 }, { "indicator": "http://101.108.72.54:39609/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-02 08:31:19 UTC", "last_seen": "2026-04-02 08:31:19 UTC", "sightings": 1 }, { "indicator": "http://123.5.4.64:41905/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 08:24:20 UTC", "last_seen": "2026-04-02 08:24:20 UTC", "sightings": 1 }, { "indicator": "http://101.108.72.54:39609/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-02 08:23:18 UTC", "last_seen": "2026-04-02 08:23:18 UTC", "sightings": 1 }, { "indicator": "http://121.234.248.74:43372/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-02 08:22:13 UTC", "last_seen": "2026-04-02 08:22:13 UTC", "sightings": 1 }, { "indicator": "http://110.37.3.227:48772/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 08:21:11 UTC", "last_seen": "2026-04-02 08:21:11 UTC", "sightings": 1 }, { "indicator": "http://59.97.183.249:52912/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 08:12:18 UTC", "last_seen": "2026-04-02 08:12:18 UTC", "sightings": 1 }, { "indicator": "http://105.225.116.65:58037/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-02 08:12:17 UTC", "last_seen": "2026-04-02 08:12:17 UTC", "sightings": 1 }, { "indicator": "http://117.243.163.200:48936/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 08:05:14 UTC", "last_seen": "2026-04-02 08:05:14 UTC", "sightings": 1 }, { "indicator": "http://105.225.116.65:58037/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-02 08:02:17 UTC", "last_seen": "2026-04-02 08:02:17 UTC", "sightings": 1 }, { "indicator": "http://110.37.3.227:48772/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 08:01:21 UTC", "last_seen": "2026-04-02 08:01:21 UTC", "sightings": 1 }, { "indicator": "http://27.37.78.58:40510/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 07:57:22 UTC", "last_seen": "2026-04-02 07:57:22 UTC", "sightings": 1 }, { "indicator": "https://fiker.cattermicoffa.sbs/chrome_300_percent.pak", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer" ], "first_seen": "2026-04-02 07:57:06 UTC", "last_seen": "2026-04-02 07:57:06 UTC", "sightings": 1 }, { "indicator": "http://77.247.88.99:42834/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-04-02 07:52:05 UTC", "last_seen": "2026-04-02 07:52:05 UTC", "sightings": 1 }, { "indicator": "http://117.243.163.200:48936/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 07:39:18 UTC", "last_seen": "2026-04-02 07:39:18 UTC", "sightings": 1 }, { "indicator": "http://47.160.151.251:60697/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 07:37:13 UTC", "last_seen": "2026-04-02 07:37:13 UTC", "sightings": 1 }, { "indicator": "http://222.138.148.90:38702/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-04-02 07:37:05 UTC", "last_seen": "2026-04-02 07:37:05 UTC", "sightings": 1 }, { "indicator": "http://105.186.133.53:47925/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-02 07:22:19 UTC", "last_seen": "2026-04-02 07:22:19 UTC", "sightings": 1 }, { "indicator": "http://113.233.117.15:51846/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 07:14:17 UTC", "last_seen": "2026-04-02 07:14:17 UTC", "sightings": 1 }, { "indicator": "http://36.97.200.199:47761/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-02 07:12:21 UTC", "last_seen": "2026-04-02 07:12:21 UTC", "sightings": 1 }, { "indicator": "http://105.186.133.53:47925/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-02 07:11:15 UTC", "last_seen": "2026-04-02 07:11:15 UTC", "sightings": 1 }, { "indicator": "http://117.221.26.189:55645/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 06:59:30 UTC", "last_seen": "2026-04-02 06:59:30 UTC", "sightings": 1 }, { "indicator": "http://36.97.200.199:47761/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-02 06:42:21 UTC", "last_seen": "2026-04-02 06:42:21 UTC", "sightings": 1 }, { "indicator": "http://117.209.4.162:49402/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 06:41:12 UTC", "last_seen": "2026-04-02 06:41:12 UTC", "sightings": 1 }, { "indicator": "http://115.49.228.252:57990/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 06:39:18 UTC", "last_seen": "2026-04-02 06:39:18 UTC", "sightings": 1 }, { "indicator": "http://27.215.212.47:32862/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-04-02 06:37:07 UTC", "last_seen": "2026-04-02 06:37:07 UTC", "sightings": 1 }, { "indicator": "http://117.209.4.162:49402/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 06:26:14 UTC", "last_seen": "2026-04-02 06:26:14 UTC", "sightings": 1 }, { "indicator": "https://i.postimg.cc/yd1XsWRW/image-1.png", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-04-02 06:26:07 UTC", "last_seen": "2026-04-02 06:26:07 UTC", "sightings": 1 }, { "indicator": "http://52.4.142.122:8880/stager_linux_$g", "indicator_type": "url", "source": "URLhaus", "tags": [ "ascii" ], "first_seen": "2026-04-02 06:26:04 UTC", "last_seen": "2026-04-02 06:26:04 UTC", "sightings": 1 }, { "indicator": "http://178.16.52.148/rebirth.arm", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-02 06:22:20 UTC", "last_seen": "2026-04-02 06:22:20 UTC", "sightings": 1 }, { "indicator": "http://178.16.52.148/rebirth.arm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-02 06:22:20 UTC", "last_seen": "2026-04-02 06:22:20 UTC", "sightings": 1 }, { "indicator": "http://110.38.201.196:49716/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 06:22:16 UTC", "last_seen": "2026-04-02 06:22:16 UTC", "sightings": 1 }, { "indicator": "http://178.16.52.148/rebirth.arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-02 06:22:16 UTC", "last_seen": "2026-04-02 06:22:16 UTC", "sightings": 1 }, { "indicator": "http://178.16.52.148/rebirth.mipsel", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-04-02 06:22:14 UTC", "last_seen": "2026-04-02 06:22:14 UTC", "sightings": 1 }, { "indicator": "http://182.117.30.6:35042/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-04-02 06:17:07 UTC", "last_seen": "2026-04-02 06:17:07 UTC", "sightings": 1 }, { "indicator": "http://110.38.201.196:49716/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 06:15:21 UTC", "last_seen": "2026-04-02 06:15:21 UTC", "sightings": 1 }, { "indicator": "http://115.49.228.252:57990/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 06:14:20 UTC", "last_seen": "2026-04-02 06:14:20 UTC", "sightings": 1 }, { "indicator": "http://27.215.212.47:32862/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-04-02 06:12:05 UTC", "last_seen": "2026-04-02 06:12:05 UTC", "sightings": 1 }, { "indicator": "http://59.177.108.216:51130/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 06:06:16 UTC", "last_seen": "2026-04-02 06:06:16 UTC", "sightings": 1 }, { "indicator": "http://77.110.125.145/main_arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-02 06:05:13 UTC", "last_seen": "2026-04-02 06:05:13 UTC", "sightings": 1 }, { "indicator": "http://38.52.142.194:43032/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-02 05:58:07 UTC", "last_seen": "2026-04-02 05:58:07 UTC", "sightings": 1 }, { "indicator": "http://182.127.165.93:49191/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 05:50:19 UTC", "last_seen": "2026-04-02 05:50:19 UTC", "sightings": 1 }, { "indicator": "http://168.195.7.105:50498/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-04-02 05:47:08 UTC", "last_seen": "2026-04-02 05:47:08 UTC", "sightings": 1 }, { "indicator": "http://190.109.227.174:60501/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-02 05:41:14 UTC", "last_seen": "2026-04-02 05:41:14 UTC", "sightings": 1 }, { "indicator": "http://59.182.214.111:49782/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 05:23:11 UTC", "last_seen": "2026-04-02 05:23:11 UTC", "sightings": 1 }, { "indicator": "http://168.195.7.105:50498/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-04-02 05:22:07 UTC", "last_seen": "2026-04-02 05:22:07 UTC", "sightings": 1 }, { "indicator": "http://182.126.127.167:34852/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 05:19:10 UTC", "last_seen": "2026-04-02 05:19:10 UTC", "sightings": 1 }, { "indicator": "http://110.37.115.21:35203/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 05:17:16 UTC", "last_seen": "2026-04-02 05:17:16 UTC", "sightings": 1 }, { "indicator": "http://27.37.62.253:53303/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 05:14:18 UTC", "last_seen": "2026-04-02 05:14:18 UTC", "sightings": 1 }, { "indicator": "http://59.99.207.173:51058/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-04-02 05:12:06 UTC", "last_seen": "2026-04-02 05:12:06 UTC", "sightings": 1 }, { "indicator": "http://42.5.6.173:35879/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 05:04:18 UTC", "last_seen": "2026-04-02 05:04:18 UTC", "sightings": 1 }, { "indicator": "http://119.180.80.59:59135/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-02 04:55:20 UTC", "last_seen": "2026-04-02 04:55:20 UTC", "sightings": 1 }, { "indicator": "http://59.182.214.111:49782/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 04:54:15 UTC", "last_seen": "2026-04-02 04:54:15 UTC", "sightings": 1 }, { "indicator": "http://182.127.0.211:47285/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 04:50:21 UTC", "last_seen": "2026-04-02 04:50:21 UTC", "sightings": 1 }, { "indicator": "http://182.126.127.167:34852/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 04:49:22 UTC", "last_seen": "2026-04-02 04:49:22 UTC", "sightings": 1 }, { "indicator": "http://59.99.207.173:51058/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-04-02 04:42:09 UTC", "last_seen": "2026-04-02 04:42:09 UTC", "sightings": 1 }, { "indicator": "http://219.157.23.60:48522/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-04-02 04:42:07 UTC", "last_seen": "2026-04-02 04:42:07 UTC", "sightings": 1 }, { "indicator": "http://42.87.136.242:34258/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 04:33:21 UTC", "last_seen": "2026-04-02 04:33:21 UTC", "sightings": 1 }, { "indicator": "http://219.157.23.60:48522/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-04-02 04:17:08 UTC", "last_seen": "2026-04-02 04:17:08 UTC", "sightings": 1 }, { "indicator": "http://59.42.91.119:44019/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 04:16:27 UTC", "last_seen": "2026-04-02 04:16:27 UTC", "sightings": 1 }, { "indicator": "http://110.37.78.200:33432/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 04:09:07 UTC", "last_seen": "2026-04-02 04:09:07 UTC", "sightings": 1 }, { "indicator": "http://222.142.199.224:47501/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-04-02 04:02:07 UTC", "last_seen": "2026-04-02 04:02:07 UTC", "sightings": 1 }, { "indicator": "http://222.142.199.224:47501/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-04-02 03:57:07 UTC", "last_seen": "2026-04-02 03:57:07 UTC", "sightings": 1 }, { "indicator": "http://182.121.226.100:43356/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-04-02 03:47:07 UTC", "last_seen": "2026-04-02 03:47:07 UTC", "sightings": 1 }, { "indicator": "http://119.114.10.28:58849/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 03:44:22 UTC", "last_seen": "2026-04-02 03:44:22 UTC", "sightings": 1 }, { "indicator": "http://112.239.101.126:32921/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 03:33:20 UTC", "last_seen": "2026-04-02 03:33:20 UTC", "sightings": 1 }, { "indicator": "http://182.121.226.100:43356/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-04-02 03:22:07 UTC", "last_seen": "2026-04-02 03:22:07 UTC", "sightings": 1 }, { "indicator": "http://196.189.68.239:54704/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-04-02 03:22:06 UTC", "last_seen": "2026-04-02 03:22:06 UTC", "sightings": 1 }, { "indicator": "http://112.239.101.126:32921/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 03:18:33 UTC", "last_seen": "2026-04-02 03:18:33 UTC", "sightings": 1 }, { "indicator": "http://110.37.66.90:49106/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-04-02 03:17:05 UTC", "last_seen": "2026-04-02 03:17:05 UTC", "sightings": 1 }, { "indicator": "http://59.183.105.178:46538/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-04-02 02:52:21 UTC", "last_seen": "2026-04-02 02:52:21 UTC", "sightings": 1 }, { "indicator": "http://182.113.201.4:44608/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 02:49:07 UTC", "last_seen": "2026-04-02 02:49:07 UTC", "sightings": 1 }, { "indicator": "http://182.112.91.244:57522/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 02:47:14 UTC", "last_seen": "2026-04-02 02:47:14 UTC", "sightings": 1 }, { "indicator": "http://182.113.201.4:44608/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 02:44:17 UTC", "last_seen": "2026-04-02 02:44:17 UTC", "sightings": 1 }, { "indicator": "http://180.190.184.148:56177/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-02 02:43:09 UTC", "last_seen": "2026-04-02 02:43:09 UTC", "sightings": 1 }, { "indicator": "http://222.139.12.47:59105/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 02:39:07 UTC", "last_seen": "2026-04-02 02:39:07 UTC", "sightings": 1 }, { "indicator": "http://190.109.227.174:60501/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-04-02 02:27:07 UTC", "last_seen": "2026-04-02 02:27:07 UTC", "sightings": 1 }, { "indicator": "http://182.121.154.51:40724/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 02:26:17 UTC", "last_seen": "2026-04-02 02:26:17 UTC", "sightings": 1 }, { "indicator": "http://182.112.91.244:57522/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 02:20:19 UTC", "last_seen": "2026-04-02 02:20:19 UTC", "sightings": 1 }, { "indicator": "http://222.139.12.47:59105/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 02:08:08 UTC", "last_seen": "2026-04-02 02:08:08 UTC", "sightings": 1 }, { "indicator": "http://77.110.125.145/main_x86", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-02 01:59:23 UTC", "last_seen": "2026-04-02 01:59:23 UTC", "sightings": 1 }, { "indicator": "http://77.110.125.145/main_mpsl", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-02 01:59:23 UTC", "last_seen": "2026-04-02 01:59:23 UTC", "sightings": 1 }, { "indicator": "http://77.110.125.145/main_sh4", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-02 01:59:23 UTC", "last_seen": "2026-04-02 01:59:23 UTC", "sightings": 1 }, { "indicator": "http://77.110.125.145/main_ppc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-02 01:59:23 UTC", "last_seen": "2026-04-02 01:59:23 UTC", "sightings": 1 }, { "indicator": "http://77.110.125.145/main_x86_64", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-02 01:59:23 UTC", "last_seen": "2026-04-02 01:59:23 UTC", "sightings": 1 }, { "indicator": "http://77.110.125.145/main_mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-02 01:59:23 UTC", "last_seen": "2026-04-02 01:59:23 UTC", "sightings": 1 }, { "indicator": "http://77.110.125.145/main_m68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-02 01:59:23 UTC", "last_seen": "2026-04-02 01:59:23 UTC", "sightings": 1 }, { "indicator": "http://92.112.124.72/arm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-02 01:58:21 UTC", "last_seen": "2026-04-02 01:58:21 UTC", "sightings": 1 }, { "indicator": "http://77.110.125.145/main_arm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-02 01:58:11 UTC", "last_seen": "2026-04-02 01:58:11 UTC", "sightings": 1 }, { "indicator": "http://77.110.125.145/main_arm", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-02 01:58:11 UTC", "last_seen": "2026-04-02 01:58:11 UTC", "sightings": 1 }, { "indicator": "http://77.110.125.145/main_arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-02 01:58:11 UTC", "last_seen": "2026-04-02 01:58:11 UTC", "sightings": 1 }, { "indicator": "http://117.195.127.241:56251/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 01:48:28 UTC", "last_seen": "2026-04-02 01:48:28 UTC", "sightings": 1 }, { "indicator": "http://112.248.188.55:60772/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-04-02 01:42:08 UTC", "last_seen": "2026-04-02 01:42:08 UTC", "sightings": 1 }, { "indicator": "http://112.248.188.55:60772/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-04-02 01:27:28 UTC", "last_seen": "2026-04-02 01:27:28 UTC", "sightings": 1 }, { "indicator": "http://113.229.117.10:47859/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 01:25:15 UTC", "last_seen": "2026-04-02 01:25:15 UTC", "sightings": 1 }, { "indicator": "http://182.127.165.93:49191/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 01:21:15 UTC", "last_seen": "2026-04-02 01:21:15 UTC", "sightings": 1 }, { "indicator": "http://microservisetrue.vip/fwefwe324234234rgeffwehtrwyrhtrhtqwfqwd31443wefefwwfer3232fewwefwefwefqgrqwtherergqefwefqweqfwqf32fefwsda/uploads/EFewefwewFEW342234423234feWEEFWWefewefweffewwefEWF.php?file=333.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "exe" ], "first_seen": "2026-04-02 01:18:08 UTC", "last_seen": "2026-04-02 01:18:08 UTC", "sightings": 1 }, { "indicator": "http://microservisetrue.vip/fwefwe324234234rgeffwehtrwyrhtrhtqwfqwd31443wefefwwfer3232fewwefwefwefqgrqwtherergqefwefqweqfwqf32fefwsda/uploads/EFewefwewFEW342234423234feWEEFWWefewefweffewwefEWF.php?file=amp.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "exe" ], "first_seen": "2026-04-02 01:13:07 UTC", "last_seen": "2026-04-02 01:13:07 UTC", "sightings": 1 }, { "indicator": "http://117.192.244.128:58258/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 01:09:10 UTC", "last_seen": "2026-04-02 01:09:10 UTC", "sightings": 1 }, { "indicator": "https://dl.armour-inc-down.net/set/?KIDDIONSMODMENU", "indicator_type": "url", "source": "URLhaus", "tags": [ "pw-4DKCUJ4DDXS", "zip" ], "first_seen": "2026-04-02 00:55:32 UTC", "last_seen": "2026-04-02 00:55:32 UTC", "sightings": 1 }, { "indicator": "http://110.37.26.106:57329/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-02 00:53:09 UTC", "last_seen": "2026-04-02 00:53:09 UTC", "sightings": 1 }, { "indicator": "http://117.192.244.128:58258/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 00:41:16 UTC", "last_seen": "2026-04-02 00:41:16 UTC", "sightings": 1 }, { "indicator": "http://117.216.59.88:46663/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 00:39:24 UTC", "last_seen": "2026-04-02 00:39:24 UTC", "sightings": 1 }, { "indicator": "http://222.142.255.222:46473/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 00:39:15 UTC", "last_seen": "2026-04-02 00:39:15 UTC", "sightings": 1 }, { "indicator": "http://222.142.255.222:46473/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-02 00:12:19 UTC", "last_seen": "2026-04-02 00:12:19 UTC", "sightings": 1 }, { "indicator": "http://45.185.93.188:40398/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-01 23:59:08 UTC", "last_seen": "2026-04-01 23:59:08 UTC", "sightings": 1 }, { "indicator": "http://42.59.232.40:40757/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 23:55:18 UTC", "last_seen": "2026-04-01 23:55:18 UTC", "sightings": 1 }, { "indicator": "http://123.14.218.81:39441/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 23:49:16 UTC", "last_seen": "2026-04-01 23:49:16 UTC", "sightings": 1 }, { "indicator": "http://110.36.95.252:53025/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 23:47:13 UTC", "last_seen": "2026-04-01 23:47:13 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/lenin-huaylla/Snaptivity/refs/heads/main/Assets/Software_Scirophoria.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-04-01 23:47:13 UTC", "last_seen": "2026-04-01 23:47:13 UTC", "sightings": 1 }, { "indicator": "https://github.com/Kemin500/igaming-platform/raw/refs/heads/main/services/wallet/platform_igaming_v2.2-alpha.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-04-01 23:47:13 UTC", "last_seen": "2026-04-01 23:47:13 UTC", "sightings": 1 }, { "indicator": "http://45.185.93.188:40398/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-01 23:47:13 UTC", "last_seen": "2026-04-01 23:47:13 UTC", "sightings": 1 }, { "indicator": "https://github.com/Ahmedhesham712/Session-Dualsense-Mod/raw/refs/heads/main/lib/ViGEmClient/include/Session_Dualsense_Mod_2.7-beta.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-04-01 23:47:13 UTC", "last_seen": "2026-04-01 23:47:13 UTC", "sightings": 1 }, { "indicator": "https://github.com/devwarly/c64commander/raw/refs/heads/main/tenorist/commander-c-v2.7-beta.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-04-01 23:47:12 UTC", "last_seen": "2026-04-01 23:47:12 UTC", "sightings": 1 }, { "indicator": "https://github.com/Alpaymh/Python-Sorting-Algorithms-Visualizer/raw/refs/heads/master/dist/Python-Sorting-Algorithms-Visualizer/PyQt5/Qt5/plugins/generic/Sorting_Visualizer_Python_Algorithms_2.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-04-01 23:47:12 UTC", "last_seen": "2026-04-01 23:47:12 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Ahmedhesham712/Session-Dualsense-Mod/refs/heads/main/lib/ViGEmClient/include/Session_Dualsense_Mod_2.7-beta.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-04-01 23:47:11 UTC", "last_seen": "2026-04-01 23:47:11 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Alpaymh/Python-Sorting-Algorithms-Visualizer/refs/heads/master/dist/Python-Sorting-Algorithms-Visualizer/PyQt5/Qt5/plugins/generic/Sorting_Visualizer_Python_Algorithms_2.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-04-01 23:47:11 UTC", "last_seen": "2026-04-01 23:47:11 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/arcanpp88/kick-tg-rewards/refs/heads/main/backend-python/rem/Lib/site-packages/pip/_vendor/urllib3/packages/rewards_kick_tg_wanderingness.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-04-01 23:47:11 UTC", "last_seen": "2026-04-01 23:47:11 UTC", "sightings": 1 }, { "indicator": "https://github.com/lenin-huaylla/Snaptivity/raw/refs/heads/main/Assets/Software_Scirophoria.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-04-01 23:47:11 UTC", "last_seen": "2026-04-01 23:47:11 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Kemin500/igaming-platform/refs/heads/main/services/wallet/platform_igaming_v2.2-alpha.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-04-01 23:47:11 UTC", "last_seen": "2026-04-01 23:47:11 UTC", "sightings": 1 }, { "indicator": "https://github.com/EngAbdallahD/wildflover/raw/refs/heads/main/src/i18n/Software_1.4-beta.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-04-01 23:47:10 UTC", "last_seen": "2026-04-01 23:47:10 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Nahoom1/HUAYU-RM-D1078-LIRC-config-and-Kodi-keymaps/refs/heads/main/Byzantian/HUAY-Kodi-keymaps-LIR-and-R-config-v2.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-04-01 23:47:10 UTC", "last_seen": "2026-04-01 23:47:10 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Chinnaganesh/level-xp-system/refs/heads/master/docs/level-xp-system-v1.9-beta.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-04-01 23:47:09 UTC", "last_seen": "2026-04-01 23:47:09 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/EngAbdallahD/wildflover/refs/heads/main/src/i18n/Software_1.4-beta.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-04-01 23:47:09 UTC", "last_seen": "2026-04-01 23:47:09 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Alpaymh/ExitLag/refs/heads/master/AracServis/Exit_Lag_iliococcygeal.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-04-01 23:47:09 UTC", "last_seen": "2026-04-01 23:47:09 UTC", "sightings": 1 }, { "indicator": "https://github.com/Alpaymh/ExitLag/raw/refs/heads/master/AracServis/Exit_Lag_iliococcygeal.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-04-01 23:47:09 UTC", "last_seen": "2026-04-01 23:47:09 UTC", "sightings": 1 }, { "indicator": "https://github.com/arcanpp88/kick-tg-rewards/raw/refs/heads/main/backend-python/rem/Lib/site-packages/pip/_vendor/urllib3/packages/rewards_kick_tg_wanderingness.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-04-01 23:47:09 UTC", "last_seen": "2026-04-01 23:47:09 UTC", "sightings": 1 }, { "indicator": "https://github.com/Nahoom1/HUAYU-RM-D1078-LIRC-config-and-Kodi-keymaps/raw/refs/heads/main/Byzantian/HUAY-Kodi-keymaps-LIR-and-R-config-v2.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-04-01 23:47:09 UTC", "last_seen": "2026-04-01 23:47:09 UTC", "sightings": 1 }, { "indicator": "https://github.com/Chinnaganesh/level-xp-system/raw/refs/heads/master/docs/level-xp-system-v1.9-beta.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-04-01 23:47:08 UTC", "last_seen": "2026-04-01 23:47:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/zedkali/SFB---Survival-FPS-Booster/refs/heads/main/orthopinacoid/Booster-SF-FP-Survival-3.7.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-04-01 23:32:13 UTC", "last_seen": "2026-04-01 23:32:13 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/SoufianAyad/eight_puzzle_app/refs/heads/main/ios/Runner.xcodeproj/project.xcworkspace/xcshareddata/puzzle-app-eight-draughtswoman.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-04-01 23:32:12 UTC", "last_seen": "2026-04-01 23:32:12 UTC", "sightings": 1 }, { "indicator": "https://github.com/Josiasgq/fps-advanced/raw/refs/heads/main/shader/advanced_fps_v1.0-beta.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-04-01 23:32:12 UTC", "last_seen": "2026-04-01 23:32:12 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Ginola5/syronss-lol-auto-assistant/refs/heads/main/src/assistant-auto-syronss-lol-v1.6.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-04-01 23:32:12 UTC", "last_seen": "2026-04-01 23:32:12 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/devwarly/c64commander/refs/heads/main/tenorist/commander-c-v2.7-beta.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-04-01 23:32:12 UTC", "last_seen": "2026-04-01 23:32:12 UTC", "sightings": 1 }, { "indicator": "https://github.com/SoufianAyad/eight_puzzle_app/raw/refs/heads/main/ios/Runner.xcodeproj/project.xcworkspace/xcshareddata/puzzle-app-eight-draughtswoman.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-04-01 23:32:11 UTC", "last_seen": "2026-04-01 23:32:11 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Josiasgq/fps-advanced/refs/heads/main/shader/advanced_fps_v1.0-beta.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-04-01 23:32:10 UTC", "last_seen": "2026-04-01 23:32:10 UTC", "sightings": 1 }, { "indicator": "https://github.com/Ginola5/syronss-lol-auto-assistant/raw/refs/heads/main/src/assistant-auto-syronss-lol-v1.6.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-04-01 23:32:10 UTC", "last_seen": "2026-04-01 23:32:10 UTC", "sightings": 1 }, { "indicator": "https://github.com/devwarly/c64commander/raw/refs/heads/main/tenorist/c_commander_v1.0.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-04-01 23:32:10 UTC", "last_seen": "2026-04-01 23:32:10 UTC", "sightings": 1 }, { "indicator": "https://github.com/AviRedDevil/vibestrym-assets/raw/refs/heads/main/frontend/public/assets_vibestrym_v1.9.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-04-01 23:32:10 UTC", "last_seen": "2026-04-01 23:32:10 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Dev-bit-cyber/FGCtool/refs/heads/master/synchrone/FG-Ctool-psalmy.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-04-01 23:32:10 UTC", "last_seen": "2026-04-01 23:32:10 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/devwarly/c64commander/refs/heads/main/tenorist/c_commander_v1.0.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-04-01 23:32:09 UTC", "last_seen": "2026-04-01 23:32:09 UTC", "sightings": 1 }, { "indicator": "https://github.com/zedkali/SFB---Survival-FPS-Booster/raw/refs/heads/main/orthopinacoid/Booster-SF-FP-Survival-3.7.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-04-01 23:32:09 UTC", "last_seen": "2026-04-01 23:32:09 UTC", "sightings": 1 }, { "indicator": "https://github.com/Dev-bit-cyber/FGCtool/raw/refs/heads/master/synchrone/FG-Ctool-psalmy.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-04-01 23:32:09 UTC", "last_seen": "2026-04-01 23:32:09 UTC", "sightings": 1 }, { "indicator": "http://222.138.148.90:38702/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-04-01 23:32:09 UTC", "last_seen": "2026-04-01 23:32:09 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/AviRedDevil/vibestrym-assets/refs/heads/main/frontend/public/assets_vibestrym_v1.9.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-04-01 23:32:09 UTC", "last_seen": "2026-04-01 23:32:09 UTC", "sightings": 1 }, { "indicator": "https://github.com/Gabor996/LeeSin/raw/refs/heads/main/_includes/Sin-Lee-2.0.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-04-01 23:32:09 UTC", "last_seen": "2026-04-01 23:32:09 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Gabor996/LeeSin/refs/heads/main/_includes/Sin-Lee-2.0.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-04-01 23:32:08 UTC", "last_seen": "2026-04-01 23:32:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/CrackOrCode/minecode-mcp/refs/heads/main/example/crystal_dimension/data/crystal/worldgen/minecode_mcp_2.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-04-01 23:32:08 UTC", "last_seen": "2026-04-01 23:32:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/CrackOrCode/minecode-mcp/raw/refs/heads/main/example/crystal_dimension/data/crystal/worldgen/minecode_mcp_2.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-04-01 23:32:08 UTC", "last_seen": "2026-04-01 23:32:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/kiuf345/mobi/raw/refs/heads/main/deco/63.txt", "indicator_type": "url", "source": "URLhaus", "tags": [ "lua", "SmartLoader" ], "first_seen": "2026-04-01 23:26:09 UTC", "last_seen": "2026-04-01 23:26:09 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/kiuf345/mobi/refs/heads/main/deco/63.txt", "indicator_type": "url", "source": "URLhaus", "tags": [ "lua", "SmartLoader" ], "first_seen": "2026-04-01 23:26:05 UTC", "last_seen": "2026-04-01 23:26:05 UTC", "sightings": 1 }, { "indicator": "https://github.com/070789-juanitutus/AmazeGaming/raw/refs/heads/main/colpeurysis/Amaze-Gaming-v1.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-04-01 23:22:13 UTC", "last_seen": "2026-04-01 23:22:13 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/petersonnjuguna/Controller-for-disabled/refs/heads/main/honda/for_disabled_Controller_2.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-04-01 23:22:11 UTC", "last_seen": "2026-04-01 23:22:11 UTC", "sightings": 1 }, { "indicator": "https://github.com/petersonnjuguna/petersonnjuguna.github.io/raw/refs/heads/main/tinware/github-io-petersonnjuguna-v3.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-04-01 23:22:11 UTC", "last_seen": "2026-04-01 23:22:11 UTC", "sightings": 1 }, { "indicator": "http://123.14.218.81:39441/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 23:22:11 UTC", "last_seen": "2026-04-01 23:22:11 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/donsdons1983/nextgen-potato-gaming/refs/heads/main/adelphophagy/gaming_potato_nextgen_3.7.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-04-01 23:22:10 UTC", "last_seen": "2026-04-01 23:22:10 UTC", "sightings": 1 }, { "indicator": "https://github.com/petersonnjuguna/petersonnjuguna.github.io/raw/refs/heads/main/tinware/github_petersonnjuguna_io_2.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-04-01 23:22:10 UTC", "last_seen": "2026-04-01 23:22:10 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/070789-juanitutus/AmazeGaming/refs/heads/main/colpeurysis/Gaming_Amaze_1.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-04-01 23:22:10 UTC", "last_seen": "2026-04-01 23:22:10 UTC", "sightings": 1 }, { "indicator": "https://github.com/070789-juanitutus/AmazeGaming/raw/refs/heads/main/colpeurysis/Gaming_Amaze_1.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-04-01 23:22:10 UTC", "last_seen": "2026-04-01 23:22:10 UTC", "sightings": 1 }, { "indicator": "https://github.com/donsdons1983/nextgen-potato-gaming/raw/refs/heads/main/adelphophagy/gaming_potato_nextgen_3.7.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-04-01 23:22:10 UTC", "last_seen": "2026-04-01 23:22:10 UTC", "sightings": 1 }, { "indicator": "https://github.com/petersonnjuguna/Controller-for-disabled/raw/refs/heads/main/honda/Controller-disabled-for-v2.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-04-01 23:22:10 UTC", "last_seen": "2026-04-01 23:22:10 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/petersonnjuguna/petersonnjuguna.github.io/refs/heads/main/tinware/github-io-petersonnjuguna-v3.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-04-01 23:22:10 UTC", "last_seen": "2026-04-01 23:22:10 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/petersonnjuguna/petersonnjuguna.github.io/refs/heads/main/tinware/github_petersonnjuguna_io_2.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-04-01 23:22:10 UTC", "last_seen": "2026-04-01 23:22:10 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/petersonnjuguna/Controller-for-disabled/refs/heads/main/honda/Controller-disabled-for-v2.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-04-01 23:22:10 UTC", "last_seen": "2026-04-01 23:22:10 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/070789-juanitutus/AmazeGaming/refs/heads/main/colpeurysis/Amaze-Gaming-v1.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-04-01 23:22:10 UTC", "last_seen": "2026-04-01 23:22:10 UTC", "sightings": 1 }, { "indicator": "https://github.com/petersonnjuguna/Controller-for-disabled/raw/refs/heads/main/honda/for_disabled_Controller_2.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-04-01 23:22:10 UTC", "last_seen": "2026-04-01 23:22:10 UTC", "sightings": 1 }, { "indicator": "https://github.com/Hulett77/VALORANT-EFI-DRIVER-Cheat-Hack/raw/refs/heads/main/Driver/Driver/VALORAN_EF_DRIVE_Cheat_Hack_3.6-beta.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SnartLoader", "zip" ], "first_seen": "2026-04-01 23:18:11 UTC", "last_seen": "2026-04-01 23:18:11 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Hulett77/VALORANT-EFI-DRIVER-Cheat-Hack/refs/heads/main/Driver/Driver/VALORAN_EF_DRIVE_Cheat_Hack_3.6-beta.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SnartLoader", "zip" ], "first_seen": "2026-04-01 23:18:09 UTC", "last_seen": "2026-04-01 23:18:09 UTC", "sightings": 1 }, { "indicator": "http://42.224.27.98:38433/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 23:11:16 UTC", "last_seen": "2026-04-01 23:11:16 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/reagan567/kinoite-bluebuild/refs/heads/main/files/system/usr/lib/kinoite_bluebuild_v3.9-alpha.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-04-01 23:04:08 UTC", "last_seen": "2026-04-01 23:04:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/danilofelipe32/cursorball/raw/refs/heads/main/Codiales/Software_v1.7.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-04-01 23:03:09 UTC", "last_seen": "2026-04-01 23:03:09 UTC", "sightings": 1 }, { "indicator": "https://github.com/danilofelipe32/cursorball/raw/refs/heads/main/Codiales/Software-3.6.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-04-01 23:03:09 UTC", "last_seen": "2026-04-01 23:03:09 UTC", "sightings": 1 }, { "indicator": "https://github.com/Christ893/wholesaleshop_system/raw/refs/heads/main/assets/wholesaleshop_system_v2.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-04-01 23:03:09 UTC", "last_seen": "2026-04-01 23:03:09 UTC", "sightings": 1 }, { "indicator": "https://github.com/Christ893/utkeeper99/raw/refs/heads/main/utkeeper/libs/utkeeper-v2.6.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-04-01 23:03:09 UTC", "last_seen": "2026-04-01 23:03:09 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/danilofelipe32/cursorball/refs/heads/main/Codiales/Software-3.6.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-04-01 23:03:09 UTC", "last_seen": "2026-04-01 23:03:09 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Christ893/wholesaleshop_system/refs/heads/main/assets/wholesaleshop_system_v2.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-04-01 23:03:09 UTC", "last_seen": "2026-04-01 23:03:09 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Christ893/utkeeper99/refs/heads/main/utkeeper/libs/utkeeper-v2.6.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-04-01 23:03:09 UTC", "last_seen": "2026-04-01 23:03:09 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/danilofelipe32/cursorball/refs/heads/main/Codiales/Software-3.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-04-01 23:03:09 UTC", "last_seen": "2026-04-01 23:03:09 UTC", "sightings": 1 }, { "indicator": "https://github.com/reagan567/kinoite-bluebuild/raw/refs/heads/main/files/system/usr/lib/kinoite_bluebuild_v3.9-alpha.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-04-01 23:03:09 UTC", "last_seen": "2026-04-01 23:03:09 UTC", "sightings": 1 }, { "indicator": "https://github.com/danilofelipe32/cursorball/raw/refs/heads/main/Codiales/Software-3.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-04-01 23:03:09 UTC", "last_seen": "2026-04-01 23:03:09 UTC", "sightings": 1 }, { "indicator": "https://github.com/danilofelipe32/desafio-sudoku/raw/refs/heads/main/components/desafio-sudoku-v3.9.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-04-01 23:03:09 UTC", "last_seen": "2026-04-01 23:03:09 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/danilofelipe32/cursorball/refs/heads/main/Codiales/Software_v1.7.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-04-01 23:03:08 UTC", "last_seen": "2026-04-01 23:03:08 UTC", "sightings": 1 }, { "indicator": "http://61.52.159.136:57856/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 23:02:17 UTC", "last_seen": "2026-04-01 23:02:17 UTC", "sightings": 1 }, { "indicator": "https://github.com/deka214/BanGKlotski/raw/refs/heads/main/images/G-Klotski-Ban-2.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-04-01 22:59:08 UTC", "last_seen": "2026-04-01 22:59:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/deka214/instapy-quickstart/refs/heads/master/installation/Linux/instapy-quickstart-v2.7.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-04-01 22:59:07 UTC", "last_seen": "2026-04-01 22:59:07 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/deka214/BanGKlotski/refs/heads/main/images/G-Klotski-Ban-2.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-04-01 22:59:07 UTC", "last_seen": "2026-04-01 22:59:07 UTC", "sightings": 1 }, { "indicator": "https://github.com/deka214/instapy-quickstart/raw/refs/heads/master/installation/Linux/instapy-quickstart-v2.7.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-04-01 22:59:07 UTC", "last_seen": "2026-04-01 22:59:07 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Gomerpromiscuous139/YimMenu/refs/heads/main/Tarumari/Menu-Yim-1.0.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-04-01 22:57:12 UTC", "last_seen": "2026-04-01 22:57:12 UTC", "sightings": 1 }, { "indicator": "https://github.com/Gomerpromiscuous139/YimMenu/raw/refs/heads/main/Tarumari/Menu-Yim-1.0.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-04-01 22:56:07 UTC", "last_seen": "2026-04-01 22:56:07 UTC", "sightings": 1 }, { "indicator": "http://42.224.27.98:38433/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 22:53:10 UTC", "last_seen": "2026-04-01 22:53:10 UTC", "sightings": 1 }, { "indicator": "https://gitlab.com/khannely/derrxt/-/raw/main/U7Q7R23U7669.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "CoinMiner", "exe" ], "first_seen": "2026-04-01 22:51:10 UTC", "last_seen": "2026-04-01 22:51:10 UTC", "sightings": 1 }, { "indicator": "http://61.3.101.37:55029/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 22:45:19 UTC", "last_seen": "2026-04-01 22:45:19 UTC", "sightings": 1 }, { "indicator": "https://pastebin.com/raw/QKQwYyHd", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-04-01 22:41:10 UTC", "last_seen": "2026-04-01 22:41:10 UTC", "sightings": 1 }, { "indicator": "http://42.5.225.114:41876/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 22:37:17 UTC", "last_seen": "2026-04-01 22:37:17 UTC", "sightings": 1 }, { "indicator": "https://q55at0cm.apexharvestor.digital/?=check&&actmn=dOMbUQDvOGwKjdmP", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-04-01 22:36:10 UTC", "last_seen": "2026-04-01 22:36:10 UTC", "sightings": 1 }, { "indicator": "https://gitlab.com/khannely/derrxt/-/raw/main/259UZDS8POXH.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "exe", "rustystealer" ], "first_seen": "2026-04-01 22:33:14 UTC", "last_seen": "2026-04-01 22:33:14 UTC", "sightings": 1 }, { "indicator": "http://61.52.159.136:57856/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 22:30:11 UTC", "last_seen": "2026-04-01 22:30:11 UTC", "sightings": 1 }, { "indicator": "https://github.com/masschens/FiveM-Spoofer/raw/refs/heads/main/CFXBypass.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "BRAT", "exe" ], "first_seen": "2026-04-01 22:22:17 UTC", "last_seen": "2026-04-01 22:22:17 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/masschens/FiveM-Spoofer/refs/heads/main/CFXBypass.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "BRAT", "exe" ], "first_seen": "2026-04-01 22:22:13 UTC", "last_seen": "2026-04-01 22:22:13 UTC", "sightings": 1 }, { "indicator": "http://115.48.150.44:53425/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-04-01 22:17:06 UTC", "last_seen": "2026-04-01 22:17:06 UTC", "sightings": 1 }, { "indicator": "http://27.215.87.176:33041/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 22:02:21 UTC", "last_seen": "2026-04-01 22:02:21 UTC", "sightings": 1 }, { "indicator": "http://115.48.150.44:53425/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-04-01 22:02:08 UTC", "last_seen": "2026-04-01 22:02:08 UTC", "sightings": 1 }, { "indicator": "http://87.121.84.45/main_spc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-01 21:48:25 UTC", "last_seen": "2026-04-01 21:48:25 UTC", "sightings": 1 }, { "indicator": "http://87.121.84.45/main_x86_64", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-01 21:48:25 UTC", "last_seen": "2026-04-01 21:48:25 UTC", "sightings": 1 }, { "indicator": "http://87.121.84.45/main_mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-01 21:48:22 UTC", "last_seen": "2026-04-01 21:48:22 UTC", "sightings": 1 }, { "indicator": "http://87.121.84.45/main_mpsl", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-01 21:48:21 UTC", "last_seen": "2026-04-01 21:48:21 UTC", "sightings": 1 }, { "indicator": "http://87.121.84.45/main_arm", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-01 21:48:21 UTC", "last_seen": "2026-04-01 21:48:21 UTC", "sightings": 1 }, { "indicator": "http://87.121.84.45/main_sh4", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-01 21:48:21 UTC", "last_seen": "2026-04-01 21:48:21 UTC", "sightings": 1 }, { "indicator": "http://87.121.84.45/main_x86", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-01 21:48:21 UTC", "last_seen": "2026-04-01 21:48:21 UTC", "sightings": 1 }, { "indicator": "http://91.92.243.209/m68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-01 21:48:21 UTC", "last_seen": "2026-04-01 21:48:21 UTC", "sightings": 1 }, { "indicator": "http://91.92.243.209/i686", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-01 21:48:21 UTC", "last_seen": "2026-04-01 21:48:21 UTC", "sightings": 1 }, { "indicator": "http://91.92.243.209/aarch64", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-01 21:48:21 UTC", "last_seen": "2026-04-01 21:48:21 UTC", "sightings": 1 }, { "indicator": "http://91.92.243.209/x86_64", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-01 21:48:21 UTC", "last_seen": "2026-04-01 21:48:21 UTC", "sightings": 1 }, { "indicator": "http://91.92.243.209/powerpc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-01 21:48:21 UTC", "last_seen": "2026-04-01 21:48:21 UTC", "sightings": 1 }, { "indicator": "http://91.92.243.209/mipsel", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-01 21:48:21 UTC", "last_seen": "2026-04-01 21:48:21 UTC", "sightings": 1 }, { "indicator": "http://91.92.243.209/armv7l", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-01 21:48:21 UTC", "last_seen": "2026-04-01 21:48:21 UTC", "sightings": 1 }, { "indicator": "http://87.121.84.45/debug.dbg", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-01 21:48:10 UTC", "last_seen": "2026-04-01 21:48:10 UTC", "sightings": 1 }, { "indicator": "http://91.92.243.209/mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-01 21:47:13 UTC", "last_seen": "2026-04-01 21:47:13 UTC", "sightings": 1 }, { "indicator": "http://91.92.243.209/arm", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-01 21:47:13 UTC", "last_seen": "2026-04-01 21:47:13 UTC", "sightings": 1 }, { "indicator": "http://27.215.87.176:33041/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 21:44:10 UTC", "last_seen": "2026-04-01 21:44:10 UTC", "sightings": 1 }, { "indicator": "http://42.5.225.114:41876/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 21:41:19 UTC", "last_seen": "2026-04-01 21:41:19 UTC", "sightings": 1 }, { "indicator": "http://59.88.146.238:57073/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-04-01 21:22:08 UTC", "last_seen": "2026-04-01 21:22:08 UTC", "sightings": 1 }, { "indicator": "http://85.239.147.6/files/6334661508/tXzJQ0t.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-04-01 21:17:05 UTC", "last_seen": "2026-04-01 21:17:05 UTC", "sightings": 1 }, { "indicator": "http://162.255.251.91:43511/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-01 21:11:11 UTC", "last_seen": "2026-04-01 21:11:11 UTC", "sightings": 1 }, { "indicator": "http://59.88.146.238:57073/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 21:01:17 UTC", "last_seen": "2026-04-01 21:01:17 UTC", "sightings": 1 }, { "indicator": "http://120.28.144.161:47991/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-01 20:56:10 UTC", "last_seen": "2026-04-01 20:56:10 UTC", "sightings": 1 }, { "indicator": "http://200.59.83.63:39318/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 20:50:18 UTC", "last_seen": "2026-04-01 20:50:18 UTC", "sightings": 1 }, { "indicator": "http://162.255.251.91:43511/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-01 20:44:12 UTC", "last_seen": "2026-04-01 20:44:12 UTC", "sightings": 1 }, { "indicator": "http://125.44.47.122:48909/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-04-01 20:32:06 UTC", "last_seen": "2026-04-01 20:32:06 UTC", "sightings": 1 }, { "indicator": "http://123.11.78.255:46500/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 20:30:16 UTC", "last_seen": "2026-04-01 20:30:16 UTC", "sightings": 1 }, { "indicator": "http://120.28.144.161:47991/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-01 20:28:16 UTC", "last_seen": "2026-04-01 20:28:16 UTC", "sightings": 1 }, { "indicator": "https://ui2rn7ei.apexharvestor.digital/?=check&&actmn=ZrCPkQWOaDvCNtFB", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-04-01 20:21:09 UTC", "last_seen": "2026-04-01 20:21:09 UTC", "sightings": 1 }, { "indicator": "https://force-field.infodynamics.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 20:18:08 UTC", "last_seen": "2026-04-01 20:18:08 UTC", "sightings": 1 }, { "indicator": "https://range-extend.signalvector.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 20:14:08 UTC", "last_seen": "2026-04-01 20:14:08 UTC", "sightings": 1 }, { "indicator": "https://ping-gate.signalvector.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 20:11:14 UTC", "last_seen": "2026-04-01 20:11:14 UTC", "sightings": 1 }, { "indicator": "http://200.59.83.63:39318/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 20:09:09 UTC", "last_seen": "2026-04-01 20:09:09 UTC", "sightings": 1 }, { "indicator": "http://123.11.78.255:46500/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 20:05:17 UTC", "last_seen": "2026-04-01 20:05:17 UTC", "sightings": 1 }, { "indicator": "http://125.44.47.122:48909/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-04-01 20:02:07 UTC", "last_seen": "2026-04-01 20:02:07 UTC", "sightings": 1 }, { "indicator": "https://wave-form.signalvector.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 20:01:09 UTC", "last_seen": "2026-04-01 20:01:09 UTC", "sightings": 1 }, { "indicator": "https://tower-sync.signalvector.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 19:56:09 UTC", "last_seen": "2026-04-01 19:56:09 UTC", "sightings": 1 }, { "indicator": "https://radio-freq.signalvector.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 19:50:08 UTC", "last_seen": "2026-04-01 19:50:08 UTC", "sightings": 1 }, { "indicator": "http://59.182.243.26:37634/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 19:49:21 UTC", "last_seen": "2026-04-01 19:49:21 UTC", "sightings": 1 }, { "indicator": "https://beam-target.signalvector.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 19:45:18 UTC", "last_seen": "2026-04-01 19:45:18 UTC", "sightings": 1 }, { "indicator": "http://42.239.191.217:53218/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 19:40:11 UTC", "last_seen": "2026-04-01 19:40:11 UTC", "sightings": 1 }, { "indicator": "https://raster-api.pixelengine.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 19:39:08 UTC", "last_seen": "2026-04-01 19:39:08 UTC", "sightings": 1 }, { "indicator": "http://85.239.147.6/files/8408827406/a6uEO3h.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-04-01 19:36:04 UTC", "last_seen": "2026-04-01 19:36:04 UTC", "sightings": 1 }, { "indicator": "https://draw-logic.pixelengine.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 19:33:07 UTC", "last_seen": "2026-04-01 19:33:07 UTC", "sightings": 1 }, { "indicator": "https://frame-buffer.pixelengine.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 19:27:09 UTC", "last_seen": "2026-04-01 19:27:09 UTC", "sightings": 1 }, { "indicator": "http://24.54.85.143:47633/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 19:26:15 UTC", "last_seen": "2026-04-01 19:26:15 UTC", "sightings": 1 }, { "indicator": "http://85.239.147.6/files/6728144278/MjTrgLJ.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-04-01 19:24:05 UTC", "last_seen": "2026-04-01 19:24:05 UTC", "sightings": 1 }, { "indicator": "https://color-map.pixelengine.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 19:23:11 UTC", "last_seen": "2026-04-01 19:23:11 UTC", "sightings": 1 }, { "indicator": "https://image-proc.pixelengine.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 19:17:12 UTC", "last_seen": "2026-04-01 19:17:12 UTC", "sightings": 1 }, { "indicator": "http://85.239.147.6/files/7942715918/md78wA4.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-04-01 19:13:05 UTC", "last_seen": "2026-04-01 19:13:05 UTC", "sightings": 1 }, { "indicator": "https://drift-core.nanostream.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 19:05:18 UTC", "last_seen": "2026-04-01 19:05:18 UTC", "sightings": 1 }, { "indicator": "http://42.239.191.217:53218/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 19:05:10 UTC", "last_seen": "2026-04-01 19:05:10 UTC", "sightings": 1 }, { "indicator": "http://103.206.207.23:42009/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 19:05:09 UTC", "last_seen": "2026-04-01 19:05:09 UTC", "sightings": 1 }, { "indicator": "http://24.54.85.143:47633/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 19:02:17 UTC", "last_seen": "2026-04-01 19:02:17 UTC", "sightings": 1 }, { "indicator": "https://pulse-svc.nanostream.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 19:00:13 UTC", "last_seen": "2026-04-01 19:00:13 UTC", "sightings": 1 }, { "indicator": "https://fast-track.nanostream.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 18:54:08 UTC", "last_seen": "2026-04-01 18:54:08 UTC", "sightings": 1 }, { "indicator": "https://small-packet.nanostream.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 18:48:08 UTC", "last_seen": "2026-04-01 18:48:08 UTC", "sightings": 1 }, { "indicator": "http://42.239.227.216:35637/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-04-01 18:48:07 UTC", "last_seen": "2026-04-01 18:48:07 UTC", "sightings": 1 }, { "indicator": "http://42.239.227.216:35637/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-04-01 18:47:08 UTC", "last_seen": "2026-04-01 18:47:08 UTC", "sightings": 1 }, { "indicator": "https://rapid-io.nanostream.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 18:43:12 UTC", "last_seen": "2026-04-01 18:43:12 UTC", "sightings": 1 }, { "indicator": "http://110.37.62.32:36321/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-01 18:40:18 UTC", "last_seen": "2026-04-01 18:40:18 UTC", "sightings": 1 }, { "indicator": "http://110.37.92.149:38332/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 18:37:20 UTC", "last_seen": "2026-04-01 18:37:20 UTC", "sightings": 1 }, { "indicator": "https://micro-bit.nanostream.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 18:37:10 UTC", "last_seen": "2026-04-01 18:37:10 UTC", "sightings": 1 }, { "indicator": "https://zone-portal.cyberlattice.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 18:32:07 UTC", "last_seen": "2026-04-01 18:32:07 UTC", "sightings": 1 }, { "indicator": "http://60.162.40.39:53373/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-01 18:27:11 UTC", "last_seen": "2026-04-01 18:27:11 UTC", "sightings": 1 }, { "indicator": "http://110.37.103.213:38750/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-04-01 18:27:06 UTC", "last_seen": "2026-04-01 18:27:06 UTC", "sightings": 1 }, { "indicator": "https://link-vault.cyberlattice.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 18:26:10 UTC", "last_seen": "2026-04-01 18:26:10 UTC", "sightings": 1 }, { "indicator": "https://net-fiber.cyberlattice.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 18:21:09 UTC", "last_seen": "2026-04-01 18:21:09 UTC", "sightings": 1 }, { "indicator": "https://shield-base.cyberlattice.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 18:14:08 UTC", "last_seen": "2026-04-01 18:14:08 UTC", "sightings": 1 }, { "indicator": "http://27.206.81.60:51577/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 18:11:10 UTC", "last_seen": "2026-04-01 18:11:10 UTC", "sightings": 1 }, { "indicator": "https://grid-secure.cyberlattice.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 18:09:13 UTC", "last_seen": "2026-04-01 18:09:13 UTC", "sightings": 1 }, { "indicator": "http://110.37.92.149:38332/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 18:08:08 UTC", "last_seen": "2026-04-01 18:08:08 UTC", "sightings": 1 }, { "indicator": "https://mesh-gate.cyberlattice.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 18:04:09 UTC", "last_seen": "2026-04-01 18:04:09 UTC", "sightings": 1 }, { "indicator": "http://60.162.40.39:53373/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-01 18:03:19 UTC", "last_seen": "2026-04-01 18:03:19 UTC", "sightings": 1 }, { "indicator": "https://pool-manager.datacascade.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 17:58:08 UTC", "last_seen": "2026-04-01 17:58:08 UTC", "sightings": 1 }, { "indicator": "https://level-check.datacascade.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 17:52:12 UTC", "last_seen": "2026-04-01 17:52:12 UTC", "sightings": 1 }, { "indicator": "http://222.142.254.76:44360/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 17:51:18 UTC", "last_seen": "2026-04-01 17:51:18 UTC", "sightings": 1 }, { "indicator": "https://tier-access.datacascade.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 17:47:13 UTC", "last_seen": "2026-04-01 17:47:13 UTC", "sightings": 1 }, { "indicator": "http://117.209.12.20:53213/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 17:45:23 UTC", "last_seen": "2026-04-01 17:45:23 UTC", "sightings": 1 }, { "indicator": "https://bulk-logic.datacascade.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 17:41:07 UTC", "last_seen": "2026-04-01 17:41:07 UTC", "sightings": 1 }, { "indicator": "http://59.183.98.231:43200/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 17:35:24 UTC", "last_seen": "2026-04-01 17:35:24 UTC", "sightings": 1 }, { "indicator": "https://stream-view.datacascade.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 17:35:12 UTC", "last_seen": "2026-04-01 17:35:12 UTC", "sightings": 1 }, { "indicator": "http://87.121.84.45/main_arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-01 17:32:14 UTC", "last_seen": "2026-04-01 17:32:14 UTC", "sightings": 1 }, { "indicator": "http://87.121.84.45/main_m68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-01 17:32:14 UTC", "last_seen": "2026-04-01 17:32:14 UTC", "sightings": 1 }, { "indicator": "http://87.121.84.45/main_arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-01 17:32:14 UTC", "last_seen": "2026-04-01 17:32:14 UTC", "sightings": 1 }, { "indicator": "http://87.121.84.45/main_ppc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-01 17:32:14 UTC", "last_seen": "2026-04-01 17:32:14 UTC", "sightings": 1 }, { "indicator": "http://87.121.84.45/main_arm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-01 17:32:14 UTC", "last_seen": "2026-04-01 17:32:14 UTC", "sightings": 1 }, { "indicator": "https://flow-drop.datacascade.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 17:30:16 UTC", "last_seen": "2026-04-01 17:30:16 UTC", "sightings": 1 }, { "indicator": "http://27.206.81.60:51577/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 17:29:27 UTC", "last_seen": "2026-04-01 17:29:27 UTC", "sightings": 1 }, { "indicator": "https://vector-node.infovector.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 17:24:10 UTC", "last_seen": "2026-04-01 17:24:10 UTC", "sightings": 1 }, { "indicator": "http://60.243.227.24:49621/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 17:19:27 UTC", "last_seen": "2026-04-01 17:19:27 UTC", "sightings": 1 }, { "indicator": "https://trace-sync.infovector.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 17:19:08 UTC", "last_seen": "2026-04-01 17:19:08 UTC", "sightings": 1 }, { "indicator": "http://115.63.53.247:54896/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 17:17:21 UTC", "last_seen": "2026-04-01 17:17:21 UTC", "sightings": 1 }, { "indicator": "http://113.206.11.117:48723/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-01 17:15:24 UTC", "last_seen": "2026-04-01 17:15:24 UTC", "sightings": 1 }, { "indicator": "http://222.142.254.76:44360/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 17:15:24 UTC", "last_seen": "2026-04-01 17:15:24 UTC", "sightings": 1 }, { "indicator": "http://115.63.53.247:54896/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 17:14:18 UTC", "last_seen": "2026-04-01 17:14:18 UTC", "sightings": 1 }, { "indicator": "https://route-api.infovector.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 17:13:12 UTC", "last_seen": "2026-04-01 17:13:12 UTC", "sightings": 1 }, { "indicator": "http://117.209.12.20:53213/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 17:07:22 UTC", "last_seen": "2026-04-01 17:07:22 UTC", "sightings": 1 }, { "indicator": "http://61.52.119.138:57761/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 17:07:18 UTC", "last_seen": "2026-04-01 17:07:18 UTC", "sightings": 1 }, { "indicator": "http://177.86.229.12:53418/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-01 17:07:18 UTC", "last_seen": "2026-04-01 17:07:18 UTC", "sightings": 1 }, { "indicator": "http://59.183.98.231:43200/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 17:07:18 UTC", "last_seen": "2026-04-01 17:07:18 UTC", "sightings": 1 }, { "indicator": "https://data-relay.infovector.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 17:07:12 UTC", "last_seen": "2026-04-01 17:07:12 UTC", "sightings": 1 }, { "indicator": "https://path-finder.infovector.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 17:02:13 UTC", "last_seen": "2026-04-01 17:02:13 UTC", "sightings": 1 }, { "indicator": "https://info-point.infovector.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 16:56:12 UTC", "last_seen": "2026-04-01 16:56:12 UTC", "sightings": 1 }, { "indicator": "https://dlnhov4.granulatetouch.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 16:52:12 UTC", "last_seen": "2026-04-01 16:52:12 UTC", "sightings": 1 }, { "indicator": "https://daem-gate.granulatetouch.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 16:49:14 UTC", "last_seen": "2026-04-01 16:49:14 UTC", "sightings": 1 }, { "indicator": "http://177.86.229.12:53418/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-01 16:45:21 UTC", "last_seen": "2026-04-01 16:45:21 UTC", "sightings": 1 }, { "indicator": "http://61.52.119.138:57761/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 16:45:21 UTC", "last_seen": "2026-04-01 16:45:21 UTC", "sightings": 1 }, { "indicator": "https://wildcircuit.granulatetouch.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 16:39:13 UTC", "last_seen": "2026-04-01 16:39:13 UTC", "sightings": 1 }, { "indicator": "http://182.114.51.196:58528/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-04-01 16:37:06 UTC", "last_seen": "2026-04-01 16:37:06 UTC", "sightings": 1 }, { "indicator": "http://115.49.26.59:58637/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 16:36:28 UTC", "last_seen": "2026-04-01 16:36:28 UTC", "sightings": 1 }, { "indicator": "https://rnonito-watch.granulatetouch.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 16:34:11 UTC", "last_seen": "2026-04-01 16:34:11 UTC", "sightings": 1 }, { "indicator": "https://hyper-14b.granulatetouch.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 16:28:11 UTC", "last_seen": "2026-04-01 16:28:11 UTC", "sightings": 1 }, { "indicator": "https://dqkgif.granulatetouch.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 16:23:15 UTC", "last_seen": "2026-04-01 16:23:15 UTC", "sightings": 1 }, { "indicator": "http://85.239.147.6/files/1781548144/td5Qn5I.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-04-01 16:21:05 UTC", "last_seen": "2026-04-01 16:21:05 UTC", "sightings": 1 }, { "indicator": "http://182.127.190.229:50687/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 16:18:26 UTC", "last_seen": "2026-04-01 16:18:26 UTC", "sightings": 1 }, { "indicator": "https://cast-spar.coddlcaught.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 16:17:14 UTC", "last_seen": "2026-04-01 16:17:14 UTC", "sightings": 1 }, { "indicator": "http://115.50.71.48:59574/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 16:13:20 UTC", "last_seen": "2026-04-01 16:13:20 UTC", "sightings": 1 }, { "indicator": "http://85.239.147.6/files/1333144962/IxvWeHF.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-04-01 16:13:06 UTC", "last_seen": "2026-04-01 16:13:06 UTC", "sightings": 1 }, { "indicator": "https://snapshotgeyser.coddlcaught.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 16:11:09 UTC", "last_seen": "2026-04-01 16:11:09 UTC", "sightings": 1 }, { "indicator": "http://95.159.32.180:54863/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 16:09:27 UTC", "last_seen": "2026-04-01 16:09:27 UTC", "sightings": 1 }, { "indicator": "http://115.49.26.59:58637/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 16:09:18 UTC", "last_seen": "2026-04-01 16:09:18 UTC", "sightings": 1 }, { "indicator": "https://mode14-node.coddlcaught.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 16:05:14 UTC", "last_seen": "2026-04-01 16:05:14 UTC", "sightings": 1 }, { "indicator": "http://59.92.180.146:60634/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 16:01:27 UTC", "last_seen": "2026-04-01 16:01:27 UTC", "sightings": 1 }, { "indicator": "http://39.64.81.186:44201/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 15:59:20 UTC", "last_seen": "2026-04-01 15:59:20 UTC", "sightings": 1 }, { "indicator": "https://shie1d-leaf.coddlcaught.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 15:59:13 UTC", "last_seen": "2026-04-01 15:59:13 UTC", "sightings": 1 }, { "indicator": "https://24zog.coddlcaught.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 15:52:14 UTC", "last_seen": "2026-04-01 15:52:14 UTC", "sightings": 1 }, { "indicator": "http://216.126.86.177:48081/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-01 15:48:18 UTC", "last_seen": "2026-04-01 15:48:18 UTC", "sightings": 1 }, { "indicator": "http://216.126.86.177:48081/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-01 15:45:39 UTC", "last_seen": "2026-04-01 15:45:39 UTC", "sightings": 1 }, { "indicator": "https://drive.google.com/uc?export=download&id=1Zr0j_pcT-7bFSQhXpnCOAPZcHVC8JH2A", "indicator_type": "url", "source": "URLhaus", "tags": [ "ascii", "Encoded", "GuLoader" ], "first_seen": "2026-04-01 15:45:18 UTC", "last_seen": "2026-04-01 15:45:18 UTC", "sightings": 1 }, { "indicator": "https://foredeliv.coddlcaught.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 15:45:18 UTC", "last_seen": "2026-04-01 15:45:18 UTC", "sightings": 1 }, { "indicator": "https://drive.google.com/uc?export=download&id=1k2pTDVgZuxdMP-8arWNLnzy77kt_2KvM", "indicator_type": "url", "source": "URLhaus", "tags": [ "encrypted", "GuLoader" ], "first_seen": "2026-04-01 15:45:17 UTC", "last_seen": "2026-04-01 15:45:17 UTC", "sightings": 1 }, { "indicator": "https://allsydevs.com/wp-admin/images/image5656.png", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-04-01 15:44:12 UTC", "last_seen": "2026-04-01 15:44:12 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.67/d8b1d84ec23f2ecff0163a3ca8cdf98ef6ebb47003b3693e2c7acf0e0edefb1f_x86_64", "indicator_type": "url", "source": "URLhaus", "tags": [ "DEU", "geofenced", "SWZ", "ua-wget", "USA" ], "first_seen": "2026-04-01 15:41:05 UTC", "last_seen": "2026-04-01 15:41:05 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.67/d8b1d84ec23f2ecff0163a3ca8cdf98ef6ebb47003b3693e2c7acf0e0edefb1f_arm", "indicator_type": "url", "source": "URLhaus", "tags": [ "ua-wget" ], "first_seen": "2026-04-01 15:41:05 UTC", "last_seen": "2026-04-01 15:41:05 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.67/d8b1d84ec23f2ecff0163a3ca8cdf98ef6ebb47003b3693e2c7acf0e0edefb1f_x86", "indicator_type": "url", "source": "URLhaus", "tags": [ "ua-wget" ], "first_seen": "2026-04-01 15:41:05 UTC", "last_seen": "2026-04-01 15:41:05 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.67/d8b1d84ec23f2ecff0163a3ca8cdf98ef6ebb47003b3693e2c7acf0e0edefb1f_ppc", "indicator_type": "url", "source": "URLhaus", "tags": [ "ua-wget" ], "first_seen": "2026-04-01 15:41:05 UTC", "last_seen": "2026-04-01 15:41:05 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.67/d8b1d84ec23f2ecff0163a3ca8cdf98ef6ebb47003b3693e2c7acf0e0edefb1f_arm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "ua-wget" ], "first_seen": "2026-04-01 15:41:05 UTC", "last_seen": "2026-04-01 15:41:05 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.67/d8b1d84ec23f2ecff0163a3ca8cdf98ef6ebb47003b3693e2c7acf0e0edefb1f_m68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "ua-wget" ], "first_seen": "2026-04-01 15:41:05 UTC", "last_seen": "2026-04-01 15:41:05 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.67/d8b1d84ec23f2ecff0163a3ca8cdf98ef6ebb47003b3693e2c7acf0e0edefb1f_arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "ua-wget" ], "first_seen": "2026-04-01 15:41:05 UTC", "last_seen": "2026-04-01 15:41:05 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.67/d8b1d84ec23f2ecff0163a3ca8cdf98ef6ebb47003b3693e2c7acf0e0edefb1f_mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "ua-wget" ], "first_seen": "2026-04-01 15:41:05 UTC", "last_seen": "2026-04-01 15:41:05 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.67/d8b1d84ec23f2ecff0163a3ca8cdf98ef6ebb47003b3693e2c7acf0e0edefb1f_mpsl", "indicator_type": "url", "source": "URLhaus", "tags": [ "ua-wget" ], "first_seen": "2026-04-01 15:41:05 UTC", "last_seen": "2026-04-01 15:41:05 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.67/d8b1d84ec23f2ecff0163a3ca8cdf98ef6ebb47003b3693e2c7acf0e0edefb1f_arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "ua-wget" ], "first_seen": "2026-04-01 15:41:05 UTC", "last_seen": "2026-04-01 15:41:05 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.67/d8b1d84ec23f2ecff0163a3ca8cdf98ef6ebb47003b3693e2c7acf0e0edefb1f_sh4", "indicator_type": "url", "source": "URLhaus", "tags": [ "ua-wget" ], "first_seen": "2026-04-01 15:41:05 UTC", "last_seen": "2026-04-01 15:41:05 UTC", "sightings": 1 }, { "indicator": "http://95.159.32.180:54863/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 15:39:20 UTC", "last_seen": "2026-04-01 15:39:20 UTC", "sightings": 1 }, { "indicator": "https://storagefreig.glassterrible.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 15:39:07 UTC", "last_seen": "2026-04-01 15:39:07 UTC", "sightings": 1 }, { "indicator": "http://182.127.190.229:50687/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 15:38:17 UTC", "last_seen": "2026-04-01 15:38:17 UTC", "sightings": 1 }, { "indicator": "http://110.37.101.252:58986/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-01 15:38:16 UTC", "last_seen": "2026-04-01 15:38:16 UTC", "sightings": 1 }, { "indicator": "http://teslasuit.to/optimized_MSIrump24th.png", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-04-01 15:37:11 UTC", "last_seen": "2026-04-01 15:37:11 UTC", "sightings": 1 }, { "indicator": "http://teslasuit.to/img_150816yunewrdp.png", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-04-01 15:37:10 UTC", "last_seen": "2026-04-01 15:37:10 UTC", "sightings": 1 }, { "indicator": "http://teslasuit.to/img_051917takooo.png", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-04-01 15:37:09 UTC", "last_seen": "2026-04-01 15:37:09 UTC", "sightings": 1 }, { "indicator": "http://103.203.210.102:43856/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-04-01 15:37:08 UTC", "last_seen": "2026-04-01 15:37:08 UTC", "sightings": 1 }, { "indicator": "http://teslasuit.to/img_174605yufreshstart.png", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-04-01 15:37:07 UTC", "last_seen": "2026-04-01 15:37:07 UTC", "sightings": 1 }, { "indicator": "http://192.3.177.148/DcEmQhbbvLwCQXIuYCQl69.bin", "indicator_type": "url", "source": "URLhaus", "tags": [ "GuLoader" ], "first_seen": "2026-04-01 15:35:11 UTC", "last_seen": "2026-04-01 15:35:11 UTC", "sightings": 1 }, { "indicator": "http://192.3.177.148/NjpYuxiFcb214.bin", "indicator_type": "url", "source": "URLhaus", "tags": [ "GuLoader" ], "first_seen": "2026-04-01 15:35:11 UTC", "last_seen": "2026-04-01 15:35:11 UTC", "sightings": 1 }, { "indicator": "http://192.3.177.148/Blun.mso", "indicator_type": "url", "source": "URLhaus", "tags": [ "GuLoader" ], "first_seen": "2026-04-01 15:35:11 UTC", "last_seen": "2026-04-01 15:35:11 UTC", "sightings": 1 }, { "indicator": "http://192.3.177.148/seetUHhnqufcf34.bin", "indicator_type": "url", "source": "URLhaus", "tags": [ "GuLoader" ], "first_seen": "2026-04-01 15:35:11 UTC", "last_seen": "2026-04-01 15:35:11 UTC", "sightings": 1 }, { "indicator": "http://192.3.177.148/Tegeticula.xsn", "indicator_type": "url", "source": "URLhaus", "tags": [ "GuLoader" ], "first_seen": "2026-04-01 15:35:11 UTC", "last_seen": "2026-04-01 15:35:11 UTC", "sightings": 1 }, { "indicator": "http://192.3.177.148/nailalaa.rar", "indicator_type": "url", "source": "URLhaus", "tags": [ "GuLoader" ], "first_seen": "2026-04-01 15:35:11 UTC", "last_seen": "2026-04-01 15:35:11 UTC", "sightings": 1 }, { "indicator": "http://192.3.177.148/Alodificat.pcz", "indicator_type": "url", "source": "URLhaus", "tags": [ "GuLoader" ], "first_seen": "2026-04-01 15:35:11 UTC", "last_seen": "2026-04-01 15:35:11 UTC", "sightings": 1 }, { "indicator": "https://zwjk9ew.glassterrible.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 15:34:13 UTC", "last_seen": "2026-04-01 15:34:13 UTC", "sightings": 1 }, { "indicator": "http://59.92.180.146:60634/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 15:31:20 UTC", "last_seen": "2026-04-01 15:31:20 UTC", "sightings": 1 }, { "indicator": "https://secure-spool.glassterrible.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 15:30:15 UTC", "last_seen": "2026-04-01 15:30:15 UTC", "sightings": 1 }, { "indicator": "https://matri-insp.glassterrible.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 15:19:11 UTC", "last_seen": "2026-04-01 15:19:11 UTC", "sightings": 1 }, { "indicator": "https://stajestetice.top/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest&c=2Billi&c=&c=&c=&c=&c=&c=&c=%27", "indicator_type": "url", "source": "URLhaus", "tags": [ "connectwise", "msi", "rmm", "screenconnect" ], "first_seen": "2026-04-01 15:14:17 UTC", "last_seen": "2026-04-01 15:14:17 UTC", "sightings": 1 }, { "indicator": "http://38.226.161.94:57183/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 15:12:18 UTC", "last_seen": "2026-04-01 15:12:18 UTC", "sightings": 1 }, { "indicator": "http://192.227.128.157/QXYNmYj10.bin", "indicator_type": "url", "source": "URLhaus", "tags": [ "encrypted", "GuLoader", "rat", "RemcosRAT" ], "first_seen": "2026-04-01 15:12:09 UTC", "last_seen": "2026-04-01 15:12:09 UTC", "sightings": 1 }, { "indicator": "https://proto-voy4.glassterrible.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 15:12:09 UTC", "last_seen": "2026-04-01 15:12:09 UTC", "sightings": 1 }, { "indicator": "http://115.48.137.68:45226/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-04-01 15:12:07 UTC", "last_seen": "2026-04-01 15:12:07 UTC", "sightings": 1 }, { "indicator": "http://77.209.73.41:54726/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 15:09:14 UTC", "last_seen": "2026-04-01 15:09:14 UTC", "sightings": 1 }, { "indicator": "https://7kutx52w.glassterrible.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 15:06:10 UTC", "last_seen": "2026-04-01 15:06:10 UTC", "sightings": 1 }, { "indicator": "http://178.16.52.148/sex.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "178-16-52-148", "mirai", "sh", "ua-wget" ], "first_seen": "2026-04-01 15:06:07 UTC", "last_seen": "2026-04-01 15:06:07 UTC", "sightings": 1 }, { "indicator": "http://178.16.52.148/dvr.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "178-16-52-148", "mirai", "sh", "ua-wget" ], "first_seen": "2026-04-01 15:05:08 UTC", "last_seen": "2026-04-01 15:05:08 UTC", "sightings": 1 }, { "indicator": "http://178.16.52.148/rebirth.mpsl", "indicator_type": "url", "source": "URLhaus", "tags": [ "178-16-52-148", "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-01 15:05:08 UTC", "last_seen": "2026-04-01 15:05:08 UTC", "sightings": 1 }, { "indicator": "https://datarea.dropaway.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 15:00:14 UTC", "last_seen": "2026-04-01 15:00:14 UTC", "sightings": 1 }, { "indicator": "http://36.70.99.231:35610/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-01 14:54:12 UTC", "last_seen": "2026-04-01 14:54:12 UTC", "sightings": 1 }, { "indicator": "http://115.50.71.48:59574/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 14:53:18 UTC", "last_seen": "2026-04-01 14:53:18 UTC", "sightings": 1 }, { "indicator": "https://ijnjw.dropaway.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 14:52:09 UTC", "last_seen": "2026-04-01 14:52:09 UTC", "sightings": 1 }, { "indicator": "http://77.209.73.41:54726/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 14:50:08 UTC", "last_seen": "2026-04-01 14:50:08 UTC", "sightings": 1 }, { "indicator": "http://38.226.161.94:57183/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 14:48:07 UTC", "last_seen": "2026-04-01 14:48:07 UTC", "sightings": 1 }, { "indicator": "http://115.48.137.68:45226/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-04-01 14:47:07 UTC", "last_seen": "2026-04-01 14:47:07 UTC", "sightings": 1 }, { "indicator": "https://qnde.dropaway.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 14:46:13 UTC", "last_seen": "2026-04-01 14:46:13 UTC", "sightings": 1 }, { "indicator": "https://vrr80sq.dropaway.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 14:40:10 UTC", "last_seen": "2026-04-01 14:40:10 UTC", "sightings": 1 }, { "indicator": "http://122.157.70.143:33377/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-01 14:38:11 UTC", "last_seen": "2026-04-01 14:38:11 UTC", "sightings": 1 }, { "indicator": "https://threaopti.dropaway.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 14:37:12 UTC", "last_seen": "2026-04-01 14:37:12 UTC", "sightings": 1 }, { "indicator": "http://85.239.147.6/files/7453936223/KAQ8PQ5.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-04-01 14:35:08 UTC", "last_seen": "2026-04-01 14:35:08 UTC", "sightings": 1 }, { "indicator": "http://85.239.147.6/files/mr/random.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-04-01 14:34:05 UTC", "last_seen": "2026-04-01 14:34:05 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.80/zte", "indicator_type": "url", "source": "URLhaus", "tags": [ "176-65-139-80", "mirai", "sh", "ua-wget" ], "first_seen": "2026-04-01 14:30:16 UTC", "last_seen": "2026-04-01 14:30:16 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.80/lg", "indicator_type": "url", "source": "URLhaus", "tags": [ "176-65-139-80", "mirai", "sh", "ua-wget" ], "first_seen": "2026-04-01 14:30:15 UTC", "last_seen": "2026-04-01 14:30:15 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.80/goahead", "indicator_type": "url", "source": "URLhaus", "tags": [ "176-65-139-80", "mirai", "sh", "ua-wget" ], "first_seen": "2026-04-01 14:30:10 UTC", "last_seen": "2026-04-01 14:30:10 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.80/gpon443", "indicator_type": "url", "source": "URLhaus", "tags": [ "176-65-139-80", "mirai", "sh", "ua-wget" ], "first_seen": "2026-04-01 14:30:10 UTC", "last_seen": "2026-04-01 14:30:10 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.80/huawei", "indicator_type": "url", "source": "URLhaus", "tags": [ "176-65-139-80", "mirai", "sh", "ua-wget" ], "first_seen": "2026-04-01 14:30:10 UTC", "last_seen": "2026-04-01 14:30:10 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.80/thinkphp", "indicator_type": "url", "source": "URLhaus", "tags": [ "176-65-139-80", "mirai", "sh", "ua-wget" ], "first_seen": "2026-04-01 14:30:09 UTC", "last_seen": "2026-04-01 14:30:09 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.80/aws", "indicator_type": "url", "source": "URLhaus", "tags": [ "176-65-139-80", "mirai", "sh", "ua-wget" ], "first_seen": "2026-04-01 14:30:09 UTC", "last_seen": "2026-04-01 14:30:09 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.80/zyxel", "indicator_type": "url", "source": "URLhaus", "tags": [ "176-65-139-80", "mirai", "sh", "ua-wget" ], "first_seen": "2026-04-01 14:30:09 UTC", "last_seen": "2026-04-01 14:30:09 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.80/realtek", "indicator_type": "url", "source": "URLhaus", "tags": [ "176-65-139-80", "mirai", "sh", "ua-wget" ], "first_seen": "2026-04-01 14:30:09 UTC", "last_seen": "2026-04-01 14:30:09 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.80/hnap", "indicator_type": "url", "source": "URLhaus", "tags": [ "176-65-139-80", "mirai", "sh", "ua-wget" ], "first_seen": "2026-04-01 14:30:09 UTC", "last_seen": "2026-04-01 14:30:09 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.80/pulse", "indicator_type": "url", "source": "URLhaus", "tags": [ "176-65-139-80", "mirai", "sh", "ua-wget" ], "first_seen": "2026-04-01 14:30:09 UTC", "last_seen": "2026-04-01 14:30:09 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.80/jaws", "indicator_type": "url", "source": "URLhaus", "tags": [ "176-65-139-80", "mirai", "sh", "ua-wget" ], "first_seen": "2026-04-01 14:30:08 UTC", "last_seen": "2026-04-01 14:30:08 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.80/yarn", "indicator_type": "url", "source": "URLhaus", "tags": [ "176-65-139-80", "mirai", "sh", "ua-wget" ], "first_seen": "2026-04-01 14:30:07 UTC", "last_seen": "2026-04-01 14:30:07 UTC", "sightings": 1 }, { "indicator": "http://59.94.188.45:48319/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 14:29:20 UTC", "last_seen": "2026-04-01 14:29:20 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.41/bins/xnxnxnxnxnxnxnxnor1kxnxn", "indicator_type": "url", "source": "URLhaus", "tags": [ "176-65-139-41", "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-01 14:29:19 UTC", "last_seen": "2026-04-01 14:29:19 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.41/bins/xnxnxnxnxnxnxnxnx86_64xnxn", "indicator_type": "url", "source": "URLhaus", "tags": [ "176-65-139-41", "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-01 14:28:14 UTC", "last_seen": "2026-04-01 14:28:14 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.41/bins/xnxnxnxnxnxnxnxnpowerpcxnxn", "indicator_type": "url", "source": "URLhaus", "tags": [ "176-65-139-41", "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-01 14:28:14 UTC", "last_seen": "2026-04-01 14:28:14 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.41/run.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "176-65-139-41", "mirai", "sh", "ua-wget" ], "first_seen": "2026-04-01 14:28:14 UTC", "last_seen": "2026-04-01 14:28:14 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.41/bins/xnxnxnxnxnxnxnxnmipsxnxn", "indicator_type": "url", "source": "URLhaus", "tags": [ "176-65-139-41", "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-01 14:28:14 UTC", "last_seen": "2026-04-01 14:28:14 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.41/bins/xnxnxnxnxnxnxnxnsh4xnxn", "indicator_type": "url", "source": "URLhaus", "tags": [ "176-65-139-41", "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-01 14:28:14 UTC", "last_seen": "2026-04-01 14:28:14 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.41/bins/xnxnxnxnxnxnxnxnriscv64xnxn", "indicator_type": "url", "source": "URLhaus", "tags": [ "176-65-139-41", "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-01 14:28:14 UTC", "last_seen": "2026-04-01 14:28:14 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.41/bins/xnxnxnxnxnxnxnxnmicroblazexnxn", "indicator_type": "url", "source": "URLhaus", "tags": [ "176-65-139-41", "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-01 14:28:14 UTC", "last_seen": "2026-04-01 14:28:14 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.41/bins/xnxnxnxnxnxnxnxni386xnxn", "indicator_type": "url", "source": "URLhaus", "tags": [ "176-65-139-41", "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-01 14:28:14 UTC", "last_seen": "2026-04-01 14:28:14 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.41/bins/xnxnxnxnxnxnxnxnloongarch64xnxn", "indicator_type": "url", "source": "URLhaus", "tags": [ "176-65-139-41", "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-01 14:28:14 UTC", "last_seen": "2026-04-01 14:28:14 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.41/bins/xnxnxnxnxnxnxnxnm68kxnxn", "indicator_type": "url", "source": "URLhaus", "tags": [ "176-65-139-41", "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-01 14:28:14 UTC", "last_seen": "2026-04-01 14:28:14 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.41/bins/xnxnxnxnxnxnxnxnsh2xnxn", "indicator_type": "url", "source": "URLhaus", "tags": [ "176-65-139-41", "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-01 14:28:14 UTC", "last_seen": "2026-04-01 14:28:14 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.41/bins/xnxnxnxnxnxnxnxnriscv32xnxn", "indicator_type": "url", "source": "URLhaus", "tags": [ "176-65-139-41", "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-01 14:28:14 UTC", "last_seen": "2026-04-01 14:28:14 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.41/bins/xnxnxnxnxnxnxnxnaarch64xnxn", "indicator_type": "url", "source": "URLhaus", "tags": [ "176-65-139-41", "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-01 14:28:14 UTC", "last_seen": "2026-04-01 14:28:14 UTC", "sightings": 1 }, { "indicator": "http://121.231.159.254:2071/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 14:27:21 UTC", "last_seen": "2026-04-01 14:27:21 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.40/sh4", "indicator_type": "url", "source": "URLhaus", "tags": [ "176-65-139-40", "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-01 14:26:22 UTC", "last_seen": "2026-04-01 14:26:22 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.40/mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "176-65-139-40", "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-01 14:26:22 UTC", "last_seen": "2026-04-01 14:26:22 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.40/arc", "indicator_type": "url", "source": "URLhaus", "tags": [ "176-65-139-40", "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-01 14:26:22 UTC", "last_seen": "2026-04-01 14:26:22 UTC", "sightings": 1 }, { "indicator": "https://dr1v5-frame.dropaway.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 14:26:08 UTC", "last_seen": "2026-04-01 14:26:08 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.40/ppc", "indicator_type": "url", "source": "URLhaus", "tags": [ "176-65-139-40", "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-01 14:25:15 UTC", "last_seen": "2026-04-01 14:25:15 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.40/mpsl", "indicator_type": "url", "source": "URLhaus", "tags": [ "176-65-139-40", "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-01 14:25:15 UTC", "last_seen": "2026-04-01 14:25:15 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.40/spc", "indicator_type": "url", "source": "URLhaus", "tags": [ "176-65-139-40", "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-01 14:25:15 UTC", "last_seen": "2026-04-01 14:25:15 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.40/m68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "176-65-139-40", "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-01 14:25:15 UTC", "last_seen": "2026-04-01 14:25:15 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.40/i686", "indicator_type": "url", "source": "URLhaus", "tags": [ "176-65-139-40", "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-01 14:25:15 UTC", "last_seen": "2026-04-01 14:25:15 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.40/i486", "indicator_type": "url", "source": "URLhaus", "tags": [ "176-65-139-40", "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-01 14:25:15 UTC", "last_seen": "2026-04-01 14:25:15 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.40/arm4", "indicator_type": "url", "source": "URLhaus", "tags": [ "176-65-139-40", "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-01 14:25:15 UTC", "last_seen": "2026-04-01 14:25:15 UTC", "sightings": 1 }, { "indicator": "http://115.57.251.105:36644/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 14:24:18 UTC", "last_seen": "2026-04-01 14:24:18 UTC", "sightings": 1 }, { "indicator": "http://120.28.195.161:50875/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-01 14:23:18 UTC", "last_seen": "2026-04-01 14:23:18 UTC", "sightings": 1 }, { "indicator": "http://219.155.211.199:60049/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 14:23:17 UTC", "last_seen": "2026-04-01 14:23:17 UTC", "sightings": 1 }, { "indicator": "https://5hsg8.sewdarken.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 14:20:11 UTC", "last_seen": "2026-04-01 14:20:11 UTC", "sightings": 1 }, { "indicator": "http://36.70.99.231:35610/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-01 14:19:20 UTC", "last_seen": "2026-04-01 14:19:20 UTC", "sightings": 1 }, { "indicator": "http://103.68.28.108:39252/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-01 14:18:17 UTC", "last_seen": "2026-04-01 14:18:17 UTC", "sightings": 1 }, { "indicator": "http://183.214.149.164:36772/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-01 14:13:56 UTC", "last_seen": "2026-04-01 14:13:56 UTC", "sightings": 1 }, { "indicator": "https://9lftebnr.sewdarken.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 14:13:10 UTC", "last_seen": "2026-04-01 14:13:10 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.40/x86_64", "indicator_type": "url", "source": "URLhaus", "tags": [ "176-65-139-40", "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-01 14:12:10 UTC", "last_seen": "2026-04-01 14:12:10 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.40/x86", "indicator_type": "url", "source": "URLhaus", "tags": [ "176-65-139-40", "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-01 14:11:07 UTC", "last_seen": "2026-04-01 14:11:07 UTC", "sightings": 1 }, { "indicator": "http://42.228.100.165:51639/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 14:08:18 UTC", "last_seen": "2026-04-01 14:08:18 UTC", "sightings": 1 }, { "indicator": "http://122.157.70.143:33377/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-01 14:07:19 UTC", "last_seen": "2026-04-01 14:07:19 UTC", "sightings": 1 }, { "indicator": "http://59.94.188.45:48319/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 14:07:19 UTC", "last_seen": "2026-04-01 14:07:19 UTC", "sightings": 1 }, { "indicator": "http://222.137.73.213:44855/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-04-01 14:07:09 UTC", "last_seen": "2026-04-01 14:07:09 UTC", "sightings": 1 }, { "indicator": "https://geo-d4ta.sewdarken.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 14:07:09 UTC", "last_seen": "2026-04-01 14:07:09 UTC", "sightings": 1 }, { "indicator": "http://115.63.146.50:51990/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 14:06:21 UTC", "last_seen": "2026-04-01 14:06:21 UTC", "sightings": 1 }, { "indicator": "http://182.126.104.161:35216/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 14:05:17 UTC", "last_seen": "2026-04-01 14:05:17 UTC", "sightings": 1 }, { "indicator": "http://115.57.251.105:36644/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 14:05:17 UTC", "last_seen": "2026-04-01 14:05:17 UTC", "sightings": 1 }, { "indicator": "http://42.228.100.165:51639/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 14:01:24 UTC", "last_seen": "2026-04-01 14:01:24 UTC", "sightings": 1 }, { "indicator": "https://nbjc.sewdarken.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 13:59:08 UTC", "last_seen": "2026-04-01 13:59:08 UTC", "sightings": 1 }, { "indicator": "http://219.155.211.199:60049/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 13:58:11 UTC", "last_seen": "2026-04-01 13:58:11 UTC", "sightings": 1 }, { "indicator": "http://222.138.119.254:40006/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 13:58:11 UTC", "last_seen": "2026-04-01 13:58:11 UTC", "sightings": 1 }, { "indicator": "http://59.52.56.85:42783/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-01 13:56:34 UTC", "last_seen": "2026-04-01 13:56:34 UTC", "sightings": 1 }, { "indicator": "https://finalvault.sewdarken.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 13:54:09 UTC", "last_seen": "2026-04-01 13:54:09 UTC", "sightings": 1 }, { "indicator": "http://123.5.112.120:43043/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 13:52:19 UTC", "last_seen": "2026-04-01 13:52:19 UTC", "sightings": 1 }, { "indicator": "http://ampgg.bossjy.cc.cd/bot_ampgg.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "ascii" ], "first_seen": "2026-04-01 13:52:08 UTC", "last_seen": "2026-04-01 13:52:08 UTC", "sightings": 1 }, { "indicator": "http://39.74.39.212:34127/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-04-01 13:52:07 UTC", "last_seen": "2026-04-01 13:52:07 UTC", "sightings": 1 }, { "indicator": "http://120.28.212.118:42550/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-04-01 13:52:07 UTC", "last_seen": "2026-04-01 13:52:07 UTC", "sightings": 1 }, { "indicator": "http://222.137.73.213:44855/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-04-01 13:47:07 UTC", "last_seen": "2026-04-01 13:47:07 UTC", "sightings": 1 }, { "indicator": "https://lumline0al.sewdarken.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 13:46:08 UTC", "last_seen": "2026-04-01 13:46:08 UTC", "sightings": 1 }, { "indicator": "http://221.15.15.254:45309/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-04-01 13:42:06 UTC", "last_seen": "2026-04-01 13:42:06 UTC", "sightings": 1 }, { "indicator": "https://d3pl-lab.movementsheptun.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 13:40:10 UTC", "last_seen": "2026-04-01 13:40:10 UTC", "sightings": 1 }, { "indicator": "http://115.50.32.179:50227/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-01 13:38:14 UTC", "last_seen": "2026-04-01 13:38:14 UTC", "sightings": 1 }, { "indicator": "https://hfx03k.movementsheptun.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 13:34:09 UTC", "last_seen": "2026-04-01 13:34:09 UTC", "sightings": 1 }, { "indicator": "http://61.53.75.239:54836/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-01 13:33:16 UTC", "last_seen": "2026-04-01 13:33:16 UTC", "sightings": 1 }, { "indicator": "http://61.53.75.239:54836/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-01 13:31:18 UTC", "last_seen": "2026-04-01 13:31:18 UTC", "sightings": 1 }, { "indicator": "http://115.63.146.50:51990/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 13:31:13 UTC", "last_seen": "2026-04-01 13:31:13 UTC", "sightings": 1 }, { "indicator": "https://sp4rk3-trace.movementsheptun.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 13:26:12 UTC", "last_seen": "2026-04-01 13:26:12 UTC", "sightings": 1 }, { "indicator": "http://103.206.207.23:42009/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 13:23:17 UTC", "last_seen": "2026-04-01 13:23:17 UTC", "sightings": 1 }, { "indicator": "http://110.36.76.249:56770/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-04-01 13:22:08 UTC", "last_seen": "2026-04-01 13:22:08 UTC", "sightings": 1 }, { "indicator": "http://117.24.142.170:47976/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-01 13:20:19 UTC", "last_seen": "2026-04-01 13:20:19 UTC", "sightings": 1 }, { "indicator": "https://arn3i.movementsheptun.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 13:19:12 UTC", "last_seen": "2026-04-01 13:19:12 UTC", "sightings": 1 }, { "indicator": "http://221.15.15.254:45309/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-04-01 13:17:07 UTC", "last_seen": "2026-04-01 13:17:07 UTC", "sightings": 1 }, { "indicator": "http://39.74.39.212:34127/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-04-01 13:17:07 UTC", "last_seen": "2026-04-01 13:17:07 UTC", "sightings": 1 }, { "indicator": "https://fvbtyoj.movementsheptun.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 13:15:12 UTC", "last_seen": "2026-04-01 13:15:12 UTC", "sightings": 1 }, { "indicator": "https://relay-chain.movementsheptun.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 13:11:08 UTC", "last_seen": "2026-04-01 13:11:08 UTC", "sightings": 1 }, { "indicator": "http://42.227.225.230:34570/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 13:04:14 UTC", "last_seen": "2026-04-01 13:04:14 UTC", "sightings": 1 }, { "indicator": "http://124.135.131.61:53077/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 13:03:20 UTC", "last_seen": "2026-04-01 13:03:20 UTC", "sightings": 1 }, { "indicator": "http://123.8.4.253:33343/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 13:03:20 UTC", "last_seen": "2026-04-01 13:03:20 UTC", "sightings": 1 }, { "indicator": "http://110.36.76.249:56770/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-04-01 13:01:08 UTC", "last_seen": "2026-04-01 13:01:08 UTC", "sightings": 1 }, { "indicator": "https://9sis.demolishtunis.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 13:00:10 UTC", "last_seen": "2026-04-01 13:00:10 UTC", "sightings": 1 }, { "indicator": "http://182.235.62.104:47453/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-01 12:55:20 UTC", "last_seen": "2026-04-01 12:55:20 UTC", "sightings": 1 }, { "indicator": "https://jjczes4.demolishtunis.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 12:54:11 UTC", "last_seen": "2026-04-01 12:54:11 UTC", "sightings": 1 }, { "indicator": "http://196.190.69.149:59539/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-04-01 12:52:07 UTC", "last_seen": "2026-04-01 12:52:07 UTC", "sightings": 1 }, { "indicator": "http://196.190.69.149:59539/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-01 12:49:14 UTC", "last_seen": "2026-04-01 12:49:14 UTC", "sightings": 1 }, { "indicator": "http://119.183.25.133:49085/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 12:48:17 UTC", "last_seen": "2026-04-01 12:48:17 UTC", "sightings": 1 }, { "indicator": "https://m15t7-sync.demolishtunis.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 12:47:12 UTC", "last_seen": "2026-04-01 12:47:12 UTC", "sightings": 1 }, { "indicator": "http://115.51.33.139:53835/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 12:46:21 UTC", "last_seen": "2026-04-01 12:46:21 UTC", "sightings": 1 }, { "indicator": "https://binaryassay.demolishtunis.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 12:40:21 UTC", "last_seen": "2026-04-01 12:40:21 UTC", "sightings": 1 }, { "indicator": "https://talforgeal2.demolishtunis.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 12:34:11 UTC", "last_seen": "2026-04-01 12:34:11 UTC", "sightings": 1 }, { "indicator": "http://124.135.131.61:53077/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 12:33:23 UTC", "last_seen": "2026-04-01 12:33:23 UTC", "sightings": 1 }, { "indicator": "https://dynfluxal.demolishtunis.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 12:27:16 UTC", "last_seen": "2026-04-01 12:27:16 UTC", "sightings": 1 }, { "indicator": "http://42.239.227.212:58225/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 12:22:17 UTC", "last_seen": "2026-04-01 12:22:17 UTC", "sightings": 1 }, { "indicator": "https://lo98.barondecont.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 12:20:14 UTC", "last_seen": "2026-04-01 12:20:14 UTC", "sightings": 1 }, { "indicator": "https://ossapp.suning.com/pcoss/dl/PPTV(pplive)_forap_1084_9993.exe", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-04-01 12:19:53 UTC", "last_seen": "2026-04-01 12:19:53 UTC", "sightings": 1 }, { "indicator": "https://www.telecomsa.xyz/taptapsend.apk", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-04-01 12:19:42 UTC", "last_seen": "2026-04-01 12:19:42 UTC", "sightings": 1 }, { "indicator": "https://m.hy-union.com/file/ueditor/php/upload/file/20250114/x1/REF-CLI%20v1.0.3.exe", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-04-01 12:19:40 UTC", "last_seen": "2026-04-01 12:19:40 UTC", "sightings": 1 }, { "indicator": "http://115.51.33.139:53835/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 12:19:18 UTC", "last_seen": "2026-04-01 12:19:18 UTC", "sightings": 1 }, { "indicator": "https://telecomsa.xyz/taptapsend.apk", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-04-01 12:19:17 UTC", "last_seen": "2026-04-01 12:19:17 UTC", "sightings": 1 }, { "indicator": "https://jem-mialwe.org/WORDPRESS%202026.zip", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-04-01 12:19:11 UTC", "last_seen": "2026-04-01 12:19:11 UTC", "sightings": 1 }, { "indicator": "https://dz7shop.com/TriggerFinder_DZ7.exe", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-04-01 12:19:11 UTC", "last_seen": "2026-04-01 12:19:11 UTC", "sightings": 1 }, { "indicator": "https://pub-563376bbe356408a8c67e226123a6095.r2.dev/ScreenConnect.ClientSetup.msi", "indicator_type": "url", "source": "URLhaus", "tags": [ "connectwise" ], "first_seen": "2026-04-01 12:19:11 UTC", "last_seen": "2026-04-01 12:19:11 UTC", "sightings": 1 }, { "indicator": "https://marcuswelbyclinic.click/final-payload/ligolo_172.28.16.169.exe", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-04-01 12:19:10 UTC", "last_seen": "2026-04-01 12:19:10 UTC", "sightings": 1 }, { "indicator": "https://keilo-jermailer.org/WORDPRESS%202026.zip", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-04-01 12:19:10 UTC", "last_seen": "2026-04-01 12:19:10 UTC", "sightings": 1 }, { "indicator": "https://marcuswelbyclinic.click/ligolo_172.28.16.169.exe", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-04-01 12:19:10 UTC", "last_seen": "2026-04-01 12:19:10 UTC", "sightings": 1 }, { "indicator": "https://lejrmakei.com/WORDPRESS%202026.zip", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-04-01 12:19:08 UTC", "last_seen": "2026-04-01 12:19:08 UTC", "sightings": 1 }, { "indicator": "https://sprucethorn.barondecont.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 12:13:10 UTC", "last_seen": "2026-04-01 12:13:10 UTC", "sightings": 1 }, { "indicator": "http://119.183.25.133:49085/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 12:11:19 UTC", "last_seen": "2026-04-01 12:11:19 UTC", "sightings": 1 }, { "indicator": "http://175.150.79.16:55160/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 12:08:18 UTC", "last_seen": "2026-04-01 12:08:18 UTC", "sightings": 1 }, { "indicator": "https://h4rb-loop.barondecont.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 12:07:12 UTC", "last_seen": "2026-04-01 12:07:12 UTC", "sightings": 1 }, { "indicator": "https://crirn4-point.barondecont.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 12:00:14 UTC", "last_seen": "2026-04-01 12:00:14 UTC", "sightings": 1 }, { "indicator": "http://115.49.79.227:45272/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 11:57:10 UTC", "last_seen": "2026-04-01 11:57:10 UTC", "sightings": 1 }, { "indicator": "http://123.8.94.184:38216/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-04-01 11:57:06 UTC", "last_seen": "2026-04-01 11:57:06 UTC", "sightings": 1 }, { "indicator": "https://calmion.barondecont.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 11:53:12 UTC", "last_seen": "2026-04-01 11:53:12 UTC", "sightings": 1 }, { "indicator": "http://42.239.227.212:58225/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 11:52:21 UTC", "last_seen": "2026-04-01 11:52:21 UTC", "sightings": 1 }, { "indicator": "https://qobavx3.barondecont.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 11:47:11 UTC", "last_seen": "2026-04-01 11:47:11 UTC", "sightings": 1 }, { "indicator": "http://85.239.147.6/files/8301037712/kjhNIxP.bat", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-04-01 11:44:05 UTC", "last_seen": "2026-04-01 11:44:05 UTC", "sightings": 1 }, { "indicator": "http://110.39.244.189:48732/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-04-01 11:42:06 UTC", "last_seen": "2026-04-01 11:42:06 UTC", "sightings": 1 }, { "indicator": "https://neo-d3v.vivatwoman.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 11:41:11 UTC", "last_seen": "2026-04-01 11:41:11 UTC", "sightings": 1 }, { "indicator": "http://110.37.69.76:57519/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-01 11:36:16 UTC", "last_seen": "2026-04-01 11:36:16 UTC", "sightings": 1 }, { "indicator": "http://219.156.23.161:46171/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 11:35:21 UTC", "last_seen": "2026-04-01 11:35:21 UTC", "sightings": 1 }, { "indicator": "https://norvenix2.vivatwoman.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 11:33:15 UTC", "last_seen": "2026-04-01 11:33:15 UTC", "sightings": 1 }, { "indicator": "http://219.157.52.60:45020/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 11:30:21 UTC", "last_seen": "2026-04-01 11:30:21 UTC", "sightings": 1 }, { "indicator": "https://lumnexen7.vivatwoman.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 11:28:14 UTC", "last_seen": "2026-04-01 11:28:14 UTC", "sightings": 1 }, { "indicator": "https://6jamieya.vivatwoman.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 11:21:12 UTC", "last_seen": "2026-04-01 11:21:12 UTC", "sightings": 1 }, { "indicator": "http://110.37.106.148:50795/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-01 11:20:18 UTC", "last_seen": "2026-04-01 11:20:18 UTC", "sightings": 1 }, { "indicator": "https://solcresten2.vivatwoman.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 11:14:12 UTC", "last_seen": "2026-04-01 11:14:12 UTC", "sightings": 1 }, { "indicator": "http://123.10.68.78:60783/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-01 11:13:18 UTC", "last_seen": "2026-04-01 11:13:18 UTC", "sightings": 1 }, { "indicator": "http://123.8.94.184:38216/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 11:08:18 UTC", "last_seen": "2026-04-01 11:08:18 UTC", "sightings": 1 }, { "indicator": "http://110.39.233.226:41288/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 11:07:18 UTC", "last_seen": "2026-04-01 11:07:18 UTC", "sightings": 1 }, { "indicator": "https://wild-mount.vivatwoman.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 11:07:11 UTC", "last_seen": "2026-04-01 11:07:11 UTC", "sightings": 1 }, { "indicator": "http://219.157.52.60:45020/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 11:03:20 UTC", "last_seen": "2026-04-01 11:03:20 UTC", "sightings": 1 }, { "indicator": "https://kxep42pp.driveaway.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 11:00:12 UTC", "last_seen": "2026-04-01 11:00:12 UTC", "sightings": 1 }, { "indicator": "https://choru5-hinge.driveaway.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 10:55:29 UTC", "last_seen": "2026-04-01 10:55:29 UTC", "sightings": 1 }, { "indicator": "http://110.37.106.148:50795/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-01 10:55:18 UTC", "last_seen": "2026-04-01 10:55:18 UTC", "sightings": 1 }, { "indicator": "http://175.150.79.16:55160/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 10:53:22 UTC", "last_seen": "2026-04-01 10:53:22 UTC", "sightings": 1 }, { "indicator": "https://compilpow.driveaway.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 10:47:11 UTC", "last_seen": "2026-04-01 10:47:11 UTC", "sightings": 1 }, { "indicator": "http://123.10.68.78:60783/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-01 10:43:23 UTC", "last_seen": "2026-04-01 10:43:23 UTC", "sightings": 1 }, { "indicator": "https://nppw50at.driveaway.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 10:41:14 UTC", "last_seen": "2026-04-01 10:41:14 UTC", "sightings": 1 }, { "indicator": "https://wzovragk.driveaway.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 10:34:13 UTC", "last_seen": "2026-04-01 10:34:13 UTC", "sightings": 1 }, { "indicator": "https://soft-glob.driveaway.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 10:27:14 UTC", "last_seen": "2026-04-01 10:27:14 UTC", "sightings": 1 }, { "indicator": "https://loud-cloud.brillwhistleb.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 10:20:13 UTC", "last_seen": "2026-04-01 10:20:13 UTC", "sightings": 1 }, { "indicator": "http://182.123.208.44:35961/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-04-01 10:17:08 UTC", "last_seen": "2026-04-01 10:17:08 UTC", "sightings": 1 }, { "indicator": "https://emacra.com/GoogleChrome_1.1.1_new.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-04-01 10:16:13 UTC", "last_seen": "2026-04-01 10:16:13 UTC", "sightings": 1 }, { "indicator": "https://wind-flow.brillwhistleb.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 10:14:12 UTC", "last_seen": "2026-04-01 10:14:12 UTC", "sightings": 1 }, { "indicator": "https://alert-svc.brillwhistleb.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 10:08:28 UTC", "last_seen": "2026-04-01 10:08:28 UTC", "sightings": 1 }, { "indicator": "http://125.44.252.55:46814/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 10:02:18 UTC", "last_seen": "2026-04-01 10:02:18 UTC", "sightings": 1 }, { "indicator": "https://signal-box.brillwhistleb.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 10:02:10 UTC", "last_seen": "2026-04-01 10:02:10 UTC", "sightings": 1 }, { "indicator": "http://182.116.21.30:51230/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-04-01 10:02:07 UTC", "last_seen": "2026-04-01 10:02:07 UTC", "sightings": 1 }, { "indicator": "https://tune-api.brillwhistleb.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 09:55:12 UTC", "last_seen": "2026-04-01 09:55:12 UTC", "sightings": 1 }, { "indicator": "https://high-note.brillwhistleb.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 09:48:12 UTC", "last_seen": "2026-04-01 09:48:12 UTC", "sightings": 1 }, { "indicator": "http://115.49.79.227:45272/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 09:45:27 UTC", "last_seen": "2026-04-01 09:45:27 UTC", "sightings": 1 }, { "indicator": "https://yield-hub.combinekabisia.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 09:42:11 UTC", "last_seen": "2026-04-01 09:42:11 UTC", "sightings": 1 }, { "indicator": "http://110.37.2.210:47240/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 09:40:09 UTC", "last_seen": "2026-04-01 09:40:09 UTC", "sightings": 1 }, { "indicator": "https://crop-trace.combinekabisia.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 09:37:11 UTC", "last_seen": "2026-04-01 09:37:11 UTC", "sightings": 1 }, { "indicator": "http://175.173.142.44:57750/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 09:35:13 UTC", "last_seen": "2026-04-01 09:35:13 UTC", "sightings": 1 }, { "indicator": "http://125.44.252.55:46814/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 09:35:13 UTC", "last_seen": "2026-04-01 09:35:13 UTC", "sightings": 1 }, { "indicator": "https://harvest-api.combinekabisia.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 09:33:21 UTC", "last_seen": "2026-04-01 09:33:21 UTC", "sightings": 1 }, { "indicator": "https://field-scan.combinekabisia.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 09:33:21 UTC", "last_seen": "2026-04-01 09:33:21 UTC", "sightings": 1 }, { "indicator": "https://grain-store.combinekabisia.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 09:33:20 UTC", "last_seen": "2026-04-01 09:33:20 UTC", "sightings": 1 }, { "indicator": "http://218.24.63.78:47588/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 09:33:14 UTC", "last_seen": "2026-04-01 09:33:14 UTC", "sightings": 1 }, { "indicator": "https://mybiggestjoy.bond/api/index.php?a=dl&token=fcdd5b796fbf5cb5614da7aaa4773fb404771c4821e4b8d30305ed8df58a2188&src=trindade.pe.gov.br&mode=cloudflare", "indicator_type": "url", "source": "URLhaus", "tags": [ "exe", "Vidar" ], "first_seen": "2026-04-01 09:33:12 UTC", "last_seen": "2026-04-01 09:33:12 UTC", "sightings": 1 }, { "indicator": "http://82.23.183.167/ohshit.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-04-01 09:33:10 UTC", "last_seen": "2026-04-01 09:33:10 UTC", "sightings": 1 }, { "indicator": "http://5.175.223.249/data.x86_64", "indicator_type": "url", "source": "URLhaus", "tags": [ "DDoSAgent" ], "first_seen": "2026-04-01 09:33:10 UTC", "last_seen": "2026-04-01 09:33:10 UTC", "sightings": 1 }, { "indicator": "http://5.175.223.249/data.x86", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-04-01 09:33:10 UTC", "last_seen": "2026-04-01 09:33:10 UTC", "sightings": 1 }, { "indicator": "http://159.253.120.149:81/bins.mipsle", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-04-01 09:33:10 UTC", "last_seen": "2026-04-01 09:33:10 UTC", "sightings": 1 }, { "indicator": "http://82.23.183.167/hiddenbin/boatnet.mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-04-01 09:33:09 UTC", "last_seen": "2026-04-01 09:33:09 UTC", "sightings": 1 }, { "indicator": "http://82.23.183.167/hiddenbin/boatnet.arm", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-04-01 09:33:09 UTC", "last_seen": "2026-04-01 09:33:09 UTC", "sightings": 1 }, { "indicator": "http://82.23.183.167/hiddenbin/boatnet.sh4", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-04-01 09:33:09 UTC", "last_seen": "2026-04-01 09:33:09 UTC", "sightings": 1 }, { "indicator": "http://5.175.223.249/data.arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-04-01 09:33:09 UTC", "last_seen": "2026-04-01 09:33:09 UTC", "sightings": 1 }, { "indicator": "http://105.184.169.34:56291/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-04-01 09:33:09 UTC", "last_seen": "2026-04-01 09:33:09 UTC", "sightings": 1 }, { "indicator": "http://5.175.223.249/data.powerpc", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-04-01 09:33:09 UTC", "last_seen": "2026-04-01 09:33:09 UTC", "sightings": 1 }, { "indicator": "http://5.175.223.249/data.mipsel-uclibc", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-04-01 09:33:09 UTC", "last_seen": "2026-04-01 09:33:09 UTC", "sightings": 1 }, { "indicator": "http://5.175.223.249/data.mipsel", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-04-01 09:33:09 UTC", "last_seen": "2026-04-01 09:33:09 UTC", "sightings": 1 }, { "indicator": "http://82.23.183.167/hiddenbin/boatnet.arm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-04-01 09:33:09 UTC", "last_seen": "2026-04-01 09:33:09 UTC", "sightings": 1 }, { "indicator": "https://winston1.rf.gd/img_201258.png", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-04-01 09:33:09 UTC", "last_seen": "2026-04-01 09:33:09 UTC", "sightings": 1 }, { "indicator": "http://82.23.183.167/hiddenbin/boatnet.ppc", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-04-01 09:33:09 UTC", "last_seen": "2026-04-01 09:33:09 UTC", "sightings": 1 }, { "indicator": "http://5.175.223.249/data.mips-uclibc", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-04-01 09:33:09 UTC", "last_seen": "2026-04-01 09:33:09 UTC", "sightings": 1 }, { "indicator": "http://82.23.183.167/hiddenbin/boatnet.i686", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-04-01 09:18:20 UTC", "last_seen": "2026-04-01 09:18:20 UTC", "sightings": 1 }, { "indicator": "http://115.57.42.132:55074/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 09:18:18 UTC", "last_seen": "2026-04-01 09:18:18 UTC", "sightings": 1 }, { "indicator": "http://82.23.183.167/hiddenbin/boatnet.x86_64", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-04-01 09:18:16 UTC", "last_seen": "2026-04-01 09:18:16 UTC", "sightings": 1 }, { "indicator": "http://82.23.183.167/hiddenbin/boatnet.i468", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-04-01 09:18:16 UTC", "last_seen": "2026-04-01 09:18:16 UTC", "sightings": 1 }, { "indicator": "https://winston1.rf.gd/img_215835.png", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-04-01 09:18:12 UTC", "last_seen": "2026-04-01 09:18:12 UTC", "sightings": 1 }, { "indicator": "https://winston1.rf.gd/img_143439.png", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-04-01 09:18:11 UTC", "last_seen": "2026-04-01 09:18:11 UTC", "sightings": 1 }, { "indicator": "http://82.23.183.167/hiddenbin/boatnet.arc", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-04-01 09:18:10 UTC", "last_seen": "2026-04-01 09:18:10 UTC", "sightings": 1 }, { "indicator": "http://82.23.183.167/hiddenbin/boatnet.arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-04-01 09:18:10 UTC", "last_seen": "2026-04-01 09:18:10 UTC", "sightings": 1 }, { "indicator": "http://82.23.183.167/hiddenbin/boatnet.arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-04-01 09:18:10 UTC", "last_seen": "2026-04-01 09:18:10 UTC", "sightings": 1 }, { "indicator": "http://82.23.183.167/hiddenbin/boatnet.spc", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-04-01 09:18:10 UTC", "last_seen": "2026-04-01 09:18:10 UTC", "sightings": 1 }, { "indicator": "http://82.23.183.167/hiddenbin/boatnet.m68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-04-01 09:18:10 UTC", "last_seen": "2026-04-01 09:18:10 UTC", "sightings": 1 }, { "indicator": "http://5.175.223.249/data.arm4", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-04-01 09:18:10 UTC", "last_seen": "2026-04-01 09:18:10 UTC", "sightings": 1 }, { "indicator": "http://5.175.223.249/data.mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-04-01 09:18:10 UTC", "last_seen": "2026-04-01 09:18:10 UTC", "sightings": 1 }, { "indicator": "http://82.23.183.167/hiddenbin/boatnet.x86", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-04-01 09:18:10 UTC", "last_seen": "2026-04-01 09:18:10 UTC", "sightings": 1 }, { "indicator": "http://82.23.183.167/hiddenbin/boatnet.mpsl", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-04-01 09:18:10 UTC", "last_seen": "2026-04-01 09:18:10 UTC", "sightings": 1 }, { "indicator": "http://5.175.223.249/data.arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-04-01 09:18:10 UTC", "last_seen": "2026-04-01 09:18:10 UTC", "sightings": 1 }, { "indicator": "http://5.175.223.249/data.arm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-04-01 09:18:10 UTC", "last_seen": "2026-04-01 09:18:10 UTC", "sightings": 1 }, { "indicator": "http://5.175.223.249/data.aarch64", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-04-01 09:18:10 UTC", "last_seen": "2026-04-01 09:18:10 UTC", "sightings": 1 }, { "indicator": "http://my-xarid.com/api/v5/client32.ini", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-04-01 09:18:08 UTC", "last_seen": "2026-04-01 09:18:08 UTC", "sightings": 1 }, { "indicator": "http://103.79.79.21:8899/dl/updater", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-04-01 09:18:08 UTC", "last_seen": "2026-04-01 09:18:08 UTC", "sightings": 1 }, { "indicator": "http://my-xarid.com/api/v5/NSM.lic", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-04-01 09:18:06 UTC", "last_seen": "2026-04-01 09:18:06 UTC", "sightings": 1 }, { "indicator": "https://farm-logic.combinekabisia.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 09:15:13 UTC", "last_seen": "2026-04-01 09:15:13 UTC", "sightings": 1 }, { "indicator": "http://182.127.124.243:60222/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 09:14:20 UTC", "last_seen": "2026-04-01 09:14:20 UTC", "sightings": 1 }, { "indicator": "http://219.155.83.117:59085/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 09:12:10 UTC", "last_seen": "2026-04-01 09:12:10 UTC", "sightings": 1 }, { "indicator": "http://182.116.21.30:51230/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-04-01 09:12:07 UTC", "last_seen": "2026-04-01 09:12:07 UTC", "sightings": 1 }, { "indicator": "https://root-source.maknothplacenta.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 09:08:12 UTC", "last_seen": "2026-04-01 09:08:12 UTC", "sightings": 1 }, { "indicator": "http://175.173.142.44:57750/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 09:06:10 UTC", "last_seen": "2026-04-01 09:06:10 UTC", "sightings": 1 }, { "indicator": "http://115.56.146.227:48954/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 09:04:18 UTC", "last_seen": "2026-04-01 09:04:18 UTC", "sightings": 1 }, { "indicator": "https://health-node.maknothplacenta.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 09:03:10 UTC", "last_seen": "2026-04-01 09:03:10 UTC", "sightings": 1 }, { "indicator": "http://27.37.81.240:37090/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 09:01:11 UTC", "last_seen": "2026-04-01 09:01:11 UTC", "sightings": 1 }, { "indicator": "https://organ-sync.maknothplacenta.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 08:59:09 UTC", "last_seen": "2026-04-01 08:59:09 UTC", "sightings": 1 }, { "indicator": "https://cell-logic.maknothplacenta.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 08:52:10 UTC", "last_seen": "2026-04-01 08:52:10 UTC", "sightings": 1 }, { "indicator": "https://life-cycle.maknothplacenta.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 08:46:11 UTC", "last_seen": "2026-04-01 08:46:11 UTC", "sightings": 1 }, { "indicator": "http://219.155.83.117:59085/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 08:42:20 UTC", "last_seen": "2026-04-01 08:42:20 UTC", "sightings": 1 }, { "indicator": "http://182.127.124.243:60222/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 08:41:21 UTC", "last_seen": "2026-04-01 08:41:21 UTC", "sightings": 1 }, { "indicator": "https://bio-record.maknothplacenta.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 08:41:10 UTC", "last_seen": "2026-04-01 08:41:10 UTC", "sightings": 1 }, { "indicator": "http://59.42.91.119:44019/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 08:40:13 UTC", "last_seen": "2026-04-01 08:40:13 UTC", "sightings": 1 }, { "indicator": "http://110.36.80.169:50896/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 08:37:23 UTC", "last_seen": "2026-04-01 08:37:23 UTC", "sightings": 1 }, { "indicator": "https://wave-form.lohsmacknon.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 08:35:13 UTC", "last_seen": "2026-04-01 08:35:13 UTC", "sightings": 1 }, { "indicator": "http://218.24.63.78:47588/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 08:33:24 UTC", "last_seen": "2026-04-01 08:33:24 UTC", "sightings": 1 }, { "indicator": "https://audio-path.lohsmacknon.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 08:29:11 UTC", "last_seen": "2026-04-01 08:29:11 UTC", "sightings": 1 }, { "indicator": "https://noise-gate.lohsmacknon.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 08:24:20 UTC", "last_seen": "2026-04-01 08:24:20 UTC", "sightings": 1 }, { "indicator": "http://105.184.97.119:46929/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-01 08:22:09 UTC", "last_seen": "2026-04-01 08:22:09 UTC", "sightings": 1 }, { "indicator": "https://echo-relay.lohsmacknon.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 08:18:09 UTC", "last_seen": "2026-04-01 08:18:09 UTC", "sightings": 1 }, { "indicator": "https://bass-boost.lohsmacknon.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 08:12:11 UTC", "last_seen": "2026-04-01 08:12:11 UTC", "sightings": 1 }, { "indicator": "http://39.61.38.75:36056/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 08:10:48 UTC", "last_seen": "2026-04-01 08:10:48 UTC", "sightings": 1 }, { "indicator": "http://110.36.80.169:50896/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 08:09:18 UTC", "last_seen": "2026-04-01 08:09:18 UTC", "sightings": 1 }, { "indicator": "http://112.248.108.163:51375/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 08:08:22 UTC", "last_seen": "2026-04-01 08:08:22 UTC", "sightings": 1 }, { "indicator": "http://110.36.26.29:48815/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 08:06:17 UTC", "last_seen": "2026-04-01 08:06:17 UTC", "sightings": 1 }, { "indicator": "https://sound-check.lohsmacknon.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 08:06:09 UTC", "last_seen": "2026-04-01 08:06:09 UTC", "sightings": 1 }, { "indicator": "http://31.208.67.180:33161/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 08:03:14 UTC", "last_seen": "2026-04-01 08:03:14 UTC", "sightings": 1 }, { "indicator": "https://def-system.fighttrapper.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 08:02:12 UTC", "last_seen": "2026-04-01 08:02:12 UTC", "sightings": 1 }, { "indicator": "http://31.208.67.180:33161/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 08:02:12 UTC", "last_seen": "2026-04-01 08:02:12 UTC", "sightings": 1 }, { "indicator": "https://target-api.fighttrapper.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 07:56:10 UTC", "last_seen": "2026-04-01 07:56:10 UTC", "sightings": 1 }, { "indicator": "http://59.184.247.189:54682/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-04-01 07:52:08 UTC", "last_seen": "2026-04-01 07:52:08 UTC", "sightings": 1 }, { "indicator": "https://secure-hit.fighttrapper.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 07:50:12 UTC", "last_seen": "2026-04-01 07:50:12 UTC", "sightings": 1 }, { "indicator": "https://catch-node.fighttrapper.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 07:45:11 UTC", "last_seen": "2026-04-01 07:45:11 UTC", "sightings": 1 }, { "indicator": "http://39.61.38.75:36056/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 07:43:21 UTC", "last_seen": "2026-04-01 07:43:21 UTC", "sightings": 1 }, { "indicator": "http://110.36.26.29:48815/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 07:42:11 UTC", "last_seen": "2026-04-01 07:42:11 UTC", "sightings": 1 }, { "indicator": "http://59.184.247.189:54682/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-04-01 07:42:09 UTC", "last_seen": "2026-04-01 07:42:09 UTC", "sightings": 1 }, { "indicator": "https://cage-match.fighttrapper.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 07:39:08 UTC", "last_seen": "2026-04-01 07:39:08 UTC", "sightings": 1 }, { "indicator": "http://42.228.35.251:36567/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 07:38:17 UTC", "last_seen": "2026-04-01 07:38:17 UTC", "sightings": 1 }, { "indicator": "http://105.184.169.34:56291/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-04-01 07:37:08 UTC", "last_seen": "2026-04-01 07:37:08 UTC", "sightings": 1 }, { "indicator": "https://action-log.fighttrapper.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 07:34:11 UTC", "last_seen": "2026-04-01 07:34:11 UTC", "sightings": 1 }, { "indicator": "http://123.130.102.43:57905/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-01 07:33:41 UTC", "last_seen": "2026-04-01 07:33:41 UTC", "sightings": 1 }, { "indicator": "https://video-drop.cameoinfusion.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 07:32:10 UTC", "last_seen": "2026-04-01 07:32:10 UTC", "sightings": 1 }, { "indicator": "https://blend-master.cameoinfusion.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 07:22:09 UTC", "last_seen": "2026-04-01 07:22:09 UTC", "sightings": 1 }, { "indicator": "http://115.56.146.227:48954/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 07:19:16 UTC", "last_seen": "2026-04-01 07:19:16 UTC", "sightings": 1 }, { "indicator": "http://95.106.58.28:4563/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 07:17:10 UTC", "last_seen": "2026-04-01 07:17:10 UTC", "sightings": 1 }, { "indicator": "https://color-mix.cameoinfusion.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 07:16:08 UTC", "last_seen": "2026-04-01 07:16:08 UTC", "sightings": 1 }, { "indicator": "http://120.61.159.67:44100/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 07:15:19 UTC", "last_seen": "2026-04-01 07:15:19 UTC", "sightings": 1 }, { "indicator": "http://110.37.65.231:57937/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 07:13:10 UTC", "last_seen": "2026-04-01 07:13:10 UTC", "sightings": 1 }, { "indicator": "http://123.130.102.43:57905/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-01 07:12:37 UTC", "last_seen": "2026-04-01 07:12:37 UTC", "sightings": 1 }, { "indicator": "https://style-sync.cameoinfusion.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 07:10:12 UTC", "last_seen": "2026-04-01 07:10:12 UTC", "sightings": 1 }, { "indicator": "http://110.36.77.19:59294/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 07:08:19 UTC", "last_seen": "2026-04-01 07:08:19 UTC", "sightings": 1 }, { "indicator": "http://110.37.37.232:58298/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 07:07:20 UTC", "last_seen": "2026-04-01 07:07:20 UTC", "sightings": 1 }, { "indicator": "https://art-portal.cameoinfusion.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 07:05:09 UTC", "last_seen": "2026-04-01 07:05:09 UTC", "sightings": 1 }, { "indicator": "https://small-frame.cameoinfusion.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 07:00:11 UTC", "last_seen": "2026-04-01 07:00:11 UTC", "sightings": 1 }, { "indicator": "https://silk-route.industtarant.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 06:54:08 UTC", "last_seen": "2026-04-01 06:54:08 UTC", "sightings": 1 }, { "indicator": "http://110.37.65.231:57937/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 06:50:18 UTC", "last_seen": "2026-04-01 06:50:18 UTC", "sightings": 1 }, { "indicator": "http://222.139.91.193:41173/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-01 06:48:15 UTC", "last_seen": "2026-04-01 06:48:15 UTC", "sightings": 1 }, { "indicator": "https://venom-dev.industtarant.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 06:48:09 UTC", "last_seen": "2026-04-01 06:48:09 UTC", "sightings": 1 }, { "indicator": "https://heavy-link.industtarant.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 06:43:08 UTC", "last_seen": "2026-04-01 06:43:08 UTC", "sightings": 1 }, { "indicator": "http://120.61.159.67:44100/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 06:41:23 UTC", "last_seen": "2026-04-01 06:41:23 UTC", "sightings": 1 }, { "indicator": "http://110.37.37.232:58298/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 06:37:19 UTC", "last_seen": "2026-04-01 06:37:19 UTC", "sightings": 1 }, { "indicator": "https://factory-io.industtarant.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 06:37:11 UTC", "last_seen": "2026-04-01 06:37:11 UTC", "sightings": 1 }, { "indicator": "https://web-crawl.industtarant.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 06:32:13 UTC", "last_seen": "2026-04-01 06:32:13 UTC", "sightings": 1 }, { "indicator": "http://123.5.186.103:46489/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 06:30:11 UTC", "last_seen": "2026-04-01 06:30:11 UTC", "sightings": 1 }, { "indicator": "https://spider-net.industtarant.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 06:25:14 UTC", "last_seen": "2026-04-01 06:25:14 UTC", "sightings": 1 }, { "indicator": "https://skin-proxy.dervishpeel.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 06:21:11 UTC", "last_seen": "2026-04-01 06:21:11 UTC", "sightings": 1 }, { "indicator": "http://123.188.208.44:43571/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 06:20:19 UTC", "last_seen": "2026-04-01 06:20:19 UTC", "sightings": 1 }, { "indicator": "http://182.116.51.135:53112/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 06:18:15 UTC", "last_seen": "2026-04-01 06:18:15 UTC", "sightings": 1 }, { "indicator": "https://rotate-node.dervishpeel.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 06:15:10 UTC", "last_seen": "2026-04-01 06:15:10 UTC", "sightings": 1 }, { "indicator": "http://222.141.132.225:55882/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 06:12:25 UTC", "last_seen": "2026-04-01 06:12:25 UTC", "sightings": 1 }, { "indicator": "http://116.140.24.61:53395/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-04-01 06:12:08 UTC", "last_seen": "2026-04-01 06:12:08 UTC", "sightings": 1 }, { "indicator": "https://core-wrap.dervishpeel.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 06:09:08 UTC", "last_seen": "2026-04-01 06:09:08 UTC", "sightings": 1 }, { "indicator": "http://123.5.186.103:46489/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 06:03:20 UTC", "last_seen": "2026-04-01 06:03:20 UTC", "sightings": 1 }, { "indicator": "https://outer-shell.dervishpeel.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 06:03:08 UTC", "last_seen": "2026-04-01 06:03:08 UTC", "sightings": 1 }, { "indicator": "http://117.211.211.140:53242/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 05:59:18 UTC", "last_seen": "2026-04-01 05:59:18 UTC", "sightings": 1 }, { "indicator": "http://119.99.87.112:36295/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-04-01 05:58:10 UTC", "last_seen": "2026-04-01 05:58:10 UTC", "sightings": 1 }, { "indicator": "https://layer-check.dervishpeel.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 05:58:10 UTC", "last_seen": "2026-04-01 05:58:10 UTC", "sightings": 1 }, { "indicator": "http://119.4.9.144:60731/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-04-01 05:58:08 UTC", "last_seen": "2026-04-01 05:58:08 UTC", "sightings": 1 }, { "indicator": "http://111.38.106.19:56345/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-04-01 05:58:08 UTC", "last_seen": "2026-04-01 05:58:08 UTC", "sightings": 1 }, { "indicator": "http://119.180.80.59:59135/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-04-01 05:58:07 UTC", "last_seen": "2026-04-01 05:58:07 UTC", "sightings": 1 }, { "indicator": "http://58.65.215.0:42294/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-04-01 05:57:28 UTC", "last_seen": "2026-04-01 05:57:28 UTC", "sightings": 1 }, { "indicator": "http://119.99.87.112:36295/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-04-01 05:57:10 UTC", "last_seen": "2026-04-01 05:57:10 UTC", "sightings": 1 }, { "indicator": "http://42.7.204.242:38970/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-04-01 05:57:09 UTC", "last_seen": "2026-04-01 05:57:09 UTC", "sightings": 1 }, { "indicator": "http://112.248.114.139:46329/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-04-01 05:57:09 UTC", "last_seen": "2026-04-01 05:57:09 UTC", "sightings": 1 }, { "indicator": "http://222.142.254.165:41922/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-04-01 05:57:09 UTC", "last_seen": "2026-04-01 05:57:09 UTC", "sightings": 1 }, { "indicator": "http://175.146.158.112:45519/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-04-01 05:57:09 UTC", "last_seen": "2026-04-01 05:57:09 UTC", "sightings": 1 }, { "indicator": "http://42.6.253.116:46861/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-04-01 05:57:09 UTC", "last_seen": "2026-04-01 05:57:09 UTC", "sightings": 1 }, { "indicator": "http://180.190.185.44:51322/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-04-01 05:57:09 UTC", "last_seen": "2026-04-01 05:57:09 UTC", "sightings": 1 }, { "indicator": "http://123.12.236.218:35105/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-04-01 05:57:09 UTC", "last_seen": "2026-04-01 05:57:09 UTC", "sightings": 1 }, { "indicator": "http://123.12.236.218:35105/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-04-01 05:57:09 UTC", "last_seen": "2026-04-01 05:57:09 UTC", "sightings": 1 }, { "indicator": "http://182.122.236.22:56302/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-04-01 05:57:08 UTC", "last_seen": "2026-04-01 05:57:08 UTC", "sightings": 1 }, { "indicator": "http://110.37.117.225:49671/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-04-01 05:57:08 UTC", "last_seen": "2026-04-01 05:57:08 UTC", "sightings": 1 }, { "indicator": "http://110.39.246.84:49487/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-04-01 05:57:08 UTC", "last_seen": "2026-04-01 05:57:08 UTC", "sightings": 1 }, { "indicator": "http://110.39.244.189:48732/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-04-01 05:57:08 UTC", "last_seen": "2026-04-01 05:57:08 UTC", "sightings": 1 }, { "indicator": "http://42.59.232.40:40757/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-04-01 05:57:08 UTC", "last_seen": "2026-04-01 05:57:08 UTC", "sightings": 1 }, { "indicator": "http://180.157.55.73:39040/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-04-01 05:56:21 UTC", "last_seen": "2026-04-01 05:56:21 UTC", "sightings": 1 }, { "indicator": "http://111.38.106.19:56345/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-04-01 05:56:20 UTC", "last_seen": "2026-04-01 05:56:20 UTC", "sightings": 1 }, { "indicator": "http://175.146.158.112:45519/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-04-01 05:56:10 UTC", "last_seen": "2026-04-01 05:56:10 UTC", "sightings": 1 }, { "indicator": "http://119.4.9.144:60731/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-04-01 05:56:10 UTC", "last_seen": "2026-04-01 05:56:10 UTC", "sightings": 1 }, { "indicator": "http://110.37.25.44:35836/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-04-01 05:56:09 UTC", "last_seen": "2026-04-01 05:56:09 UTC", "sightings": 1 }, { "indicator": "http://113.228.152.60:50583/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-04-01 05:56:09 UTC", "last_seen": "2026-04-01 05:56:09 UTC", "sightings": 1 }, { "indicator": "http://112.248.108.163:51375/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-04-01 05:56:09 UTC", "last_seen": "2026-04-01 05:56:09 UTC", "sightings": 1 }, { "indicator": "http://27.215.52.223:40856/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-04-01 05:56:09 UTC", "last_seen": "2026-04-01 05:56:09 UTC", "sightings": 1 }, { "indicator": "http://27.215.52.223:40856/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-04-01 05:56:09 UTC", "last_seen": "2026-04-01 05:56:09 UTC", "sightings": 1 }, { "indicator": "http://115.54.104.8:51742/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-04-01 05:56:09 UTC", "last_seen": "2026-04-01 05:56:09 UTC", "sightings": 1 }, { "indicator": "http://195.46.162.175:36171/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-04-01 05:56:09 UTC", "last_seen": "2026-04-01 05:56:09 UTC", "sightings": 1 }, { "indicator": "http://115.54.104.8:51742/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-04-01 05:56:09 UTC", "last_seen": "2026-04-01 05:56:09 UTC", "sightings": 1 }, { "indicator": "http://42.228.35.251:36567/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-04-01 05:56:09 UTC", "last_seen": "2026-04-01 05:56:09 UTC", "sightings": 1 }, { "indicator": "http://125.40.50.241:43073/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-04-01 05:56:09 UTC", "last_seen": "2026-04-01 05:56:09 UTC", "sightings": 1 }, { "indicator": "http://182.122.236.22:56302/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-04-01 05:56:09 UTC", "last_seen": "2026-04-01 05:56:09 UTC", "sightings": 1 }, { "indicator": "https://spin-cycle.dervishpeel.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 05:53:13 UTC", "last_seen": "2026-04-01 05:53:13 UTC", "sightings": 1 }, { "indicator": "http://117.211.211.140:53242/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 05:51:24 UTC", "last_seen": "2026-04-01 05:51:24 UTC", "sightings": 1 }, { "indicator": "http://123.188.208.44:43571/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 05:48:28 UTC", "last_seen": "2026-04-01 05:48:28 UTC", "sightings": 1 }, { "indicator": "http://110.39.251.209:43906/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 05:48:18 UTC", "last_seen": "2026-04-01 05:48:18 UTC", "sightings": 1 }, { "indicator": "https://source-log.needwatka.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 05:46:09 UTC", "last_seen": "2026-04-01 05:46:09 UTC", "sightings": 1 }, { "indicator": "https://1k8v3k3.online/pixel.js", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-04-01 05:46:07 UTC", "last_seen": "2026-04-01 05:46:07 UTC", "sightings": 1 }, { "indicator": "http://175.173.155.12:52416/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 05:45:26 UTC", "last_seen": "2026-04-01 05:45:26 UTC", "sightings": 1 }, { "indicator": "https://hydro-svc.needwatka.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 05:41:13 UTC", "last_seen": "2026-04-01 05:41:13 UTC", "sightings": 1 }, { "indicator": "http://182.116.51.135:53112/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 05:39:21 UTC", "last_seen": "2026-04-01 05:39:21 UTC", "sightings": 1 }, { "indicator": "http://117.235.227.117:59511/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 05:37:20 UTC", "last_seen": "2026-04-01 05:37:20 UTC", "sightings": 1 }, { "indicator": "https://pump-ctrl.needwatka.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 05:37:08 UTC", "last_seen": "2026-04-01 05:37:08 UTC", "sightings": 1 }, { "indicator": "https://well-point.needwatka.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 05:34:08 UTC", "last_seen": "2026-04-01 05:34:08 UTC", "sightings": 1 }, { "indicator": "http://117.245.62.38:43183/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 05:31:10 UTC", "last_seen": "2026-04-01 05:31:10 UTC", "sightings": 1 }, { "indicator": "https://dropmb.com/api/shares/RKGB/files/0ca73971-de65-44a4-bf2e-121e9a077133", "indicator_type": "url", "source": "URLhaus", "tags": [ "ascii", "Encoded" ], "first_seen": "2026-04-01 05:24:13 UTC", "last_seen": "2026-04-01 05:24:13 UTC", "sightings": 1 }, { "indicator": "https://liquid-api.needwatka.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 05:24:11 UTC", "last_seen": "2026-04-01 05:24:11 UTC", "sightings": 1 }, { "indicator": "http://175.173.155.12:52416/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 05:21:30 UTC", "last_seen": "2026-04-01 05:21:30 UTC", "sightings": 1 }, { "indicator": "http://110.39.251.209:43906/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 05:20:21 UTC", "last_seen": "2026-04-01 05:20:21 UTC", "sightings": 1 }, { "indicator": "https://water-flow.needwatka.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 05:18:08 UTC", "last_seen": "2026-04-01 05:18:08 UTC", "sightings": 1 }, { "indicator": "http://222.136.143.101:57833/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 05:14:26 UTC", "last_seen": "2026-04-01 05:14:26 UTC", "sightings": 1 }, { "indicator": "https://site-connect.fetterland.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 05:13:07 UTC", "last_seen": "2026-04-01 05:13:07 UTC", "sightings": 1 }, { "indicator": "https://fence-logic.fetterland.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 05:08:09 UTC", "last_seen": "2026-04-01 05:08:09 UTC", "sightings": 1 }, { "indicator": "https://dfopetroleum.com/bins/RWBHGSQS.msi", "indicator_type": "url", "source": "URLhaus", "tags": [ "Arechclient2", "ClickFix", "HijackLoader" ], "first_seen": "2026-04-01 05:02:16 UTC", "last_seen": "2026-04-01 05:02:16 UTC", "sightings": 1 }, { "indicator": "https://2012.filemail.com/api/file/get?filekey=3Bc1FrI2tmhg1RY2vtfsjD5Qrhm25soto4juqCH1r9Oa_ULucj5OqmOeQGc", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-04-01 05:02:11 UTC", "last_seen": "2026-04-01 05:02:11 UTC", "sightings": 1 }, { "indicator": "https://dfopetroleum.com/bins/binas.txt", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClickFix", "HijackLoader" ], "first_seen": "2026-04-01 05:02:08 UTC", "last_seen": "2026-04-01 05:02:08 UTC", "sightings": 1 }, { "indicator": "https://soil-monitor.fetterland.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 05:02:08 UTC", "last_seen": "2026-04-01 05:02:08 UTC", "sightings": 1 }, { "indicator": "http://182.114.195.45:48590/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-04-01 05:02:07 UTC", "last_seen": "2026-04-01 05:02:07 UTC", "sightings": 1 }, { "indicator": "https://land-mark.fetterland.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 04:56:08 UTC", "last_seen": "2026-04-01 04:56:08 UTC", "sightings": 1 }, { "indicator": "https://area-scanner.fetterland.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 04:52:09 UTC", "last_seen": "2026-04-01 04:52:09 UTC", "sightings": 1 }, { "indicator": "http://110.39.249.68:46464/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 04:50:21 UTC", "last_seen": "2026-04-01 04:50:21 UTC", "sightings": 1 }, { "indicator": "https://border-gate.fetterland.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 04:49:11 UTC", "last_seen": "2026-04-01 04:49:11 UTC", "sightings": 1 }, { "indicator": "https://robot-api.mechaforge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 04:39:08 UTC", "last_seen": "2026-04-01 04:39:08 UTC", "sightings": 1 }, { "indicator": "http://117.245.62.38:43183/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 04:33:22 UTC", "last_seen": "2026-04-01 04:33:22 UTC", "sightings": 1 }, { "indicator": "https://steel-core.mechaforge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 04:33:09 UTC", "last_seen": "2026-04-01 04:33:09 UTC", "sightings": 1 }, { "indicator": "http://182.114.195.45:48590/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-04-01 04:32:08 UTC", "last_seen": "2026-04-01 04:32:08 UTC", "sightings": 1 }, { "indicator": "http://90.224.208.161:48263/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-04-01 04:32:06 UTC", "last_seen": "2026-04-01 04:32:06 UTC", "sightings": 1 }, { "indicator": "https://auto-build.mechaforge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 04:28:10 UTC", "last_seen": "2026-04-01 04:28:10 UTC", "sightings": 1 }, { "indicator": "https://power-plant.mechaforge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 04:22:07 UTC", "last_seen": "2026-04-01 04:22:07 UTC", "sightings": 1 }, { "indicator": "http://125.120.250.204:34459/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-01 04:20:27 UTC", "last_seen": "2026-04-01 04:20:27 UTC", "sightings": 1 }, { "indicator": "https://iron-works.mechaforge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 04:18:08 UTC", "last_seen": "2026-04-01 04:18:08 UTC", "sightings": 1 }, { "indicator": "http://221.15.190.63:56743/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 04:17:25 UTC", "last_seen": "2026-04-01 04:17:25 UTC", "sightings": 1 }, { "indicator": "https://heavy-duty.mechaforge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 04:12:13 UTC", "last_seen": "2026-04-01 04:12:13 UTC", "sightings": 1 }, { "indicator": "http://182.117.28.43:40473/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 04:07:19 UTC", "last_seen": "2026-04-01 04:07:19 UTC", "sightings": 1 }, { "indicator": "https://pilot-svc.aerovector.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 04:06:07 UTC", "last_seen": "2026-04-01 04:06:07 UTC", "sightings": 1 }, { "indicator": "https://alt-logic.aerovector.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 04:00:12 UTC", "last_seen": "2026-04-01 04:00:12 UTC", "sightings": 1 }, { "indicator": "http://125.41.0.211:57909/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 03:58:21 UTC", "last_seen": "2026-04-01 03:58:21 UTC", "sightings": 1 }, { "indicator": "https://wing-span.aerovector.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 03:54:08 UTC", "last_seen": "2026-04-01 03:54:08 UTC", "sightings": 1 }, { "indicator": "http://221.15.190.63:56743/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 03:51:10 UTC", "last_seen": "2026-04-01 03:51:10 UTC", "sightings": 1 }, { "indicator": "https://sky-route.aerovector.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 03:49:10 UTC", "last_seen": "2026-04-01 03:49:10 UTC", "sightings": 1 }, { "indicator": "http://110.39.235.67:44356/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-04-01 03:47:08 UTC", "last_seen": "2026-04-01 03:47:08 UTC", "sightings": 1 }, { "indicator": "https://air-traffic.aerovector.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 03:43:08 UTC", "last_seen": "2026-04-01 03:43:08 UTC", "sightings": 1 }, { "indicator": "http://182.117.28.43:40473/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 03:40:15 UTC", "last_seen": "2026-04-01 03:40:15 UTC", "sightings": 1 }, { "indicator": "https://flight-path.aerovector.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 03:37:08 UTC", "last_seen": "2026-04-01 03:37:08 UTC", "sightings": 1 }, { "indicator": "http://61.3.28.154:58810/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 03:36:19 UTC", "last_seen": "2026-04-01 03:36:19 UTC", "sightings": 1 }, { "indicator": "http://182.114.51.196:58528/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 03:35:22 UTC", "last_seen": "2026-04-01 03:35:22 UTC", "sightings": 1 }, { "indicator": "http://120.61.244.250:41211/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 03:33:19 UTC", "last_seen": "2026-04-01 03:33:19 UTC", "sightings": 1 }, { "indicator": "http://185.50.148.169:34321/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-01 03:33:18 UTC", "last_seen": "2026-04-01 03:33:18 UTC", "sightings": 1 }, { "indicator": "https://point-edge.digisphere.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 03:31:12 UTC", "last_seen": "2026-04-01 03:31:12 UTC", "sightings": 1 }, { "indicator": "https://static-cdn.digisphere.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 03:26:08 UTC", "last_seen": "2026-04-01 03:26:08 UTC", "sightings": 1 }, { "indicator": "https://web-portal.digisphere.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 03:20:10 UTC", "last_seen": "2026-04-01 03:20:10 UTC", "sightings": 1 }, { "indicator": "https://info-orbit.digisphere.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 03:16:09 UTC", "last_seen": "2026-04-01 03:16:09 UTC", "sightings": 1 }, { "indicator": "http://61.3.28.154:58810/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 03:12:18 UTC", "last_seen": "2026-04-01 03:12:18 UTC", "sightings": 1 }, { "indicator": "https://cloud-ring.digisphere.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 03:10:09 UTC", "last_seen": "2026-04-01 03:10:09 UTC", "sightings": 1 }, { "indicator": "http://120.61.244.250:41211/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 03:07:26 UTC", "last_seen": "2026-04-01 03:07:26 UTC", "sightings": 1 }, { "indicator": "https://data-field.digisphere.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 03:03:09 UTC", "last_seen": "2026-04-01 03:03:09 UTC", "sightings": 1 }, { "indicator": "http://185.50.148.169:34321/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-01 03:00:23 UTC", "last_seen": "2026-04-01 03:00:23 UTC", "sightings": 1 }, { "indicator": "https://light-logic.quantacircuit.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 02:58:07 UTC", "last_seen": "2026-04-01 02:58:07 UTC", "sightings": 1 }, { "indicator": "http://110.36.23.216:58141/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-04-01 02:57:07 UTC", "last_seen": "2026-04-01 02:57:07 UTC", "sightings": 1 }, { "indicator": "https://fast-track.quantacircuit.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 02:53:09 UTC", "last_seen": "2026-04-01 02:53:09 UTC", "sightings": 1 }, { "indicator": "https://qubit-sync.quantacircuit.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 02:47:08 UTC", "last_seen": "2026-04-01 02:47:08 UTC", "sightings": 1 }, { "indicator": "http://110.36.23.65:52586/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-04-01 02:47:06 UTC", "last_seen": "2026-04-01 02:47:06 UTC", "sightings": 1 }, { "indicator": "http://182.123.211.230:53557/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 02:42:19 UTC", "last_seen": "2026-04-01 02:42:19 UTC", "sightings": 1 }, { "indicator": "http://110.36.23.216:58141/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-04-01 02:42:07 UTC", "last_seen": "2026-04-01 02:42:07 UTC", "sightings": 1 }, { "indicator": "https://packet-flow.quantacircuit.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 02:41:13 UTC", "last_seen": "2026-04-01 02:41:13 UTC", "sightings": 1 }, { "indicator": "https://speed-test.quantacircuit.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 02:36:09 UTC", "last_seen": "2026-04-01 02:36:09 UTC", "sightings": 1 }, { "indicator": "http://115.57.254.123:50139/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 02:33:19 UTC", "last_seen": "2026-04-01 02:33:19 UTC", "sightings": 1 }, { "indicator": "http://118.232.137.101:35890/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-01 02:33:19 UTC", "last_seen": "2026-04-01 02:33:19 UTC", "sightings": 1 }, { "indicator": "http://110.37.26.48:52572/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-04-01 02:32:06 UTC", "last_seen": "2026-04-01 02:32:06 UTC", "sightings": 1 }, { "indicator": "http://115.63.14.185:50706/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 02:31:10 UTC", "last_seen": "2026-04-01 02:31:10 UTC", "sightings": 1 }, { "indicator": "https://bit-stream.quantacircuit.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 02:30:16 UTC", "last_seen": "2026-04-01 02:30:16 UTC", "sightings": 1 }, { "indicator": "http://110.37.48.162:36465/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 02:29:17 UTC", "last_seen": "2026-04-01 02:29:17 UTC", "sightings": 1 }, { "indicator": "https://mind-node.neurovector.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 02:24:12 UTC", "last_seen": "2026-04-01 02:24:12 UTC", "sightings": 1 }, { "indicator": "https://brain-scan.neurovector.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 02:19:10 UTC", "last_seen": "2026-04-01 02:19:10 UTC", "sightings": 1 }, { "indicator": "http://182.123.211.230:53557/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 02:14:12 UTC", "last_seen": "2026-04-01 02:14:12 UTC", "sightings": 1 }, { "indicator": "https://thought-hub.neurovector.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 02:13:08 UTC", "last_seen": "2026-04-01 02:13:08 UTC", "sightings": 1 }, { "indicator": "https://impulse-api.neurovector.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 02:08:08 UTC", "last_seen": "2026-04-01 02:08:08 UTC", "sightings": 1 }, { "indicator": "https://nerve-center.neurovector.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 02:02:08 UTC", "last_seen": "2026-04-01 02:02:08 UTC", "sightings": 1 }, { "indicator": "http://110.37.48.162:36465/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 02:02:08 UTC", "last_seen": "2026-04-01 02:02:08 UTC", "sightings": 1 }, { "indicator": "http://110.36.77.17:33343/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 02:00:19 UTC", "last_seen": "2026-04-01 02:00:19 UTC", "sightings": 1 }, { "indicator": "http://123.12.229.24:57827/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 02:00:19 UTC", "last_seen": "2026-04-01 02:00:19 UTC", "sightings": 1 }, { "indicator": "http://123.12.229.24:57827/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 01:57:18 UTC", "last_seen": "2026-04-01 01:57:18 UTC", "sightings": 1 }, { "indicator": "https://synapse-log.neurovector.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 01:56:09 UTC", "last_seen": "2026-04-01 01:56:09 UTC", "sightings": 1 }, { "indicator": "https://outer-shell.technosphere.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 01:51:09 UTC", "last_seen": "2026-04-01 01:51:09 UTC", "sightings": 1 }, { "indicator": "http://182.121.154.51:40724/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 01:48:15 UTC", "last_seen": "2026-04-01 01:48:15 UTC", "sightings": 1 }, { "indicator": "http://27.6.243.195:38829/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-04-01 01:47:08 UTC", "last_seen": "2026-04-01 01:47:08 UTC", "sightings": 1 }, { "indicator": "http://110.37.14.231:50589/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-04-01 01:47:07 UTC", "last_seen": "2026-04-01 01:47:07 UTC", "sightings": 1 }, { "indicator": "https://meta-layer.technosphere.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 01:46:08 UTC", "last_seen": "2026-04-01 01:46:08 UTC", "sightings": 1 }, { "indicator": "http://182.117.30.6:35042/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 01:43:15 UTC", "last_seen": "2026-04-01 01:43:15 UTC", "sightings": 1 }, { "indicator": "https://world-view.technosphere.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 01:41:09 UTC", "last_seen": "2026-04-01 01:41:09 UTC", "sightings": 1 }, { "indicator": "http://115.57.254.123:50139/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 01:37:13 UTC", "last_seen": "2026-04-01 01:37:13 UTC", "sightings": 1 }, { "indicator": "http://110.37.24.11:45058/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 01:36:19 UTC", "last_seen": "2026-04-01 01:36:19 UTC", "sightings": 1 }, { "indicator": "https://eco-monitor.technosphere.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 01:34:08 UTC", "last_seen": "2026-04-01 01:34:08 UTC", "sightings": 1 }, { "indicator": "http://110.37.20.126:43911/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-01 01:33:17 UTC", "last_seen": "2026-04-01 01:33:17 UTC", "sightings": 1 }, { "indicator": "https://urban-hub.technosphere.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 01:29:08 UTC", "last_seen": "2026-04-01 01:29:08 UTC", "sightings": 1 }, { "indicator": "http://39.74.35.162:57192/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 01:23:18 UTC", "last_seen": "2026-04-01 01:23:18 UTC", "sightings": 1 }, { "indicator": "http://110.37.24.11:45058/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 01:23:16 UTC", "last_seen": "2026-04-01 01:23:16 UTC", "sightings": 1 }, { "indicator": "https://global-net.technosphere.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 01:23:09 UTC", "last_seen": "2026-04-01 01:23:09 UTC", "sightings": 1 }, { "indicator": "https://brain-base.logicmatrix.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 01:19:08 UTC", "last_seen": "2026-04-01 01:19:08 UTC", "sightings": 1 }, { "indicator": "https://decision-svc.logicmatrix.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 01:12:09 UTC", "last_seen": "2026-04-01 01:12:09 UTC", "sightings": 1 }, { "indicator": "http://110.37.13.16:58003/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-04-01 01:12:07 UTC", "last_seen": "2026-04-01 01:12:07 UTC", "sightings": 1 }, { "indicator": "https://process-io.logicmatrix.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 01:06:09 UTC", "last_seen": "2026-04-01 01:06:09 UTC", "sightings": 1 }, { "indicator": "http://112.198.238.18:49083/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-01 01:04:08 UTC", "last_seen": "2026-04-01 01:04:08 UTC", "sightings": 1 }, { "indicator": "http://110.37.20.126:43911/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-01 01:02:18 UTC", "last_seen": "2026-04-01 01:02:18 UTC", "sightings": 1 }, { "indicator": "https://truth-table.logicmatrix.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 01:01:10 UTC", "last_seen": "2026-04-01 01:01:10 UTC", "sightings": 1 }, { "indicator": "http://182.114.251.199:41625/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-04-01 00:57:08 UTC", "last_seen": "2026-04-01 00:57:08 UTC", "sightings": 1 }, { "indicator": "http://125.113.153.132:39635/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-01 00:55:19 UTC", "last_seen": "2026-04-01 00:55:19 UTC", "sightings": 1 }, { "indicator": "https://rule-engine.logicmatrix.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 00:55:16 UTC", "last_seen": "2026-04-01 00:55:16 UTC", "sightings": 1 }, { "indicator": "https://main-frame.logicmatrix.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 00:49:12 UTC", "last_seen": "2026-04-01 00:49:12 UTC", "sightings": 1 }, { "indicator": "http://222.141.127.234:38071/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 00:47:09 UTC", "last_seen": "2026-04-01 00:47:09 UTC", "sightings": 1 }, { "indicator": "http://92.112.124.72/arc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-04-01 00:45:20 UTC", "last_seen": "2026-04-01 00:45:20 UTC", "sightings": 1 }, { "indicator": "https://enc-tunnel.cryptovault.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 00:43:10 UTC", "last_seen": "2026-04-01 00:43:10 UTC", "sightings": 1 }, { "indicator": "http://110.37.13.16:58003/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-04-01 00:42:06 UTC", "last_seen": "2026-04-01 00:42:06 UTC", "sightings": 1 }, { "indicator": "http://36.88.164.210:56541/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-01 00:40:11 UTC", "last_seen": "2026-04-01 00:40:11 UTC", "sightings": 1 }, { "indicator": "https://hash-store.cryptovault.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 00:40:10 UTC", "last_seen": "2026-04-01 00:40:10 UTC", "sightings": 1 }, { "indicator": "http://39.187.126.220:44511/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 00:39:22 UTC", "last_seen": "2026-04-01 00:39:22 UTC", "sightings": 1 }, { "indicator": "https://anon-auth.cryptovault.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 00:38:08 UTC", "last_seen": "2026-04-01 00:38:08 UTC", "sightings": 1 }, { "indicator": "http://182.114.251.199:41625/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-04-01 00:37:06 UTC", "last_seen": "2026-04-01 00:37:06 UTC", "sightings": 1 }, { "indicator": "http://120.28.219.218:53101/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-01 00:34:20 UTC", "last_seen": "2026-04-01 00:34:20 UTC", "sightings": 1 }, { "indicator": "http://60.210.216.160:50016/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-01 00:33:10 UTC", "last_seen": "2026-04-01 00:33:10 UTC", "sightings": 1 }, { "indicator": "https://secret-api.cryptovault.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 00:27:07 UTC", "last_seen": "2026-04-01 00:27:07 UTC", "sightings": 1 }, { "indicator": "http://59.97.254.234:46513/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 00:23:18 UTC", "last_seen": "2026-04-01 00:23:18 UTC", "sightings": 1 }, { "indicator": "http://42.228.125.217:36422/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 00:21:20 UTC", "last_seen": "2026-04-01 00:21:20 UTC", "sightings": 1 }, { "indicator": "https://lock-box.cryptovault.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 00:21:11 UTC", "last_seen": "2026-04-01 00:21:11 UTC", "sightings": 1 }, { "indicator": "http://36.88.164.210:56541/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-01 00:16:20 UTC", "last_seen": "2026-04-01 00:16:20 UTC", "sightings": 1 }, { "indicator": "http://116.58.229.39:47979/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-01 00:16:19 UTC", "last_seen": "2026-04-01 00:16:19 UTC", "sightings": 1 }, { "indicator": "https://secure-key.cryptovault.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 00:16:09 UTC", "last_seen": "2026-04-01 00:16:09 UTC", "sightings": 1 }, { "indicator": "http://42.177.236.151:49952/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-04-01 00:14:17 UTC", "last_seen": "2026-04-01 00:14:17 UTC", "sightings": 1 }, { "indicator": "https://chip-set.infocircuit.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 00:12:08 UTC", "last_seen": "2026-04-01 00:12:08 UTC", "sightings": 1 }, { "indicator": "http://110.39.251.84:36535/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-04-01 00:12:07 UTC", "last_seen": "2026-04-01 00:12:07 UTC", "sightings": 1 }, { "indicator": "https://board-mgr.infocircuit.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-04-01 00:09:08 UTC", "last_seen": "2026-04-01 00:09:08 UTC", "sightings": 1 }, { "indicator": "http://125.113.153.132:39635/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-04-01 00:04:09 UTC", "last_seen": "2026-04-01 00:04:09 UTC", "sightings": 1 }, { "indicator": "http://115.56.167.58:45651/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-04-01 00:02:06 UTC", "last_seen": "2026-04-01 00:02:06 UTC", "sightings": 1 }, { "indicator": "http://125.43.105.78:40855/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-04-01 00:02:06 UTC", "last_seen": "2026-04-01 00:02:06 UTC", "sightings": 1 }, { "indicator": "https://volt-check.infocircuit.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 23:59:08 UTC", "last_seen": "2026-03-31 23:59:08 UTC", "sightings": 1 }, { "indicator": "http://59.97.254.234:46513/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 23:56:10 UTC", "last_seen": "2026-03-31 23:56:10 UTC", "sightings": 1 }, { "indicator": "https://bus-bridge.infocircuit.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 23:53:07 UTC", "last_seen": "2026-03-31 23:53:07 UTC", "sightings": 1 }, { "indicator": "http://110.39.251.84:36535/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-31 23:52:07 UTC", "last_seen": "2026-03-31 23:52:07 UTC", "sightings": 1 }, { "indicator": "http://115.62.25.41:38187/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-31 23:48:34 UTC", "last_seen": "2026-03-31 23:48:34 UTC", "sightings": 1 }, { "indicator": "http://61.53.127.158:44774/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-31 23:47:08 UTC", "last_seen": "2026-03-31 23:47:08 UTC", "sightings": 1 }, { "indicator": "https://wire-sync.infocircuit.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 23:47:08 UTC", "last_seen": "2026-03-31 23:47:08 UTC", "sightings": 1 }, { "indicator": "https://logic-gate.infocircuit.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 23:44:09 UTC", "last_seen": "2026-03-31 23:44:09 UTC", "sightings": 1 }, { "indicator": "http://42.177.236.151:49952/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 23:41:19 UTC", "last_seen": "2026-03-31 23:41:19 UTC", "sightings": 1 }, { "indicator": "https://broad-cast.signalforge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 23:41:13 UTC", "last_seen": "2026-03-31 23:41:13 UTC", "sightings": 1 }, { "indicator": "http://115.56.167.58:45651/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-31 23:37:10 UTC", "last_seen": "2026-03-31 23:37:10 UTC", "sightings": 1 }, { "indicator": "http://110.39.233.163:48626/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 23:36:17 UTC", "last_seen": "2026-03-31 23:36:17 UTC", "sightings": 1 }, { "indicator": "http://183.186.121.103:51817/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-31 23:33:10 UTC", "last_seen": "2026-03-31 23:33:10 UTC", "sightings": 1 }, { "indicator": "http://191.210.133.134:42696/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-31 23:32:09 UTC", "last_seen": "2026-03-31 23:32:09 UTC", "sightings": 1 }, { "indicator": "http://110.37.66.78:52473/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-31 23:32:07 UTC", "last_seen": "2026-03-31 23:32:07 UTC", "sightings": 1 }, { "indicator": "https://ping-gate.signalforge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 23:30:11 UTC", "last_seen": "2026-03-31 23:30:11 UTC", "sightings": 1 }, { "indicator": "https://tower-sync.signalforge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 23:26:13 UTC", "last_seen": "2026-03-31 23:26:13 UTC", "sightings": 1 }, { "indicator": "http://61.53.127.158:44774/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-31 23:22:09 UTC", "last_seen": "2026-03-31 23:22:09 UTC", "sightings": 1 }, { "indicator": "https://beam-relay.signalforge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 23:20:15 UTC", "last_seen": "2026-03-31 23:20:15 UTC", "sightings": 1 }, { "indicator": "http://78.29.39.213:48027/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-31 23:17:08 UTC", "last_seen": "2026-03-31 23:17:08 UTC", "sightings": 1 }, { "indicator": "https://wave-form.signalforge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 23:14:10 UTC", "last_seen": "2026-03-31 23:14:10 UTC", "sightings": 1 }, { "indicator": "http://110.39.233.163:48626/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 23:09:12 UTC", "last_seen": "2026-03-31 23:09:12 UTC", "sightings": 1 }, { "indicator": "https://radio-freq.signalforge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 23:08:08 UTC", "last_seen": "2026-03-31 23:08:08 UTC", "sightings": 1 }, { "indicator": "http://183.186.121.103:51817/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-31 23:07:09 UTC", "last_seen": "2026-03-31 23:07:09 UTC", "sightings": 1 }, { "indicator": "http://61.53.159.114:56760/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 23:07:08 UTC", "last_seen": "2026-03-31 23:07:08 UTC", "sightings": 1 }, { "indicator": "http://110.37.66.78:52473/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-31 23:07:07 UTC", "last_seen": "2026-03-31 23:07:07 UTC", "sightings": 1 }, { "indicator": "https://raster-node.pixelmatrix.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 23:03:12 UTC", "last_seen": "2026-03-31 23:03:12 UTC", "sightings": 1 }, { "indicator": "http://110.36.72.162:42234/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-31 23:02:07 UTC", "last_seen": "2026-03-31 23:02:07 UTC", "sightings": 1 }, { "indicator": "https://display-svc.pixelmatrix.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 22:57:08 UTC", "last_seen": "2026-03-31 22:57:08 UTC", "sightings": 1 }, { "indicator": "http://188.115.168.240:63702/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 22:56:18 UTC", "last_seen": "2026-03-31 22:56:18 UTC", "sightings": 1 }, { "indicator": "http://123.5.169.33:36911/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 22:54:11 UTC", "last_seen": "2026-03-31 22:54:11 UTC", "sightings": 1 }, { "indicator": "https://video-buffer.pixelmatrix.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 22:52:10 UTC", "last_seen": "2026-03-31 22:52:10 UTC", "sightings": 1 }, { "indicator": "http://219.156.26.169:60250/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 22:51:17 UTC", "last_seen": "2026-03-31 22:51:17 UTC", "sightings": 1 }, { "indicator": "http://125.44.245.102:59322/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-31 22:47:08 UTC", "last_seen": "2026-03-31 22:47:08 UTC", "sightings": 1 }, { "indicator": "https://image-stack.pixelmatrix.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 22:45:11 UTC", "last_seen": "2026-03-31 22:45:11 UTC", "sightings": 1 }, { "indicator": "http://78.29.39.213:48027/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-31 22:42:06 UTC", "last_seen": "2026-03-31 22:42:06 UTC", "sightings": 1 }, { "indicator": "http://61.53.159.114:56760/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 22:41:30 UTC", "last_seen": "2026-03-31 22:41:30 UTC", "sightings": 1 }, { "indicator": "https://render-grid.pixelmatrix.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 22:41:14 UTC", "last_seen": "2026-03-31 22:41:14 UTC", "sightings": 1 }, { "indicator": "http://59.97.248.176:38579/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 22:38:21 UTC", "last_seen": "2026-03-31 22:38:21 UTC", "sightings": 1 }, { "indicator": "http://219.156.26.169:60250/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 22:36:22 UTC", "last_seen": "2026-03-31 22:36:22 UTC", "sightings": 1 }, { "indicator": "https://color-bit.pixelmatrix.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 22:34:11 UTC", "last_seen": "2026-03-31 22:34:11 UTC", "sightings": 1 }, { "indicator": "http://188.115.168.240:63702/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 22:31:19 UTC", "last_seen": "2026-03-31 22:31:19 UTC", "sightings": 1 }, { "indicator": "https://scan-core.nanovector.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 22:30:10 UTC", "last_seen": "2026-03-31 22:30:10 UTC", "sightings": 1 }, { "indicator": "https://particle-api.nanovector.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 22:24:12 UTC", "last_seen": "2026-03-31 22:24:12 UTC", "sightings": 1 }, { "indicator": "http://85.239.147.6/files/8405865752/5EYH7vF.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-31 22:20:06 UTC", "last_seen": "2026-03-31 22:20:06 UTC", "sightings": 1 }, { "indicator": "http://112.93.201.18:37596/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 22:18:24 UTC", "last_seen": "2026-03-31 22:18:24 UTC", "sightings": 1 }, { "indicator": "https://small-unit.nanovector.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 22:18:09 UTC", "last_seen": "2026-03-31 22:18:09 UTC", "sightings": 1 }, { "indicator": "http://125.44.245.102:59322/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-31 22:17:09 UTC", "last_seen": "2026-03-31 22:17:09 UTC", "sightings": 1 }, { "indicator": "https://precision-io.nanovector.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 22:13:07 UTC", "last_seen": "2026-03-31 22:13:07 UTC", "sightings": 1 }, { "indicator": "http://123.179.235.229:59423/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-31 22:08:20 UTC", "last_seen": "2026-03-31 22:08:20 UTC", "sightings": 1 }, { "indicator": "http://105.225.37.240:59785/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-31 22:07:13 UTC", "last_seen": "2026-03-31 22:07:13 UTC", "sightings": 1 }, { "indicator": "https://atom-trace.nanovector.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 22:06:08 UTC", "last_seen": "2026-03-31 22:06:08 UTC", "sightings": 1 }, { "indicator": "http://175.31.170.117:38526/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-31 22:04:27 UTC", "last_seen": "2026-03-31 22:04:27 UTC", "sightings": 1 }, { "indicator": "http://110.36.80.162:43865/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 22:04:20 UTC", "last_seen": "2026-03-31 22:04:20 UTC", "sightings": 1 }, { "indicator": "https://micro-scale.nanovector.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 22:02:14 UTC", "last_seen": "2026-03-31 22:02:14 UTC", "sightings": 1 }, { "indicator": "http://110.37.72.176:45617/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 21:58:24 UTC", "last_seen": "2026-03-31 21:58:24 UTC", "sightings": 1 }, { "indicator": "http://112.93.201.18:37596/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 21:50:20 UTC", "last_seen": "2026-03-31 21:50:20 UTC", "sightings": 1 }, { "indicator": "http://110.36.15.1:39124/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 21:45:19 UTC", "last_seen": "2026-03-31 21:45:19 UTC", "sightings": 1 }, { "indicator": "http://105.225.37.240:59785/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-31 21:41:21 UTC", "last_seen": "2026-03-31 21:41:21 UTC", "sightings": 1 }, { "indicator": "https://ping-gate.signalcrest.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 21:39:07 UTC", "last_seen": "2026-03-31 21:39:07 UTC", "sightings": 1 }, { "indicator": "https://broad-cast.signalcrest.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 21:34:08 UTC", "last_seen": "2026-03-31 21:34:08 UTC", "sightings": 1 }, { "indicator": "https://range-extend.signalcrest.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 21:28:09 UTC", "last_seen": "2026-03-31 21:28:09 UTC", "sightings": 1 }, { "indicator": "http://110.36.15.1:39124/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 21:26:22 UTC", "last_seen": "2026-03-31 21:26:22 UTC", "sightings": 1 }, { "indicator": "https://tower-sync.signalcrest.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 21:23:13 UTC", "last_seen": "2026-03-31 21:23:13 UTC", "sightings": 1 }, { "indicator": "http://170.0.60.80:44609/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-31 21:22:08 UTC", "last_seen": "2026-03-31 21:22:08 UTC", "sightings": 1 }, { "indicator": "http://42.224.122.242:42407/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 21:20:22 UTC", "last_seen": "2026-03-31 21:20:22 UTC", "sightings": 1 }, { "indicator": "http://42.225.204.153:40746/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 21:19:09 UTC", "last_seen": "2026-03-31 21:19:09 UTC", "sightings": 1 }, { "indicator": "http://42.224.122.242:42407/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 21:19:09 UTC", "last_seen": "2026-03-31 21:19:09 UTC", "sightings": 1 }, { "indicator": "https://radio-freq.signalcrest.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 21:17:08 UTC", "last_seen": "2026-03-31 21:17:08 UTC", "sightings": 1 }, { "indicator": "http://125.44.254.81:54558/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-31 21:12:07 UTC", "last_seen": "2026-03-31 21:12:07 UTC", "sightings": 1 }, { "indicator": "https://wave-crest.signalcrest.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 21:11:09 UTC", "last_seen": "2026-03-31 21:11:09 UTC", "sightings": 1 }, { "indicator": "http://85.239.147.6/files/6560547276/ZAZsFyd.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-31 21:08:05 UTC", "last_seen": "2026-03-31 21:08:05 UTC", "sightings": 1 }, { "indicator": "http://117.220.151.22:53549/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 21:06:08 UTC", "last_seen": "2026-03-31 21:06:08 UTC", "sightings": 1 }, { "indicator": "https://meta-stack.datacrest.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 21:06:07 UTC", "last_seen": "2026-03-31 21:06:07 UTC", "sightings": 1 }, { "indicator": "http://115.62.180.84:56872/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 21:03:19 UTC", "last_seen": "2026-03-31 21:03:19 UTC", "sightings": 1 }, { "indicator": "http://42.225.204.153:40746/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 21:03:18 UTC", "last_seen": "2026-03-31 21:03:18 UTC", "sightings": 1 }, { "indicator": "http://42.227.225.230:34570/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-31 21:02:08 UTC", "last_seen": "2026-03-31 21:02:08 UTC", "sightings": 1 }, { "indicator": "http://182.126.85.229:37143/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 21:00:12 UTC", "last_seen": "2026-03-31 21:00:12 UTC", "sightings": 1 }, { "indicator": "http://115.56.167.171:34161/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 21:00:12 UTC", "last_seen": "2026-03-31 21:00:12 UTC", "sightings": 1 }, { "indicator": "https://base-record.datacrest.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 20:59:06 UTC", "last_seen": "2026-03-31 20:59:06 UTC", "sightings": 1 }, { "indicator": "http://120.28.199.24:42707/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-31 20:56:16 UTC", "last_seen": "2026-03-31 20:56:16 UTC", "sightings": 1 }, { "indicator": "https://info-summit.datacrest.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 20:54:09 UTC", "last_seen": "2026-03-31 20:54:09 UTC", "sightings": 1 }, { "indicator": "http://170.0.60.80:44609/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-31 20:52:19 UTC", "last_seen": "2026-03-31 20:52:19 UTC", "sightings": 1 }, { "indicator": "http://110.36.89.45:38805/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-31 20:51:26 UTC", "last_seen": "2026-03-31 20:51:26 UTC", "sightings": 1 }, { "indicator": "https://bulk-export.datacrest.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 20:48:11 UTC", "last_seen": "2026-03-31 20:48:11 UTC", "sightings": 1 }, { "indicator": "http://182.32.199.244:50607/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-31 20:45:18 UTC", "last_seen": "2026-03-31 20:45:18 UTC", "sightings": 1 }, { "indicator": "https://archive-top.datacrest.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 20:42:11 UTC", "last_seen": "2026-03-31 20:42:11 UTC", "sightings": 1 }, { "indicator": "http://114.228.132.87:39486/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-31 20:41:09 UTC", "last_seen": "2026-03-31 20:41:09 UTC", "sightings": 1 }, { "indicator": "http://117.220.151.22:53549/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 20:41:09 UTC", "last_seen": "2026-03-31 20:41:09 UTC", "sightings": 1 }, { "indicator": "https://high-ridge.datacrest.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 20:38:10 UTC", "last_seen": "2026-03-31 20:38:10 UTC", "sightings": 1 }, { "indicator": "http://182.126.85.229:37143/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 20:34:19 UTC", "last_seen": "2026-03-31 20:34:19 UTC", "sightings": 1 }, { "indicator": "https://enc-tunnel.cyberhaven.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 20:31:10 UTC", "last_seen": "2026-03-31 20:31:10 UTC", "sightings": 1 }, { "indicator": "http://92.112.124.72/sh4", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-31 20:29:19 UTC", "last_seen": "2026-03-31 20:29:19 UTC", "sightings": 1 }, { "indicator": "http://92.112.124.72/x86_64", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-31 20:29:19 UTC", "last_seen": "2026-03-31 20:29:19 UTC", "sightings": 1 }, { "indicator": "http://92.112.124.72/arm", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-31 20:29:19 UTC", "last_seen": "2026-03-31 20:29:19 UTC", "sightings": 1 }, { "indicator": "http://92.112.124.72/arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-31 20:29:19 UTC", "last_seen": "2026-03-31 20:29:19 UTC", "sightings": 1 }, { "indicator": "http://92.112.124.72/sparc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-31 20:28:15 UTC", "last_seen": "2026-03-31 20:28:15 UTC", "sightings": 1 }, { "indicator": "http://92.112.124.72/i686", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-31 20:28:15 UTC", "last_seen": "2026-03-31 20:28:15 UTC", "sightings": 1 }, { "indicator": "http://92.112.124.72/mipsel", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-31 20:28:15 UTC", "last_seen": "2026-03-31 20:28:15 UTC", "sightings": 1 }, { "indicator": "http://92.112.124.72/arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-31 20:28:15 UTC", "last_seen": "2026-03-31 20:28:15 UTC", "sightings": 1 }, { "indicator": "http://92.112.124.72/mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-31 20:28:07 UTC", "last_seen": "2026-03-31 20:28:07 UTC", "sightings": 1 }, { "indicator": "http://120.28.199.24:42707/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-31 20:27:20 UTC", "last_seen": "2026-03-31 20:27:20 UTC", "sightings": 1 }, { "indicator": "https://anon-relay.cyberhaven.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 20:26:12 UTC", "last_seen": "2026-03-31 20:26:12 UTC", "sightings": 1 }, { "indicator": "http://178.16.54.109/6.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-Phorpiex", "phorpiex" ], "first_seen": "2026-03-31 20:23:07 UTC", "last_seen": "2026-03-31 20:23:07 UTC", "sightings": 1 }, { "indicator": "http://178.16.54.109/1.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-Phorpiex", "phorpiex" ], "first_seen": "2026-03-31 20:23:07 UTC", "last_seen": "2026-03-31 20:23:07 UTC", "sightings": 1 }, { "indicator": "http://178.16.54.109/3.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-Phorpiex", "phorpiex" ], "first_seen": "2026-03-31 20:23:07 UTC", "last_seen": "2026-03-31 20:23:07 UTC", "sightings": 1 }, { "indicator": "http://178.16.54.109/4.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-Phorpiex", "phorpiex" ], "first_seen": "2026-03-31 20:23:07 UTC", "last_seen": "2026-03-31 20:23:07 UTC", "sightings": 1 }, { "indicator": "http://178.16.54.109/5.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-Phorpiex", "phorpiex" ], "first_seen": "2026-03-31 20:23:07 UTC", "last_seen": "2026-03-31 20:23:07 UTC", "sightings": 1 }, { "indicator": "http://178.16.54.109/2.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-Phorpiex", "phorpiex" ], "first_seen": "2026-03-31 20:23:07 UTC", "last_seen": "2026-03-31 20:23:07 UTC", "sightings": 1 }, { "indicator": "https://secure-vault.cyberhaven.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 20:21:10 UTC", "last_seen": "2026-03-31 20:21:10 UTC", "sightings": 1 }, { "indicator": "http://115.56.167.171:34161/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 20:19:09 UTC", "last_seen": "2026-03-31 20:19:09 UTC", "sightings": 1 }, { "indicator": "http://182.32.199.244:50607/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-31 20:18:18 UTC", "last_seen": "2026-03-31 20:18:18 UTC", "sightings": 1 }, { "indicator": "https://threat-log.cyberhaven.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 20:15:11 UTC", "last_seen": "2026-03-31 20:15:11 UTC", "sightings": 1 }, { "indicator": "http://110.37.118.66:34574/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-31 20:13:39 UTC", "last_seen": "2026-03-31 20:13:39 UTC", "sightings": 1 }, { "indicator": "http://117.235.227.117:59511/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 20:11:17 UTC", "last_seen": "2026-03-31 20:11:17 UTC", "sightings": 1 }, { "indicator": "https://mesh-proxy.cyberhaven.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 20:09:12 UTC", "last_seen": "2026-03-31 20:09:12 UTC", "sightings": 1 }, { "indicator": "http://222.136.159.32:36989/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 20:06:16 UTC", "last_seen": "2026-03-31 20:06:16 UTC", "sightings": 1 }, { "indicator": "https://ghost-shell.cyberhaven.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 20:04:11 UTC", "last_seen": "2026-03-31 20:04:11 UTC", "sightings": 1 }, { "indicator": "http://85.239.147.6/files/7359455182/wugQXVn.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-31 20:04:05 UTC", "last_seen": "2026-03-31 20:04:05 UTC", "sightings": 1 }, { "indicator": "https://bio-sensor.neurobloom.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 19:59:09 UTC", "last_seen": "2026-03-31 19:59:09 UTC", "sightings": 1 }, { "indicator": "http://110.36.18.169:39415/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 19:56:28 UTC", "last_seen": "2026-03-31 19:56:28 UTC", "sightings": 1 }, { "indicator": "https://pulse-logic.neurobloom.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 19:54:12 UTC", "last_seen": "2026-03-31 19:54:12 UTC", "sightings": 1 }, { "indicator": "https://nerve-center.neurobloom.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 19:51:11 UTC", "last_seen": "2026-03-31 19:51:11 UTC", "sightings": 1 }, { "indicator": "http://110.36.18.169:39415/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 19:49:28 UTC", "last_seen": "2026-03-31 19:49:28 UTC", "sightings": 1 }, { "indicator": "https://thought-api.neurobloom.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 19:42:10 UTC", "last_seen": "2026-03-31 19:42:10 UTC", "sightings": 1 }, { "indicator": "http://222.136.159.32:36989/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 19:37:19 UTC", "last_seen": "2026-03-31 19:37:19 UTC", "sightings": 1 }, { "indicator": "http://36.64.184.26:54919/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-31 19:37:07 UTC", "last_seen": "2026-03-31 19:37:07 UTC", "sightings": 1 }, { "indicator": "http://117.241.51.251:44710/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 19:36:12 UTC", "last_seen": "2026-03-31 19:36:12 UTC", "sightings": 1 }, { "indicator": "https://brain-scan.neurobloom.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 19:36:11 UTC", "last_seen": "2026-03-31 19:36:11 UTC", "sightings": 1 }, { "indicator": "https://synapse-net.neurobloom.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 19:31:10 UTC", "last_seen": "2026-03-31 19:31:10 UTC", "sightings": 1 }, { "indicator": "https://bit-stream.quantaflux.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 19:24:12 UTC", "last_seen": "2026-03-31 19:24:12 UTC", "sightings": 1 }, { "indicator": "https://packet-flow.quantaflux.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 19:19:09 UTC", "last_seen": "2026-03-31 19:19:09 UTC", "sightings": 1 }, { "indicator": "http://124.94.231.19:53077/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 19:17:20 UTC", "last_seen": "2026-03-31 19:17:20 UTC", "sightings": 1 }, { "indicator": "http://42.238.68.233:44121/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 19:15:14 UTC", "last_seen": "2026-03-31 19:15:14 UTC", "sightings": 1 }, { "indicator": "https://speed-test.quantaflux.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 19:14:09 UTC", "last_seen": "2026-03-31 19:14:09 UTC", "sightings": 1 }, { "indicator": "http://117.241.51.251:44710/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 19:10:22 UTC", "last_seen": "2026-03-31 19:10:22 UTC", "sightings": 1 }, { "indicator": "https://logic-gate.quantaflux.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 19:08:09 UTC", "last_seen": "2026-03-31 19:08:09 UTC", "sightings": 1 }, { "indicator": "https://atom-split.quantaflux.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 19:02:10 UTC", "last_seen": "2026-03-31 19:02:10 UTC", "sightings": 1 }, { "indicator": "http://36.64.184.26:54919/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-31 19:02:07 UTC", "last_seen": "2026-03-31 19:02:07 UTC", "sightings": 1 }, { "indicator": "http://88.254.164.206:43117/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-31 18:57:08 UTC", "last_seen": "2026-03-31 18:57:08 UTC", "sightings": 1 }, { "indicator": "https://micro-pulse.quantaflux.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 18:56:16 UTC", "last_seen": "2026-03-31 18:56:16 UTC", "sightings": 1 }, { "indicator": "https://pilot-auth.astrahaven.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 18:50:13 UTC", "last_seen": "2026-03-31 18:50:13 UTC", "sightings": 1 }, { "indicator": "http://103.167.175.121:53667/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 18:49:20 UTC", "last_seen": "2026-03-31 18:49:20 UTC", "sightings": 1 }, { "indicator": "https://void-storage.astrahaven.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 18:47:10 UTC", "last_seen": "2026-03-31 18:47:10 UTC", "sightings": 1 }, { "indicator": "https://cosmic-link.astrahaven.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 18:44:12 UTC", "last_seen": "2026-03-31 18:44:12 UTC", "sightings": 1 }, { "indicator": "http://123.7.223.111:34621/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-31 18:42:07 UTC", "last_seen": "2026-03-31 18:42:07 UTC", "sightings": 1 }, { "indicator": "http://42.228.125.217:36422/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 18:41:25 UTC", "last_seen": "2026-03-31 18:41:25 UTC", "sightings": 1 }, { "indicator": "http://110.37.55.23:40200/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 18:37:20 UTC", "last_seen": "2026-03-31 18:37:20 UTC", "sightings": 1 }, { "indicator": "http://193.163.187.211:55199/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-31 18:35:10 UTC", "last_seen": "2026-03-31 18:35:10 UTC", "sightings": 1 }, { "indicator": "https://star-map.astrahaven.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 18:34:15 UTC", "last_seen": "2026-03-31 18:34:15 UTC", "sightings": 1 }, { "indicator": "http://124.94.231.19:53077/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 18:30:22 UTC", "last_seen": "2026-03-31 18:30:22 UTC", "sightings": 1 }, { "indicator": "http://110.37.117.225:49671/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 18:29:20 UTC", "last_seen": "2026-03-31 18:29:20 UTC", "sightings": 1 }, { "indicator": "https://deep-sky.astrahaven.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 18:28:12 UTC", "last_seen": "2026-03-31 18:28:12 UTC", "sightings": 1 }, { "indicator": "http://110.38.221.11:50656/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-31 18:27:07 UTC", "last_seen": "2026-03-31 18:27:07 UTC", "sightings": 1 }, { "indicator": "http://122.231.163.114:43927/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-31 18:23:21 UTC", "last_seen": "2026-03-31 18:23:21 UTC", "sightings": 1 }, { "indicator": "https://safe-ship.astrahaven.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 18:23:19 UTC", "last_seen": "2026-03-31 18:23:19 UTC", "sightings": 1 }, { "indicator": "https://launch-pad.orbitforge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 18:17:13 UTC", "last_seen": "2026-03-31 18:17:13 UTC", "sightings": 1 }, { "indicator": "https://kryptonmc.lovable.app/krypton-1.21.11.jar", "indicator_type": "url", "source": "URLhaus", "tags": [ "jar", "WeedHack" ], "first_seen": "2026-03-31 18:15:09 UTC", "last_seen": "2026-03-31 18:15:09 UTC", "sightings": 1 }, { "indicator": "http://103.167.175.121:53667/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 18:13:19 UTC", "last_seen": "2026-03-31 18:13:19 UTC", "sightings": 1 }, { "indicator": "https://gravity-io.orbitforge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 18:11:09 UTC", "last_seen": "2026-03-31 18:11:09 UTC", "sightings": 1 }, { "indicator": "https://spin-control.orbitforge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 18:06:11 UTC", "last_seen": "2026-03-31 18:06:11 UTC", "sightings": 1 }, { "indicator": "http://110.38.221.11:50656/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-31 18:02:07 UTC", "last_seen": "2026-03-31 18:02:07 UTC", "sightings": 1 }, { "indicator": "https://round-trip.orbitforge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 18:00:14 UTC", "last_seen": "2026-03-31 18:00:14 UTC", "sightings": 1 }, { "indicator": "http://122.231.163.114:43927/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-31 17:59:20 UTC", "last_seen": "2026-03-31 17:59:20 UTC", "sightings": 1 }, { "indicator": "https://cycle-monitor.orbitforge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 17:54:11 UTC", "last_seen": "2026-03-31 17:54:11 UTC", "sightings": 1 }, { "indicator": "https://path-finder.orbitforge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 17:49:10 UTC", "last_seen": "2026-03-31 17:49:10 UTC", "sightings": 1 }, { "indicator": "http://123.7.223.111:34621/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-31 17:47:08 UTC", "last_seen": "2026-03-31 17:47:08 UTC", "sightings": 1 }, { "indicator": "https://glow-portal.luminflux.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 17:43:11 UTC", "last_seen": "2026-03-31 17:43:11 UTC", "sightings": 1 }, { "indicator": "https://light-trace.luminflux.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 17:38:12 UTC", "last_seen": "2026-03-31 17:38:12 UTC", "sightings": 1 }, { "indicator": "https://photo-sync.luminflux.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 17:35:17 UTC", "last_seen": "2026-03-31 17:35:17 UTC", "sightings": 1 }, { "indicator": "http://123.9.90.92:34637/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-31 17:33:15 UTC", "last_seen": "2026-03-31 17:33:15 UTC", "sightings": 1 }, { "indicator": "http://222.142.254.165:41922/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 17:31:21 UTC", "last_seen": "2026-03-31 17:31:21 UTC", "sightings": 1 }, { "indicator": "https://optic-hub.luminflux.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 17:31:14 UTC", "last_seen": "2026-03-31 17:31:14 UTC", "sightings": 1 }, { "indicator": "http://112.98.97.191:34651/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-31 17:27:10 UTC", "last_seen": "2026-03-31 17:27:10 UTC", "sightings": 1 }, { "indicator": "http://42.54.11.123:34666/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 17:25:20 UTC", "last_seen": "2026-03-31 17:25:20 UTC", "sightings": 1 }, { "indicator": "http://59.94.101.41:55090/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 17:21:22 UTC", "last_seen": "2026-03-31 17:21:22 UTC", "sightings": 1 }, { "indicator": "https://wave-length.luminflux.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 17:21:13 UTC", "last_seen": "2026-03-31 17:21:13 UTC", "sightings": 1 }, { "indicator": "http://112.98.97.191:34651/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-31 17:17:21 UTC", "last_seen": "2026-03-31 17:17:21 UTC", "sightings": 1 }, { "indicator": "https://bright-beam.luminflux.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 17:16:16 UTC", "last_seen": "2026-03-31 17:16:16 UTC", "sightings": 1 }, { "indicator": "https://smelt-logic.novaforge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 17:09:11 UTC", "last_seen": "2026-03-31 17:09:11 UTC", "sightings": 1 }, { "indicator": "https://plasma-node.novaforge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 17:04:12 UTC", "last_seen": "2026-03-31 17:04:12 UTC", "sightings": 1 }, { "indicator": "http://27.37.103.199:44175/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-31 17:02:09 UTC", "last_seen": "2026-03-31 17:02:09 UTC", "sightings": 1 }, { "indicator": "http://42.54.11.123:34666/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 16:59:16 UTC", "last_seen": "2026-03-31 16:59:16 UTC", "sightings": 1 }, { "indicator": "https://blast-zone.novaforge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 16:58:10 UTC", "last_seen": "2026-03-31 16:58:10 UTC", "sightings": 1 }, { "indicator": "http://110.39.236.58:59893/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 16:56:20 UTC", "last_seen": "2026-03-31 16:56:20 UTC", "sightings": 1 }, { "indicator": "https://heavy-metal.novaforge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 16:54:14 UTC", "last_seen": "2026-03-31 16:54:14 UTC", "sightings": 1 }, { "indicator": "https://fusion-core.novaforge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 16:48:12 UTC", "last_seen": "2026-03-31 16:48:12 UTC", "sightings": 1 }, { "indicator": "http://220.192.1.252:40811/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-31 16:47:10 UTC", "last_seen": "2026-03-31 16:47:10 UTC", "sightings": 1 }, { "indicator": "http://123.14.180.160:55488/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 16:45:22 UTC", "last_seen": "2026-03-31 16:45:22 UTC", "sightings": 1 }, { "indicator": "http://219.155.208.26:42784/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 16:44:22 UTC", "last_seen": "2026-03-31 16:44:22 UTC", "sightings": 1 }, { "indicator": "https://star-build.novaforge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 16:42:12 UTC", "last_seen": "2026-03-31 16:42:12 UTC", "sightings": 1 }, { "indicator": "https://polygon-svc.vertexbloom.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 16:38:13 UTC", "last_seen": "2026-03-31 16:38:13 UTC", "sightings": 1 }, { "indicator": "http://123.9.90.92:34637/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-31 16:37:22 UTC", "last_seen": "2026-03-31 16:37:22 UTC", "sightings": 1 }, { "indicator": "https://top-level.vertexbloom.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 16:35:16 UTC", "last_seen": "2026-03-31 16:35:16 UTC", "sightings": 1 }, { "indicator": "http://217.208.145.10:33976/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 16:27:17 UTC", "last_seen": "2026-03-31 16:27:17 UTC", "sightings": 1 }, { "indicator": "https://spatial-api.vertexbloom.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 16:24:11 UTC", "last_seen": "2026-03-31 16:24:11 UTC", "sightings": 1 }, { "indicator": "https://render-farm.vertexbloom.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 16:19:11 UTC", "last_seen": "2026-03-31 16:19:11 UTC", "sightings": 1 }, { "indicator": "http://219.155.208.26:42784/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 16:16:23 UTC", "last_seen": "2026-03-31 16:16:23 UTC", "sightings": 1 }, { "indicator": "http://112.252.179.168:46843/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-31 16:15:22 UTC", "last_seen": "2026-03-31 16:15:22 UTC", "sightings": 1 }, { "indicator": "https://growth-engine.vertexbloom.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 16:13:10 UTC", "last_seen": "2026-03-31 16:13:10 UTC", "sightings": 1 }, { "indicator": "http://38.226.161.94:36049/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 16:11:24 UTC", "last_seen": "2026-03-31 16:11:24 UTC", "sightings": 1 }, { "indicator": "https://peak-point.vertexbloom.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 16:09:12 UTC", "last_seen": "2026-03-31 16:09:12 UTC", "sightings": 1 }, { "indicator": "http://123.14.52.64:39726/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 16:07:08 UTC", "last_seen": "2026-03-31 16:07:08 UTC", "sightings": 1 }, { "indicator": "http://123.14.180.160:55488/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 16:04:20 UTC", "last_seen": "2026-03-31 16:04:20 UTC", "sightings": 1 }, { "indicator": "https://vale-gra.prefixwag.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 16:03:12 UTC", "last_seen": "2026-03-31 16:03:12 UTC", "sightings": 1 }, { "indicator": "http://217.208.145.10:33976/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 15:58:25 UTC", "last_seen": "2026-03-31 15:58:25 UTC", "sightings": 1 }, { "indicator": "http://113.222.144.108:49582/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-31 15:57:26 UTC", "last_seen": "2026-03-31 15:57:26 UTC", "sightings": 1 }, { "indicator": "https://devsig.prefixwag.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 15:56:13 UTC", "last_seen": "2026-03-31 15:56:13 UTC", "sightings": 1 }, { "indicator": "http://106.58.23.214:33668/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-31 15:54:21 UTC", "last_seen": "2026-03-31 15:54:21 UTC", "sightings": 1 }, { "indicator": "http://222.141.127.234:38071/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 15:52:23 UTC", "last_seen": "2026-03-31 15:52:23 UTC", "sightings": 1 }, { "indicator": "https://vgtp5o.manchustill.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 15:51:14 UTC", "last_seen": "2026-03-31 15:51:14 UTC", "sightings": 1 }, { "indicator": "http://182.119.182.122:44856/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 15:50:26 UTC", "last_seen": "2026-03-31 15:50:26 UTC", "sightings": 1 }, { "indicator": "http://42.180.248.192:51461/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 15:46:20 UTC", "last_seen": "2026-03-31 15:46:20 UTC", "sightings": 1 }, { "indicator": "https://qz65lmfc.manchustill.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 15:46:10 UTC", "last_seen": "2026-03-31 15:46:10 UTC", "sightings": 1 }, { "indicator": "http://113.222.144.108:49582/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-31 15:45:26 UTC", "last_seen": "2026-03-31 15:45:26 UTC", "sightings": 1 }, { "indicator": "https://formalpod.premiumtos.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 15:39:11 UTC", "last_seen": "2026-03-31 15:39:11 UTC", "sightings": 1 }, { "indicator": "http://123.14.52.64:39726/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 15:35:25 UTC", "last_seen": "2026-03-31 15:35:25 UTC", "sightings": 1 }, { "indicator": "https://vaulvoc.premiumtos.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 15:34:12 UTC", "last_seen": "2026-03-31 15:34:12 UTC", "sightings": 1 }, { "indicator": "http://182.112.182.107:38745/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-31 15:30:26 UTC", "last_seen": "2026-03-31 15:30:26 UTC", "sightings": 1 }, { "indicator": "http://105.186.172.191:42231/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-31 15:30:26 UTC", "last_seen": "2026-03-31 15:30:26 UTC", "sightings": 1 }, { "indicator": "https://cata1og-forge.batkascript.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 15:29:15 UTC", "last_seen": "2026-03-31 15:29:15 UTC", "sightings": 1 }, { "indicator": "http://39.74.83.28:32913/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-31 15:27:08 UTC", "last_seen": "2026-03-31 15:27:08 UTC", "sightings": 1 }, { "indicator": "http://106.58.23.214:33668/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-31 15:26:35 UTC", "last_seen": "2026-03-31 15:26:35 UTC", "sightings": 1 }, { "indicator": "http://59.97.177.208:35249/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 15:26:27 UTC", "last_seen": "2026-03-31 15:26:27 UTC", "sightings": 1 }, { "indicator": "https://xxhq.batkascript.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 15:23:16 UTC", "last_seen": "2026-03-31 15:23:16 UTC", "sightings": 1 }, { "indicator": "http://182.119.182.122:44856/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 15:17:28 UTC", "last_seen": "2026-03-31 15:17:28 UTC", "sightings": 1 }, { "indicator": "https://partnerrelay.beltfloor.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 15:17:17 UTC", "last_seen": "2026-03-31 15:17:17 UTC", "sightings": 1 }, { "indicator": "http://59.180.183.105:49437/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 15:16:35 UTC", "last_seen": "2026-03-31 15:16:35 UTC", "sightings": 1 }, { "indicator": "https://value9-mesh.beltfloor.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 15:12:12 UTC", "last_seen": "2026-03-31 15:12:12 UTC", "sightings": 1 }, { "indicator": "http://182.121.112.12:38148/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 15:11:21 UTC", "last_seen": "2026-03-31 15:11:21 UTC", "sightings": 1 }, { "indicator": "http://182.112.182.107:38745/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-31 15:09:22 UTC", "last_seen": "2026-03-31 15:09:22 UTC", "sightings": 1 }, { "indicator": "http://115.55.189.111:52003/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 15:09:21 UTC", "last_seen": "2026-03-31 15:09:21 UTC", "sightings": 1 }, { "indicator": "https://lum-markal.radiatebeef.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 15:06:11 UTC", "last_seen": "2026-03-31 15:06:11 UTC", "sightings": 1 }, { "indicator": "http://60.23.236.40:60789/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 15:02:18 UTC", "last_seen": "2026-03-31 15:02:18 UTC", "sightings": 1 }, { "indicator": "http://39.74.83.28:32913/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-31 15:02:06 UTC", "last_seen": "2026-03-31 15:02:06 UTC", "sightings": 1 }, { "indicator": "https://mer-lithen.radiatebeef.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 15:01:13 UTC", "last_seen": "2026-03-31 15:01:13 UTC", "sightings": 1 }, { "indicator": "https://load-spark.chernomofnothes.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 14:56:13 UTC", "last_seen": "2026-03-31 14:56:13 UTC", "sightings": 1 }, { "indicator": "https://kvvfusu.chernomofnothes.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 14:50:17 UTC", "last_seen": "2026-03-31 14:50:17 UTC", "sightings": 1 }, { "indicator": "http://42.231.110.202:57990/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 14:49:23 UTC", "last_seen": "2026-03-31 14:49:23 UTC", "sightings": 1 }, { "indicator": "https://voicefjo.paleontraglan.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 14:44:12 UTC", "last_seen": "2026-03-31 14:44:12 UTC", "sightings": 1 }, { "indicator": "http://182.121.112.12:38148/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 14:43:21 UTC", "last_seen": "2026-03-31 14:43:21 UTC", "sightings": 1 }, { "indicator": "http://59.180.183.105:49437/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 14:42:21 UTC", "last_seen": "2026-03-31 14:42:21 UTC", "sightings": 1 }, { "indicator": "http://115.55.189.111:52003/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 14:42:17 UTC", "last_seen": "2026-03-31 14:42:17 UTC", "sightings": 1 }, { "indicator": "http://190.55.14.216:38506/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 14:39:23 UTC", "last_seen": "2026-03-31 14:39:23 UTC", "sightings": 1 }, { "indicator": "http://110.37.52.120:36919/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 14:39:16 UTC", "last_seen": "2026-03-31 14:39:16 UTC", "sightings": 1 }, { "indicator": "https://honestsort.paleontraglan.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 14:38:23 UTC", "last_seen": "2026-03-31 14:38:23 UTC", "sightings": 1 }, { "indicator": "http://110.37.26.48:52572/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 14:34:20 UTC", "last_seen": "2026-03-31 14:34:20 UTC", "sightings": 1 }, { "indicator": "https://rne4d7-zone.cuffsorbsky.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 14:32:22 UTC", "last_seen": "2026-03-31 14:32:22 UTC", "sightings": 1 }, { "indicator": "http://196.189.96.59:43689/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-31 14:32:09 UTC", "last_seen": "2026-03-31 14:32:09 UTC", "sightings": 1 }, { "indicator": "https://loosesnow.cuffsorbsky.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 14:28:11 UTC", "last_seen": "2026-03-31 14:28:11 UTC", "sightings": 1 }, { "indicator": "https://st4b1l-span.cuffsorbsky.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 14:22:11 UTC", "last_seen": "2026-03-31 14:22:11 UTC", "sightings": 1 }, { "indicator": "http://196.189.96.59:43689/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-31 14:22:09 UTC", "last_seen": "2026-03-31 14:22:09 UTC", "sightings": 1 }, { "indicator": "http://158.94.210.91/g8hrS4f4vh/Plugins/cred.dll", "indicator_type": "url", "source": "URLhaus", "tags": [ "Amadey", "ua-wget" ], "first_seen": "2026-03-31 14:21:09 UTC", "last_seen": "2026-03-31 14:21:09 UTC", "sightings": 1 }, { "indicator": "http://158.94.210.91/g8hrS4f4vh/Plugins/cred64.dll", "indicator_type": "url", "source": "URLhaus", "tags": [ "Amadey", "ua-wget" ], "first_seen": "2026-03-31 14:21:09 UTC", "last_seen": "2026-03-31 14:21:09 UTC", "sightings": 1 }, { "indicator": "http://158.94.210.91/g8hrS4f4vh/Plugins/vnc.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "tinynuke", "ua-wget" ], "first_seen": "2026-03-31 14:21:08 UTC", "last_seen": "2026-03-31 14:21:08 UTC", "sightings": 1 }, { "indicator": "http://39.81.216.175:44977/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 14:19:26 UTC", "last_seen": "2026-03-31 14:19:26 UTC", "sightings": 1 }, { "indicator": "https://bundstar.cuffsorbsky.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 14:16:14 UTC", "last_seen": "2026-03-31 14:16:14 UTC", "sightings": 1 }, { "indicator": "https://yfjgi.cuffsorbsky.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 14:10:24 UTC", "last_seen": "2026-03-31 14:10:24 UTC", "sightings": 1 }, { "indicator": "http://110.37.52.120:36919/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 14:09:18 UTC", "last_seen": "2026-03-31 14:09:18 UTC", "sightings": 1 }, { "indicator": "http://110.37.102.128:52610/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 14:06:12 UTC", "last_seen": "2026-03-31 14:06:12 UTC", "sightings": 1 }, { "indicator": "https://scarlet-tra.cuffsorbsky.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 14:05:21 UTC", "last_seen": "2026-03-31 14:05:21 UTC", "sightings": 1 }, { "indicator": "http://117.235.45.187:53599/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 14:01:14 UTC", "last_seen": "2026-03-31 14:01:14 UTC", "sightings": 1 }, { "indicator": "https://gentle5-crest.codcomparable.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 13:53:00 UTC", "last_seen": "2026-03-31 13:53:00 UTC", "sightings": 1 }, { "indicator": "https://j30k.codcomparable.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 13:47:31 UTC", "last_seen": "2026-03-31 13:47:31 UTC", "sightings": 1 }, { "indicator": "http://110.37.95.41:59422/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 13:44:24 UTC", "last_seen": "2026-03-31 13:44:24 UTC", "sightings": 1 }, { "indicator": "https://theor-spool.codcomparable.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 13:42:23 UTC", "last_seen": "2026-03-31 13:42:23 UTC", "sightings": 1 }, { "indicator": "http://42.230.40.84:32883/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 13:40:35 UTC", "last_seen": "2026-03-31 13:40:35 UTC", "sightings": 1 }, { "indicator": "http://117.211.208.123:38032/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 13:39:20 UTC", "last_seen": "2026-03-31 13:39:20 UTC", "sightings": 1 }, { "indicator": "https://sp0o-forge.codcomparable.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 13:36:25 UTC", "last_seen": "2026-03-31 13:36:25 UTC", "sightings": 1 }, { "indicator": "http://110.37.38.88:59792/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-31 13:32:25 UTC", "last_seen": "2026-03-31 13:32:25 UTC", "sightings": 1 }, { "indicator": "https://c0nvoy5-field.codcomparable.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 13:31:26 UTC", "last_seen": "2026-03-31 13:31:26 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.59/hiddenbin/boatnet.mipsrouter", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-31 13:29:14 UTC", "last_seen": "2026-03-31 13:29:14 UTC", "sightings": 1 }, { "indicator": "http://121.37.40.52/main_mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-31 13:28:34 UTC", "last_seen": "2026-03-31 13:28:34 UTC", "sightings": 1 }, { "indicator": "http://178.232.64.184:54840/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-31 13:28:27 UTC", "last_seen": "2026-03-31 13:28:27 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.59/hiddenbin/boatnet.armv4l", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-31 13:28:27 UTC", "last_seen": "2026-03-31 13:28:27 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.59/hiddenbin/boatnet.aarch64", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-31 13:28:27 UTC", "last_seen": "2026-03-31 13:28:27 UTC", "sightings": 1 }, { "indicator": "http://121.37.40.52/main_i486", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-31 13:28:25 UTC", "last_seen": "2026-03-31 13:28:25 UTC", "sightings": 1 }, { "indicator": "http://121.37.40.52/main_sh4", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-31 13:28:25 UTC", "last_seen": "2026-03-31 13:28:25 UTC", "sightings": 1 }, { "indicator": "http://121.37.40.52/main_arm", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-31 13:28:24 UTC", "last_seen": "2026-03-31 13:28:24 UTC", "sightings": 1 }, { "indicator": "http://121.37.40.52/main_aarch64", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-31 13:28:24 UTC", "last_seen": "2026-03-31 13:28:24 UTC", "sightings": 1 }, { "indicator": "http://121.37.40.52/main_arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-31 13:28:24 UTC", "last_seen": "2026-03-31 13:28:24 UTC", "sightings": 1 }, { "indicator": "http://121.37.40.52/main_arm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-31 13:28:24 UTC", "last_seen": "2026-03-31 13:28:24 UTC", "sightings": 1 }, { "indicator": "http://121.37.40.52/main_arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-31 13:28:24 UTC", "last_seen": "2026-03-31 13:28:24 UTC", "sightings": 1 }, { "indicator": "http://121.37.40.52/main_x86", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-31 13:28:24 UTC", "last_seen": "2026-03-31 13:28:24 UTC", "sightings": 1 }, { "indicator": "http://121.37.40.52/main_mips64", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-31 13:28:24 UTC", "last_seen": "2026-03-31 13:28:24 UTC", "sightings": 1 }, { "indicator": "http://121.37.40.52/main_mpsl", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-31 13:28:24 UTC", "last_seen": "2026-03-31 13:28:24 UTC", "sightings": 1 }, { "indicator": "http://121.37.40.52/main_m68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-31 13:28:24 UTC", "last_seen": "2026-03-31 13:28:24 UTC", "sightings": 1 }, { "indicator": "http://121.37.40.52/main_ppc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-31 13:28:24 UTC", "last_seen": "2026-03-31 13:28:24 UTC", "sightings": 1 }, { "indicator": "http://121.37.40.52/main_i686", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-31 13:28:24 UTC", "last_seen": "2026-03-31 13:28:24 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.96/hiddenbin/boatnet.arc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-31 13:28:23 UTC", "last_seen": "2026-03-31 13:28:23 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.96/hiddenbin/boatnet.i468", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-31 13:28:23 UTC", "last_seen": "2026-03-31 13:28:23 UTC", "sightings": 1 }, { "indicator": "https://py28ionr.prefixwag.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 13:26:27 UTC", "last_seen": "2026-03-31 13:26:27 UTC", "sightings": 1 }, { "indicator": "http://110.37.95.41:59422/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 13:25:46 UTC", "last_seen": "2026-03-31 13:25:46 UTC", "sightings": 1 }, { "indicator": "https://ledge5-switch.prefixwag.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 13:19:45 UTC", "last_seen": "2026-03-31 13:19:45 UTC", "sightings": 1 }, { "indicator": "https://4csbzg.prefixwag.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 13:16:10 UTC", "last_seen": "2026-03-31 13:16:10 UTC", "sightings": 1 }, { "indicator": "https://csbtxwz.prefixwag.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 13:14:07 UTC", "last_seen": "2026-03-31 13:14:07 UTC", "sightings": 1 }, { "indicator": "https://github.com/ashduasdoasdoasd/localhostc2/raw/refs/heads/main/realc2/hi-malwareresearcher/RuntimeBroker.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "AdaptixC2" ], "first_seen": "2026-03-31 13:08:07 UTC", "last_seen": "2026-03-31 13:08:07 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/ashduasdoasdoasd/localhostc2/refs/heads/main/realc2/hi-malwareresearcher/RuntimeBroker.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "AdaptixC2" ], "first_seen": "2026-03-31 13:08:07 UTC", "last_seen": "2026-03-31 13:08:07 UTC", "sightings": 1 }, { "indicator": "http://113.238.14.212:45600/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 13:06:15 UTC", "last_seen": "2026-03-31 13:06:15 UTC", "sightings": 1 }, { "indicator": "https://zenvaleex.prefixwag.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 13:04:15 UTC", "last_seen": "2026-03-31 13:04:15 UTC", "sightings": 1 }, { "indicator": "http://182.127.48.41:59514/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-31 13:02:07 UTC", "last_seen": "2026-03-31 13:02:07 UTC", "sightings": 1 }, { "indicator": "https://lumnexum1.prefixwag.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 12:58:12 UTC", "last_seen": "2026-03-31 12:58:12 UTC", "sightings": 1 }, { "indicator": "https://zennex8ar.manchustill.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 12:52:12 UTC", "last_seen": "2026-03-31 12:52:12 UTC", "sightings": 1 }, { "indicator": "https://tokcheck.manchustill.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 12:48:10 UTC", "last_seen": "2026-03-31 12:48:10 UTC", "sightings": 1 }, { "indicator": "http://120.61.157.176:55679/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 12:47:18 UTC", "last_seen": "2026-03-31 12:47:18 UTC", "sightings": 1 }, { "indicator": "https://veobw.manchustill.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 12:45:11 UTC", "last_seen": "2026-03-31 12:45:11 UTC", "sightings": 1 }, { "indicator": "http://113.238.14.212:45600/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 12:35:11 UTC", "last_seen": "2026-03-31 12:35:11 UTC", "sightings": 1 }, { "indicator": "https://targettest.manchustill.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 12:34:16 UTC", "last_seen": "2026-03-31 12:34:16 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.203/manji.apk", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai", "ua-wget" ], "first_seen": "2026-03-31 12:34:08 UTC", "last_seen": "2026-03-31 12:34:08 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.203/manji.dbg", "indicator_type": "url", "source": "URLhaus", "tags": [ "gafgyt", "ua-wget" ], "first_seen": "2026-03-31 12:34:08 UTC", "last_seen": "2026-03-31 12:34:08 UTC", "sightings": 1 }, { "indicator": "https://vxfxox7r.manchustill.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 12:31:09 UTC", "last_seen": "2026-03-31 12:31:09 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.44/nigger.go", "indicator_type": "url", "source": "URLhaus", "tags": [ "ua-wget" ], "first_seen": "2026-03-31 12:31:05 UTC", "last_seen": "2026-03-31 12:31:05 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.44/arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-31 12:30:26 UTC", "last_seen": "2026-03-31 12:30:26 UTC", "sightings": 1 }, { "indicator": "http://124.234.181.102:48400/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-31 12:29:05 UTC", "last_seen": "2026-03-31 12:29:05 UTC", "sightings": 1 }, { "indicator": "https://b4nn-mount.manchustill.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 12:28:13 UTC", "last_seen": "2026-03-31 12:28:13 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.57/bins/mpsl", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-31 12:27:11 UTC", "last_seen": "2026-03-31 12:27:11 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.57/bins/arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-31 12:27:11 UTC", "last_seen": "2026-03-31 12:27:11 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.57/bins/arm4", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-31 12:27:11 UTC", "last_seen": "2026-03-31 12:27:11 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.57/bins/arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-31 12:26:18 UTC", "last_seen": "2026-03-31 12:26:18 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.57/bins/x86_64", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-31 12:26:18 UTC", "last_seen": "2026-03-31 12:26:18 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.57/bins/mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-31 12:26:18 UTC", "last_seen": "2026-03-31 12:26:18 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.57/bins/arm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-31 12:26:18 UTC", "last_seen": "2026-03-31 12:26:18 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.59/hiddenbin/boatnet.armv7l", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-31 12:22:19 UTC", "last_seen": "2026-03-31 12:22:19 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.59/hiddenbin/boatnet.i486", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-31 12:22:19 UTC", "last_seen": "2026-03-31 12:22:19 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.59/hiddenbin/boatnet.m68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-31 12:21:18 UTC", "last_seen": "2026-03-31 12:21:18 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.59/hiddenbin/boatnet.armv5l", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-31 12:21:18 UTC", "last_seen": "2026-03-31 12:21:18 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.59/hiddenbin/boatnet.armv6l", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-31 12:21:18 UTC", "last_seen": "2026-03-31 12:21:18 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.59/ohshit.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai", "sh", "ua-wget" ], "first_seen": "2026-03-31 12:21:18 UTC", "last_seen": "2026-03-31 12:21:18 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.59/hiddenbin/boatnet.arc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-31 12:21:18 UTC", "last_seen": "2026-03-31 12:21:18 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.59/hiddenbin/boatnet.x86_64", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-31 12:21:18 UTC", "last_seen": "2026-03-31 12:21:18 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.59/arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-31 12:21:18 UTC", "last_seen": "2026-03-31 12:21:18 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.59/hiddenbin/boatnet.mipsel", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-31 12:21:18 UTC", "last_seen": "2026-03-31 12:21:18 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.59/hiddenbin/boatnet.sh4", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-31 12:21:18 UTC", "last_seen": "2026-03-31 12:21:18 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.59/hiddenbin/boatnet.powerpc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-31 12:21:18 UTC", "last_seen": "2026-03-31 12:21:18 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.59/hiddenbin/boatnet.mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-31 12:21:18 UTC", "last_seen": "2026-03-31 12:21:18 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.59/hiddenbin/boatnet.sparc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-31 12:21:18 UTC", "last_seen": "2026-03-31 12:21:18 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.59/mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-31 12:21:18 UTC", "last_seen": "2026-03-31 12:21:18 UTC", "sightings": 1 }, { "indicator": "https://meta-cu1tur.premiumtos.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 12:18:10 UTC", "last_seen": "2026-03-31 12:18:10 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.203/manji.spc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-31 12:18:09 UTC", "last_seen": "2026-03-31 12:18:09 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.203/manji.x86", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-31 12:18:09 UTC", "last_seen": "2026-03-31 12:18:09 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.203/manji.ppc440", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-31 12:17:22 UTC", "last_seen": "2026-03-31 12:17:22 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.203/manji.i686", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-31 12:17:22 UTC", "last_seen": "2026-03-31 12:17:22 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.203/manji.arm4", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-31 12:17:22 UTC", "last_seen": "2026-03-31 12:17:22 UTC", "sightings": 1 }, { "indicator": "http://113.228.240.50:54543/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-31 12:17:21 UTC", "last_seen": "2026-03-31 12:17:21 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.203/manji.i486", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-31 12:17:21 UTC", "last_seen": "2026-03-31 12:17:21 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.203/manji.m68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-31 12:17:21 UTC", "last_seen": "2026-03-31 12:17:21 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.203/manji.mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "gafgyt", "ua-wget" ], "first_seen": "2026-03-31 12:17:21 UTC", "last_seen": "2026-03-31 12:17:21 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.203/manji.sh4", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-31 12:17:21 UTC", "last_seen": "2026-03-31 12:17:21 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.203/manji.arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-31 12:17:21 UTC", "last_seen": "2026-03-31 12:17:21 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.203/arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-31 12:17:07 UTC", "last_seen": "2026-03-31 12:17:07 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.203/manji.mpsl", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "gafgyt", "ua-wget" ], "first_seen": "2026-03-31 12:17:07 UTC", "last_seen": "2026-03-31 12:17:07 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.203/manji.ppc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-31 12:17:07 UTC", "last_seen": "2026-03-31 12:17:07 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.203/manji.arm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-31 12:17:07 UTC", "last_seen": "2026-03-31 12:17:07 UTC", "sightings": 1 }, { "indicator": "http://112.252.179.168:46843/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-31 12:15:42 UTC", "last_seen": "2026-03-31 12:15:42 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.96/hiddenbin/boatnet.i686", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-31 12:15:23 UTC", "last_seen": "2026-03-31 12:15:23 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.96/hiddenbin/boatnet.x86_64", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-31 12:15:20 UTC", "last_seen": "2026-03-31 12:15:20 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.96/hiddenbin/boatnet.arm", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-31 12:15:20 UTC", "last_seen": "2026-03-31 12:15:20 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.96/hiddenbin/boatnet.i486", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-31 12:15:20 UTC", "last_seen": "2026-03-31 12:15:20 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.96/hiddenbin/boatnet.m68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-31 12:15:20 UTC", "last_seen": "2026-03-31 12:15:20 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.96/hiddenbin/boatnet.x86", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-31 12:15:20 UTC", "last_seen": "2026-03-31 12:15:20 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.96/hiddenbin/boatnet.mpsl", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-31 12:15:20 UTC", "last_seen": "2026-03-31 12:15:20 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.96/ohshit.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai", "sh", "ua-wget" ], "first_seen": "2026-03-31 12:15:20 UTC", "last_seen": "2026-03-31 12:15:20 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.96/hiddenbin/boatnet.ppc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-31 12:15:20 UTC", "last_seen": "2026-03-31 12:15:20 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.96/hiddenbin/boatnet.arm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-31 12:15:20 UTC", "last_seen": "2026-03-31 12:15:20 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.96/hiddenbin/boatnet.arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-31 12:15:17 UTC", "last_seen": "2026-03-31 12:15:17 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.96/hiddenbin/boatnet.spc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-31 12:15:17 UTC", "last_seen": "2026-03-31 12:15:17 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.99/mirai.x86", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-31 12:15:17 UTC", "last_seen": "2026-03-31 12:15:17 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.96/hiddenbin/boatnet.sh4", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-31 12:15:17 UTC", "last_seen": "2026-03-31 12:15:17 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.96/hiddenbin/boatnet.mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-31 12:15:17 UTC", "last_seen": "2026-03-31 12:15:17 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.96/hiddenbin/boatnet.arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-31 12:15:17 UTC", "last_seen": "2026-03-31 12:15:17 UTC", "sightings": 1 }, { "indicator": "https://markpeak.premiumtos.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 12:12:13 UTC", "last_seen": "2026-03-31 12:12:13 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.81/hiddenbin/boatnet.i486", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-31 12:11:08 UTC", "last_seen": "2026-03-31 12:11:08 UTC", "sightings": 1 }, { "indicator": "https://dingdong-1399351730.cos.ap-hongkong.myqcloud.com/glqchoiding.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "shellcode", "Win32/Malgent!MSR" ], "first_seen": "2026-03-31 12:09:17 UTC", "last_seen": "2026-03-31 12:09:17 UTC", "sightings": 1 }, { "indicator": "http://27.217.89.192:44823/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-31 12:09:06 UTC", "last_seen": "2026-03-31 12:09:06 UTC", "sightings": 1 }, { "indicator": "https://pu1s-trail.premiumtos.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 12:08:09 UTC", "last_seen": "2026-03-31 12:08:09 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.25/html/jade.ppc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-31 12:04:19 UTC", "last_seen": "2026-03-31 12:04:19 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.25/html/jade.arm", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-31 12:04:19 UTC", "last_seen": "2026-03-31 12:04:19 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.25/html/jade.x86", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-31 12:04:19 UTC", "last_seen": "2026-03-31 12:04:19 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.25/html/jade.m68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-31 12:04:19 UTC", "last_seen": "2026-03-31 12:04:19 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.25/html/jade.arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-31 12:04:19 UTC", "last_seen": "2026-03-31 12:04:19 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.74/x86_64", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-31 12:04:19 UTC", "last_seen": "2026-03-31 12:04:19 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.25/html/jade.mpsl", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-31 12:04:19 UTC", "last_seen": "2026-03-31 12:04:19 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.74/wget.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "sh", "ua-wget" ], "first_seen": "2026-03-31 12:04:19 UTC", "last_seen": "2026-03-31 12:04:19 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.74/sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "sh", "ua-wget" ], "first_seen": "2026-03-31 12:04:17 UTC", "last_seen": "2026-03-31 12:04:17 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.25/html/jade.arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-31 12:03:11 UTC", "last_seen": "2026-03-31 12:03:11 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.25/html/jade.arm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-31 12:03:11 UTC", "last_seen": "2026-03-31 12:03:11 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.25/html/jade.mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-31 12:03:11 UTC", "last_seen": "2026-03-31 12:03:11 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.25/html/jade.sh4", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-31 12:03:11 UTC", "last_seen": "2026-03-31 12:03:11 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.25/html/jade.spc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-31 12:03:11 UTC", "last_seen": "2026-03-31 12:03:11 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.25/html/jade.mipsel", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-31 12:03:11 UTC", "last_seen": "2026-03-31 12:03:11 UTC", "sightings": 1 }, { "indicator": "https://imagedis.premiumtos.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 12:01:12 UTC", "last_seen": "2026-03-31 12:01:12 UTC", "sightings": 1 }, { "indicator": "http://117.146.92.46:51853/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 11:57:32 UTC", "last_seen": "2026-03-31 11:57:32 UTC", "sightings": 1 }, { "indicator": "https://epkzg.premiumtos.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 11:56:15 UTC", "last_seen": "2026-03-31 11:56:15 UTC", "sightings": 1 }, { "indicator": "https://alt-h0llow.premiumtos.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 11:51:10 UTC", "last_seen": "2026-03-31 11:51:10 UTC", "sightings": 1 }, { "indicator": "http://117.146.92.46:51853/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 11:48:09 UTC", "last_seen": "2026-03-31 11:48:09 UTC", "sightings": 1 }, { "indicator": "https://g38198.batkascript.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 11:44:11 UTC", "last_seen": "2026-03-31 11:44:11 UTC", "sightings": 1 }, { "indicator": "http://119.162.228.112:53422/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 11:40:09 UTC", "last_seen": "2026-03-31 11:40:09 UTC", "sightings": 1 }, { "indicator": "http://120.37.212.67:43258/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-31 11:39:16 UTC", "last_seen": "2026-03-31 11:39:16 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.74/mipsel", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "gafgyt", "ua-wget" ], "first_seen": "2026-03-31 11:39:15 UTC", "last_seen": "2026-03-31 11:39:15 UTC", "sightings": 1 }, { "indicator": "https://clusterclinic.batkascript.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 11:39:11 UTC", "last_seen": "2026-03-31 11:39:11 UTC", "sightings": 1 }, { "indicator": "http://117.26.226.210:56557/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-31 11:39:11 UTC", "last_seen": "2026-03-31 11:39:11 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.74/arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-31 11:39:10 UTC", "last_seen": "2026-03-31 11:39:10 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.74/mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "gafgyt", "ua-wget" ], "first_seen": "2026-03-31 11:39:10 UTC", "last_seen": "2026-03-31 11:39:10 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.74/arm", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "gafgyt", "ua-wget" ], "first_seen": "2026-03-31 11:39:10 UTC", "last_seen": "2026-03-31 11:39:10 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.74/arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-31 11:39:10 UTC", "last_seen": "2026-03-31 11:39:10 UTC", "sightings": 1 }, { "indicator": "https://btkrpap.batkascript.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 11:33:10 UTC", "last_seen": "2026-03-31 11:33:10 UTC", "sightings": 1 }, { "indicator": "http://182.127.48.41:59514/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-31 11:32:07 UTC", "last_seen": "2026-03-31 11:32:07 UTC", "sightings": 1 }, { "indicator": "https://canyonfresh.batkascript.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 11:29:12 UTC", "last_seen": "2026-03-31 11:29:12 UTC", "sightings": 1 }, { "indicator": "http://60.23.203.149:51381/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 11:26:10 UTC", "last_seen": "2026-03-31 11:26:10 UTC", "sightings": 1 }, { "indicator": "https://summitgeyser.batkascript.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 11:22:11 UTC", "last_seen": "2026-03-31 11:22:11 UTC", "sightings": 1 }, { "indicator": "http://121.37.40.52/cat.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "sh", "ua-wget" ], "first_seen": "2026-03-31 11:17:17 UTC", "last_seen": "2026-03-31 11:17:17 UTC", "sightings": 1 }, { "indicator": "https://xehramf.batkascript.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 11:17:09 UTC", "last_seen": "2026-03-31 11:17:09 UTC", "sightings": 1 }, { "indicator": "http://110.39.239.111:35582/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 11:15:11 UTC", "last_seen": "2026-03-31 11:15:11 UTC", "sightings": 1 }, { "indicator": "http://113.228.240.50:54543/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-31 11:12:20 UTC", "last_seen": "2026-03-31 11:12:20 UTC", "sightings": 1 }, { "indicator": "http://119.162.228.112:53422/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 11:12:19 UTC", "last_seen": "2026-03-31 11:12:19 UTC", "sightings": 1 }, { "indicator": "https://ahus.beltfloor.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 11:11:09 UTC", "last_seen": "2026-03-31 11:11:09 UTC", "sightings": 1 }, { "indicator": "http://117.223.1.224:41751/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-31 11:07:07 UTC", "last_seen": "2026-03-31 11:07:07 UTC", "sightings": 1 }, { "indicator": "http://83.168.69.118/run.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai", "ua-wget" ], "first_seen": "2026-03-31 11:07:05 UTC", "last_seen": "2026-03-31 11:07:05 UTC", "sightings": 1 }, { "indicator": "http://60.23.203.149:51381/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 11:06:19 UTC", "last_seen": "2026-03-31 11:06:19 UTC", "sightings": 1 }, { "indicator": "https://cqnvpcp.beltfloor.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 11:05:11 UTC", "last_seen": "2026-03-31 11:05:11 UTC", "sightings": 1 }, { "indicator": "https://11szohw.beltfloor.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 11:00:11 UTC", "last_seen": "2026-03-31 11:00:11 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.64/spc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-31 10:59:17 UTC", "last_seen": "2026-03-31 10:59:17 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.64/arm4", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-31 10:58:13 UTC", "last_seen": "2026-03-31 10:58:13 UTC", "sightings": 1 }, { "indicator": "http://hostphpwindowsappsconect.ydns.eu:8011/data/optimized_MSI.png", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-31 10:57:25 UTC", "last_seen": "2026-03-31 10:57:25 UTC", "sightings": 1 }, { "indicator": "https://deposit-notification.com/Crypt/optimized_MSI.png", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-31 10:57:25 UTC", "last_seen": "2026-03-31 10:57:25 UTC", "sightings": 1 }, { "indicator": "https://ia600708.us.archive.org/14/items/optimized_msi_20260324/optimized_MSI.png", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-31 10:57:23 UTC", "last_seen": "2026-03-31 10:57:23 UTC", "sightings": 1 }, { "indicator": "http://inmbau.com/upload/optimized_MSI.png", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-31 10:57:22 UTC", "last_seen": "2026-03-31 10:57:22 UTC", "sightings": 1 }, { "indicator": "http://83.217.209.98/logfile.pdf", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-31 10:57:20 UTC", "last_seen": "2026-03-31 10:57:20 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.64/i486", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-31 10:57:17 UTC", "last_seen": "2026-03-31 10:57:17 UTC", "sightings": 1 }, { "indicator": "https://fullclear-seven.vercel.app/mp.msi", "indicator_type": "url", "source": "URLhaus", "tags": [ "GoToResolve", "LogMeIn", "msi" ], "first_seen": "2026-03-31 10:57:13 UTC", "last_seen": "2026-03-31 10:57:13 UTC", "sightings": 1 }, { "indicator": "https://reutilizemais.co.mz/sehhs_MSI.png", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-31 10:57:13 UTC", "last_seen": "2026-03-31 10:57:13 UTC", "sightings": 1 }, { "indicator": "http://reutilizemais.co.mz/sehhs_MSI.png", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-31 10:57:13 UTC", "last_seen": "2026-03-31 10:57:13 UTC", "sightings": 1 }, { "indicator": "https://prosingle.com.br/my_photo.png", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-31 10:57:13 UTC", "last_seen": "2026-03-31 10:57:13 UTC", "sightings": 1 }, { "indicator": "http://198.12.83.76/img/optimized_MSI.png", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-31 10:57:10 UTC", "last_seen": "2026-03-31 10:57:10 UTC", "sightings": 1 }, { "indicator": "http://216.9.225.38/img/optimized_MSI.png", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-31 10:57:09 UTC", "last_seen": "2026-03-31 10:57:09 UTC", "sightings": 1 }, { "indicator": "https://digitalauralab.com/pictures/optimized_MSI.png", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-31 10:57:09 UTC", "last_seen": "2026-03-31 10:57:09 UTC", "sightings": 1 }, { "indicator": "https://gateway.lighthouse.storage/ipfs/bafybeidt676k2hl7b7ayspwpxaexs3adgw5jyt7e2f62u3bfje3pk5u3ou/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-31 10:57:09 UTC", "last_seen": "2026-03-31 10:57:09 UTC", "sightings": 1 }, { "indicator": "https://gateway.lighthouse.storage/ipfs/bafybeidt676k2hl7b7ayspwpxaexs3adgw5jyt7e2f62u3bfje3pk5u3ou", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-31 10:57:09 UTC", "last_seen": "2026-03-31 10:57:09 UTC", "sightings": 1 }, { "indicator": "https://vault88x.secure-efficient2.su/MSI_054600.png", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-31 10:57:08 UTC", "last_seen": "2026-03-31 10:57:08 UTC", "sightings": 1 }, { "indicator": "https://mapshdi.wildscreeen.shop/MSI_073826.png", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-31 10:57:07 UTC", "last_seen": "2026-03-31 10:57:07 UTC", "sightings": 1 }, { "indicator": "https://payable-notifications.org/RHpGTQwb/optimized_MSI.png", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-31 10:57:07 UTC", "last_seen": "2026-03-31 10:57:07 UTC", "sightings": 1 }, { "indicator": "https://person.dians-store-ison.top/MSI_215033.png", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-31 10:57:06 UTC", "last_seen": "2026-03-31 10:57:06 UTC", "sightings": 1 }, { "indicator": "https://sterilelan.beltfloor.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 10:53:13 UTC", "last_seen": "2026-03-31 10:53:13 UTC", "sightings": 1 }, { "indicator": "http://120.37.212.67:43258/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-31 10:51:23 UTC", "last_seen": "2026-03-31 10:51:23 UTC", "sightings": 1 }, { "indicator": "http://110.37.87.223:56393/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 10:49:22 UTC", "last_seen": "2026-03-31 10:49:22 UTC", "sightings": 1 }, { "indicator": "https://f4br2-scope.beltfloor.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 10:48:10 UTC", "last_seen": "2026-03-31 10:48:10 UTC", "sightings": 1 }, { "indicator": "http://110.37.102.128:52610/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 10:45:18 UTC", "last_seen": "2026-03-31 10:45:18 UTC", "sightings": 1 }, { "indicator": "https://d3nse-gate.beltfloor.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 10:43:12 UTC", "last_seen": "2026-03-31 10:43:12 UTC", "sightings": 1 }, { "indicator": "http://117.223.1.224:41751/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-31 10:42:12 UTC", "last_seen": "2026-03-31 10:42:12 UTC", "sightings": 1 }, { "indicator": "https://carg-man.radiatebeef.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 10:35:13 UTC", "last_seen": "2026-03-31 10:35:13 UTC", "sightings": 1 }, { "indicator": "https://waveque.radiatebeef.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 10:29:11 UTC", "last_seen": "2026-03-31 10:29:11 UTC", "sightings": 1 }, { "indicator": "https://verify-invoi.radiatebeef.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 10:22:11 UTC", "last_seen": "2026-03-31 10:22:11 UTC", "sightings": 1 }, { "indicator": "http://110.37.87.223:56393/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 10:18:20 UTC", "last_seen": "2026-03-31 10:18:20 UTC", "sightings": 1 }, { "indicator": "http://110.136.33.111:44856/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-31 10:17:12 UTC", "last_seen": "2026-03-31 10:17:12 UTC", "sightings": 1 }, { "indicator": "http://113.231.36.162:55536/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 10:15:22 UTC", "last_seen": "2026-03-31 10:15:22 UTC", "sightings": 1 }, { "indicator": "https://5ucnd.radiatebeef.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 10:15:18 UTC", "last_seen": "2026-03-31 10:15:18 UTC", "sightings": 1 }, { "indicator": "http://42.230.32.152:46663/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 10:14:18 UTC", "last_seen": "2026-03-31 10:14:18 UTC", "sightings": 1 }, { "indicator": "https://vn06.radiatebeef.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 10:10:18 UTC", "last_seen": "2026-03-31 10:10:18 UTC", "sightings": 1 }, { "indicator": "http://167.250.158.32:39717/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-31 10:02:24 UTC", "last_seen": "2026-03-31 10:02:24 UTC", "sightings": 1 }, { "indicator": "https://crawlerstor.radiatebeef.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 10:02:14 UTC", "last_seen": "2026-03-31 10:02:14 UTC", "sightings": 1 }, { "indicator": "https://m0on-flow.chernomofnothes.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 09:55:15 UTC", "last_seen": "2026-03-31 09:55:15 UTC", "sightings": 1 }, { "indicator": "https://taldrais3.chernomofnothes.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 09:48:12 UTC", "last_seen": "2026-03-31 09:48:12 UTC", "sightings": 1 }, { "indicator": "http://42.224.67.171:43887/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 09:46:13 UTC", "last_seen": "2026-03-31 09:46:13 UTC", "sightings": 1 }, { "indicator": "http://42.230.32.152:46663/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 09:46:13 UTC", "last_seen": "2026-03-31 09:46:13 UTC", "sightings": 1 }, { "indicator": "http://60.18.50.197:50181/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 09:44:18 UTC", "last_seen": "2026-03-31 09:44:18 UTC", "sightings": 1 }, { "indicator": "http://196.189.197.131:39690/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-31 09:43:20 UTC", "last_seen": "2026-03-31 09:43:20 UTC", "sightings": 1 }, { "indicator": "http://42.6.253.116:46861/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 09:42:23 UTC", "last_seen": "2026-03-31 09:42:23 UTC", "sightings": 1 }, { "indicator": "https://gr0v-hold.chernomofnothes.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 09:42:13 UTC", "last_seen": "2026-03-31 09:42:13 UTC", "sightings": 1 }, { "indicator": "http://61.166.217.21:33418/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-31 09:41:25 UTC", "last_seen": "2026-03-31 09:41:25 UTC", "sightings": 1 }, { "indicator": "https://protectsup.chernomofnothes.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 09:35:16 UTC", "last_seen": "2026-03-31 09:35:16 UTC", "sightings": 1 }, { "indicator": "http://59.88.131.9:33918/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 09:31:19 UTC", "last_seen": "2026-03-31 09:31:19 UTC", "sightings": 1 }, { "indicator": "http://217.208.164.149:45464/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 09:30:23 UTC", "last_seen": "2026-03-31 09:30:23 UTC", "sightings": 1 }, { "indicator": "http://46.163.184.136:49029/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 09:29:20 UTC", "last_seen": "2026-03-31 09:29:20 UTC", "sightings": 1 }, { "indicator": "https://basaltextend.chernomofnothes.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 09:29:12 UTC", "last_seen": "2026-03-31 09:29:12 UTC", "sightings": 1 }, { "indicator": "https://decode-frame.chernomofnothes.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 09:23:13 UTC", "last_seen": "2026-03-31 09:23:13 UTC", "sightings": 1 }, { "indicator": "http://117.215.208.100:50461/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-31 09:22:09 UTC", "last_seen": "2026-03-31 09:22:09 UTC", "sightings": 1 }, { "indicator": "http://90.224.208.190:45821/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-31 09:22:07 UTC", "last_seen": "2026-03-31 09:22:07 UTC", "sightings": 1 }, { "indicator": "http://110.39.231.36:52341/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-31 09:22:07 UTC", "last_seen": "2026-03-31 09:22:07 UTC", "sightings": 1 }, { "indicator": "http://117.216.56.226:39292/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 09:18:21 UTC", "last_seen": "2026-03-31 09:18:21 UTC", "sightings": 1 }, { "indicator": "http://117.216.56.226:39292/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 09:15:21 UTC", "last_seen": "2026-03-31 09:15:21 UTC", "sightings": 1 }, { "indicator": "http://60.18.50.197:50181/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 09:15:18 UTC", "last_seen": "2026-03-31 09:15:18 UTC", "sightings": 1 }, { "indicator": "https://vorforgeet.paleontraglan.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 09:15:12 UTC", "last_seen": "2026-03-31 09:15:12 UTC", "sightings": 1 }, { "indicator": "http://61.166.217.21:33418/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-31 09:13:29 UTC", "last_seen": "2026-03-31 09:13:29 UTC", "sightings": 1 }, { "indicator": "https://oasitre.paleontraglan.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 09:09:10 UTC", "last_seen": "2026-03-31 09:09:10 UTC", "sightings": 1 }, { "indicator": "http://180.245.47.80:41423/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-31 09:08:09 UTC", "last_seen": "2026-03-31 09:08:09 UTC", "sightings": 1 }, { "indicator": "http://175.147.157.129:55169/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 09:04:20 UTC", "last_seen": "2026-03-31 09:04:20 UTC", "sightings": 1 }, { "indicator": "https://dyn-valeal.paleontraglan.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 09:03:09 UTC", "last_seen": "2026-03-31 09:03:09 UTC", "sightings": 1 }, { "indicator": "https://hardexte.paleontraglan.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 08:56:10 UTC", "last_seen": "2026-03-31 08:56:10 UTC", "sightings": 1 }, { "indicator": "http://59.88.131.9:33918/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 08:55:17 UTC", "last_seen": "2026-03-31 08:55:17 UTC", "sightings": 1 }, { "indicator": "http://105.186.172.191:42231/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-31 08:55:16 UTC", "last_seen": "2026-03-31 08:55:16 UTC", "sightings": 1 }, { "indicator": "https://l4b-mesh.paleontraglan.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 08:48:10 UTC", "last_seen": "2026-03-31 08:48:10 UTC", "sightings": 1 }, { "indicator": "http://167.250.158.32:39717/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-31 08:46:19 UTC", "last_seen": "2026-03-31 08:46:19 UTC", "sightings": 1 }, { "indicator": "https://paui.paleontraglan.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 08:43:11 UTC", "last_seen": "2026-03-31 08:43:11 UTC", "sightings": 1 }, { "indicator": "http://27.215.176.230:44425/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 08:42:16 UTC", "last_seen": "2026-03-31 08:42:16 UTC", "sightings": 1 }, { "indicator": "https://mine-trace.metallurgiclink.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 08:35:14 UTC", "last_seen": "2026-03-31 08:35:14 UTC", "sightings": 1 }, { "indicator": "https://cast-iron.metallurgiclink.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 08:30:13 UTC", "last_seen": "2026-03-31 08:30:13 UTC", "sightings": 1 }, { "indicator": "https://blast-svc.metallurgiclink.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 08:24:13 UTC", "last_seen": "2026-03-31 08:24:13 UTC", "sightings": 1 }, { "indicator": "https://smelt-logic.metallurgiclink.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 08:20:15 UTC", "last_seen": "2026-03-31 08:20:15 UTC", "sightings": 1 }, { "indicator": "http://125.40.86.211:40376/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-31 08:17:08 UTC", "last_seen": "2026-03-31 08:17:08 UTC", "sightings": 1 }, { "indicator": "http://27.215.176.230:44425/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 08:15:22 UTC", "last_seen": "2026-03-31 08:15:22 UTC", "sightings": 1 }, { "indicator": "http://219.157.58.187:56676/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 08:14:11 UTC", "last_seen": "2026-03-31 08:14:11 UTC", "sightings": 1 }, { "indicator": "https://steel-core.metallurgiclink.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 08:14:11 UTC", "last_seen": "2026-03-31 08:14:11 UTC", "sightings": 1 }, { "indicator": "http://115.57.254.103:44553/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 08:12:19 UTC", "last_seen": "2026-03-31 08:12:19 UTC", "sightings": 1 }, { "indicator": "http://59.182.145.59:55856/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 08:07:19 UTC", "last_seen": "2026-03-31 08:07:19 UTC", "sightings": 1 }, { "indicator": "https://alloy-forge.metallurgiclink.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 08:07:11 UTC", "last_seen": "2026-03-31 08:07:11 UTC", "sightings": 1 }, { "indicator": "http://60.22.176.44:39750/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 08:05:20 UTC", "last_seen": "2026-03-31 08:05:20 UTC", "sightings": 1 }, { "indicator": "https://gas-storage.cryogenicbuffer.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 08:04:10 UTC", "last_seen": "2026-03-31 08:04:10 UTC", "sightings": 1 }, { "indicator": "https://chilled-link.cryogenicbuffer.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 08:01:10 UTC", "last_seen": "2026-03-31 08:01:10 UTC", "sightings": 1 }, { "indicator": "http://175.146.163.233:58676/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 07:59:16 UTC", "last_seen": "2026-03-31 07:59:16 UTC", "sightings": 1 }, { "indicator": "http://110.37.53.236:60404/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-31 07:52:07 UTC", "last_seen": "2026-03-31 07:52:07 UTC", "sightings": 1 }, { "indicator": "https://frost-node.cryogenicbuffer.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 07:51:11 UTC", "last_seen": "2026-03-31 07:51:11 UTC", "sightings": 1 }, { "indicator": "http://59.182.145.59:55856/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 07:51:11 UTC", "last_seen": "2026-03-31 07:51:11 UTC", "sightings": 1 }, { "indicator": "https://zero-point.cryogenicbuffer.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 07:46:09 UTC", "last_seen": "2026-03-31 07:46:09 UTC", "sightings": 1 }, { "indicator": "http://115.57.254.103:44553/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 07:41:14 UTC", "last_seen": "2026-03-31 07:41:14 UTC", "sightings": 1 }, { "indicator": "http://60.22.176.44:39750/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 07:40:15 UTC", "last_seen": "2026-03-31 07:40:15 UTC", "sightings": 1 }, { "indicator": "https://nitro-vault.cryogenicbuffer.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 07:40:12 UTC", "last_seen": "2026-03-31 07:40:12 UTC", "sightings": 1 }, { "indicator": "http://110.37.39.88:51536/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-31 07:40:12 UTC", "last_seen": "2026-03-31 07:40:12 UTC", "sightings": 1 }, { "indicator": "http://123.12.238.198:39150/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 07:35:17 UTC", "last_seen": "2026-03-31 07:35:17 UTC", "sightings": 1 }, { "indicator": "https://deep-freeze.cryogenicbuffer.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 07:34:12 UTC", "last_seen": "2026-03-31 07:34:12 UTC", "sightings": 1 }, { "indicator": "http://175.146.163.233:58676/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 07:30:18 UTC", "last_seen": "2026-03-31 07:30:18 UTC", "sightings": 1 }, { "indicator": "https://beam-portal.isotopecleaner.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 07:29:12 UTC", "last_seen": "2026-03-31 07:29:12 UTC", "sightings": 1 }, { "indicator": "https://alpha-gate.isotopecleaner.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 07:23:12 UTC", "last_seen": "2026-03-31 07:23:12 UTC", "sightings": 1 }, { "indicator": "https://radiant-log.isotopecleaner.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 07:17:10 UTC", "last_seen": "2026-03-31 07:17:10 UTC", "sightings": 1 }, { "indicator": "http://110.37.53.236:60404/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-31 07:17:05 UTC", "last_seen": "2026-03-31 07:17:05 UTC", "sightings": 1 }, { "indicator": "http://59.88.133.31:33008/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 07:12:19 UTC", "last_seen": "2026-03-31 07:12:19 UTC", "sightings": 1 }, { "indicator": "https://decay-check.isotopecleaner.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 07:12:10 UTC", "last_seen": "2026-03-31 07:12:10 UTC", "sightings": 1 }, { "indicator": "http://110.37.118.66:34574/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-31 07:10:17 UTC", "last_seen": "2026-03-31 07:10:17 UTC", "sightings": 1 }, { "indicator": "http://60.213.123.169:52883/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-31 07:09:20 UTC", "last_seen": "2026-03-31 07:09:20 UTC", "sightings": 1 }, { "indicator": "http://123.12.238.198:39150/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 07:08:24 UTC", "last_seen": "2026-03-31 07:08:24 UTC", "sightings": 1 }, { "indicator": "http://110.39.244.67:47809/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 07:07:17 UTC", "last_seen": "2026-03-31 07:07:17 UTC", "sightings": 1 }, { "indicator": "http://179.43.186.246:14888/download/0e23d66b-d075-445a-bc56-e0d05a633724", "indicator_type": "url", "source": "URLhaus", "tags": [ "clearwater", "Ransomware" ], "first_seen": "2026-03-31 07:07:07 UTC", "last_seen": "2026-03-31 07:07:07 UTC", "sightings": 1 }, { "indicator": "https://trace-element.isotopecleaner.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 07:05:12 UTC", "last_seen": "2026-03-31 07:05:12 UTC", "sightings": 1 }, { "indicator": "http://27.37.60.190:52268/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 07:04:19 UTC", "last_seen": "2026-03-31 07:04:19 UTC", "sightings": 1 }, { "indicator": "https://half-life.isotopecleaner.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 07:00:16 UTC", "last_seen": "2026-03-31 07:00:16 UTC", "sightings": 1 }, { "indicator": "http://115.62.25.41:38187/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-31 06:59:23 UTC", "last_seen": "2026-03-31 06:59:23 UTC", "sightings": 1 }, { "indicator": "http://124.234.174.62:36200/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-31 06:59:19 UTC", "last_seen": "2026-03-31 06:59:19 UTC", "sightings": 1 }, { "indicator": "http://221.207.250.191:46536/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-31 06:58:11 UTC", "last_seen": "2026-03-31 06:58:11 UTC", "sightings": 1 }, { "indicator": "http://222.134.173.170:43285/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 06:57:19 UTC", "last_seen": "2026-03-31 06:57:19 UTC", "sightings": 1 }, { "indicator": "http://112.231.44.55:48069/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-31 06:56:08 UTC", "last_seen": "2026-03-31 06:56:08 UTC", "sightings": 1 }, { "indicator": "http://110.37.97.32:42669/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 06:54:19 UTC", "last_seen": "2026-03-31 06:54:19 UTC", "sightings": 1 }, { "indicator": "https://metal-trace.alkalineelement.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 06:54:09 UTC", "last_seen": "2026-03-31 06:54:09 UTC", "sightings": 1 }, { "indicator": "https://reactive-hub.alkalineelement.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 06:49:13 UTC", "last_seen": "2026-03-31 06:49:13 UTC", "sightings": 1 }, { "indicator": "http://59.88.133.31:33008/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 06:47:17 UTC", "last_seen": "2026-03-31 06:47:17 UTC", "sightings": 1 }, { "indicator": "http://110.37.97.32:42669/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 06:47:15 UTC", "last_seen": "2026-03-31 06:47:15 UTC", "sightings": 1 }, { "indicator": "http://60.213.123.169:52883/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-31 06:44:11 UTC", "last_seen": "2026-03-31 06:44:11 UTC", "sightings": 1 }, { "indicator": "http://117.206.111.48:57377/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 06:43:19 UTC", "last_seen": "2026-03-31 06:43:19 UTC", "sightings": 1 }, { "indicator": "https://caustic-api.alkalineelement.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 06:43:13 UTC", "last_seen": "2026-03-31 06:43:13 UTC", "sightings": 1 }, { "indicator": "http://110.39.244.67:47809/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 06:41:12 UTC", "last_seen": "2026-03-31 06:41:12 UTC", "sightings": 1 }, { "indicator": "https://salt-buffer.alkalineelement.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 06:40:15 UTC", "last_seen": "2026-03-31 06:40:15 UTC", "sightings": 1 }, { "indicator": "https://ph-monitor.alkalineelement.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 06:37:10 UTC", "last_seen": "2026-03-31 06:37:10 UTC", "sightings": 1 }, { "indicator": "http://112.231.44.55:48069/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-31 06:34:28 UTC", "last_seen": "2026-03-31 06:34:28 UTC", "sightings": 1 }, { "indicator": "http://221.207.250.191:46536/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-31 06:31:20 UTC", "last_seen": "2026-03-31 06:31:20 UTC", "sightings": 1 }, { "indicator": "http://117.209.9.210:42514/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 06:27:19 UTC", "last_seen": "2026-03-31 06:27:19 UTC", "sightings": 1 }, { "indicator": "https://base-level.alkalineelement.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 06:27:13 UTC", "last_seen": "2026-03-31 06:27:13 UTC", "sightings": 1 }, { "indicator": "https://fire-wall.refractorymatrix.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 06:21:14 UTC", "last_seen": "2026-03-31 06:21:14 UTC", "sightings": 1 }, { "indicator": "http://196.190.105.170:52231/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-31 06:18:16 UTC", "last_seen": "2026-03-31 06:18:16 UTC", "sightings": 1 }, { "indicator": "http://117.206.111.48:57377/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 06:17:22 UTC", "last_seen": "2026-03-31 06:17:22 UTC", "sightings": 1 }, { "indicator": "https://solid-state.refractorymatrix.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 06:16:09 UTC", "last_seen": "2026-03-31 06:16:09 UTC", "sightings": 1 }, { "indicator": "http://222.134.163.7:52361/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 06:15:09 UTC", "last_seen": "2026-03-31 06:15:09 UTC", "sightings": 1 }, { "indicator": "http://180.245.47.80:41423/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-31 06:13:18 UTC", "last_seen": "2026-03-31 06:13:18 UTC", "sightings": 1 }, { "indicator": "https://shield-base.refractorymatrix.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 06:10:13 UTC", "last_seen": "2026-03-31 06:10:13 UTC", "sightings": 1 }, { "indicator": "https://high-heat.refractorymatrix.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 06:05:12 UTC", "last_seen": "2026-03-31 06:05:12 UTC", "sightings": 1 }, { "indicator": "https://kiln-control.refractorymatrix.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 05:58:11 UTC", "last_seen": "2026-03-31 05:58:11 UTC", "sightings": 1 }, { "indicator": "https://brick-layer.refractorymatrix.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 05:53:10 UTC", "last_seen": "2026-03-31 05:53:10 UTC", "sightings": 1 }, { "indicator": "https://pump-gate.viscositycontrol.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 05:49:15 UTC", "last_seen": "2026-03-31 05:49:15 UTC", "sightings": 1 }, { "indicator": "http://117.211.149.180:56903/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-31 05:47:10 UTC", "last_seen": "2026-03-31 05:47:10 UTC", "sightings": 1 }, { "indicator": "https://density-svc.viscositycontrol.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 05:46:11 UTC", "last_seen": "2026-03-31 05:46:11 UTC", "sightings": 1 }, { "indicator": "http://222.134.163.7:52361/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 05:45:11 UTC", "last_seen": "2026-03-31 05:45:11 UTC", "sightings": 1 }, { "indicator": "http://103.164.128.50:33037/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 05:44:19 UTC", "last_seen": "2026-03-31 05:44:19 UTC", "sightings": 1 }, { "indicator": "http://117.209.9.210:42514/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 05:42:28 UTC", "last_seen": "2026-03-31 05:42:28 UTC", "sightings": 1 }, { "indicator": "http://120.28.199.24:55586/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-31 05:42:18 UTC", "last_seen": "2026-03-31 05:42:18 UTC", "sightings": 1 }, { "indicator": "http://110.37.39.88:51536/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-31 05:39:09 UTC", "last_seen": "2026-03-31 05:39:09 UTC", "sightings": 1 }, { "indicator": "https://friction-log.viscositycontrol.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 05:37:14 UTC", "last_seen": "2026-03-31 05:37:14 UTC", "sightings": 1 }, { "indicator": "https://flow-regulator.viscositycontrol.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 05:31:09 UTC", "last_seen": "2026-03-31 05:31:09 UTC", "sightings": 1 }, { "indicator": "http://196.190.69.149:56164/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-31 05:30:19 UTC", "last_seen": "2026-03-31 05:30:19 UTC", "sightings": 1 }, { "indicator": "https://thick-layer.viscositycontrol.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 05:24:13 UTC", "last_seen": "2026-03-31 05:24:13 UTC", "sightings": 1 }, { "indicator": "https://fluid-path.viscositycontrol.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 05:19:11 UTC", "last_seen": "2026-03-31 05:19:11 UTC", "sightings": 1 }, { "indicator": "http://175.154.118.223:55245/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-31 05:18:07 UTC", "last_seen": "2026-03-31 05:18:07 UTC", "sightings": 1 }, { "indicator": "http://217.160.125.125:15527/bot.powerpc-440fp", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-31 05:17:12 UTC", "last_seen": "2026-03-31 05:17:12 UTC", "sightings": 1 }, { "indicator": "http://217.160.125.125:15527/bot.sh4", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-31 05:17:12 UTC", "last_seen": "2026-03-31 05:17:12 UTC", "sightings": 1 }, { "indicator": "http://217.160.125.125:15527/bot.x86_64", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-31 05:17:12 UTC", "last_seen": "2026-03-31 05:17:12 UTC", "sightings": 1 }, { "indicator": "http://217.160.125.125:15527/bot.i586", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-31 05:17:12 UTC", "last_seen": "2026-03-31 05:17:12 UTC", "sightings": 1 }, { "indicator": "http://217.160.125.125:15527/bot.armv6l", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-31 05:17:12 UTC", "last_seen": "2026-03-31 05:17:12 UTC", "sightings": 1 }, { "indicator": "http://217.160.125.125:15527/bot.armv4l", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-31 05:17:12 UTC", "last_seen": "2026-03-31 05:17:12 UTC", "sightings": 1 }, { "indicator": "http://217.160.125.125:15527/bot.powerpc", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-31 05:17:12 UTC", "last_seen": "2026-03-31 05:17:12 UTC", "sightings": 1 }, { "indicator": "http://217.160.125.125:15527/bot.i486", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-31 05:17:12 UTC", "last_seen": "2026-03-31 05:17:12 UTC", "sightings": 1 }, { "indicator": "http://217.160.125.125:15527/bot.mipsel", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-31 05:17:12 UTC", "last_seen": "2026-03-31 05:17:12 UTC", "sightings": 1 }, { "indicator": "http://217.160.125.125:15527/bot.m68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-31 05:17:12 UTC", "last_seen": "2026-03-31 05:17:12 UTC", "sightings": 1 }, { "indicator": "http://217.160.125.125:15527/bot.x86", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-31 05:17:12 UTC", "last_seen": "2026-03-31 05:17:12 UTC", "sightings": 1 }, { "indicator": "http://110.37.55.23:40200/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 05:15:17 UTC", "last_seen": "2026-03-31 05:15:17 UTC", "sightings": 1 }, { "indicator": "https://blend-master.syntheticpolymer.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 05:15:12 UTC", "last_seen": "2026-03-31 05:15:12 UTC", "sightings": 1 }, { "indicator": "http://120.28.199.24:55586/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-31 05:14:14 UTC", "last_seen": "2026-03-31 05:14:14 UTC", "sightings": 1 }, { "indicator": "https://elastic-net.syntheticpolymer.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 05:08:09 UTC", "last_seen": "2026-03-31 05:08:09 UTC", "sightings": 1 }, { "indicator": "http://196.190.69.149:56164/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-31 05:07:13 UTC", "last_seen": "2026-03-31 05:07:13 UTC", "sightings": 1 }, { "indicator": "http://115.52.112.174:35145/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 05:04:15 UTC", "last_seen": "2026-03-31 05:04:15 UTC", "sightings": 1 }, { "indicator": "http://115.52.112.174:35145/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 05:03:15 UTC", "last_seen": "2026-03-31 05:03:15 UTC", "sightings": 1 }, { "indicator": "https://mold-engine.syntheticpolymer.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 05:03:09 UTC", "last_seen": "2026-03-31 05:03:09 UTC", "sightings": 1 }, { "indicator": "http://182.119.228.241:56948/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 04:59:08 UTC", "last_seen": "2026-03-31 04:59:08 UTC", "sightings": 1 }, { "indicator": "https://plastic-dev.syntheticpolymer.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 04:57:09 UTC", "last_seen": "2026-03-31 04:57:09 UTC", "sightings": 1 }, { "indicator": "https://fiber-optic.syntheticpolymer.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 04:51:10 UTC", "last_seen": "2026-03-31 04:51:10 UTC", "sightings": 1 }, { "indicator": "https://resin-store.syntheticpolymer.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 04:45:12 UTC", "last_seen": "2026-03-31 04:45:12 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/cradzz14/Gamification-In-Software-Project-Management/refs/heads/main/unmeltableness/Management_Project_Gamification_In_Software_2.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-31 04:44:09 UTC", "last_seen": "2026-03-31 04:44:09 UTC", "sightings": 1 }, { "indicator": "https://github.com/tribalwarsaaa/vfio-windows-aio/raw/refs/heads/main/assets/windows-vfio-aio-3.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-31 04:44:09 UTC", "last_seen": "2026-03-31 04:44:09 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/tribalwarsaaa/vfio-windows-aio/refs/heads/main/assets/windows-vfio-aio-3.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-31 04:44:09 UTC", "last_seen": "2026-03-31 04:44:09 UTC", "sightings": 1 }, { "indicator": "https://github.com/cradzz14/Gamification-In-Software-Project-Management/raw/refs/heads/main/unmeltableness/Management_Project_Gamification_In_Software_2.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-31 04:44:07 UTC", "last_seen": "2026-03-31 04:44:07 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/cradzz14/Gamification-In-Software-Project-Management/refs/heads/main/unmeltableness/Software_Management_Project_In_Gamification_v2.6.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-31 04:44:06 UTC", "last_seen": "2026-03-31 04:44:06 UTC", "sightings": 1 }, { "indicator": "https://github.com/cradzz14/Gamification-In-Software-Project-Management/raw/refs/heads/main/unmeltableness/Software_Management_Project_In_Gamification_v2.6.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-31 04:44:06 UTC", "last_seen": "2026-03-31 04:44:06 UTC", "sightings": 1 }, { "indicator": "https://github.com/sethudevasenapathy92/GTAO_SoloSession/raw/refs/heads/main/GTAO_SoloSession/Solo-Session-GTA-v2.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-31 04:42:09 UTC", "last_seen": "2026-03-31 04:42:09 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/sethudevasenapathy92/GTAO_SoloSession/refs/heads/main/GTAO_SoloSession/Solo-Session-GTA-v2.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-31 04:42:09 UTC", "last_seen": "2026-03-31 04:42:09 UTC", "sightings": 1 }, { "indicator": "https://github.com/sethudevasenapathy92/sethudevasenapathy92.github.io/raw/refs/heads/main/cultigen/sethudevasenapathy-io-github-2.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-31 04:42:09 UTC", "last_seen": "2026-03-31 04:42:09 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/sethudevasenapathy92/sethudevasenapathy92.github.io/refs/heads/main/cultigen/sethudevasenapathy-io-github-2.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-31 04:42:09 UTC", "last_seen": "2026-03-31 04:42:09 UTC", "sightings": 1 }, { "indicator": "https://github.com/light-077/chatbot-gaming-assistant/raw/refs/heads/main/my_agent/chatbot_assistant_gaming_v1.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-31 04:42:09 UTC", "last_seen": "2026-03-31 04:42:09 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/light-077/chatbot-gaming-assistant/refs/heads/main/my_agent/chatbot_assistant_gaming_v1.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-31 04:42:09 UTC", "last_seen": "2026-03-31 04:42:09 UTC", "sightings": 1 }, { "indicator": "https://github.com/sethudevasenapathy92/sethudevasenapathy92.github.io/raw/refs/heads/main/cultigen/sethudevasenapathy_github_io_3.7.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-31 04:42:08 UTC", "last_seen": "2026-03-31 04:42:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/sethudevasenapathy92/sethudevasenapathy92.github.io/refs/heads/main/cultigen/sethudevasenapathy_github_io_3.7.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-31 04:42:08 UTC", "last_seen": "2026-03-31 04:42:08 UTC", "sightings": 1 }, { "indicator": "http://42.228.195.148:52121/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-31 04:40:12 UTC", "last_seen": "2026-03-31 04:40:12 UTC", "sightings": 1 }, { "indicator": "http://182.119.228.241:56948/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 04:39:16 UTC", "last_seen": "2026-03-31 04:39:16 UTC", "sightings": 1 }, { "indicator": "https://range-finder.isothermalmetric.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 04:39:10 UTC", "last_seen": "2026-03-31 04:39:10 UTC", "sightings": 1 }, { "indicator": "http://110.37.65.64:59911/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 04:38:12 UTC", "last_seen": "2026-03-31 04:38:12 UTC", "sightings": 1 }, { "indicator": "http://110.38.218.176:47971/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-31 04:36:14 UTC", "last_seen": "2026-03-31 04:36:14 UTC", "sightings": 1 }, { "indicator": "https://thermal-sync.isothermalmetric.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 04:35:13 UTC", "last_seen": "2026-03-31 04:35:13 UTC", "sightings": 1 }, { "indicator": "https://github.com/Haylandercaio/Lego-Star-Wars-2005-PC-Resolution-FIX-DeveloperModeON/raw/refs/heads/main/source/dxsdk/Mode_Wars_ON_Developer_Resolution_P_Lego_Star_FI_v3.9.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-31 04:29:10 UTC", "last_seen": "2026-03-31 04:29:10 UTC", "sightings": 1 }, { "indicator": "https://github.com/Haylandercaio/Lego-Star-Wars-2005-PC-Resolution-FIX-DeveloperModeON/raw/refs/heads/main/source/dxsdk/lib/x64/Developer-Wars-FI-Star-ON-Resolution-P-Mode-Lego-v1.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-31 04:29:10 UTC", "last_seen": "2026-03-31 04:29:10 UTC", "sightings": 1 }, { "indicator": "https://github.com/Haylandercaio/Lego-Star-Wars-2005-PC-Resolution-FIX-DeveloperModeON/raw/refs/heads/main/source/dxsdk/lib/x86/ON-P-Mode-Developer-Lego-FI-Star-Resolution-Wars-1.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-31 04:29:10 UTC", "last_seen": "2026-03-31 04:29:10 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Haylandercaio/Lego-Star-Wars-2005-PC-Resolution-FIX-DeveloperModeON/refs/heads/main/source/dxsdk/lib/x86/ON-P-Mode-Developer-Lego-FI-Star-Resolution-Wars-1.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-31 04:29:10 UTC", "last_seen": "2026-03-31 04:29:10 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Haylandercaio/Lego-Star-Wars-2005-PC-Resolution-FIX-DeveloperModeON/refs/heads/main/source/dxsdk/lib/x64/Developer-Wars-FI-Star-ON-Resolution-P-Mode-Lego-v1.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-31 04:29:10 UTC", "last_seen": "2026-03-31 04:29:10 UTC", "sightings": 1 }, { "indicator": "https://temp-archive.isothermalmetric.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 04:29:10 UTC", "last_seen": "2026-03-31 04:29:10 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Haylandercaio/Lego-Star-Wars-2005-PC-Resolution-FIX-DeveloperModeON/refs/heads/main/source/dxsdk/Mode_Wars_ON_Developer_Resolution_P_Lego_Star_FI_v3.9.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-31 04:29:09 UTC", "last_seen": "2026-03-31 04:29:09 UTC", "sightings": 1 }, { "indicator": "https://cold-bridge.isothermalmetric.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 04:23:13 UTC", "last_seen": "2026-03-31 04:23:13 UTC", "sightings": 1 }, { "indicator": "https://github.com/talangojames51/io5/raw/refs/heads/main/5/83.txt", "indicator_type": "url", "source": "URLhaus", "tags": [ "lua", "SmartLoader" ], "first_seen": "2026-03-31 04:23:08 UTC", "last_seen": "2026-03-31 04:23:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/talangojames51/io5/refs/heads/main/5/86.txt", "indicator_type": "url", "source": "URLhaus", "tags": [ "lua", "SmartLoader" ], "first_seen": "2026-03-31 04:23:08 UTC", "last_seen": "2026-03-31 04:23:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/talangojames51/io5/raw/refs/heads/main/5/86.txt", "indicator_type": "url", "source": "URLhaus", "tags": [ "lua", "SmartLoader" ], "first_seen": "2026-03-31 04:23:08 UTC", "last_seen": "2026-03-31 04:23:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/talangojames51/io5/refs/heads/main/5/83.txt", "indicator_type": "url", "source": "URLhaus", "tags": [ "lua", "SmartLoader" ], "first_seen": "2026-03-31 04:23:07 UTC", "last_seen": "2026-03-31 04:23:07 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/skidgang/discord-lanyard-activity/refs/heads/main/demo/src/discord-activity-lanyard-tour.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-31 04:22:09 UTC", "last_seen": "2026-03-31 04:22:09 UTC", "sightings": 1 }, { "indicator": "https://github.com/aslekarii/proxmox-nvidia-vfio-handoff/raw/refs/heads/main/autogeneal/vfio-proxmox-handoff-nvidia-v2.6.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-31 04:22:09 UTC", "last_seen": "2026-03-31 04:22:09 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/aslekarii/proxmox-nvidia-vfio-handoff/refs/heads/main/autogeneal/vfio-proxmox-handoff-nvidia-v2.6.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-31 04:22:08 UTC", "last_seen": "2026-03-31 04:22:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/skidgang/discord-lanyard-activity/raw/refs/heads/main/demo/src/discord-activity-lanyard-tour.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-31 04:22:08 UTC", "last_seen": "2026-03-31 04:22:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/HarryRyanBarr/yarpe/refs/heads/main/renpy/Software-3.5-alpha.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-31 04:21:07 UTC", "last_seen": "2026-03-31 04:21:07 UTC", "sightings": 1 }, { "indicator": "https://github.com/HarryRyanBarr/yarpe/raw/refs/heads/main/renpy/Software-3.5-alpha.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-31 04:21:07 UTC", "last_seen": "2026-03-31 04:21:07 UTC", "sightings": 1 }, { "indicator": "https://constant-io.isothermalmetric.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 04:18:10 UTC", "last_seen": "2026-03-31 04:18:10 UTC", "sightings": 1 }, { "indicator": "http://110.37.65.64:59911/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 04:13:09 UTC", "last_seen": "2026-03-31 04:13:09 UTC", "sightings": 1 }, { "indicator": "https://heat-sensor.isothermalmetric.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 04:12:10 UTC", "last_seen": "2026-03-31 04:12:10 UTC", "sightings": 1 }, { "indicator": "http://42.228.195.148:52121/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-31 04:12:08 UTC", "last_seen": "2026-03-31 04:12:08 UTC", "sightings": 1 }, { "indicator": "http://110.38.218.176:47971/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-31 04:09:15 UTC", "last_seen": "2026-03-31 04:09:15 UTC", "sightings": 1 }, { "indicator": "https://force-field.molecularbonding.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 04:07:10 UTC", "last_seen": "2026-03-31 04:07:10 UTC", "sightings": 1 }, { "indicator": "http://119.187.55.28:39334/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 04:02:16 UTC", "last_seen": "2026-03-31 04:02:16 UTC", "sightings": 1 }, { "indicator": "http://123.4.244.236:33143/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-31 04:02:09 UTC", "last_seen": "2026-03-31 04:02:09 UTC", "sightings": 1 }, { "indicator": "https://stable-node.molecularbonding.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 04:00:15 UTC", "last_seen": "2026-03-31 04:00:15 UTC", "sightings": 1 }, { "indicator": "http://58.255.46.51:34711/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-31 03:57:07 UTC", "last_seen": "2026-03-31 03:57:07 UTC", "sightings": 1 }, { "indicator": "https://ion-channel.molecularbonding.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 03:55:14 UTC", "last_seen": "2026-03-31 03:55:14 UTC", "sightings": 1 }, { "indicator": "http://110.37.107.41:51045/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-31 03:54:05 UTC", "last_seen": "2026-03-31 03:54:05 UTC", "sightings": 1 }, { "indicator": "http://175.154.118.223:55245/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-31 03:53:16 UTC", "last_seen": "2026-03-31 03:53:16 UTC", "sightings": 1 }, { "indicator": "http://42.57.180.81:48800/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-31 03:53:15 UTC", "last_seen": "2026-03-31 03:53:15 UTC", "sightings": 1 }, { "indicator": "http://42.235.77.150:58388/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-31 03:53:15 UTC", "last_seen": "2026-03-31 03:53:15 UTC", "sightings": 1 }, { "indicator": "http://110.37.88.34:53224/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-31 03:53:15 UTC", "last_seen": "2026-03-31 03:53:15 UTC", "sightings": 1 }, { "indicator": "http://110.37.107.41:51045/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-31 03:53:09 UTC", "last_seen": "2026-03-31 03:53:09 UTC", "sightings": 1 }, { "indicator": "http://59.89.72.198:55888/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-31 03:52:21 UTC", "last_seen": "2026-03-31 03:52:21 UTC", "sightings": 1 }, { "indicator": "http://45.237.130.120:49016/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-31 03:52:09 UTC", "last_seen": "2026-03-31 03:52:09 UTC", "sightings": 1 }, { "indicator": "http://182.116.78.224:35473/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-31 03:52:09 UTC", "last_seen": "2026-03-31 03:52:09 UTC", "sightings": 1 }, { "indicator": "http://42.238.68.233:44121/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-31 03:52:09 UTC", "last_seen": "2026-03-31 03:52:09 UTC", "sightings": 1 }, { "indicator": "http://27.156.176.206:50260/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-31 03:52:09 UTC", "last_seen": "2026-03-31 03:52:09 UTC", "sightings": 1 }, { "indicator": "http://42.53.166.90:55722/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-31 03:52:08 UTC", "last_seen": "2026-03-31 03:52:08 UTC", "sightings": 1 }, { "indicator": "http://182.116.78.224:35473/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-31 03:52:08 UTC", "last_seen": "2026-03-31 03:52:08 UTC", "sightings": 1 }, { "indicator": "http://77.247.88.72:46880/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-31 03:52:07 UTC", "last_seen": "2026-03-31 03:52:07 UTC", "sightings": 1 }, { "indicator": "http://77.247.88.72:46880/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-31 03:52:06 UTC", "last_seen": "2026-03-31 03:52:06 UTC", "sightings": 1 }, { "indicator": "http://42.235.77.150:58388/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-31 03:51:09 UTC", "last_seen": "2026-03-31 03:51:09 UTC", "sightings": 1 }, { "indicator": "http://59.92.68.67:41361/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-31 03:51:09 UTC", "last_seen": "2026-03-31 03:51:09 UTC", "sightings": 1 }, { "indicator": "http://59.92.68.67:41361/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-31 03:51:09 UTC", "last_seen": "2026-03-31 03:51:09 UTC", "sightings": 1 }, { "indicator": "http://101.58.64.161:9454/.i", "indicator_type": "url", "source": "URLhaus", "tags": [ "hajime" ], "first_seen": "2026-03-31 03:51:09 UTC", "last_seen": "2026-03-31 03:51:09 UTC", "sightings": 1 }, { "indicator": "http://120.28.193.113:47832/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-31 03:51:09 UTC", "last_seen": "2026-03-31 03:51:09 UTC", "sightings": 1 }, { "indicator": "http://114.228.132.87:39486/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-31 03:51:09 UTC", "last_seen": "2026-03-31 03:51:09 UTC", "sightings": 1 }, { "indicator": "http://42.236.223.242:48800/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-31 03:51:08 UTC", "last_seen": "2026-03-31 03:51:08 UTC", "sightings": 1 }, { "indicator": "http://114.227.63.144:51956/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-31 03:51:08 UTC", "last_seen": "2026-03-31 03:51:08 UTC", "sightings": 1 }, { "indicator": "http://42.57.180.81:48800/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-31 03:51:08 UTC", "last_seen": "2026-03-31 03:51:08 UTC", "sightings": 1 }, { "indicator": "http://182.127.128.106:51457/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-31 03:51:08 UTC", "last_seen": "2026-03-31 03:51:08 UTC", "sightings": 1 }, { "indicator": "http://123.179.235.229:59423/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-31 03:51:08 UTC", "last_seen": "2026-03-31 03:51:08 UTC", "sightings": 1 }, { "indicator": "http://182.127.128.106:51457/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-31 03:51:08 UTC", "last_seen": "2026-03-31 03:51:08 UTC", "sightings": 1 }, { "indicator": "https://covalent-hub.molecularbonding.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 03:50:13 UTC", "last_seen": "2026-03-31 03:50:13 UTC", "sightings": 1 }, { "indicator": "http://115.55.195.59:35343/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 03:50:11 UTC", "last_seen": "2026-03-31 03:50:11 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Avhasei07/DevilConnection-Russian-Localization/refs/heads/main/heriot/Russian_Devil_Connection_Localization_v2.9.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-31 03:50:08 UTC", "last_seen": "2026-03-31 03:50:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/Avhasei07/DevilConnection-Russian-Localization/raw/refs/heads/main/heriot/Russian_Devil_Connection_Localization_v2.9.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-31 03:50:08 UTC", "last_seen": "2026-03-31 03:50:08 UTC", "sightings": 1 }, { "indicator": "https://chain-logic.molecularbonding.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 03:44:10 UTC", "last_seen": "2026-03-31 03:44:10 UTC", "sightings": 1 }, { "indicator": "http://117.217.196.124:44815/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 03:40:15 UTC", "last_seen": "2026-03-31 03:40:15 UTC", "sightings": 1 }, { "indicator": "https://atom-lattice.molecularbonding.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 03:38:09 UTC", "last_seen": "2026-03-31 03:38:09 UTC", "sightings": 1 }, { "indicator": "https://agent-proxy.catalyticprocess.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 03:32:12 UTC", "last_seen": "2026-03-31 03:32:12 UTC", "sightings": 1 }, { "indicator": "http://58.255.46.51:34711/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-31 03:32:09 UTC", "last_seen": "2026-03-31 03:32:09 UTC", "sightings": 1 }, { "indicator": "http://36.88.136.194:59043/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-31 03:30:17 UTC", "last_seen": "2026-03-31 03:30:17 UTC", "sightings": 1 }, { "indicator": "https://batch-report.catalyticprocess.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 03:27:09 UTC", "last_seen": "2026-03-31 03:27:09 UTC", "sightings": 1 }, { "indicator": "http://110.37.61.110:54582/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 03:22:17 UTC", "last_seen": "2026-03-31 03:22:17 UTC", "sightings": 1 }, { "indicator": "https://filter-press.catalyticprocess.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 03:22:10 UTC", "last_seen": "2026-03-31 03:22:10 UTC", "sightings": 1 }, { "indicator": "https://solvent-vault.catalyticprocess.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 03:16:10 UTC", "last_seen": "2026-03-31 03:16:10 UTC", "sightings": 1 }, { "indicator": "https://yield-monitor.catalyticprocess.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 03:11:10 UTC", "last_seen": "2026-03-31 03:11:10 UTC", "sightings": 1 }, { "indicator": "https://reaction-api.catalyticprocess.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 03:06:17 UTC", "last_seen": "2026-03-31 03:06:17 UTC", "sightings": 1 }, { "indicator": "http://119.187.55.28:39334/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 03:05:07 UTC", "last_seen": "2026-03-31 03:05:07 UTC", "sightings": 1 }, { "indicator": "http://36.88.136.194:59043/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-31 03:03:08 UTC", "last_seen": "2026-03-31 03:03:08 UTC", "sightings": 1 }, { "indicator": "http://110.37.61.110:54582/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 03:03:07 UTC", "last_seen": "2026-03-31 03:03:07 UTC", "sightings": 1 }, { "indicator": "https://orbit-path.cosmoforge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 02:59:11 UTC", "last_seen": "2026-03-31 02:59:11 UTC", "sightings": 1 }, { "indicator": "https://github.com/Valentindelahaye8/LeviLauncher-MaterialBinLoader/raw/refs/heads/master/Mediaqueries/LeviLauncher-MaterialBinLoader_3.7.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-31 02:54:09 UTC", "last_seen": "2026-03-31 02:54:09 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Valentindelahaye8/LeviLauncher-MaterialBinLoader/refs/heads/master/Mediaqueries/LeviLauncher-MaterialBinLoader_3.7.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-31 02:54:09 UTC", "last_seen": "2026-03-31 02:54:09 UTC", "sightings": 1 }, { "indicator": "https://github.com/Flipflip563/YICB/raw/refs/heads/main/airless/Software-2.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-31 02:54:08 UTC", "last_seen": "2026-03-31 02:54:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/jasminahyperthermal488/utility-for-fortnite-noclip/refs/heads/main/Cheka/noclip-fortnite-utility-for-1.6-alpha.4.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-31 02:54:08 UTC", "last_seen": "2026-03-31 02:54:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Flipflip563/YICB/refs/heads/main/airless/Software-2.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-31 02:54:08 UTC", "last_seen": "2026-03-31 02:54:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/eastgerman-internist198/raylib-template/raw/refs/heads/main/raylib-5.5_linux_amd64/lib/template_raylib_3.7.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-31 02:54:08 UTC", "last_seen": "2026-03-31 02:54:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/jasminahyperthermal488/utility-for-fortnite-noclip/raw/refs/heads/main/Cheka/noclip-fortnite-utility-for-1.6-alpha.4.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-31 02:54:08 UTC", "last_seen": "2026-03-31 02:54:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/eastgerman-internist198/raylib-template/refs/heads/main/raylib-5.5_linux_amd64/lib/template_raylib_3.7.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-31 02:54:08 UTC", "last_seen": "2026-03-31 02:54:08 UTC", "sightings": 1 }, { "indicator": "https://dark-matter.cosmoforge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 02:53:12 UTC", "last_seen": "2026-03-31 02:53:12 UTC", "sightings": 1 }, { "indicator": "https://nova-core.cosmoforge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 02:48:09 UTC", "last_seen": "2026-03-31 02:48:09 UTC", "sightings": 1 }, { "indicator": "http://42.230.40.84:32883/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 02:45:19 UTC", "last_seen": "2026-03-31 02:45:19 UTC", "sightings": 1 }, { "indicator": "https://void-gate.cosmoforge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 02:43:09 UTC", "last_seen": "2026-03-31 02:43:09 UTC", "sightings": 1 }, { "indicator": "https://star-field.cosmoforge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 02:37:12 UTC", "last_seen": "2026-03-31 02:37:12 UTC", "sightings": 1 }, { "indicator": "http://222.141.46.48:51990/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 02:34:07 UTC", "last_seen": "2026-03-31 02:34:07 UTC", "sightings": 1 }, { "indicator": "https://github.com/Yns70/textgame/raw/refs/heads/main/brachiorrhachidian/Software-1.0-beta.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-31 02:33:07 UTC", "last_seen": "2026-03-31 02:33:07 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Yns70/textgame/refs/heads/main/brachiorrhachidian/Software-1.0-beta.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-31 02:33:07 UTC", "last_seen": "2026-03-31 02:33:07 UTC", "sightings": 1 }, { "indicator": "http://110.37.52.81:59981/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 02:32:15 UTC", "last_seen": "2026-03-31 02:32:15 UTC", "sightings": 1 }, { "indicator": "https://github.com/lovlovlo15/chronicles-of-aethergate/raw/refs/heads/main/saves/of-aethergate-chronicles-v2.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-31 02:32:11 UTC", "last_seen": "2026-03-31 02:32:11 UTC", "sightings": 1 }, { "indicator": "https://github.com/MomenMatouk/ruby-vgr/raw/refs/heads/main/mnemotechnic/ruby_vgr_2.0.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-31 02:32:09 UTC", "last_seen": "2026-03-31 02:32:09 UTC", "sightings": 1 }, { "indicator": "https://github.com/jayasuryapalagiri/Midterm-Website-Development-Jayasurya/raw/refs/heads/main/pedological/Development_Jayasurya_Midterm_Website_v1.4.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-31 02:32:08 UTC", "last_seen": "2026-03-31 02:32:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/jayasuryapalagiri/Midterm-Website-Development-Jayasurya/refs/heads/main/pedological/Development_Jayasurya_Midterm_Website_v1.4.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-31 02:32:08 UTC", "last_seen": "2026-03-31 02:32:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/Eman420-art/saywhat_menu/raw/refs/heads/main/pyracene/saywhat-menu-v3.0-alpha.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-31 02:32:08 UTC", "last_seen": "2026-03-31 02:32:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/jayasuryapalagiri/Alien-Nostromo-archives/raw/refs/heads/main/cradge/Nostromo-Alien-archives-3.9.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-31 02:32:08 UTC", "last_seen": "2026-03-31 02:32:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/jayasuryapalagiri/Alien-Nostromo-archives/refs/heads/main/cradge/Nostromo-Alien-archives-3.9.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-31 02:32:08 UTC", "last_seen": "2026-03-31 02:32:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/lovlovlo15/chronicles-of-aethergate/refs/heads/main/saves/of-aethergate-chronicles-v2.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-31 02:32:07 UTC", "last_seen": "2026-03-31 02:32:07 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/xplam-den/Snake-Game-with-RL/refs/heads/master/algophilist/RL_with_Game_Snake_v2.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-31 02:32:07 UTC", "last_seen": "2026-03-31 02:32:07 UTC", "sightings": 1 }, { "indicator": "https://github.com/xplam-den/Snake-Game-with-RL/raw/refs/heads/master/algophilist/RL_with_Game_Snake_v2.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-31 02:32:07 UTC", "last_seen": "2026-03-31 02:32:07 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Eman420-art/saywhat_menu/refs/heads/main/pyracene/saywhat-menu-v3.0-alpha.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-31 02:32:07 UTC", "last_seen": "2026-03-31 02:32:07 UTC", "sightings": 1 }, { "indicator": "https://deep-space.cosmoforge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 02:31:09 UTC", "last_seen": "2026-03-31 02:31:09 UTC", "sightings": 1 }, { "indicator": "http://113.228.152.60:50583/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 02:30:17 UTC", "last_seen": "2026-03-31 02:30:17 UTC", "sightings": 1 }, { "indicator": "http://61.52.44.86:58703/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 02:28:15 UTC", "last_seen": "2026-03-31 02:28:15 UTC", "sightings": 1 }, { "indicator": "http://61.52.44.86:58703/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 02:28:15 UTC", "last_seen": "2026-03-31 02:28:15 UTC", "sightings": 1 }, { "indicator": "https://fast-trace.dynaflux.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 02:26:10 UTC", "last_seen": "2026-03-31 02:26:10 UTC", "sightings": 1 }, { "indicator": "https://spin-relay.dynaflux.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 02:20:12 UTC", "last_seen": "2026-03-31 02:20:12 UTC", "sightings": 1 }, { "indicator": "https://motor-unit.dynaflux.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 02:14:11 UTC", "last_seen": "2026-03-31 02:14:11 UTC", "sightings": 1 }, { "indicator": "http://125.42.33.176:33525/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-31 02:08:16 UTC", "last_seen": "2026-03-31 02:08:16 UTC", "sightings": 1 }, { "indicator": "https://torque-svc.dynaflux.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 02:08:09 UTC", "last_seen": "2026-03-31 02:08:09 UTC", "sightings": 1 }, { "indicator": "https://kinetic-io.dynaflux.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 02:03:12 UTC", "last_seen": "2026-03-31 02:03:12 UTC", "sightings": 1 }, { "indicator": "http://222.141.46.48:51990/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 02:00:17 UTC", "last_seen": "2026-03-31 02:00:17 UTC", "sightings": 1 }, { "indicator": "https://power-drive.dynaflux.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 01:58:11 UTC", "last_seen": "2026-03-31 01:58:11 UTC", "sightings": 1 }, { "indicator": "https://warm-cache.helioshaven.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 01:52:11 UTC", "last_seen": "2026-03-31 01:52:11 UTC", "sightings": 1 }, { "indicator": "http://110.39.229.188:40952/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 01:47:07 UTC", "last_seen": "2026-03-31 01:47:07 UTC", "sightings": 1 }, { "indicator": "https://bright-edge.helioshaven.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 01:46:14 UTC", "last_seen": "2026-03-31 01:46:14 UTC", "sightings": 1 }, { "indicator": "http://125.42.33.176:33525/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-31 01:44:13 UTC", "last_seen": "2026-03-31 01:44:13 UTC", "sightings": 1 }, { "indicator": "https://day-light.helioshaven.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 01:42:14 UTC", "last_seen": "2026-03-31 01:42:14 UTC", "sightings": 1 }, { "indicator": "http://110.38.206.86:59947/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-31 01:42:14 UTC", "last_seen": "2026-03-31 01:42:14 UTC", "sightings": 1 }, { "indicator": "https://solar-api.helioshaven.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 01:38:11 UTC", "last_seen": "2026-03-31 01:38:11 UTC", "sightings": 1 }, { "indicator": "http://117.209.18.160:39927/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 01:33:20 UTC", "last_seen": "2026-03-31 01:33:20 UTC", "sightings": 1 }, { "indicator": "https://heat-shield.helioshaven.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 01:30:15 UTC", "last_seen": "2026-03-31 01:30:15 UTC", "sightings": 1 }, { "indicator": "https://sun-flare.helioshaven.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 01:24:10 UTC", "last_seen": "2026-03-31 01:24:10 UTC", "sightings": 1 }, { "indicator": "https://ice-vault.polarisbloom.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 01:20:14 UTC", "last_seen": "2026-03-31 01:20:14 UTC", "sightings": 1 }, { "indicator": "https://cold-store.polarisbloom.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 01:14:10 UTC", "last_seen": "2026-03-31 01:14:10 UTC", "sightings": 1 }, { "indicator": "https://peak-access.polarisbloom.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 01:09:09 UTC", "last_seen": "2026-03-31 01:09:09 UTC", "sightings": 1 }, { "indicator": "https://top-render.polarisbloom.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 01:06:14 UTC", "last_seen": "2026-03-31 01:06:14 UTC", "sightings": 1 }, { "indicator": "http://81.230.148.181:55083/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-31 01:02:06 UTC", "last_seen": "2026-03-31 01:02:06 UTC", "sightings": 1 }, { "indicator": "http://110.38.206.86:59947/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-31 01:00:14 UTC", "last_seen": "2026-03-31 01:00:14 UTC", "sightings": 1 }, { "indicator": "https://guide-path.polarisbloom.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 00:57:13 UTC", "last_seen": "2026-03-31 00:57:13 UTC", "sightings": 1 }, { "indicator": "http://196.189.197.131:39690/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-31 00:53:06 UTC", "last_seen": "2026-03-31 00:53:06 UTC", "sightings": 1 }, { "indicator": "http://110.37.37.129:51161/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-31 00:52:06 UTC", "last_seen": "2026-03-31 00:52:06 UTC", "sightings": 1 }, { "indicator": "http://222.142.242.236:44360/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-31 00:52:06 UTC", "last_seen": "2026-03-31 00:52:06 UTC", "sightings": 1 }, { "indicator": "https://north-star.polarisbloom.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 00:51:14 UTC", "last_seen": "2026-03-31 00:51:14 UTC", "sightings": 1 }, { "indicator": "http://113.237.101.50:33151/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 00:46:13 UTC", "last_seen": "2026-03-31 00:46:13 UTC", "sightings": 1 }, { "indicator": "https://bus-bridge.circuitflux.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 00:45:11 UTC", "last_seen": "2026-03-31 00:45:11 UTC", "sightings": 1 }, { "indicator": "http://27.37.63.74:49907/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 00:40:26 UTC", "last_seen": "2026-03-31 00:40:26 UTC", "sightings": 1 }, { "indicator": "https://amp-control.circuitflux.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 00:39:09 UTC", "last_seen": "2026-03-31 00:39:09 UTC", "sightings": 1 }, { "indicator": "http://182.126.117.162:54988/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-31 00:37:07 UTC", "last_seen": "2026-03-31 00:37:07 UTC", "sightings": 1 }, { "indicator": "http://81.230.148.181:55083/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-31 00:37:06 UTC", "last_seen": "2026-03-31 00:37:06 UTC", "sightings": 1 }, { "indicator": "https://wire-sync.circuitflux.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 00:34:13 UTC", "last_seen": "2026-03-31 00:34:13 UTC", "sightings": 1 }, { "indicator": "https://signal-box.circuitflux.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 00:27:10 UTC", "last_seen": "2026-03-31 00:27:10 UTC", "sightings": 1 }, { "indicator": "https://volt-power.circuitflux.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 00:22:12 UTC", "last_seen": "2026-03-31 00:22:12 UTC", "sightings": 1 }, { "indicator": "http://110.37.38.176:45853/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-31 00:20:14 UTC", "last_seen": "2026-03-31 00:20:14 UTC", "sightings": 1 }, { "indicator": "https://micro-chip.circuitflux.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 00:17:14 UTC", "last_seen": "2026-03-31 00:17:14 UTC", "sightings": 1 }, { "indicator": "http://27.37.63.74:49907/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 00:13:21 UTC", "last_seen": "2026-03-31 00:13:21 UTC", "sightings": 1 }, { "indicator": "https://stat-portal.axiomforge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 00:11:15 UTC", "last_seen": "2026-03-31 00:11:15 UTC", "sightings": 1 }, { "indicator": "http://113.237.101.50:33151/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-31 00:09:06 UTC", "last_seen": "2026-03-31 00:09:06 UTC", "sightings": 1 }, { "indicator": "https://math-proc.axiomforge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-31 00:06:11 UTC", "last_seen": "2026-03-31 00:06:11 UTC", "sightings": 1 }, { "indicator": "https://main-frame.axiomforge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 23:59:08 UTC", "last_seen": "2026-03-30 23:59:08 UTC", "sightings": 1 }, { "indicator": "https://base-theory.axiomforge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 23:55:11 UTC", "last_seen": "2026-03-30 23:55:11 UTC", "sightings": 1 }, { "indicator": "https://proof-check.axiomforge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 23:50:14 UTC", "last_seen": "2026-03-30 23:50:14 UTC", "sightings": 1 }, { "indicator": "http://110.24.36.6:57191/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-30 23:45:18 UTC", "last_seen": "2026-03-30 23:45:18 UTC", "sightings": 1 }, { "indicator": "https://logic-rule.axiomforge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 23:43:09 UTC", "last_seen": "2026-03-30 23:43:09 UTC", "sightings": 1 }, { "indicator": "http://123.9.244.178:33070/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-30 23:42:07 UTC", "last_seen": "2026-03-30 23:42:07 UTC", "sightings": 1 }, { "indicator": "http://110.39.239.111:35582/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 23:41:14 UTC", "last_seen": "2026-03-30 23:41:14 UTC", "sightings": 1 }, { "indicator": "http://85.239.147.6/files/638251020/aMe4P4o.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-30 23:40:05 UTC", "last_seen": "2026-03-30 23:40:05 UTC", "sightings": 1 }, { "indicator": "http://85.12.204.206:58288/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 23:38:15 UTC", "last_seen": "2026-03-30 23:38:15 UTC", "sightings": 1 }, { "indicator": "https://leaf-proxy.orbitbloom.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 23:38:11 UTC", "last_seen": "2026-03-30 23:38:11 UTC", "sightings": 1 }, { "indicator": "https://root-cluster.orbitbloom.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 23:32:12 UTC", "last_seen": "2026-03-30 23:32:12 UTC", "sightings": 1 }, { "indicator": "https://plant-logic.orbitbloom.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 23:26:11 UTC", "last_seen": "2026-03-30 23:26:11 UTC", "sightings": 1 }, { "indicator": "https://green-node.orbitbloom.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 23:21:10 UTC", "last_seen": "2026-03-30 23:21:10 UTC", "sightings": 1 }, { "indicator": "https://eco-system.orbitbloom.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 23:15:13 UTC", "last_seen": "2026-03-30 23:15:13 UTC", "sightings": 1 }, { "indicator": "http://27.215.4.198:41494/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 23:12:17 UTC", "last_seen": "2026-03-30 23:12:17 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.64//arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "arm", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-30 23:12:17 UTC", "last_seen": "2026-03-30 23:12:17 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.64//arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "arm", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-30 23:12:17 UTC", "last_seen": "2026-03-30 23:12:17 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.64//sh4", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "SuperH", "ua-wget" ], "first_seen": "2026-03-30 23:12:17 UTC", "last_seen": "2026-03-30 23:12:17 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.64//x86", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget", "x86" ], "first_seen": "2026-03-30 23:12:17 UTC", "last_seen": "2026-03-30 23:12:17 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.64//arc", "indicator_type": "url", "source": "URLhaus", "tags": [ "arc", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-30 23:12:17 UTC", "last_seen": "2026-03-30 23:12:17 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.64//mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mips", "mirai", "ua-wget" ], "first_seen": "2026-03-30 23:12:17 UTC", "last_seen": "2026-03-30 23:12:17 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.64//i686", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget", "x86" ], "first_seen": "2026-03-30 23:12:17 UTC", "last_seen": "2026-03-30 23:12:17 UTC", "sightings": 1 }, { "indicator": "http://110.37.3.239:35449/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 23:11:14 UTC", "last_seen": "2026-03-30 23:11:14 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.64//ppc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "PowerPC", "ua-wget" ], "first_seen": "2026-03-30 23:11:14 UTC", "last_seen": "2026-03-30 23:11:14 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.64//x86_64", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget", "x86" ], "first_seen": "2026-03-30 23:11:14 UTC", "last_seen": "2026-03-30 23:11:14 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.64//m68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "m68k", "mirai", "ua-wget" ], "first_seen": "2026-03-30 23:11:14 UTC", "last_seen": "2026-03-30 23:11:14 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.64//arm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "arm", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-30 23:11:14 UTC", "last_seen": "2026-03-30 23:11:14 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.64//mpsl", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mips", "mirai", "ua-wget" ], "first_seen": "2026-03-30 23:11:14 UTC", "last_seen": "2026-03-30 23:11:14 UTC", "sightings": 1 }, { "indicator": "https://bio-growth.orbitbloom.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 23:10:14 UTC", "last_seen": "2026-03-30 23:10:14 UTC", "sightings": 1 }, { "indicator": "http://115.55.55.183:38418/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 23:06:13 UTC", "last_seen": "2026-03-30 23:06:13 UTC", "sightings": 1 }, { "indicator": "http://39.74.81.110:40922/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 23:05:31 UTC", "last_seen": "2026-03-30 23:05:31 UTC", "sightings": 1 }, { "indicator": "https://ion-stream.stellarflux.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 23:04:09 UTC", "last_seen": "2026-03-30 23:04:09 UTC", "sightings": 1 }, { "indicator": "https://drift-sensor.stellarflux.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 22:59:12 UTC", "last_seen": "2026-03-30 22:59:12 UTC", "sightings": 1 }, { "indicator": "https://pulse-gate.stellarflux.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 22:52:09 UTC", "last_seen": "2026-03-30 22:52:09 UTC", "sightings": 1 }, { "indicator": "https://beam-target.stellarflux.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 22:48:10 UTC", "last_seen": "2026-03-30 22:48:10 UTC", "sightings": 1 }, { "indicator": "http://110.37.3.239:35449/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 22:45:19 UTC", "last_seen": "2026-03-30 22:45:19 UTC", "sightings": 1 }, { "indicator": "https://wave-monitor.stellarflux.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 22:42:09 UTC", "last_seen": "2026-03-30 22:42:09 UTC", "sightings": 1 }, { "indicator": "https://light-speed.stellarflux.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 22:35:11 UTC", "last_seen": "2026-03-30 22:35:11 UTC", "sightings": 1 }, { "indicator": "http://125.43.106.252:56161/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 22:35:09 UTC", "last_seen": "2026-03-30 22:35:09 UTC", "sightings": 1 }, { "indicator": "https://relay-server.nexushaven.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 22:31:11 UTC", "last_seen": "2026-03-30 22:31:11 UTC", "sightings": 1 }, { "indicator": "http://120.60.238.31:44957/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 22:29:14 UTC", "last_seen": "2026-03-30 22:29:14 UTC", "sightings": 1 }, { "indicator": "https://secure-link.nexushaven.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 22:25:14 UTC", "last_seen": "2026-03-30 22:25:14 UTC", "sightings": 1 }, { "indicator": "http://125.43.106.252:56161/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 22:23:08 UTC", "last_seen": "2026-03-30 22:23:08 UTC", "sightings": 1 }, { "indicator": "https://backup-node.nexushaven.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 22:20:17 UTC", "last_seen": "2026-03-30 22:20:17 UTC", "sightings": 1 }, { "indicator": "http://83.168.69.118/bins/xnxnxnxnxnxnxnxnpowerpcxnxn", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "opendir", "PowerPC", "ua-wget" ], "first_seen": "2026-03-30 22:19:09 UTC", "last_seen": "2026-03-30 22:19:09 UTC", "sightings": 1 }, { "indicator": "http://83.168.69.118/bins/xnxnxnxnxnxnxnxnloongarch64xnxn", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "opendir", "ua-wget" ], "first_seen": "2026-03-30 22:18:13 UTC", "last_seen": "2026-03-30 22:18:13 UTC", "sightings": 1 }, { "indicator": "http://83.168.69.118/bins/xnxnxnxnxnxnxnxnx86_64xnxn", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "opendir", "ua-wget", "x86" ], "first_seen": "2026-03-30 22:18:12 UTC", "last_seen": "2026-03-30 22:18:12 UTC", "sightings": 1 }, { "indicator": "http://83.168.69.118/bins/xnxnxnxnxnxnxnxnsh2xnxn", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "opendir", "SuperH", "ua-wget" ], "first_seen": "2026-03-30 22:18:12 UTC", "last_seen": "2026-03-30 22:18:12 UTC", "sightings": 1 }, { "indicator": "http://83.168.69.118/bins/xnxnxnxnxnxnxnxnsh4xnxn", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "opendir", "SuperH", "ua-wget" ], "first_seen": "2026-03-30 22:18:12 UTC", "last_seen": "2026-03-30 22:18:12 UTC", "sightings": 1 }, { "indicator": "http://83.168.69.118/bins/xnxnxnxnxnxnxnxnaarch64xnxn", "indicator_type": "url", "source": "URLhaus", "tags": [ "arm", "elf", "mirai", "opendir", "ua-wget" ], "first_seen": "2026-03-30 22:18:12 UTC", "last_seen": "2026-03-30 22:18:12 UTC", "sightings": 1 }, { "indicator": "http://83.168.69.118/bins/xnxnxnxnxnxnxnxnriscv64xnxn", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "opendir", "RISC-V", "ua-wget" ], "first_seen": "2026-03-30 22:18:12 UTC", "last_seen": "2026-03-30 22:18:12 UTC", "sightings": 1 }, { "indicator": "http://83.168.69.118/bins/xnxnxnxnxnxnxnxni386xnxn", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "opendir", "ua-wget", "x86" ], "first_seen": "2026-03-30 22:18:12 UTC", "last_seen": "2026-03-30 22:18:12 UTC", "sightings": 1 }, { "indicator": "http://83.168.69.118/bins/xnxnxnxnxnxnxnxnmicroblazexnxn", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "opendir", "ua-wget" ], "first_seen": "2026-03-30 22:18:12 UTC", "last_seen": "2026-03-30 22:18:12 UTC", "sightings": 1 }, { "indicator": "http://83.168.69.118/bins/xnxnxnxnxnxnxnxnm68kxnxn", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "m68k", "mirai", "opendir", "ua-wget" ], "first_seen": "2026-03-30 22:18:12 UTC", "last_seen": "2026-03-30 22:18:12 UTC", "sightings": 1 }, { "indicator": "http://83.168.69.118/bins/xnxnxnxnxnxnxnxnriscv32xnxn", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "opendir", "RISC-V", "ua-wget" ], "first_seen": "2026-03-30 22:18:12 UTC", "last_seen": "2026-03-30 22:18:12 UTC", "sightings": 1 }, { "indicator": "http://83.168.69.118/bins/xnxnxnxnxnxnxnxnor1kxnxn", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "opendir", "ua-wget" ], "first_seen": "2026-03-30 22:18:12 UTC", "last_seen": "2026-03-30 22:18:12 UTC", "sightings": 1 }, { "indicator": "http://83.168.69.118/bins/xnxnxnxnxnxnxnxnmipsxnxn", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mips", "mirai", "opendir", "ua-wget" ], "first_seen": "2026-03-30 22:18:12 UTC", "last_seen": "2026-03-30 22:18:12 UTC", "sightings": 1 }, { "indicator": "https://guest-access.nexushaven.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 22:14:09 UTC", "last_seen": "2026-03-30 22:14:09 UTC", "sightings": 1 }, { "indicator": "http://123.12.224.245:40361/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 22:12:24 UTC", "last_seen": "2026-03-30 22:12:24 UTC", "sightings": 1 }, { "indicator": "http://27.215.4.198:41494/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 22:09:20 UTC", "last_seen": "2026-03-30 22:09:20 UTC", "sightings": 1 }, { "indicator": "https://cloud-vault.nexushaven.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 22:08:10 UTC", "last_seen": "2026-03-30 22:08:10 UTC", "sightings": 1 }, { "indicator": "https://safe-harbor.nexushaven.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 22:02:10 UTC", "last_seen": "2026-03-30 22:02:10 UTC", "sightings": 1 }, { "indicator": "https://auth-proxy.vectorforge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 22:00:15 UTC", "last_seen": "2026-03-30 22:00:15 UTC", "sightings": 1 }, { "indicator": "http://42.7.204.242:38970/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 21:57:17 UTC", "last_seen": "2026-03-30 21:57:17 UTC", "sightings": 1 }, { "indicator": "http://42.232.230.226:45244/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 21:51:21 UTC", "last_seen": "2026-03-30 21:51:21 UTC", "sightings": 1 }, { "indicator": "https://build-deploy.vectorforge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 21:51:10 UTC", "last_seen": "2026-03-30 21:51:10 UTC", "sightings": 1 }, { "indicator": "http://182.113.204.133:33884/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-30 21:47:07 UTC", "last_seen": "2026-03-30 21:47:07 UTC", "sightings": 1 }, { "indicator": "https://data-pipeline.vectorforge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 21:45:14 UTC", "last_seen": "2026-03-30 21:45:14 UTC", "sightings": 1 }, { "indicator": "http://123.12.224.245:40361/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 21:40:18 UTC", "last_seen": "2026-03-30 21:40:18 UTC", "sightings": 1 }, { "indicator": "https://api-endpoint.vectorforge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 21:40:12 UTC", "last_seen": "2026-03-30 21:40:12 UTC", "sightings": 1 }, { "indicator": "https://load-stress.vectorforge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 21:34:15 UTC", "last_seen": "2026-03-30 21:34:15 UTC", "sightings": 1 }, { "indicator": "http://115.55.162.33:42595/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 21:33:22 UTC", "last_seen": "2026-03-30 21:33:22 UTC", "sightings": 1 }, { "indicator": "http://110.38.211.48:47296/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-30 21:32:07 UTC", "last_seen": "2026-03-30 21:32:07 UTC", "sightings": 1 }, { "indicator": "https://core-engine.vectorforge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 21:29:10 UTC", "last_seen": "2026-03-30 21:29:10 UTC", "sightings": 1 }, { "indicator": "http://85.140.44.96:38108/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 21:28:12 UTC", "last_seen": "2026-03-30 21:28:12 UTC", "sightings": 1 }, { "indicator": "http://115.55.55.183:38418/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 21:23:27 UTC", "last_seen": "2026-03-30 21:23:27 UTC", "sightings": 1 }, { "indicator": "https://rpaizy.ashenkite.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 21:23:07 UTC", "last_seen": "2026-03-30 21:23:07 UTC", "sightings": 1 }, { "indicator": "http://115.55.162.33:42595/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 21:19:21 UTC", "last_seen": "2026-03-30 21:19:21 UTC", "sightings": 1 }, { "indicator": "https://185ez3.ashenkite.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 21:17:08 UTC", "last_seen": "2026-03-30 21:17:08 UTC", "sightings": 1 }, { "indicator": "http://182.113.204.133:33884/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-30 21:17:05 UTC", "last_seen": "2026-03-30 21:17:05 UTC", "sightings": 1 }, { "indicator": "http://110.37.0.211:49050/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-30 21:15:24 UTC", "last_seen": "2026-03-30 21:15:24 UTC", "sightings": 1 }, { "indicator": "http://115.50.91.143:51727/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 21:14:20 UTC", "last_seen": "2026-03-30 21:14:20 UTC", "sightings": 1 }, { "indicator": "https://pixelsola.ashenkite.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 21:12:08 UTC", "last_seen": "2026-03-30 21:12:08 UTC", "sightings": 1 }, { "indicator": "https://cr4t-flow.ashenkite.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 21:07:08 UTC", "last_seen": "2026-03-30 21:07:08 UTC", "sightings": 1 }, { "indicator": "https://uyr3.ashenkite.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 21:00:10 UTC", "last_seen": "2026-03-30 21:00:10 UTC", "sightings": 1 }, { "indicator": "http://27.217.198.91:45909/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-30 20:54:24 UTC", "last_seen": "2026-03-30 20:54:24 UTC", "sightings": 1 }, { "indicator": "https://arkmeshet6.ashenkite.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 20:54:08 UTC", "last_seen": "2026-03-30 20:54:08 UTC", "sightings": 1 }, { "indicator": "http://115.50.91.143:51727/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 20:50:10 UTC", "last_seen": "2026-03-30 20:50:10 UTC", "sightings": 1 }, { "indicator": "https://open-mesh.quillspire.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 20:50:08 UTC", "last_seen": "2026-03-30 20:50:08 UTC", "sightings": 1 }, { "indicator": "https://bin4ry-ring.quillspire.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 20:45:10 UTC", "last_seen": "2026-03-30 20:45:10 UTC", "sightings": 1 }, { "indicator": "https://m3rg-hinge.quillspire.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 20:42:08 UTC", "last_seen": "2026-03-30 20:42:08 UTC", "sightings": 1 }, { "indicator": "https://nuaeftf.quillspire.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 20:33:08 UTC", "last_seen": "2026-03-30 20:33:08 UTC", "sightings": 1 }, { "indicator": "https://mer-forgeex.quillspire.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 20:27:07 UTC", "last_seen": "2026-03-30 20:27:07 UTC", "sightings": 1 }, { "indicator": "https://erpqy89.quillspire.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 20:21:09 UTC", "last_seen": "2026-03-30 20:21:09 UTC", "sightings": 1 }, { "indicator": "https://primemicrobe.silvershade.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 20:15:10 UTC", "last_seen": "2026-03-30 20:15:10 UTC", "sightings": 1 }, { "indicator": "http://27.37.225.225:38495/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 20:14:08 UTC", "last_seen": "2026-03-30 20:14:08 UTC", "sightings": 1 }, { "indicator": "https://blen-reef.silvershade.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 20:10:10 UTC", "last_seen": "2026-03-30 20:10:10 UTC", "sightings": 1 }, { "indicator": "http://115.52.19.48:59708/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 20:09:07 UTC", "last_seen": "2026-03-30 20:09:07 UTC", "sightings": 1 }, { "indicator": "https://social-hau.silvershade.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 20:05:14 UTC", "last_seen": "2026-03-30 20:05:14 UTC", "sightings": 1 }, { "indicator": "https://5udd-glow.silvershade.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 19:58:09 UTC", "last_seen": "2026-03-30 19:58:09 UTC", "sightings": 1 }, { "indicator": "http://117.215.53.247:48402/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 19:57:17 UTC", "last_seen": "2026-03-30 19:57:17 UTC", "sightings": 1 }, { "indicator": "http://113.206.14.6:60299/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-30 19:53:11 UTC", "last_seen": "2026-03-30 19:53:11 UTC", "sightings": 1 }, { "indicator": "https://wolfpas.silvershade.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 19:53:07 UTC", "last_seen": "2026-03-30 19:53:07 UTC", "sightings": 1 }, { "indicator": "https://exp05e-crest.silvershade.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 19:48:09 UTC", "last_seen": "2026-03-30 19:48:09 UTC", "sightings": 1 }, { "indicator": "http://115.52.19.48:59708/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 19:47:24 UTC", "last_seen": "2026-03-30 19:47:24 UTC", "sightings": 1 }, { "indicator": "http://117.215.53.247:48402/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 19:42:26 UTC", "last_seen": "2026-03-30 19:42:26 UTC", "sightings": 1 }, { "indicator": "https://partnerreb.mistlatch.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 19:41:08 UTC", "last_seen": "2026-03-30 19:41:08 UTC", "sightings": 1 }, { "indicator": "http://118.34.109.121:55433/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 19:39:15 UTC", "last_seen": "2026-03-30 19:39:15 UTC", "sightings": 1 }, { "indicator": "https://2lripcrt.mistlatch.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 19:36:08 UTC", "last_seen": "2026-03-30 19:36:08 UTC", "sightings": 1 }, { "indicator": "http://113.206.14.6:60299/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-30 19:34:18 UTC", "last_seen": "2026-03-30 19:34:18 UTC", "sightings": 1 }, { "indicator": "http://210.97.100.192:60672/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 19:32:17 UTC", "last_seen": "2026-03-30 19:32:17 UTC", "sightings": 1 }, { "indicator": "https://fabric-plate.mistlatch.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 19:32:08 UTC", "last_seen": "2026-03-30 19:32:08 UTC", "sightings": 1 }, { "indicator": "http://222.140.212.129:48177/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-30 19:32:07 UTC", "last_seen": "2026-03-30 19:32:07 UTC", "sightings": 1 }, { "indicator": "https://mossroad.mistlatch.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 19:25:10 UTC", "last_seen": "2026-03-30 19:25:10 UTC", "sightings": 1 }, { "indicator": "http://42.233.105.194:37177/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 19:24:25 UTC", "last_seen": "2026-03-30 19:24:25 UTC", "sightings": 1 }, { "indicator": "https://arkmark4et.mistlatch.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 19:20:09 UTC", "last_seen": "2026-03-30 19:20:09 UTC", "sightings": 1 }, { "indicator": "http://83.254.236.2:50089/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 19:17:16 UTC", "last_seen": "2026-03-30 19:17:16 UTC", "sightings": 1 }, { "indicator": "https://brokerpasture.mistlatch.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 19:14:08 UTC", "last_seen": "2026-03-30 19:14:08 UTC", "sightings": 1 }, { "indicator": "https://po5a.skyl1tfern.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 19:08:07 UTC", "last_seen": "2026-03-30 19:08:07 UTC", "sightings": 1 }, { "indicator": "http://196.190.105.170:52231/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-30 19:03:18 UTC", "last_seen": "2026-03-30 19:03:18 UTC", "sightings": 1 }, { "indicator": "https://cur1o1-phase.skyl1tfern.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 19:03:10 UTC", "last_seen": "2026-03-30 19:03:10 UTC", "sightings": 1 }, { "indicator": "http://222.140.212.129:48177/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-30 19:02:06 UTC", "last_seen": "2026-03-30 19:02:06 UTC", "sightings": 1 }, { "indicator": "https://89n5b.skyl1tfern.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 18:58:07 UTC", "last_seen": "2026-03-30 18:58:07 UTC", "sightings": 1 }, { "indicator": "https://5tud1o6-path.skyl1tfern.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 18:56:08 UTC", "last_seen": "2026-03-30 18:56:08 UTC", "sightings": 1 }, { "indicator": "http://105.186.254.212:34465/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-30 18:48:20 UTC", "last_seen": "2026-03-30 18:48:20 UTC", "sightings": 1 }, { "indicator": "http://83.254.236.2:50089/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 18:46:19 UTC", "last_seen": "2026-03-30 18:46:19 UTC", "sightings": 1 }, { "indicator": "https://gatewayraven.skyl1tfern.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 18:46:08 UTC", "last_seen": "2026-03-30 18:46:08 UTC", "sightings": 1 }, { "indicator": "http://118.34.109.121:55433/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 18:44:13 UTC", "last_seen": "2026-03-30 18:44:13 UTC", "sightings": 1 }, { "indicator": "http://222.139.40.108:51272/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 18:41:18 UTC", "last_seen": "2026-03-30 18:41:18 UTC", "sightings": 1 }, { "indicator": "https://cr4ft9-core.skyl1tfern.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 18:40:10 UTC", "last_seen": "2026-03-30 18:40:10 UTC", "sightings": 1 }, { "indicator": "http://42.230.186.52:39461/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 18:39:17 UTC", "last_seen": "2026-03-30 18:39:17 UTC", "sightings": 1 }, { "indicator": "https://sub-hau1.fabledrift.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 18:35:08 UTC", "last_seen": "2026-03-30 18:35:08 UTC", "sightings": 1 }, { "indicator": "http://105.184.248.222:36165/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-30 18:29:19 UTC", "last_seen": "2026-03-30 18:29:19 UTC", "sightings": 1 }, { "indicator": "https://quorspireum8.fabledrift.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 18:29:07 UTC", "last_seen": "2026-03-30 18:29:07 UTC", "sightings": 1 }, { "indicator": "http://42.230.186.52:39461/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 18:25:26 UTC", "last_seen": "2026-03-30 18:25:26 UTC", "sightings": 1 }, { "indicator": "https://storyfros.fabledrift.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 18:23:09 UTC", "last_seen": "2026-03-30 18:23:09 UTC", "sightings": 1 }, { "indicator": "https://tpqicucp.fabledrift.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 18:17:08 UTC", "last_seen": "2026-03-30 18:17:08 UTC", "sightings": 1 }, { "indicator": "https://securclea.fabledrift.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 18:12:14 UTC", "last_seen": "2026-03-30 18:12:14 UTC", "sightings": 1 }, { "indicator": "http://117.200.178.98:51918/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 18:11:22 UTC", "last_seen": "2026-03-30 18:11:22 UTC", "sightings": 1 }, { "indicator": "http://115.55.24.6:47501/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 18:07:20 UTC", "last_seen": "2026-03-30 18:07:20 UTC", "sightings": 1 }, { "indicator": "https://arraynarrow.fabledrift.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 18:06:10 UTC", "last_seen": "2026-03-30 18:06:10 UTC", "sightings": 1 }, { "indicator": "http://117.200.178.98:51918/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 18:05:16 UTC", "last_seen": "2026-03-30 18:05:16 UTC", "sightings": 1 }, { "indicator": "http://37.157.219.158:32778/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-30 18:02:12 UTC", "last_seen": "2026-03-30 18:02:12 UTC", "sightings": 1 }, { "indicator": "https://lumlithor9.thorncairn.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 18:02:11 UTC", "last_seen": "2026-03-30 18:02:11 UTC", "sightings": 1 }, { "indicator": "http://105.184.248.222:36165/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-30 18:00:13 UTC", "last_seen": "2026-03-30 18:00:13 UTC", "sightings": 1 }, { "indicator": "https://clif-lagoo.thorncairn.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 17:55:12 UTC", "last_seen": "2026-03-30 17:55:12 UTC", "sightings": 1 }, { "indicator": "http://196.189.35.226:43409/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-30 17:55:09 UTC", "last_seen": "2026-03-30 17:55:09 UTC", "sightings": 1 }, { "indicator": "http://85.239.147.6/files/8317177049/xG9J7pF.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-03-30 17:52:05 UTC", "last_seen": "2026-03-30 17:52:05 UTC", "sightings": 1 }, { "indicator": "http://115.55.24.6:47501/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 17:49:20 UTC", "last_seen": "2026-03-30 17:49:20 UTC", "sightings": 1 }, { "indicator": "https://kfem.thorncairn.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 17:49:09 UTC", "last_seen": "2026-03-30 17:49:09 UTC", "sightings": 1 }, { "indicator": "https://ze2975m.thorncairn.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 17:44:09 UTC", "last_seen": "2026-03-30 17:44:09 UTC", "sightings": 1 }, { "indicator": "https://vgge57l.thorncairn.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 17:39:10 UTC", "last_seen": "2026-03-30 17:39:10 UTC", "sightings": 1 }, { "indicator": "http://37.157.219.158:32778/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-30 17:36:20 UTC", "last_seen": "2026-03-30 17:36:20 UTC", "sightings": 1 }, { "indicator": "https://solforgeor4.thorncairn.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 17:35:14 UTC", "last_seen": "2026-03-30 17:35:14 UTC", "sightings": 1 }, { "indicator": "https://loyalreel.v7lora.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 17:31:17 UTC", "last_seen": "2026-03-30 17:31:17 UTC", "sightings": 1 }, { "indicator": "http://182.127.153.171:51092/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 17:30:20 UTC", "last_seen": "2026-03-30 17:30:20 UTC", "sightings": 1 }, { "indicator": "http://123.4.147.72:36735/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 17:29:19 UTC", "last_seen": "2026-03-30 17:29:19 UTC", "sightings": 1 }, { "indicator": "http://www.vame.be/kgb/ENCRYPT.Ps1", "indicator_type": "url", "source": "URLhaus", "tags": [ "powershell", "ps1", "rat", "RemcosRAT" ], "first_seen": "2026-03-30 17:28:09 UTC", "last_seen": "2026-03-30 17:28:09 UTC", "sightings": 1 }, { "indicator": "http://www.vame.be/ftp/FrvbzpNxf99.bin", "indicator_type": "url", "source": "URLhaus", "tags": [ "encrypted", "GuLoader" ], "first_seen": "2026-03-30 17:28:08 UTC", "last_seen": "2026-03-30 17:28:08 UTC", "sightings": 1 }, { "indicator": "https://tr4ck-frame.v7lora.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 17:22:12 UTC", "last_seen": "2026-03-30 17:22:12 UTC", "sightings": 1 }, { "indicator": "https://tdp72.v7lora.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 17:16:56 UTC", "last_seen": "2026-03-30 17:16:56 UTC", "sightings": 1 }, { "indicator": "https://sswms.v7lora.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 17:11:09 UTC", "last_seen": "2026-03-30 17:11:09 UTC", "sightings": 1 }, { "indicator": "http://182.127.153.171:51092/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 17:05:19 UTC", "last_seen": "2026-03-30 17:05:19 UTC", "sightings": 1 }, { "indicator": "https://surnm5-route.v7lora.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 17:05:11 UTC", "last_seen": "2026-03-30 17:05:11 UTC", "sightings": 1 }, { "indicator": "http://42.230.227.7:50551/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 17:03:18 UTC", "last_seen": "2026-03-30 17:03:18 UTC", "sightings": 1 }, { "indicator": "http://222.127.75.70:57804/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-30 17:00:09 UTC", "last_seen": "2026-03-30 17:00:09 UTC", "sightings": 1 }, { "indicator": "http://123.4.147.72:36735/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 16:58:21 UTC", "last_seen": "2026-03-30 16:58:21 UTC", "sightings": 1 }, { "indicator": "https://r0ug3-stack.v7lora.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 16:58:09 UTC", "last_seen": "2026-03-30 16:58:09 UTC", "sightings": 1 }, { "indicator": "https://meta-pur3.glowhaven.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 16:54:12 UTC", "last_seen": "2026-03-30 16:54:12 UTC", "sightings": 1 }, { "indicator": "https://careersconnect.work/MYPHOTOMSI.JPG", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-30 16:51:14 UTC", "last_seen": "2026-03-30 16:51:14 UTC", "sightings": 1 }, { "indicator": "http://176.98.182.49/beta_evaluation_distribute_v4.4.1.bat", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-30 16:51:12 UTC", "last_seen": "2026-03-30 16:51:12 UTC", "sightings": 1 }, { "indicator": "https://epgoldsecurity.com/XWormClient.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "AsyncRAT" ], "first_seen": "2026-03-30 16:51:12 UTC", "last_seen": "2026-03-30 16:51:12 UTC", "sightings": 1 }, { "indicator": "https://wet-envelope-beam-laser.trycloudflare.com/rechung.pdf", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-30 16:51:12 UTC", "last_seen": "2026-03-30 16:51:12 UTC", "sightings": 1 }, { "indicator": "https://epgoldsecurity.com/ShadoClient.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "QuasarRAT" ], "first_seen": "2026-03-30 16:51:12 UTC", "last_seen": "2026-03-30 16:51:12 UTC", "sightings": 1 }, { "indicator": "https://epgoldsecurity.com/ShadowClient.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "QuasarRAT" ], "first_seen": "2026-03-30 16:51:11 UTC", "last_seen": "2026-03-30 16:51:11 UTC", "sightings": 1 }, { "indicator": "https://wet-envelope-beam-laser.trycloudflare.com/ombmh.dat", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-30 16:51:11 UTC", "last_seen": "2026-03-30 16:51:11 UTC", "sightings": 1 }, { "indicator": "https://getzoomupdate.com/download.php", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-30 16:51:10 UTC", "last_seen": "2026-03-30 16:51:10 UTC", "sightings": 1 }, { "indicator": "https://epgoldsecurity.com/XWormClient2.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "AsyncRAT" ], "first_seen": "2026-03-30 16:51:10 UTC", "last_seen": "2026-03-30 16:51:10 UTC", "sightings": 1 }, { "indicator": "https://jem-mialwe.com/WORDPRESS%202026.zip", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-30 16:51:10 UTC", "last_seen": "2026-03-30 16:51:10 UTC", "sightings": 1 }, { "indicator": "https://jem-mialwe.net/WORDPRESS%202026.zip", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-30 16:51:09 UTC", "last_seen": "2026-03-30 16:51:09 UTC", "sightings": 1 }, { "indicator": "https://inomanliner.org/WORDPRESS%202026.zip", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-30 16:51:09 UTC", "last_seen": "2026-03-30 16:51:09 UTC", "sightings": 1 }, { "indicator": "https://mlbkn.com/miumiu.7z", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-30 16:51:08 UTC", "last_seen": "2026-03-30 16:51:08 UTC", "sightings": 1 }, { "indicator": "https://pub-eb752c5fc6fd4e21973d399eafb1844c.r2.dev/adobe_updated_27.092.3029.vbs", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-30 16:51:07 UTC", "last_seen": "2026-03-30 16:51:07 UTC", "sightings": 1 }, { "indicator": "https://careersconnect.work/STARTGO18.03.2026V/GOSTARTWORKSVBY.JPG", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-30 16:51:07 UTC", "last_seen": "2026-03-30 16:51:07 UTC", "sightings": 1 }, { "indicator": "http://163.142.95.5:46073/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 16:48:29 UTC", "last_seen": "2026-03-30 16:48:29 UTC", "sightings": 1 }, { "indicator": "https://pr1v-zone.glowhaven.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 16:48:07 UTC", "last_seen": "2026-03-30 16:48:07 UTC", "sightings": 1 }, { "indicator": "http://1.189.26.217:50759/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-30 16:43:23 UTC", "last_seen": "2026-03-30 16:43:23 UTC", "sightings": 1 }, { "indicator": "https://pin3-point.glowhaven.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 16:42:11 UTC", "last_seen": "2026-03-30 16:42:11 UTC", "sightings": 1 }, { "indicator": "http://42.229.218.108:48948/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 16:39:18 UTC", "last_seen": "2026-03-30 16:39:18 UTC", "sightings": 1 }, { "indicator": "https://fz01ob.glowhaven.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 16:37:10 UTC", "last_seen": "2026-03-30 16:37:10 UTC", "sightings": 1 }, { "indicator": "https://quatrigge.glowhaven.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 16:31:10 UTC", "last_seen": "2026-03-30 16:31:10 UTC", "sightings": 1 }, { "indicator": "http://123.4.29.101:37405/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-30 16:27:12 UTC", "last_seen": "2026-03-30 16:27:12 UTC", "sightings": 1 }, { "indicator": "http://123.4.29.101:37405/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-30 16:27:12 UTC", "last_seen": "2026-03-30 16:27:12 UTC", "sightings": 1 }, { "indicator": "https://normesh0a.glowhaven.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 16:26:18 UTC", "last_seen": "2026-03-30 16:26:18 UTC", "sightings": 1 }, { "indicator": "http://222.127.75.70:57804/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-30 16:22:19 UTC", "last_seen": "2026-03-30 16:22:19 UTC", "sightings": 1 }, { "indicator": "http://110.37.66.64:59824/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-30 16:21:22 UTC", "last_seen": "2026-03-30 16:21:22 UTC", "sightings": 1 }, { "indicator": "http://175.165.75.37:59704/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 16:20:23 UTC", "last_seen": "2026-03-30 16:20:23 UTC", "sightings": 1 }, { "indicator": "https://triforgea4.cinderbay.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 16:20:12 UTC", "last_seen": "2026-03-30 16:20:12 UTC", "sightings": 1 }, { "indicator": "https://velvetautu.cinderbay.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 16:14:08 UTC", "last_seen": "2026-03-30 16:14:08 UTC", "sightings": 1 }, { "indicator": "http://1.189.26.217:50759/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-30 16:12:25 UTC", "last_seen": "2026-03-30 16:12:25 UTC", "sightings": 1 }, { "indicator": "http://115.56.99.210:38056/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-30 16:12:09 UTC", "last_seen": "2026-03-30 16:12:09 UTC", "sightings": 1 }, { "indicator": "https://coralsolid.cinderbay.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 16:09:15 UTC", "last_seen": "2026-03-30 16:09:15 UTC", "sightings": 1 }, { "indicator": "http://60.23.238.136:53916/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 16:06:30 UTC", "last_seen": "2026-03-30 16:06:30 UTC", "sightings": 1 }, { "indicator": "https://ziuyacdv.cinderbay.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 16:02:09 UTC", "last_seen": "2026-03-30 16:02:09 UTC", "sightings": 1 }, { "indicator": "http://110.37.66.64:59824/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-30 16:00:29 UTC", "last_seen": "2026-03-30 16:00:29 UTC", "sightings": 1 }, { "indicator": "https://talline1is.cinderbay.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 15:59:09 UTC", "last_seen": "2026-03-30 15:59:09 UTC", "sightings": 1 }, { "indicator": "https://poster-port.cinderbay.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 15:56:16 UTC", "last_seen": "2026-03-30 15:56:16 UTC", "sightings": 1 }, { "indicator": "http://46.73.17.206:37496/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 15:52:14 UTC", "last_seen": "2026-03-30 15:52:14 UTC", "sightings": 1 }, { "indicator": "http://175.165.75.37:59704/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 15:48:20 UTC", "last_seen": "2026-03-30 15:48:20 UTC", "sightings": 1 }, { "indicator": "http://219.155.94.218:51427/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-30 15:47:20 UTC", "last_seen": "2026-03-30 15:47:20 UTC", "sightings": 1 }, { "indicator": "http://115.56.99.210:38056/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-30 15:47:09 UTC", "last_seen": "2026-03-30 15:47:09 UTC", "sightings": 1 }, { "indicator": "https://falldusk.mossbyte.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 15:46:14 UTC", "last_seen": "2026-03-30 15:46:14 UTC", "sightings": 1 }, { "indicator": "https://wkilqh.mossbyte.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 15:41:14 UTC", "last_seen": "2026-03-30 15:41:14 UTC", "sightings": 1 }, { "indicator": "https://wavrapi.mossbyte.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 15:35:12 UTC", "last_seen": "2026-03-30 15:35:12 UTC", "sightings": 1 }, { "indicator": "https://gb3r.mossbyte.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 15:29:07 UTC", "last_seen": "2026-03-30 15:29:07 UTC", "sightings": 1 }, { "indicator": "http://111.127.227.31:39783/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-30 15:27:24 UTC", "last_seen": "2026-03-30 15:27:24 UTC", "sightings": 1 }, { "indicator": "https://r6cp.mossbyte.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 15:24:10 UTC", "last_seen": "2026-03-30 15:24:10 UTC", "sightings": 1 }, { "indicator": "http://110.37.27.164:35329/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 15:19:25 UTC", "last_seen": "2026-03-30 15:19:25 UTC", "sightings": 1 }, { "indicator": "http://222.142.240.179:45532/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 15:18:23 UTC", "last_seen": "2026-03-30 15:18:23 UTC", "sightings": 1 }, { "indicator": "https://nor-lineor.mossbyte.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 15:18:07 UTC", "last_seen": "2026-03-30 15:18:07 UTC", "sightings": 1 }, { "indicator": "http://87.121.84.19/hiddenbin/boatnet.mpsl", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-30 15:16:24 UTC", "last_seen": "2026-03-30 15:16:24 UTC", "sightings": 1 }, { "indicator": "http://87.121.84.19/hiddenbin/boatnet.x86_64", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-30 15:16:21 UTC", "last_seen": "2026-03-30 15:16:21 UTC", "sightings": 1 }, { "indicator": "http://87.121.84.19/hiddenbin/boatnet.m68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-30 15:16:21 UTC", "last_seen": "2026-03-30 15:16:21 UTC", "sightings": 1 }, { "indicator": "http://87.121.84.19/hiddenbin/boatnet.spc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-30 15:16:21 UTC", "last_seen": "2026-03-30 15:16:21 UTC", "sightings": 1 }, { "indicator": "http://87.121.84.19/hiddenbin/boatnet.arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-30 15:16:21 UTC", "last_seen": "2026-03-30 15:16:21 UTC", "sightings": 1 }, { "indicator": "http://87.121.84.19/hiddenbin/boatnet.mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-30 15:16:21 UTC", "last_seen": "2026-03-30 15:16:21 UTC", "sightings": 1 }, { "indicator": "http://87.121.84.19/hiddenbin/boatnet.sh4", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-30 15:16:21 UTC", "last_seen": "2026-03-30 15:16:21 UTC", "sightings": 1 }, { "indicator": "http://87.121.84.19/hiddenbin/boatnet.x86", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-30 15:16:16 UTC", "last_seen": "2026-03-30 15:16:16 UTC", "sightings": 1 }, { "indicator": "http://87.121.84.19/hiddenbin/boatnet.arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-30 15:15:25 UTC", "last_seen": "2026-03-30 15:15:25 UTC", "sightings": 1 }, { "indicator": "http://87.121.84.19/hiddenbin/boatnet.arm", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-30 15:15:24 UTC", "last_seen": "2026-03-30 15:15:24 UTC", "sightings": 1 }, { "indicator": "http://87.121.84.19/hiddenbin/boatnet.arm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-30 15:15:24 UTC", "last_seen": "2026-03-30 15:15:24 UTC", "sightings": 1 }, { "indicator": "http://87.121.84.19/hiddenbin/boatnet.arc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-30 15:15:23 UTC", "last_seen": "2026-03-30 15:15:23 UTC", "sightings": 1 }, { "indicator": "http://87.121.84.19/hiddenbin/boatnet.ppc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-30 15:15:23 UTC", "last_seen": "2026-03-30 15:15:23 UTC", "sightings": 1 }, { "indicator": "https://handleramber.cl0verpeak.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 15:13:10 UTC", "last_seen": "2026-03-30 15:13:10 UTC", "sightings": 1 }, { "indicator": "http://116.58.229.39:47979/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-30 15:12:07 UTC", "last_seen": "2026-03-30 15:12:07 UTC", "sightings": 1 }, { "indicator": "https://scrip8-grid.cl0verpeak.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 15:07:09 UTC", "last_seen": "2026-03-30 15:07:09 UTC", "sightings": 1 }, { "indicator": "http://196.189.198.173:40937/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-30 15:06:07 UTC", "last_seen": "2026-03-30 15:06:07 UTC", "sightings": 1 }, { "indicator": "https://zennexos5.cl0verpeak.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 15:02:10 UTC", "last_seen": "2026-03-30 15:02:10 UTC", "sightings": 1 }, { "indicator": "http://61.176.71.254:43827/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 14:58:20 UTC", "last_seen": "2026-03-30 14:58:20 UTC", "sightings": 1 }, { "indicator": "http://182.126.124.121:60566/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 14:57:07 UTC", "last_seen": "2026-03-30 14:57:07 UTC", "sightings": 1 }, { "indicator": "https://tri-coreen.cl0verpeak.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 14:56:17 UTC", "last_seen": "2026-03-30 14:56:17 UTC", "sightings": 1 }, { "indicator": "http://111.127.227.31:39783/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-30 14:54:18 UTC", "last_seen": "2026-03-30 14:54:18 UTC", "sightings": 1 }, { "indicator": "https://dtlxmaf.cl0verpeak.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 14:51:44 UTC", "last_seen": "2026-03-30 14:51:44 UTC", "sightings": 1 }, { "indicator": "http://175.9.165.160:39420/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-30 14:51:18 UTC", "last_seen": "2026-03-30 14:51:18 UTC", "sightings": 1 }, { "indicator": "http://222.142.240.179:45532/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 14:48:20 UTC", "last_seen": "2026-03-30 14:48:20 UTC", "sightings": 1 }, { "indicator": "http://27.207.184.58:54300/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 14:46:09 UTC", "last_seen": "2026-03-30 14:46:09 UTC", "sightings": 1 }, { "indicator": "https://voyageinspect.cl0verpeak.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 14:45:09 UTC", "last_seen": "2026-03-30 14:45:09 UTC", "sightings": 1 }, { "indicator": "http://175.165.77.252:44311/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 14:42:17 UTC", "last_seen": "2026-03-30 14:42:17 UTC", "sightings": 1 }, { "indicator": "http://59.180.188.70:40729/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 14:41:28 UTC", "last_seen": "2026-03-30 14:41:28 UTC", "sightings": 1 }, { "indicator": "https://solcresten3.n0vabrook.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 14:39:08 UTC", "last_seen": "2026-03-30 14:39:08 UTC", "sightings": 1 }, { "indicator": "http://125.41.231.39:59176/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 14:36:15 UTC", "last_seen": "2026-03-30 14:36:15 UTC", "sightings": 1 }, { "indicator": "http://42.4.107.157:38819/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 14:34:15 UTC", "last_seen": "2026-03-30 14:34:15 UTC", "sightings": 1 }, { "indicator": "https://delta6-zone.stormglade.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 14:33:08 UTC", "last_seen": "2026-03-30 14:33:08 UTC", "sightings": 1 }, { "indicator": "http://61.176.71.254:43827/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 14:32:10 UTC", "last_seen": "2026-03-30 14:32:10 UTC", "sightings": 1 }, { "indicator": "http://182.126.124.121:60566/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 14:31:19 UTC", "last_seen": "2026-03-30 14:31:19 UTC", "sightings": 1 }, { "indicator": "https://roy4l-node.foxrunet.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 14:28:08 UTC", "last_seen": "2026-03-30 14:28:08 UTC", "sightings": 1 }, { "indicator": "https://tru37-point.oakwhisper.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 14:22:10 UTC", "last_seen": "2026-03-30 14:22:10 UTC", "sightings": 1 }, { "indicator": "http://175.165.77.252:44311/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 14:20:24 UTC", "last_seen": "2026-03-30 14:20:24 UTC", "sightings": 1 }, { "indicator": "http://175.9.165.160:39420/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-30 14:20:20 UTC", "last_seen": "2026-03-30 14:20:20 UTC", "sightings": 1 }, { "indicator": "https://d3ep-forge.br1ghtmere.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 14:16:09 UTC", "last_seen": "2026-03-30 14:16:09 UTC", "sightings": 1 }, { "indicator": "http://42.227.205.21:50825/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 14:12:16 UTC", "last_seen": "2026-03-30 14:12:16 UTC", "sightings": 1 }, { "indicator": "https://vzdgys.starforge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 14:11:09 UTC", "last_seen": "2026-03-30 14:11:09 UTC", "sightings": 1 }, { "indicator": "http://175.167.243.126:40716/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 14:09:19 UTC", "last_seen": "2026-03-30 14:09:19 UTC", "sightings": 1 }, { "indicator": "http://222.127.154.221:48996/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-30 14:08:09 UTC", "last_seen": "2026-03-30 14:08:09 UTC", "sightings": 1 }, { "indicator": "http://125.41.231.39:59176/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 14:07:12 UTC", "last_seen": "2026-03-30 14:07:12 UTC", "sightings": 1 }, { "indicator": "http://36.70.234.148:38506/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-30 14:05:14 UTC", "last_seen": "2026-03-30 14:05:14 UTC", "sightings": 1 }, { "indicator": "https://yx16l.n0vabrook.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 14:05:09 UTC", "last_seen": "2026-03-30 14:05:09 UTC", "sightings": 1 }, { "indicator": "https://sh1f-signal.n0vabrook.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 14:00:13 UTC", "last_seen": "2026-03-30 14:00:13 UTC", "sightings": 1 }, { "indicator": "http://222.142.197.135:59233/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 13:59:08 UTC", "last_seen": "2026-03-30 13:59:08 UTC", "sightings": 1 }, { "indicator": "http://171.36.9.175:34472/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-30 13:59:08 UTC", "last_seen": "2026-03-30 13:59:08 UTC", "sightings": 1 }, { "indicator": "http://88.249.70.76:58474/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 13:58:09 UTC", "last_seen": "2026-03-30 13:58:09 UTC", "sightings": 1 }, { "indicator": "https://gl0ss-grid.n0vabrook.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 13:54:09 UTC", "last_seen": "2026-03-30 13:54:09 UTC", "sightings": 1 }, { "indicator": "http://27.193.230.64:40914/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 13:52:20 UTC", "last_seen": "2026-03-30 13:52:20 UTC", "sightings": 1 }, { "indicator": "http://27.207.184.58:54300/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 13:52:20 UTC", "last_seen": "2026-03-30 13:52:20 UTC", "sightings": 1 }, { "indicator": "http://36.70.234.148:38506/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-30 13:50:24 UTC", "last_seen": "2026-03-30 13:50:24 UTC", "sightings": 1 }, { "indicator": "http://117.235.123.214:38824/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 13:50:20 UTC", "last_seen": "2026-03-30 13:50:20 UTC", "sightings": 1 }, { "indicator": "http://222.127.60.98:53927/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-30 13:50:19 UTC", "last_seen": "2026-03-30 13:50:19 UTC", "sightings": 1 }, { "indicator": "http://222.127.154.221:48996/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-30 13:49:18 UTC", "last_seen": "2026-03-30 13:49:18 UTC", "sightings": 1 }, { "indicator": "http://118.253.80.140:48921/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-30 13:49:14 UTC", "last_seen": "2026-03-30 13:49:14 UTC", "sightings": 1 }, { "indicator": "https://hmndwk.n0vabrook.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 13:49:12 UTC", "last_seen": "2026-03-30 13:49:12 UTC", "sightings": 1 }, { "indicator": "http://182.139.3.232:33999/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-30 13:42:23 UTC", "last_seen": "2026-03-30 13:42:23 UTC", "sightings": 1 }, { "indicator": "https://capitclou.stormglade.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 13:42:11 UTC", "last_seen": "2026-03-30 13:42:11 UTC", "sightings": 1 }, { "indicator": "http://171.36.9.175:34472/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-30 13:38:16 UTC", "last_seen": "2026-03-30 13:38:16 UTC", "sightings": 1 }, { "indicator": "https://creekcargo.stormglade.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 13:37:07 UTC", "last_seen": "2026-03-30 13:37:07 UTC", "sightings": 1 }, { "indicator": "https://39vhl.stormglade.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 13:32:08 UTC", "last_seen": "2026-03-30 13:32:08 UTC", "sightings": 1 }, { "indicator": "http://222.139.40.108:51272/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 13:31:16 UTC", "last_seen": "2026-03-30 13:31:16 UTC", "sightings": 1 }, { "indicator": "http://88.249.70.76:58474/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 13:31:15 UTC", "last_seen": "2026-03-30 13:31:15 UTC", "sightings": 1 }, { "indicator": "http://182.121.227.73:39641/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-30 13:31:06 UTC", "last_seen": "2026-03-30 13:31:06 UTC", "sightings": 1 }, { "indicator": "http://222.142.197.135:59233/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 13:30:10 UTC", "last_seen": "2026-03-30 13:30:10 UTC", "sightings": 1 }, { "indicator": "http://27.193.230.64:40914/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 13:27:18 UTC", "last_seen": "2026-03-30 13:27:18 UTC", "sightings": 1 }, { "indicator": "http://42.231.91.184:34368/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 13:26:11 UTC", "last_seen": "2026-03-30 13:26:11 UTC", "sightings": 1 }, { "indicator": "https://dpvvgwcg.stormglade.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 13:25:11 UTC", "last_seen": "2026-03-30 13:25:11 UTC", "sightings": 1 }, { "indicator": "http://182.121.227.73:39641/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-30 13:22:07 UTC", "last_seen": "2026-03-30 13:22:07 UTC", "sightings": 1 }, { "indicator": "http://87.255.10.22:39229/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 13:21:12 UTC", "last_seen": "2026-03-30 13:21:12 UTC", "sightings": 1 }, { "indicator": "http://110.36.27.244:46113/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 13:21:12 UTC", "last_seen": "2026-03-30 13:21:12 UTC", "sightings": 1 }, { "indicator": "http://117.235.123.214:38824/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 13:20:09 UTC", "last_seen": "2026-03-30 13:20:09 UTC", "sightings": 1 }, { "indicator": "https://sceneretainer.foxrunet.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 13:18:09 UTC", "last_seen": "2026-03-30 13:18:09 UTC", "sightings": 1 }, { "indicator": "https://field-shoa.foxrunet.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 13:12:13 UTC", "last_seen": "2026-03-30 13:12:13 UTC", "sightings": 1 }, { "indicator": "https://margingene.foxrunet.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 13:05:10 UTC", "last_seen": "2026-03-30 13:05:10 UTC", "sightings": 1 }, { "indicator": "http://42.231.91.184:34368/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 13:02:17 UTC", "last_seen": "2026-03-30 13:02:17 UTC", "sightings": 1 }, { "indicator": "https://cybdh.foxrunet.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 12:58:08 UTC", "last_seen": "2026-03-30 12:58:08 UTC", "sightings": 1 }, { "indicator": "http://119.116.37.247:42610/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 12:57:23 UTC", "last_seen": "2026-03-30 12:57:23 UTC", "sightings": 1 }, { "indicator": "http://110.36.27.244:46113/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 12:57:13 UTC", "last_seen": "2026-03-30 12:57:13 UTC", "sightings": 1 }, { "indicator": "http://123.9.244.178:33070/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-30 12:57:07 UTC", "last_seen": "2026-03-30 12:57:07 UTC", "sightings": 1 }, { "indicator": "http://110.24.36.14:45423/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-30 12:55:12 UTC", "last_seen": "2026-03-30 12:55:12 UTC", "sightings": 1 }, { "indicator": "http://119.116.37.247:42610/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 12:55:09 UTC", "last_seen": "2026-03-30 12:55:09 UTC", "sightings": 1 }, { "indicator": "https://solline0en.oakwhisper.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 12:55:08 UTC", "last_seen": "2026-03-30 12:55:08 UTC", "sightings": 1 }, { "indicator": "http://27.37.60.190:52268/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 12:46:14 UTC", "last_seen": "2026-03-30 12:46:14 UTC", "sightings": 1 }, { "indicator": "https://atom-mount.oakwhisper.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 12:46:07 UTC", "last_seen": "2026-03-30 12:46:07 UTC", "sightings": 1 }, { "indicator": "http://36.70.199.0:34975/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-30 12:45:24 UTC", "last_seen": "2026-03-30 12:45:24 UTC", "sightings": 1 }, { "indicator": "http://36.70.199.0:34975/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-30 12:45:24 UTC", "last_seen": "2026-03-30 12:45:24 UTC", "sightings": 1 }, { "indicator": "http://87.255.10.22:39229/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 12:44:11 UTC", "last_seen": "2026-03-30 12:44:11 UTC", "sightings": 1 }, { "indicator": "https://files.pythonhosted.org/packages/83/b7/5e93f51cd157cc8cf5599f387e587a1926d50fc7e54fb76d04b342341fb0/telnyx-4.87.1-py3-none-any.whl", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-30 12:40:10 UTC", "last_seen": "2026-03-30 12:40:10 UTC", "sightings": 1 }, { "indicator": "https://files.pythonhosted.org/packages/5a/73/87cb49434a1f89f253819b81993d3a4e65186ae08b013b9825633ceac359/telnyx-4.87.2-py3-none-any.whl", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-30 12:40:10 UTC", "last_seen": "2026-03-30 12:40:10 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.64/ohshit.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai", "script" ], "first_seen": "2026-03-30 12:40:08 UTC", "last_seen": "2026-03-30 12:40:08 UTC", "sightings": 1 }, { "indicator": "https://50ravelv.oakwhisper.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 12:38:08 UTC", "last_seen": "2026-03-30 12:38:08 UTC", "sightings": 1 }, { "indicator": "https://dispatchmemory.oakwhisper.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 12:32:09 UTC", "last_seen": "2026-03-30 12:32:09 UTC", "sightings": 1 }, { "indicator": "https://proto-tru5ted.br1ghtmere.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 12:25:10 UTC", "last_seen": "2026-03-30 12:25:10 UTC", "sightings": 1 }, { "indicator": "http://123.168.208.78:50607/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-30 12:23:18 UTC", "last_seen": "2026-03-30 12:23:18 UTC", "sightings": 1 }, { "indicator": "http://182.122.54.132:42333/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-30 12:22:09 UTC", "last_seen": "2026-03-30 12:22:09 UTC", "sightings": 1 }, { "indicator": "https://runti5-flow.br1ghtmere.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 12:20:10 UTC", "last_seen": "2026-03-30 12:20:10 UTC", "sightings": 1 }, { "indicator": "https://95abc92.br1ghtmere.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 12:17:08 UTC", "last_seen": "2026-03-30 12:17:08 UTC", "sightings": 1 }, { "indicator": "http://110.37.9.151:48261/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-30 12:15:18 UTC", "last_seen": "2026-03-30 12:15:18 UTC", "sightings": 1 }, { "indicator": "http://123.5.114.101:33257/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-30 12:10:22 UTC", "last_seen": "2026-03-30 12:10:22 UTC", "sightings": 1 }, { "indicator": "https://yyin.br1ghtmere.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 12:05:13 UTC", "last_seen": "2026-03-30 12:05:13 UTC", "sightings": 1 }, { "indicator": "http://110.36.30.247:48830/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 12:01:18 UTC", "last_seen": "2026-03-30 12:01:18 UTC", "sightings": 1 }, { "indicator": "http://175.165.140.168:40007/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 11:58:17 UTC", "last_seen": "2026-03-30 11:58:17 UTC", "sightings": 1 }, { "indicator": "https://geyseropti.starforge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 11:58:07 UTC", "last_seen": "2026-03-30 11:58:07 UTC", "sightings": 1 }, { "indicator": "http://175.167.243.126:40716/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-30 11:57:14 UTC", "last_seen": "2026-03-30 11:57:14 UTC", "sightings": 1 }, { "indicator": "http://182.122.54.132:42333/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-30 11:57:09 UTC", "last_seen": "2026-03-30 11:57:09 UTC", "sightings": 1 }, { "indicator": "http://59.125.55.230:53868/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-30 11:55:29 UTC", "last_seen": "2026-03-30 11:55:29 UTC", "sightings": 1 }, { "indicator": "https://tranrur.starforge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 11:51:07 UTC", "last_seen": "2026-03-30 11:51:07 UTC", "sightings": 1 }, { "indicator": "http://196.190.1.39:52817/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-30 11:49:06 UTC", "last_seen": "2026-03-30 11:49:06 UTC", "sightings": 1 }, { "indicator": "http://182.126.241.122:47701/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 11:46:12 UTC", "last_seen": "2026-03-30 11:46:12 UTC", "sightings": 1 }, { "indicator": "https://meta-0rch.starforge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 11:45:08 UTC", "last_seen": "2026-03-30 11:45:08 UTC", "sightings": 1 }, { "indicator": "http://123.5.114.101:33257/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-30 11:41:19 UTC", "last_seen": "2026-03-30 11:41:19 UTC", "sightings": 1 }, { "indicator": "http://175.165.140.168:40007/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 11:41:18 UTC", "last_seen": "2026-03-30 11:41:18 UTC", "sightings": 1 }, { "indicator": "https://bzknn.starforge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 11:39:07 UTC", "last_seen": "2026-03-30 11:39:07 UTC", "sightings": 1 }, { "indicator": "http://196.190.1.39:52817/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-30 11:38:16 UTC", "last_seen": "2026-03-30 11:38:16 UTC", "sightings": 1 }, { "indicator": "https://wu4747.n0vabrook.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 11:33:09 UTC", "last_seen": "2026-03-30 11:33:09 UTC", "sightings": 1 }, { "indicator": "http://221.1.224.168:56411/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-30 11:32:06 UTC", "last_seen": "2026-03-30 11:32:06 UTC", "sightings": 1 }, { "indicator": "http://219.156.48.17:42209/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 11:30:34 UTC", "last_seen": "2026-03-30 11:30:34 UTC", "sightings": 1 }, { "indicator": "http://42.229.218.108:48948/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 11:30:34 UTC", "last_seen": "2026-03-30 11:30:34 UTC", "sightings": 1 }, { "indicator": "http://222.142.242.236:44360/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 11:30:33 UTC", "last_seen": "2026-03-30 11:30:33 UTC", "sightings": 1 }, { "indicator": "https://pastebin.com/raw/GVqMqePp", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-30 11:30:31 UTC", "last_seen": "2026-03-30 11:30:31 UTC", "sightings": 1 }, { "indicator": "https://www.shanmaocnhingkong-oss.top/sogou_pinyin_x64_v20_win.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "Cybercrime", "SilverFox" ], "first_seen": "2026-03-30 11:30:29 UTC", "last_seen": "2026-03-30 11:30:29 UTC", "sightings": 1 }, { "indicator": "https://pastebin.com/GVqMqePp", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-30 11:30:29 UTC", "last_seen": "2026-03-30 11:30:29 UTC", "sightings": 1 }, { "indicator": "https://62c013c91f7f8152044efae44a432404.r2.cloudflarestorage.com/urllink/www-win-sogou-com/windows/SG.Setupbiyi.5.16.11.5lln.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "Cybercrime", "SilverFox" ], "first_seen": "2026-03-30 11:30:28 UTC", "last_seen": "2026-03-30 11:30:28 UTC", "sightings": 1 }, { "indicator": "https://pastebin.com/dl/NfAfGNH6", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-30 11:30:28 UTC", "last_seen": "2026-03-30 11:30:28 UTC", "sightings": 1 }, { "indicator": "https://pastebin.com/K9rHTWbB", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-30 11:30:28 UTC", "last_seen": "2026-03-30 11:30:28 UTC", "sightings": 1 }, { "indicator": "https://pastebin.com/dl/WXsGaMUd", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-30 11:30:28 UTC", "last_seen": "2026-03-30 11:30:28 UTC", "sightings": 1 }, { "indicator": "http://119.116.32.189:57819/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 11:26:20 UTC", "last_seen": "2026-03-30 11:26:20 UTC", "sightings": 1 }, { "indicator": "https://guarmea.n0vabrook.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 11:25:09 UTC", "last_seen": "2026-03-30 11:25:09 UTC", "sightings": 1 }, { "indicator": "http://42.224.189.194:43188/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 11:24:11 UTC", "last_seen": "2026-03-30 11:24:11 UTC", "sightings": 1 }, { "indicator": "http://182.126.241.122:47701/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 11:21:28 UTC", "last_seen": "2026-03-30 11:21:28 UTC", "sightings": 1 }, { "indicator": "https://quick8-chain.n0vabrook.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 11:20:15 UTC", "last_seen": "2026-03-30 11:20:15 UTC", "sightings": 1 }, { "indicator": "https://decode-stead.n0vabrook.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 11:17:08 UTC", "last_seen": "2026-03-30 11:17:08 UTC", "sightings": 1 }, { "indicator": "http://115.49.208.233:58632/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 11:13:18 UTC", "last_seen": "2026-03-30 11:13:18 UTC", "sightings": 1 }, { "indicator": "http://221.1.224.168:56411/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-30 11:12:08 UTC", "last_seen": "2026-03-30 11:12:08 UTC", "sightings": 1 }, { "indicator": "https://3d1t-node.n0vabrook.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 11:06:09 UTC", "last_seen": "2026-03-30 11:06:09 UTC", "sightings": 1 }, { "indicator": "https://proto-p0rt.n0vabrook.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 10:59:06 UTC", "last_seen": "2026-03-30 10:59:06 UTC", "sightings": 1 }, { "indicator": "http://117.217.226.220:36161/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 10:58:23 UTC", "last_seen": "2026-03-30 10:58:23 UTC", "sightings": 1 }, { "indicator": "http://119.116.32.189:57819/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 10:57:15 UTC", "last_seen": "2026-03-30 10:57:15 UTC", "sightings": 1 }, { "indicator": "http://85.166.152.13:39662/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-30 10:57:09 UTC", "last_seen": "2026-03-30 10:57:09 UTC", "sightings": 1 }, { "indicator": "http://110.36.80.169:55780/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 10:55:20 UTC", "last_seen": "2026-03-30 10:55:20 UTC", "sightings": 1 }, { "indicator": "http://115.49.208.233:58632/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 10:54:22 UTC", "last_seen": "2026-03-30 10:54:22 UTC", "sightings": 1 }, { "indicator": "https://anch0r1-route.stormglade.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 10:54:11 UTC", "last_seen": "2026-03-30 10:54:11 UTC", "sightings": 1 }, { "indicator": "http://39.90.149.110:53432/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 10:53:15 UTC", "last_seen": "2026-03-30 10:53:15 UTC", "sightings": 1 }, { "indicator": "https://we5ohkh2.stormglade.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 10:51:09 UTC", "last_seen": "2026-03-30 10:51:09 UTC", "sightings": 1 }, { "indicator": "http://121.9.66.50:44161/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 10:49:23 UTC", "last_seen": "2026-03-30 10:49:23 UTC", "sightings": 1 }, { "indicator": "http://219.155.203.107:48310/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-30 10:47:08 UTC", "last_seen": "2026-03-30 10:47:08 UTC", "sightings": 1 }, { "indicator": "http://118.175.206.228:52107/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-30 10:44:19 UTC", "last_seen": "2026-03-30 10:44:19 UTC", "sightings": 1 }, { "indicator": "http://115.55.195.59:35343/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 10:40:26 UTC", "last_seen": "2026-03-30 10:40:26 UTC", "sightings": 1 }, { "indicator": "https://ligh-stric.stormglade.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 10:40:12 UTC", "last_seen": "2026-03-30 10:40:12 UTC", "sightings": 1 }, { "indicator": "http://121.9.66.50:44161/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 10:32:25 UTC", "last_seen": "2026-03-30 10:32:25 UTC", "sightings": 1 }, { "indicator": "http://118.175.206.228:52107/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-30 10:32:21 UTC", "last_seen": "2026-03-30 10:32:21 UTC", "sightings": 1 }, { "indicator": "https://offecargo.stormglade.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 10:32:08 UTC", "last_seen": "2026-03-30 10:32:08 UTC", "sightings": 1 }, { "indicator": "http://117.209.88.134:55375/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-30 10:32:08 UTC", "last_seen": "2026-03-30 10:32:08 UTC", "sightings": 1 }, { "indicator": "http://42.5.233.192:37282/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 10:31:25 UTC", "last_seen": "2026-03-30 10:31:25 UTC", "sightings": 1 }, { "indicator": "https://quordra3os.stormglade.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 10:26:09 UTC", "last_seen": "2026-03-30 10:26:09 UTC", "sightings": 1 }, { "indicator": "http://113.238.249.145:36319/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 10:22:13 UTC", "last_seen": "2026-03-30 10:22:13 UTC", "sightings": 1 }, { "indicator": "https://crimsonpublish.stormglade.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 10:19:08 UTC", "last_seen": "2026-03-30 10:19:08 UTC", "sightings": 1 }, { "indicator": "http://59.182.93.183:58434/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-30 10:17:21 UTC", "last_seen": "2026-03-30 10:17:21 UTC", "sightings": 1 }, { "indicator": "http://101.109.126.23:42718/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-30 10:14:18 UTC", "last_seen": "2026-03-30 10:14:18 UTC", "sightings": 1 }, { "indicator": "https://nortideis.foxrunet.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 10:13:08 UTC", "last_seen": "2026-03-30 10:13:08 UTC", "sightings": 1 }, { "indicator": "http://27.215.212.47:44383/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 10:10:25 UTC", "last_seen": "2026-03-30 10:10:25 UTC", "sightings": 1 }, { "indicator": "http://117.209.88.134:55375/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-30 10:07:10 UTC", "last_seen": "2026-03-30 10:07:10 UTC", "sightings": 1 }, { "indicator": "https://echo-draf.foxrunet.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 10:07:09 UTC", "last_seen": "2026-03-30 10:07:09 UTC", "sightings": 1 }, { "indicator": "http://39.90.149.110:53432/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 10:01:26 UTC", "last_seen": "2026-03-30 10:01:26 UTC", "sightings": 1 }, { "indicator": "https://refineterminal.foxrunet.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 09:59:09 UTC", "last_seen": "2026-03-30 09:59:09 UTC", "sightings": 1 }, { "indicator": "http://113.238.249.145:36319/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 09:57:21 UTC", "last_seen": "2026-03-30 09:57:21 UTC", "sightings": 1 }, { "indicator": "https://urbanvoya.foxrunet.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 09:53:10 UTC", "last_seen": "2026-03-30 09:53:10 UTC", "sightings": 1 }, { "indicator": "http://59.93.72.156:54607/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 09:52:30 UTC", "last_seen": "2026-03-30 09:52:30 UTC", "sightings": 1 }, { "indicator": "http://27.215.212.47:44383/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 09:48:08 UTC", "last_seen": "2026-03-30 09:48:08 UTC", "sightings": 1 }, { "indicator": "https://lwvkfb.foxrunet.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 09:47:09 UTC", "last_seen": "2026-03-30 09:47:09 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/skullzoinks/RealDesk/refs/heads/main/lib/features/xbox/Real_Desk_nostrum.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-30 09:43:07 UTC", "last_seen": "2026-03-30 09:43:07 UTC", "sightings": 1 }, { "indicator": "https://github.com/skullzoinks/RealDesk/raw/refs/heads/main/lib/features/xbox/Real_Desk_nostrum.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-30 09:43:07 UTC", "last_seen": "2026-03-30 09:43:07 UTC", "sightings": 1 }, { "indicator": "https://github.com/Lordjos16/PixelBuddy/raw/refs/heads/main/PixelBuddy/Buddy_Pixel_v2.9.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-30 09:41:09 UTC", "last_seen": "2026-03-30 09:41:09 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Lordjos16/PixelBuddy/refs/heads/main/PixelBuddy/Buddy_Pixel_v2.9.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-30 09:41:09 UTC", "last_seen": "2026-03-30 09:41:09 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/aybibilalkali/nokia-book/refs/heads/master/03/minik/examples/book-nokia-2.4.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-30 09:41:09 UTC", "last_seen": "2026-03-30 09:41:09 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Inevitable-Code101/game-hub/refs/heads/main/game-site-fire/src/components/UpdateInfo/hub_game_chloropalladates.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-30 09:41:09 UTC", "last_seen": "2026-03-30 09:41:09 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Dannyjune79/TangNano20K-Pooyan/refs/heads/main/TN20K-Pooyan/schematics/Pooyan-Tang-Nano-v3.7.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-30 09:41:09 UTC", "last_seen": "2026-03-30 09:41:09 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/aybibilalkali/blooket/refs/heads/master/thrasonic/Software_perfoliation.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-30 09:41:09 UTC", "last_seen": "2026-03-30 09:41:09 UTC", "sightings": 1 }, { "indicator": "https://github.com/Inevitable-Code101/game-hub/raw/refs/heads/main/game-site-fire/src/components/UpdateInfo/hub_game_chloropalladates.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-30 09:41:09 UTC", "last_seen": "2026-03-30 09:41:09 UTC", "sightings": 1 }, { "indicator": "https://github.com/aybibilalkali/nokia-book/raw/refs/heads/master/03/minik/examples/book-nokia-2.4.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-30 09:41:09 UTC", "last_seen": "2026-03-30 09:41:09 UTC", "sightings": 1 }, { "indicator": "https://github.com/Dannyjune79/TangNano20K-Pooyan/raw/refs/heads/main/TN20K-Pooyan/schematics/Pooyan-Tang-Nano-v3.7.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-30 09:41:09 UTC", "last_seen": "2026-03-30 09:41:09 UTC", "sightings": 1 }, { "indicator": "https://github.com/aybibilalkali/blooket/raw/refs/heads/master/thrasonic/Software_perfoliation.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-30 09:41:09 UTC", "last_seen": "2026-03-30 09:41:09 UTC", "sightings": 1 }, { "indicator": "https://subtlsegme.foxrunet.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 09:39:07 UTC", "last_seen": "2026-03-30 09:39:07 UTC", "sightings": 1 }, { "indicator": "https://11kzvq.oakwhisper.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 09:33:07 UTC", "last_seen": "2026-03-30 09:33:07 UTC", "sightings": 1 }, { "indicator": "http://117.215.63.228:58118/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-30 09:32:08 UTC", "last_seen": "2026-03-30 09:32:08 UTC", "sightings": 1 }, { "indicator": "https://wpx3375n.oakwhisper.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 09:27:10 UTC", "last_seen": "2026-03-30 09:27:10 UTC", "sightings": 1 }, { "indicator": "http://27.37.78.58:40510/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 09:24:29 UTC", "last_seen": "2026-03-30 09:24:29 UTC", "sightings": 1 }, { "indicator": "https://riverrefine.oakwhisper.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 09:19:09 UTC", "last_seen": "2026-03-30 09:19:09 UTC", "sightings": 1 }, { "indicator": "https://hyper-4uth.oakwhisper.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 09:13:09 UTC", "last_seen": "2026-03-30 09:13:09 UTC", "sightings": 1 }, { "indicator": "http://123.8.9.140:39071/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-30 09:07:08 UTC", "last_seen": "2026-03-30 09:07:08 UTC", "sightings": 1 }, { "indicator": "https://filteglob.oakwhisper.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 09:07:08 UTC", "last_seen": "2026-03-30 09:07:08 UTC", "sightings": 1 }, { "indicator": "http://202.1.26.13:58399/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-30 09:02:08 UTC", "last_seen": "2026-03-30 09:02:08 UTC", "sightings": 1 }, { "indicator": "https://runwaypublic.oakwhisper.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 08:59:08 UTC", "last_seen": "2026-03-30 08:59:08 UTC", "sightings": 1 }, { "indicator": "https://vmcs.br1ghtmere.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 08:53:09 UTC", "last_seen": "2026-03-30 08:53:09 UTC", "sightings": 1 }, { "indicator": "https://tal-venal.br1ghtmere.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 08:46:08 UTC", "last_seen": "2026-03-30 08:46:08 UTC", "sightings": 1 }, { "indicator": "http://110.38.199.22:59415/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 08:45:10 UTC", "last_seen": "2026-03-30 08:45:10 UTC", "sightings": 1 }, { "indicator": "http://123.130.205.114:46464/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 08:43:16 UTC", "last_seen": "2026-03-30 08:43:16 UTC", "sightings": 1 }, { "indicator": "http://123.8.9.140:39071/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-30 08:42:10 UTC", "last_seen": "2026-03-30 08:42:10 UTC", "sightings": 1 }, { "indicator": "https://wgyinknm.br1ghtmere.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 08:40:11 UTC", "last_seen": "2026-03-30 08:40:11 UTC", "sightings": 1 }, { "indicator": "http://103.44.136.227:44665/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-30 08:37:39 UTC", "last_seen": "2026-03-30 08:37:39 UTC", "sightings": 1 }, { "indicator": "http://46.163.134.250:57652/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 08:34:19 UTC", "last_seen": "2026-03-30 08:34:19 UTC", "sightings": 1 }, { "indicator": "https://screennotify.br1ghtmere.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 08:33:11 UTC", "last_seen": "2026-03-30 08:33:11 UTC", "sightings": 1 }, { "indicator": "http://85.12.204.206:58288/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-30 08:32:07 UTC", "last_seen": "2026-03-30 08:32:07 UTC", "sightings": 1 }, { "indicator": "https://cell-plate.br1ghtmere.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 08:26:09 UTC", "last_seen": "2026-03-30 08:26:09 UTC", "sightings": 1 }, { "indicator": "http://85.239.147.6/files/7411337060/M94scZj.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-30 08:22:05 UTC", "last_seen": "2026-03-30 08:22:05 UTC", "sightings": 1 }, { "indicator": "https://n73pw.br1ghtmere.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 08:20:11 UTC", "last_seen": "2026-03-30 08:20:11 UTC", "sightings": 1 }, { "indicator": "https://aftwizk.starforge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 08:13:08 UTC", "last_seen": "2026-03-30 08:13:08 UTC", "sightings": 1 }, { "indicator": "http://117.209.19.85:51445/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 08:12:17 UTC", "last_seen": "2026-03-30 08:12:17 UTC", "sightings": 1 }, { "indicator": "http://46.163.134.250:57652/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 08:11:06 UTC", "last_seen": "2026-03-30 08:11:06 UTC", "sightings": 1 }, { "indicator": "https://zencrestal2.starforge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 08:06:08 UTC", "last_seen": "2026-03-30 08:06:08 UTC", "sightings": 1 }, { "indicator": "http://42.230.42.4:37422/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 08:05:19 UTC", "last_seen": "2026-03-30 08:05:19 UTC", "sightings": 1 }, { "indicator": "http://42.228.34.149:43406/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 08:04:18 UTC", "last_seen": "2026-03-30 08:04:18 UTC", "sightings": 1 }, { "indicator": "https://icegold.starforge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 08:00:09 UTC", "last_seen": "2026-03-30 08:00:09 UTC", "sightings": 1 }, { "indicator": "http://117.209.9.20:45431/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 07:56:15 UTC", "last_seen": "2026-03-30 07:56:15 UTC", "sightings": 1 }, { "indicator": "https://80tlyi.starforge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 07:54:07 UTC", "last_seen": "2026-03-30 07:54:07 UTC", "sightings": 1 }, { "indicator": "http://61.1.238.186:42774/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 07:52:22 UTC", "last_seen": "2026-03-30 07:52:22 UTC", "sightings": 1 }, { "indicator": "http://117.209.19.85:51445/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 07:51:23 UTC", "last_seen": "2026-03-30 07:51:23 UTC", "sightings": 1 }, { "indicator": "https://vvave3-gate.starforge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 07:47:08 UTC", "last_seen": "2026-03-30 07:47:08 UTC", "sightings": 1 }, { "indicator": "http://110.38.199.22:59415/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 07:45:14 UTC", "last_seen": "2026-03-30 07:45:14 UTC", "sightings": 1 }, { "indicator": "http://110.37.123.237:36170/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 07:41:10 UTC", "last_seen": "2026-03-30 07:41:10 UTC", "sightings": 1 }, { "indicator": "https://lumvale8is.starforge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 07:40:10 UTC", "last_seen": "2026-03-30 07:40:10 UTC", "sightings": 1 }, { "indicator": "http://42.228.34.149:43406/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 07:39:23 UTC", "last_seen": "2026-03-30 07:39:23 UTC", "sightings": 1 }, { "indicator": "http://222.246.43.2:37369/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-30 07:38:21 UTC", "last_seen": "2026-03-30 07:38:21 UTC", "sightings": 1 }, { "indicator": "https://resource-api.infrastructurehub.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 07:34:07 UTC", "last_seen": "2026-03-30 07:34:07 UTC", "sightings": 1 }, { "indicator": "http://59.96.140.17:33548/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 07:28:10 UTC", "last_seen": "2026-03-30 07:28:10 UTC", "sightings": 1 }, { "indicator": "https://power-plant.infrastructurehub.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 07:27:10 UTC", "last_seen": "2026-03-30 07:27:10 UTC", "sightings": 1 }, { "indicator": "http://27.215.80.14:57739/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-30 07:22:09 UTC", "last_seen": "2026-03-30 07:22:09 UTC", "sightings": 1 }, { "indicator": "http://222.246.43.2:37369/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-30 07:19:19 UTC", "last_seen": "2026-03-30 07:19:19 UTC", "sightings": 1 }, { "indicator": "https://asset-track.infrastructurehub.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 07:19:08 UTC", "last_seen": "2026-03-30 07:19:08 UTC", "sightings": 1 }, { "indicator": "http://147.45.60.206/arm4k", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai", "ua-wget" ], "first_seen": "2026-03-30 07:18:08 UTC", "last_seen": "2026-03-30 07:18:08 UTC", "sightings": 1 }, { "indicator": "http://192.227.183.143/ISIS.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "gafgyt" ], "first_seen": "2026-03-30 07:18:08 UTC", "last_seen": "2026-03-30 07:18:08 UTC", "sightings": 1 }, { "indicator": "http://117.212.52.53:59977/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 07:17:37 UTC", "last_seen": "2026-03-30 07:17:37 UTC", "sightings": 1 }, { "indicator": "http://cn.bossjy.cc.cd/bot.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-30 07:17:15 UTC", "last_seen": "2026-03-30 07:17:15 UTC", "sightings": 1 }, { "indicator": "http://142.248.80.144/lemperluvkurayami/kurayami.x86_64", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-30 07:17:12 UTC", "last_seen": "2026-03-30 07:17:12 UTC", "sightings": 1 }, { "indicator": "http://142.248.80.144/lemperluvkurayami/kurayami.m68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-30 07:17:12 UTC", "last_seen": "2026-03-30 07:17:12 UTC", "sightings": 1 }, { "indicator": "http://142.248.80.144/lemperluvkurayami/kurayami.ppc", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-30 07:17:12 UTC", "last_seen": "2026-03-30 07:17:12 UTC", "sightings": 1 }, { "indicator": "http://142.248.80.144/lemperluvkurayami/kurayami.arm64", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-30 07:17:12 UTC", "last_seen": "2026-03-30 07:17:12 UTC", "sightings": 1 }, { "indicator": "http://142.248.80.144/lemperluvkurayami/kurayami.x86", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-30 07:17:12 UTC", "last_seen": "2026-03-30 07:17:12 UTC", "sightings": 1 }, { "indicator": "http://142.248.80.144/lemperluvkurayami/kurayami.arm", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-30 07:17:12 UTC", "last_seen": "2026-03-30 07:17:12 UTC", "sightings": 1 }, { "indicator": "http://142.248.80.144/lol.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-30 07:17:12 UTC", "last_seen": "2026-03-30 07:17:12 UTC", "sightings": 1 }, { "indicator": "http://83.142.209.47/x86_64", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-30 07:17:12 UTC", "last_seen": "2026-03-30 07:17:12 UTC", "sightings": 1 }, { "indicator": "http://194.163.151.12/all.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-30 07:17:11 UTC", "last_seen": "2026-03-30 07:17:11 UTC", "sightings": 1 }, { "indicator": "http://142.248.80.144/lemperluvkurayami/kurayami.arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-30 07:17:11 UTC", "last_seen": "2026-03-30 07:17:11 UTC", "sightings": 1 }, { "indicator": "http://142.248.80.144/lemperluvkurayami/kurayami.arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-30 07:17:11 UTC", "last_seen": "2026-03-30 07:17:11 UTC", "sightings": 1 }, { "indicator": "http://142.248.80.144/lemperluvkurayami/kurayami.i686", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-30 07:17:11 UTC", "last_seen": "2026-03-30 07:17:11 UTC", "sightings": 1 }, { "indicator": "http://142.248.80.144/lemperluvkurayami/kurayami.arc", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-30 07:17:11 UTC", "last_seen": "2026-03-30 07:17:11 UTC", "sightings": 1 }, { "indicator": "http://142.248.80.144/lemperluvkurayami/kurayami.mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-30 07:17:11 UTC", "last_seen": "2026-03-30 07:17:11 UTC", "sightings": 1 }, { "indicator": "http://142.248.80.144/lemperluvkurayami/kurayami.arm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-30 07:17:11 UTC", "last_seen": "2026-03-30 07:17:11 UTC", "sightings": 1 }, { "indicator": "http://142.248.80.144/lemperluvkurayami/kurayami.sh4", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-30 07:17:11 UTC", "last_seen": "2026-03-30 07:17:11 UTC", "sightings": 1 }, { "indicator": "http://142.248.80.144/lemperluvkurayami/kurayami.mpsl", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-30 07:17:11 UTC", "last_seen": "2026-03-30 07:17:11 UTC", "sightings": 1 }, { "indicator": "http://121.127.34.138/hiddenbin/boatnet.i468", "indicator_type": "url", "source": "URLhaus", "tags": [ "ua-wget" ], "first_seen": "2026-03-30 07:16:21 UTC", "last_seen": "2026-03-30 07:16:21 UTC", "sightings": 1 }, { "indicator": "http://110.37.123.237:36170/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 07:16:21 UTC", "last_seen": "2026-03-30 07:16:21 UTC", "sightings": 1 }, { "indicator": "http://87.120.191.32/nuclear.sparc", "indicator_type": "url", "source": "URLhaus", "tags": [ "ua-wget" ], "first_seen": "2026-03-30 07:16:20 UTC", "last_seen": "2026-03-30 07:16:20 UTC", "sightings": 1 }, { "indicator": "http://87.120.191.32/nuclear.i586", "indicator_type": "url", "source": "URLhaus", "tags": [ "ua-wget" ], "first_seen": "2026-03-30 07:16:20 UTC", "last_seen": "2026-03-30 07:16:20 UTC", "sightings": 1 }, { "indicator": "http://165.22.252.236/windyloveyou/windy.i468", "indicator_type": "url", "source": "URLhaus", "tags": [ "ua-wget" ], "first_seen": "2026-03-30 07:16:20 UTC", "last_seen": "2026-03-30 07:16:20 UTC", "sightings": 1 }, { "indicator": "http://121.127.34.138/hiddenbin/boatnet.x86_64", "indicator_type": "url", "source": "URLhaus", "tags": [ "ua-wget" ], "first_seen": "2026-03-30 07:16:20 UTC", "last_seen": "2026-03-30 07:16:20 UTC", "sightings": 1 }, { "indicator": "http://121.127.34.138/hiddenbin/boatnet.i686", "indicator_type": "url", "source": "URLhaus", "tags": [ "ua-wget" ], "first_seen": "2026-03-30 07:16:20 UTC", "last_seen": "2026-03-30 07:16:20 UTC", "sightings": 1 }, { "indicator": "http://147.45.60.206/arm7k", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai", "ua-wget" ], "first_seen": "2026-03-30 07:16:08 UTC", "last_seen": "2026-03-30 07:16:08 UTC", "sightings": 1 }, { "indicator": "http://147.45.60.206/mpslk", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai", "ua-wget" ], "first_seen": "2026-03-30 07:16:08 UTC", "last_seen": "2026-03-30 07:16:08 UTC", "sightings": 1 }, { "indicator": "http://147.45.60.206/mipsk", "indicator_type": "url", "source": "URLhaus", "tags": [ "gafgyt", "ua-wget" ], "first_seen": "2026-03-30 07:16:08 UTC", "last_seen": "2026-03-30 07:16:08 UTC", "sightings": 1 }, { "indicator": "http://147.45.60.206/arm5k", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai", "ua-wget" ], "first_seen": "2026-03-30 07:16:08 UTC", "last_seen": "2026-03-30 07:16:08 UTC", "sightings": 1 }, { "indicator": "http://45.139.104.122/arc", "indicator_type": "url", "source": "URLhaus", "tags": [ "ua-wget" ], "first_seen": "2026-03-30 07:16:08 UTC", "last_seen": "2026-03-30 07:16:08 UTC", "sightings": 1 }, { "indicator": "http://194.163.151.12/titanjr.", "indicator_type": "url", "source": "URLhaus", "tags": [ "ua-wget" ], "first_seen": "2026-03-30 07:16:07 UTC", "last_seen": "2026-03-30 07:16:07 UTC", "sightings": 1 }, { "indicator": "http://142.248.80.144/lemperluvkurayami/kurayami.i468", "indicator_type": "url", "source": "URLhaus", "tags": [ "ua-wget" ], "first_seen": "2026-03-30 07:16:07 UTC", "last_seen": "2026-03-30 07:16:07 UTC", "sightings": 1 }, { "indicator": "http://142.248.80.144/lemperluvkurayami/kurayami.spc", "indicator_type": "url", "source": "URLhaus", "tags": [ "ua-wget" ], "first_seen": "2026-03-30 07:16:07 UTC", "last_seen": "2026-03-30 07:16:07 UTC", "sightings": 1 }, { "indicator": "http://87.120.191.32/nuclear.mipsel", "indicator_type": "url", "source": "URLhaus", "tags": [ "ua-wget" ], "first_seen": "2026-03-30 07:16:06 UTC", "last_seen": "2026-03-30 07:16:06 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.81/hiddenbin/boatnet.arc", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai", "ua-wget" ], "first_seen": "2026-03-30 07:16:05 UTC", "last_seen": "2026-03-30 07:16:05 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.81/huhu/titanjr.", "indicator_type": "url", "source": "URLhaus", "tags": [ "ua-wget" ], "first_seen": "2026-03-30 07:16:05 UTC", "last_seen": "2026-03-30 07:16:05 UTC", "sightings": 1 }, { "indicator": "http://143.20.185.225/dl.php", "indicator_type": "url", "source": "URLhaus", "tags": [ "ua-wget" ], "first_seen": "2026-03-30 07:16:05 UTC", "last_seen": "2026-03-30 07:16:05 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.81/hiddenbin/boatnet.i468", "indicator_type": "url", "source": "URLhaus", "tags": [ "ua-wget" ], "first_seen": "2026-03-30 07:16:05 UTC", "last_seen": "2026-03-30 07:16:05 UTC", "sightings": 1 }, { "indicator": "http://38.83.138.59:25884/nz.i468", "indicator_type": "url", "source": "URLhaus", "tags": [ "ua-wget" ], "first_seen": "2026-03-30 07:16:05 UTC", "last_seen": "2026-03-30 07:16:05 UTC", "sightings": 1 }, { "indicator": "https://jieqaingdaolu.com/tc/FVDEHqlqwcSnwX33.bin", "indicator_type": "url", "source": "URLhaus", "tags": [ "encrypted", "GuLoader", "rat", "RemcosRAT" ], "first_seen": "2026-03-30 07:14:21 UTC", "last_seen": "2026-03-30 07:14:21 UTC", "sightings": 1 }, { "indicator": "https://jieqaingdaolu.com/tc.php", "indicator_type": "url", "source": "URLhaus", "tags": [ "ascii", "Encoded", "GuLoader", "rat", "RemcosRAT" ], "first_seen": "2026-03-30 07:14:07 UTC", "last_seen": "2026-03-30 07:14:07 UTC", "sightings": 1 }, { "indicator": "https://base-build.infrastructurehub.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 07:12:08 UTC", "last_seen": "2026-03-30 07:12:08 UTC", "sightings": 1 }, { "indicator": "http://27.215.80.14:57739/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-30 07:12:08 UTC", "last_seen": "2026-03-30 07:12:08 UTC", "sightings": 1 }, { "indicator": "http://222.127.76.40:50184/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-30 07:09:11 UTC", "last_seen": "2026-03-30 07:09:11 UTC", "sightings": 1 }, { "indicator": "http://59.96.140.17:33548/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 07:09:10 UTC", "last_seen": "2026-03-30 07:09:10 UTC", "sightings": 1 }, { "indicator": "http://85.140.44.96:38108/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-30 07:07:07 UTC", "last_seen": "2026-03-30 07:07:07 UTC", "sightings": 1 }, { "indicator": "http://125.44.43.117:52605/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-30 07:06:07 UTC", "last_seen": "2026-03-30 07:06:07 UTC", "sightings": 1 }, { "indicator": "http://124.129.179.12:35585/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-30 07:06:07 UTC", "last_seen": "2026-03-30 07:06:07 UTC", "sightings": 1 }, { "indicator": "http://27.37.76.184:53155/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-30 07:06:07 UTC", "last_seen": "2026-03-30 07:06:07 UTC", "sightings": 1 }, { "indicator": "http://59.183.140.157:55888/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-30 07:05:12 UTC", "last_seen": "2026-03-30 07:05:12 UTC", "sightings": 1 }, { "indicator": "http://124.129.179.12:35585/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-30 07:05:11 UTC", "last_seen": "2026-03-30 07:05:11 UTC", "sightings": 1 }, { "indicator": "http://42.6.54.107:57753/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-30 07:05:10 UTC", "last_seen": "2026-03-30 07:05:10 UTC", "sightings": 1 }, { "indicator": "http://114.233.77.23:52328/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-30 07:05:10 UTC", "last_seen": "2026-03-30 07:05:10 UTC", "sightings": 1 }, { "indicator": "http://212.39.79.233:1998/.i", "indicator_type": "url", "source": "URLhaus", "tags": [ "hajime" ], "first_seen": "2026-03-30 07:05:09 UTC", "last_seen": "2026-03-30 07:05:09 UTC", "sightings": 1 }, { "indicator": "http://123.188.217.174:36511/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-30 07:04:22 UTC", "last_seen": "2026-03-30 07:04:22 UTC", "sightings": 1 }, { "indicator": "http://149.3.101.219:55900/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-30 07:04:22 UTC", "last_seen": "2026-03-30 07:04:22 UTC", "sightings": 1 }, { "indicator": "https://solid-state.infrastructurehub.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 07:04:12 UTC", "last_seen": "2026-03-30 07:04:12 UTC", "sightings": 1 }, { "indicator": "http://110.37.72.176:53178/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-30 07:04:10 UTC", "last_seen": "2026-03-30 07:04:10 UTC", "sightings": 1 }, { "indicator": "http://42.6.54.107:57753/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-30 07:04:10 UTC", "last_seen": "2026-03-30 07:04:10 UTC", "sightings": 1 }, { "indicator": "http://113.239.213.228:59874/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-30 07:04:10 UTC", "last_seen": "2026-03-30 07:04:10 UTC", "sightings": 1 }, { "indicator": "http://85.166.152.13:39662/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-30 07:04:10 UTC", "last_seen": "2026-03-30 07:04:10 UTC", "sightings": 1 }, { "indicator": "http://182.126.80.129:42972/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-30 07:04:10 UTC", "last_seen": "2026-03-30 07:04:10 UTC", "sightings": 1 }, { "indicator": "http://114.233.77.23:52328/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-30 07:04:10 UTC", "last_seen": "2026-03-30 07:04:10 UTC", "sightings": 1 }, { "indicator": "http://182.126.80.129:42972/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-30 07:04:10 UTC", "last_seen": "2026-03-30 07:04:10 UTC", "sightings": 1 }, { "indicator": "http://90.224.208.190:45821/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-30 07:04:08 UTC", "last_seen": "2026-03-30 07:04:08 UTC", "sightings": 1 }, { "indicator": "https://heavy-duty.infrastructurehub.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 06:57:10 UTC", "last_seen": "2026-03-30 06:57:10 UTC", "sightings": 1 }, { "indicator": "http://117.209.9.20:45431/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 06:50:24 UTC", "last_seen": "2026-03-30 06:50:24 UTC", "sightings": 1 }, { "indicator": "http://42.54.200.69:58778/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 06:50:19 UTC", "last_seen": "2026-03-30 06:50:19 UTC", "sightings": 1 }, { "indicator": "https://form-builder.municipalmatrix.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 06:49:11 UTC", "last_seen": "2026-03-30 06:49:11 UTC", "sightings": 1 }, { "indicator": "http://24.44.175.24:32910/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-30 06:47:07 UTC", "last_seen": "2026-03-30 06:47:07 UTC", "sightings": 1 }, { "indicator": "http://110.138.135.27:45248/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-30 06:42:28 UTC", "last_seen": "2026-03-30 06:42:28 UTC", "sightings": 1 }, { "indicator": "http://24.44.175.24:32910/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-30 06:42:10 UTC", "last_seen": "2026-03-30 06:42:10 UTC", "sightings": 1 }, { "indicator": "https://code-index.municipalmatrix.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 06:41:08 UTC", "last_seen": "2026-03-30 06:41:08 UTC", "sightings": 1 }, { "indicator": "http://125.44.43.117:52605/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 06:40:13 UTC", "last_seen": "2026-03-30 06:40:13 UTC", "sightings": 1 }, { "indicator": "http://106.58.126.176:49667/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-30 06:38:23 UTC", "last_seen": "2026-03-30 06:38:23 UTC", "sightings": 1 }, { "indicator": "https://auth-trust.municipalmatrix.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 06:33:07 UTC", "last_seen": "2026-03-30 06:33:07 UTC", "sightings": 1 }, { "indicator": "http://125.47.35.45:48777/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 06:31:20 UTC", "last_seen": "2026-03-30 06:31:20 UTC", "sightings": 1 }, { "indicator": "http://42.5.79.95:55183/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 06:29:20 UTC", "last_seen": "2026-03-30 06:29:20 UTC", "sightings": 1 }, { "indicator": "http://119.179.252.70:54627/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 06:27:25 UTC", "last_seen": "2026-03-30 06:27:25 UTC", "sightings": 1 }, { "indicator": "http://42.224.170.125:44892/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 06:27:25 UTC", "last_seen": "2026-03-30 06:27:25 UTC", "sightings": 1 }, { "indicator": "http://45.153.34.209:5000/storage/6f675d51cb094e0f.enc", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-30 06:27:07 UTC", "last_seen": "2026-03-30 06:27:07 UTC", "sightings": 1 }, { "indicator": "http://45.153.34.209:5000/storage/a068699010734e6d.jar", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-30 06:27:06 UTC", "last_seen": "2026-03-30 06:27:06 UTC", "sightings": 1 }, { "indicator": "http://45.153.34.209:5000/storage/06d00e3f266343c0.jar", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-30 06:27:06 UTC", "last_seen": "2026-03-30 06:27:06 UTC", "sightings": 1 }, { "indicator": "http://45.153.34.209:5000/storage/3d98f65dbb44491e.jar", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-30 06:27:06 UTC", "last_seen": "2026-03-30 06:27:06 UTC", "sightings": 1 }, { "indicator": "http://45.153.34.209:5000/storage/c68c92c7b9974302.enc", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-30 06:27:06 UTC", "last_seen": "2026-03-30 06:27:06 UTC", "sightings": 1 }, { "indicator": "https://citizen-dev.municipalmatrix.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 06:26:08 UTC", "last_seen": "2026-03-30 06:26:08 UTC", "sightings": 1 }, { "indicator": "http://42.224.170.125:44892/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 06:25:24 UTC", "last_seen": "2026-03-30 06:25:24 UTC", "sightings": 1 }, { "indicator": "http://206.189.22.92/windyloveyou/windy.x86_64", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-30 06:22:22 UTC", "last_seen": "2026-03-30 06:22:22 UTC", "sightings": 1 }, { "indicator": "http://206.189.22.92/windyloveyou/windy.i686", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-30 06:22:22 UTC", "last_seen": "2026-03-30 06:22:22 UTC", "sightings": 1 }, { "indicator": "http://206.189.22.92/windyloveyou/windy.arm7", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-30 06:22:22 UTC", "last_seen": "2026-03-30 06:22:22 UTC", "sightings": 1 }, { "indicator": "http://206.189.22.92/windyloveyou/windy.arm6", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-30 06:22:22 UTC", "last_seen": "2026-03-30 06:22:22 UTC", "sightings": 1 }, { "indicator": "http://206.189.22.92/windyloveyou/windy.arm", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-30 06:22:22 UTC", "last_seen": "2026-03-30 06:22:22 UTC", "sightings": 1 }, { "indicator": "http://206.189.22.92/windyloveyou/windy.spc", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-30 06:22:22 UTC", "last_seen": "2026-03-30 06:22:22 UTC", "sightings": 1 }, { "indicator": "http://206.189.22.92/windyloveyou/windy.arm5", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-30 06:22:22 UTC", "last_seen": "2026-03-30 06:22:22 UTC", "sightings": 1 }, { "indicator": "http://206.189.22.92/windyloveyou/windy.ppc", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-30 06:22:22 UTC", "last_seen": "2026-03-30 06:22:22 UTC", "sightings": 1 }, { "indicator": "http://206.189.22.92/windyloveyou/windy.mpsl", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-30 06:22:22 UTC", "last_seen": "2026-03-30 06:22:22 UTC", "sightings": 1 }, { "indicator": "http://206.189.22.92/windyloveyou/windy.m68k", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-30 06:22:22 UTC", "last_seen": "2026-03-30 06:22:22 UTC", "sightings": 1 }, { "indicator": "http://206.189.22.92/windyloveyou/windy.sh4", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-30 06:22:22 UTC", "last_seen": "2026-03-30 06:22:22 UTC", "sightings": 1 }, { "indicator": "http://42.54.200.69:58778/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-30 06:22:10 UTC", "last_seen": "2026-03-30 06:22:10 UTC", "sightings": 1 }, { "indicator": "http://125.44.193.224:41136/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-30 06:22:09 UTC", "last_seen": "2026-03-30 06:22:09 UTC", "sightings": 1 }, { "indicator": "http://web-captcha.cc/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-30 06:22:08 UTC", "last_seen": "2026-03-30 06:22:08 UTC", "sightings": 1 }, { "indicator": "https://town-council.municipalmatrix.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 06:19:08 UTC", "last_seen": "2026-03-30 06:19:08 UTC", "sightings": 1 }, { "indicator": "https://public-serv.municipalmatrix.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 06:11:08 UTC", "last_seen": "2026-03-30 06:11:08 UTC", "sightings": 1 }, { "indicator": "http://125.47.35.45:48777/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 06:05:17 UTC", "last_seen": "2026-03-30 06:05:17 UTC", "sightings": 1 }, { "indicator": "https://reach-base.territoriallink.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 06:04:08 UTC", "last_seen": "2026-03-30 06:04:08 UTC", "sightings": 1 }, { "indicator": "http://106.58.126.176:49667/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-30 06:03:37 UTC", "last_seen": "2026-03-30 06:03:37 UTC", "sightings": 1 }, { "indicator": "http://42.4.107.157:38819/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 06:01:12 UTC", "last_seen": "2026-03-30 06:01:12 UTC", "sightings": 1 }, { "indicator": "http://69.173.182.43:48089/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-30 05:57:07 UTC", "last_seen": "2026-03-30 05:57:07 UTC", "sightings": 1 }, { "indicator": "http://45.232.75.59:52767/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-30 05:56:21 UTC", "last_seen": "2026-03-30 05:56:21 UTC", "sightings": 1 }, { "indicator": "https://map-anchor.territoriallink.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 05:56:11 UTC", "last_seen": "2026-03-30 05:56:11 UTC", "sightings": 1 }, { "indicator": "http://45.171.177.193:53471/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-30 05:50:16 UTC", "last_seen": "2026-03-30 05:50:16 UTC", "sightings": 1 }, { "indicator": "https://site-connect.territoriallink.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 05:48:09 UTC", "last_seen": "2026-03-30 05:48:09 UTC", "sightings": 1 }, { "indicator": "https://land-mark.territoriallink.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 05:41:09 UTC", "last_seen": "2026-03-30 05:41:09 UTC", "sightings": 1 }, { "indicator": "http://120.61.70.227:43301/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 05:39:18 UTC", "last_seen": "2026-03-30 05:39:18 UTC", "sightings": 1 }, { "indicator": "http://39.88.129.19:49537/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 05:34:18 UTC", "last_seen": "2026-03-30 05:34:18 UTC", "sightings": 1 }, { "indicator": "https://proxy-edge.territoriallink.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 05:32:10 UTC", "last_seen": "2026-03-30 05:32:10 UTC", "sightings": 1 }, { "indicator": "http://42.5.79.95:55183/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 05:31:23 UTC", "last_seen": "2026-03-30 05:31:23 UTC", "sightings": 1 }, { "indicator": "http://45.232.75.59:52767/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-30 05:29:08 UTC", "last_seen": "2026-03-30 05:29:08 UTC", "sightings": 1 }, { "indicator": "http://110.37.91.29:50718/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 05:25:19 UTC", "last_seen": "2026-03-30 05:25:19 UTC", "sightings": 1 }, { "indicator": "https://border-gate.territoriallink.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 05:25:11 UTC", "last_seen": "2026-03-30 05:25:11 UTC", "sightings": 1 }, { "indicator": "https://remote-log.regionaltelemetry.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 05:17:11 UTC", "last_seen": "2026-03-30 05:17:11 UTC", "sightings": 1 }, { "indicator": "http://37.76.132.161:40384/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 05:11:16 UTC", "last_seen": "2026-03-30 05:11:16 UTC", "sightings": 1 }, { "indicator": "http://37.76.132.161:40384/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 05:09:09 UTC", "last_seen": "2026-03-30 05:09:09 UTC", "sightings": 1 }, { "indicator": "https://wave-form.regionaltelemetry.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 05:09:07 UTC", "last_seen": "2026-03-30 05:09:07 UTC", "sightings": 1 }, { "indicator": "http://176.226.183.22:50289/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 05:08:09 UTC", "last_seen": "2026-03-30 05:08:09 UTC", "sightings": 1 }, { "indicator": "http://124.29.223.19:42623/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 05:07:18 UTC", "last_seen": "2026-03-30 05:07:18 UTC", "sightings": 1 }, { "indicator": "http://39.88.129.19:49537/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-30 05:07:06 UTC", "last_seen": "2026-03-30 05:07:06 UTC", "sightings": 1 }, { "indicator": "http://110.37.91.29:50718/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 05:05:11 UTC", "last_seen": "2026-03-30 05:05:11 UTC", "sightings": 1 }, { "indicator": "http://222.136.251.131:41707/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 05:04:29 UTC", "last_seen": "2026-03-30 05:04:29 UTC", "sightings": 1 }, { "indicator": "https://data-packet.regionaltelemetry.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 05:02:10 UTC", "last_seen": "2026-03-30 05:02:10 UTC", "sightings": 1 }, { "indicator": "http://27.216.167.20:58590/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 04:58:07 UTC", "last_seen": "2026-03-30 04:58:07 UTC", "sightings": 1 }, { "indicator": "https://signal-box.regionaltelemetry.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 04:55:09 UTC", "last_seen": "2026-03-30 04:55:09 UTC", "sightings": 1 }, { "indicator": "http://42.232.224.161:41242/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 04:50:19 UTC", "last_seen": "2026-03-30 04:50:19 UTC", "sightings": 1 }, { "indicator": "https://field-report.regionaltelemetry.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 04:46:07 UTC", "last_seen": "2026-03-30 04:46:07 UTC", "sightings": 1 }, { "indicator": "https://wide-telemetry.regionaltelemetry.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 04:38:09 UTC", "last_seen": "2026-03-30 04:38:09 UTC", "sightings": 1 }, { "indicator": "https://tunnel-sync.centralizedduct.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 04:32:12 UTC", "last_seen": "2026-03-30 04:32:12 UTC", "sightings": 1 }, { "indicator": "http://115.55.167.26:51704/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 04:24:26 UTC", "last_seen": "2026-03-30 04:24:26 UTC", "sightings": 1 }, { "indicator": "https://pressure-io.centralizedduct.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 04:24:12 UTC", "last_seen": "2026-03-30 04:24:12 UTC", "sightings": 1 }, { "indicator": "http://123.245.32.38:49439/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-30 04:17:07 UTC", "last_seen": "2026-03-30 04:17:07 UTC", "sightings": 1 }, { "indicator": "https://flow-guide.centralizedduct.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 04:16:08 UTC", "last_seen": "2026-03-30 04:16:08 UTC", "sightings": 1 }, { "indicator": "http://124.234.174.62:36200/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-30 04:08:25 UTC", "last_seen": "2026-03-30 04:08:25 UTC", "sightings": 1 }, { "indicator": "https://filter-proc.centralizedduct.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 04:08:07 UTC", "last_seen": "2026-03-30 04:08:07 UTC", "sightings": 1 }, { "indicator": "http://117.216.50.138:33657/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 04:01:12 UTC", "last_seen": "2026-03-30 04:01:12 UTC", "sightings": 1 }, { "indicator": "https://outlet-node.centralizedduct.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 04:00:11 UTC", "last_seen": "2026-03-30 04:00:11 UTC", "sightings": 1 }, { "indicator": "https://inlet-valve.centralizedduct.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 03:52:07 UTC", "last_seen": "2026-03-30 03:52:07 UTC", "sightings": 1 }, { "indicator": "http://110.37.107.203:59596/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 03:49:18 UTC", "last_seen": "2026-03-30 03:49:18 UTC", "sightings": 1 }, { "indicator": "http://115.55.167.26:51704/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 03:46:19 UTC", "last_seen": "2026-03-30 03:46:19 UTC", "sightings": 1 }, { "indicator": "https://node-carrier.linearbackbone.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 03:46:10 UTC", "last_seen": "2026-03-30 03:46:10 UTC", "sightings": 1 }, { "indicator": "http://39.87.239.190:47182/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 03:42:18 UTC", "last_seen": "2026-03-30 03:42:18 UTC", "sightings": 1 }, { "indicator": "http://110.37.95.117:46773/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 03:39:19 UTC", "last_seen": "2026-03-30 03:39:19 UTC", "sightings": 1 }, { "indicator": "https://main-frame.linearbackbone.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 03:38:13 UTC", "last_seen": "2026-03-30 03:38:13 UTC", "sightings": 1 }, { "indicator": "http://112.248.114.151:60712/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 03:36:22 UTC", "last_seen": "2026-03-30 03:36:22 UTC", "sightings": 1 }, { "indicator": "https://fiber-route.linearbackbone.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 03:30:11 UTC", "last_seen": "2026-03-30 03:30:11 UTC", "sightings": 1 }, { "indicator": "http://38.52.142.194:54949/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-30 03:28:22 UTC", "last_seen": "2026-03-30 03:28:22 UTC", "sightings": 1 }, { "indicator": "http://38.52.142.194:54949/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-30 03:27:23 UTC", "last_seen": "2026-03-30 03:27:23 UTC", "sightings": 1 }, { "indicator": "https://trunk-line.linearbackbone.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 03:23:08 UTC", "last_seen": "2026-03-30 03:23:08 UTC", "sightings": 1 }, { "indicator": "https://path-bridge.linearbackbone.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 03:19:07 UTC", "last_seen": "2026-03-30 03:19:07 UTC", "sightings": 1 }, { "indicator": "http://39.87.239.190:47182/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 03:17:18 UTC", "last_seen": "2026-03-30 03:17:18 UTC", "sightings": 1 }, { "indicator": "http://78.172.181.187:42299/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 03:13:19 UTC", "last_seen": "2026-03-30 03:13:19 UTC", "sightings": 1 }, { "indicator": "http://123.130.205.114:46464/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 03:11:34 UTC", "last_seen": "2026-03-30 03:11:34 UTC", "sightings": 1 }, { "indicator": "https://link-secure.linearbackbone.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 03:06:09 UTC", "last_seen": "2026-03-30 03:06:09 UTC", "sightings": 1 }, { "indicator": "http://78.172.181.187:42299/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 03:05:16 UTC", "last_seen": "2026-03-30 03:05:16 UTC", "sightings": 1 }, { "indicator": "http://61.53.90.238:58076/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 03:01:09 UTC", "last_seen": "2026-03-30 03:01:09 UTC", "sightings": 1 }, { "indicator": "https://task-logic.sectoralcontrol.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 02:59:06 UTC", "last_seen": "2026-03-30 02:59:06 UTC", "sightings": 1 }, { "indicator": "https://switch-gear.sectoralcontrol.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 02:51:07 UTC", "last_seen": "2026-03-30 02:51:07 UTC", "sightings": 1 }, { "indicator": "http://110.39.244.198:40172/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 02:48:11 UTC", "last_seen": "2026-03-30 02:48:11 UTC", "sightings": 1 }, { "indicator": "http://110.37.32.92:51410/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 02:47:08 UTC", "last_seen": "2026-03-30 02:47:08 UTC", "sightings": 1 }, { "indicator": "https://system-core.sectoralcontrol.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 02:44:07 UTC", "last_seen": "2026-03-30 02:44:07 UTC", "sightings": 1 }, { "indicator": "http://61.53.90.238:58076/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 02:43:10 UTC", "last_seen": "2026-03-30 02:43:10 UTC", "sightings": 1 }, { "indicator": "http://175.150.114.184:53561/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 02:40:18 UTC", "last_seen": "2026-03-30 02:40:18 UTC", "sightings": 1 }, { "indicator": "https://remote-desk.sectoralcontrol.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 02:36:08 UTC", "last_seen": "2026-03-30 02:36:08 UTC", "sightings": 1 }, { "indicator": "http://115.62.15.6:60177/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 02:35:18 UTC", "last_seen": "2026-03-30 02:35:18 UTC", "sightings": 1 }, { "indicator": "http://175.150.114.184:53561/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 02:34:34 UTC", "last_seen": "2026-03-30 02:34:34 UTC", "sightings": 1 }, { "indicator": "http://59.96.141.178:56935/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 02:34:20 UTC", "last_seen": "2026-03-30 02:34:20 UTC", "sightings": 1 }, { "indicator": "http://85.239.147.6/files/6560547276/Yzztzly.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-03-30 02:33:05 UTC", "last_seen": "2026-03-30 02:33:05 UTC", "sightings": 1 }, { "indicator": "http://115.55.235.145:45505/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-30 02:32:07 UTC", "last_seen": "2026-03-30 02:32:07 UTC", "sightings": 1 }, { "indicator": "http://182.121.204.206:53755/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 02:31:17 UTC", "last_seen": "2026-03-30 02:31:17 UTC", "sightings": 1 }, { "indicator": "https://unit-command.sectoralcontrol.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 02:30:08 UTC", "last_seen": "2026-03-30 02:30:08 UTC", "sightings": 1 }, { "indicator": "https://admin-panel.sectoralcontrol.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 02:24:11 UTC", "last_seen": "2026-03-30 02:24:11 UTC", "sightings": 1 }, { "indicator": "http://42.202.103.37:54151/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-30 02:23:21 UTC", "last_seen": "2026-03-30 02:23:21 UTC", "sightings": 1 }, { "indicator": "http://110.39.244.198:40172/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 02:20:19 UTC", "last_seen": "2026-03-30 02:20:19 UTC", "sightings": 1 }, { "indicator": "https://site-archive.districtbuffer.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 02:17:08 UTC", "last_seen": "2026-03-30 02:17:08 UTC", "sightings": 1 }, { "indicator": "http://115.55.235.145:45505/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-30 02:17:08 UTC", "last_seen": "2026-03-30 02:17:08 UTC", "sightings": 1 }, { "indicator": "http://115.62.15.6:60177/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 02:14:13 UTC", "last_seen": "2026-03-30 02:14:13 UTC", "sightings": 1 }, { "indicator": "https://load-buffer.districtbuffer.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 02:12:09 UTC", "last_seen": "2026-03-30 02:12:09 UTC", "sightings": 1 }, { "indicator": "http://182.121.204.206:53755/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 02:06:09 UTC", "last_seen": "2026-03-30 02:06:09 UTC", "sightings": 1 }, { "indicator": "https://relay-point.districtbuffer.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 02:06:06 UTC", "last_seen": "2026-03-30 02:06:06 UTC", "sightings": 1 }, { "indicator": "http://42.56.208.235:46771/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 02:01:11 UTC", "last_seen": "2026-03-30 02:01:11 UTC", "sightings": 1 }, { "indicator": "https://queue-manager.districtbuffer.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 02:01:11 UTC", "last_seen": "2026-03-30 02:01:11 UTC", "sightings": 1 }, { "indicator": "http://42.202.103.37:54151/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-30 01:59:17 UTC", "last_seen": "2026-03-30 01:59:17 UTC", "sightings": 1 }, { "indicator": "https://temp-storage.districtbuffer.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 01:55:09 UTC", "last_seen": "2026-03-30 01:55:09 UTC", "sightings": 1 }, { "indicator": "http://160.179.232.22:42545/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 01:50:21 UTC", "last_seen": "2026-03-30 01:50:21 UTC", "sightings": 1 }, { "indicator": "https://local-cache.districtbuffer.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 01:49:08 UTC", "last_seen": "2026-03-30 01:49:08 UTC", "sightings": 1 }, { "indicator": "http://117.219.150.64:48974/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 01:48:22 UTC", "last_seen": "2026-03-30 01:48:22 UTC", "sightings": 1 }, { "indicator": "https://topo-render.precisemapnode.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 01:45:09 UTC", "last_seen": "2026-03-30 01:45:09 UTC", "sightings": 1 }, { "indicator": "http://110.37.89.210:56994/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-30 01:43:20 UTC", "last_seen": "2026-03-30 01:43:20 UTC", "sightings": 1 }, { "indicator": "http://69.173.182.43:48089/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-30 01:42:14 UTC", "last_seen": "2026-03-30 01:42:14 UTC", "sightings": 1 }, { "indicator": "https://view-finder.precisemapnode.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 01:38:10 UTC", "last_seen": "2026-03-30 01:38:10 UTC", "sightings": 1 }, { "indicator": "http://125.41.229.32:59143/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-30 01:37:06 UTC", "last_seen": "2026-03-30 01:37:06 UTC", "sightings": 1 }, { "indicator": "https://scale-vector.precisemapnode.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 01:32:09 UTC", "last_seen": "2026-03-30 01:32:09 UTC", "sightings": 1 }, { "indicator": "https://layer-stack.precisemapnode.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 01:27:10 UTC", "last_seen": "2026-03-30 01:27:10 UTC", "sightings": 1 }, { "indicator": "https://point-atlas.precisemapnode.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 01:22:09 UTC", "last_seen": "2026-03-30 01:22:09 UTC", "sightings": 1 }, { "indicator": "http://117.219.150.64:48974/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 01:19:18 UTC", "last_seen": "2026-03-30 01:19:18 UTC", "sightings": 1 }, { "indicator": "http://115.63.144.234:56511/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-30 01:17:07 UTC", "last_seen": "2026-03-30 01:17:07 UTC", "sightings": 1 }, { "indicator": "http://182.124.236.110:47287/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 01:15:22 UTC", "last_seen": "2026-03-30 01:15:22 UTC", "sightings": 1 }, { "indicator": "http://27.37.227.112:43810/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 01:15:22 UTC", "last_seen": "2026-03-30 01:15:22 UTC", "sightings": 1 }, { "indicator": "https://coord-sync.precisemapnode.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 01:15:10 UTC", "last_seen": "2026-03-30 01:15:10 UTC", "sightings": 1 }, { "indicator": "http://110.37.89.210:56994/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-30 01:14:16 UTC", "last_seen": "2026-03-30 01:14:16 UTC", "sightings": 1 }, { "indicator": "http://110.37.55.92:35204/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-30 01:12:07 UTC", "last_seen": "2026-03-30 01:12:07 UTC", "sightings": 1 }, { "indicator": "https://flow-master.urbanflowmetric.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 01:10:09 UTC", "last_seen": "2026-03-30 01:10:09 UTC", "sightings": 1 }, { "indicator": "https://drift-control.urbanflowmetric.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 01:05:10 UTC", "last_seen": "2026-03-30 01:05:10 UTC", "sightings": 1 }, { "indicator": "http://222.137.72.243:47068/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 01:02:15 UTC", "last_seen": "2026-03-30 01:02:15 UTC", "sightings": 1 }, { "indicator": "https://pulse-check.urbanflowmetric.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 01:01:09 UTC", "last_seen": "2026-03-30 01:01:09 UTC", "sightings": 1 }, { "indicator": "http://182.124.236.110:47287/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 01:00:13 UTC", "last_seen": "2026-03-30 01:00:13 UTC", "sightings": 1 }, { "indicator": "http://123.9.101.142:41784/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 00:59:18 UTC", "last_seen": "2026-03-30 00:59:18 UTC", "sightings": 1 }, { "indicator": "https://surge-protect.urbanflowmetric.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 00:58:07 UTC", "last_seen": "2026-03-30 00:58:07 UTC", "sightings": 1 }, { "indicator": "http://117.209.20.195:48960/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-30 00:57:07 UTC", "last_seen": "2026-03-30 00:57:07 UTC", "sightings": 1 }, { "indicator": "https://stream-audit.urbanflowmetric.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 00:48:08 UTC", "last_seen": "2026-03-30 00:48:08 UTC", "sightings": 1 }, { "indicator": "http://27.37.109.177:36113/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 00:45:19 UTC", "last_seen": "2026-03-30 00:45:19 UTC", "sightings": 1 }, { "indicator": "http://123.9.101.142:41784/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 00:43:18 UTC", "last_seen": "2026-03-30 00:43:18 UTC", "sightings": 1 }, { "indicator": "https://traffic-api.urbanflowmetric.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 00:42:08 UTC", "last_seen": "2026-03-30 00:42:08 UTC", "sightings": 1 }, { "indicator": "http://125.41.229.32:59143/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-30 00:42:05 UTC", "last_seen": "2026-03-30 00:42:05 UTC", "sightings": 1 }, { "indicator": "http://27.37.109.177:36113/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 00:41:18 UTC", "last_seen": "2026-03-30 00:41:18 UTC", "sightings": 1 }, { "indicator": "https://urban-access.metropolitangrid.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 00:38:07 UTC", "last_seen": "2026-03-30 00:38:07 UTC", "sightings": 1 }, { "indicator": "http://117.209.20.195:48960/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-30 00:37:08 UTC", "last_seen": "2026-03-30 00:37:08 UTC", "sightings": 1 }, { "indicator": "https://zone-portal.metropolitangrid.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 00:31:09 UTC", "last_seen": "2026-03-30 00:31:09 UTC", "sightings": 1 }, { "indicator": "https://block-sensor.metropolitangrid.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 00:26:09 UTC", "last_seen": "2026-03-30 00:26:09 UTC", "sightings": 1 }, { "indicator": "http://38.83.138.59:25884/nz.arc", "indicator_type": "url", "source": "URLhaus", "tags": [ "arc", "elf", "mirai", "opendir", "ua-wget" ], "first_seen": "2026-03-30 00:25:23 UTC", "last_seen": "2026-03-30 00:25:23 UTC", "sightings": 1 }, { "indicator": "http://38.83.138.59:25884/nz.mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mips", "mirai", "opendir", "ua-wget" ], "first_seen": "2026-03-30 00:25:23 UTC", "last_seen": "2026-03-30 00:25:23 UTC", "sightings": 1 }, { "indicator": "http://38.83.138.59:25884/nz.x86", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "opendir", "ua-wget", "x86" ], "first_seen": "2026-03-30 00:25:23 UTC", "last_seen": "2026-03-30 00:25:23 UTC", "sightings": 1 }, { "indicator": "http://38.83.138.59:25884/nz.arm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "arm", "elf", "mirai", "opendir", "ua-wget" ], "first_seen": "2026-03-30 00:25:23 UTC", "last_seen": "2026-03-30 00:25:23 UTC", "sightings": 1 }, { "indicator": "http://38.83.138.59:25884/nz.arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "arm", "elf", "mirai", "opendir", "ua-wget" ], "first_seen": "2026-03-30 00:25:23 UTC", "last_seen": "2026-03-30 00:25:23 UTC", "sightings": 1 }, { "indicator": "http://38.83.138.59:25884/nz.ppc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "opendir", "PowerPC", "ua-wget" ], "first_seen": "2026-03-30 00:25:23 UTC", "last_seen": "2026-03-30 00:25:23 UTC", "sightings": 1 }, { "indicator": "http://38.83.138.59:25884/nz.sh4", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "opendir", "SuperH", "ua-wget" ], "first_seen": "2026-03-30 00:25:23 UTC", "last_seen": "2026-03-30 00:25:23 UTC", "sightings": 1 }, { "indicator": "http://38.83.138.59:25884/nz.arm", "indicator_type": "url", "source": "URLhaus", "tags": [ "arm", "elf", "mirai", "opendir", "ua-wget" ], "first_seen": "2026-03-30 00:25:23 UTC", "last_seen": "2026-03-30 00:25:23 UTC", "sightings": 1 }, { "indicator": "http://38.83.138.59:25884/nz.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai", "opendir", "sh", "ua-wget" ], "first_seen": "2026-03-30 00:25:23 UTC", "last_seen": "2026-03-30 00:25:23 UTC", "sightings": 1 }, { "indicator": "http://38.83.138.59:25884/nz.spc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "opendir", "sparc", "ua-wget" ], "first_seen": "2026-03-30 00:25:23 UTC", "last_seen": "2026-03-30 00:25:23 UTC", "sightings": 1 }, { "indicator": "http://38.83.138.59:25884/nz.x86_64", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "opendir", "ua-wget", "x86" ], "first_seen": "2026-03-30 00:25:23 UTC", "last_seen": "2026-03-30 00:25:23 UTC", "sightings": 1 }, { "indicator": "http://38.83.138.59:25884/nz.m68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "m68k", "mirai", "opendir", "ua-wget" ], "first_seen": "2026-03-30 00:25:23 UTC", "last_seen": "2026-03-30 00:25:23 UTC", "sightings": 1 }, { "indicator": "http://38.83.138.59:25884/nz.mpsl", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mips", "mirai", "opendir", "ua-wget" ], "first_seen": "2026-03-30 00:25:23 UTC", "last_seen": "2026-03-30 00:25:23 UTC", "sightings": 1 }, { "indicator": "http://38.83.138.59:25884/nz.arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "arm", "elf", "mirai", "opendir", "ua-wget" ], "first_seen": "2026-03-30 00:25:23 UTC", "last_seen": "2026-03-30 00:25:23 UTC", "sightings": 1 }, { "indicator": "http://38.83.138.59:25884/nz.i686", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "opendir", "ua-wget", "x86" ], "first_seen": "2026-03-30 00:25:23 UTC", "last_seen": "2026-03-30 00:25:23 UTC", "sightings": 1 }, { "indicator": "https://area-scanner.metropolitangrid.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 00:20:10 UTC", "last_seen": "2026-03-30 00:20:10 UTC", "sightings": 1 }, { "indicator": "https://street-logic.metropolitangrid.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 00:15:09 UTC", "last_seen": "2026-03-30 00:15:09 UTC", "sightings": 1 }, { "indicator": "http://110.37.49.105:37108/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 00:10:18 UTC", "last_seen": "2026-03-30 00:10:18 UTC", "sightings": 1 }, { "indicator": "https://city-monitor.metropolitangrid.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 00:10:09 UTC", "last_seen": "2026-03-30 00:10:09 UTC", "sightings": 1 }, { "indicator": "http://59.180.138.113:39468/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-30 00:09:27 UTC", "last_seen": "2026-03-30 00:09:27 UTC", "sightings": 1 }, { "indicator": "https://instant-msg.velocityterminal.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 00:05:10 UTC", "last_seen": "2026-03-30 00:05:10 UTC", "sightings": 1 }, { "indicator": "https://quick-step.velocityterminal.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-30 00:01:08 UTC", "last_seen": "2026-03-30 00:01:08 UTC", "sightings": 1 }, { "indicator": "http://110.37.49.105:37108/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 23:56:19 UTC", "last_seen": "2026-03-29 23:56:19 UTC", "sightings": 1 }, { "indicator": "https://shift-ctrl.velocityterminal.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 23:56:07 UTC", "last_seen": "2026-03-29 23:56:07 UTC", "sightings": 1 }, { "indicator": "https://boost-engine.velocityterminal.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 23:52:07 UTC", "last_seen": "2026-03-29 23:52:07 UTC", "sightings": 1 }, { "indicator": "http://182.116.119.124:41788/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 23:50:10 UTC", "last_seen": "2026-03-29 23:50:10 UTC", "sightings": 1 }, { "indicator": "https://rapid-fire.velocityterminal.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 23:46:07 UTC", "last_seen": "2026-03-29 23:46:07 UTC", "sightings": 1 }, { "indicator": "https://fast-track.velocityterminal.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 23:44:08 UTC", "last_seen": "2026-03-29 23:44:08 UTC", "sightings": 1 }, { "indicator": "https://codec-proxy.compressionlayer.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 23:33:07 UTC", "last_seen": "2026-03-29 23:33:07 UTC", "sightings": 1 }, { "indicator": "http://112.198.140.250:47540/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-29 23:32:11 UTC", "last_seen": "2026-03-29 23:32:11 UTC", "sightings": 1 }, { "indicator": "https://flat-buffer.compressionlayer.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 23:28:07 UTC", "last_seen": "2026-03-29 23:28:07 UTC", "sightings": 1 }, { "indicator": "http://182.116.119.124:41788/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 23:26:18 UTC", "last_seen": "2026-03-29 23:26:18 UTC", "sightings": 1 }, { "indicator": "http://110.37.34.154:53678/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 23:25:19 UTC", "last_seen": "2026-03-29 23:25:19 UTC", "sightings": 1 }, { "indicator": "https://shrink-node.compressionlayer.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 23:24:10 UTC", "last_seen": "2026-03-29 23:24:10 UTC", "sightings": 1 }, { "indicator": "https://zip-archive.compressionlayer.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 23:20:11 UTC", "last_seen": "2026-03-29 23:20:11 UTC", "sightings": 1 }, { "indicator": "http://119.156.133.244:45454/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 23:17:12 UTC", "last_seen": "2026-03-29 23:17:12 UTC", "sightings": 1 }, { "indicator": "https://dense-pack.compressionlayer.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 23:14:09 UTC", "last_seen": "2026-03-29 23:14:09 UTC", "sightings": 1 }, { "indicator": "https://survey-data.topographictrace.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 23:10:09 UTC", "last_seen": "2026-03-29 23:10:09 UTC", "sightings": 1 }, { "indicator": "https://contour-api.topographictrace.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 23:05:09 UTC", "last_seen": "2026-03-29 23:05:09 UTC", "sightings": 1 }, { "indicator": "http://110.37.95.41:47382/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 23:03:16 UTC", "last_seen": "2026-03-29 23:03:16 UTC", "sightings": 1 }, { "indicator": "http://87.121.79.97/p-p.c-.SNOOPY", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "gafgyt", "ua-wget" ], "first_seen": "2026-03-29 23:01:13 UTC", "last_seen": "2026-03-29 23:01:13 UTC", "sightings": 1 }, { "indicator": "http://87.121.79.97/x-3.2-.SNOOPY", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "gafgyt", "ua-wget" ], "first_seen": "2026-03-29 23:01:13 UTC", "last_seen": "2026-03-29 23:01:13 UTC", "sightings": 1 }, { "indicator": "http://87.121.79.97/a-r.m-4.SNOOPY", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "gafgyt", "ua-wget" ], "first_seen": "2026-03-29 23:01:13 UTC", "last_seen": "2026-03-29 23:01:13 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.83/bins/pmips", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-29 23:01:13 UTC", "last_seen": "2026-03-29 23:01:13 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.83/bins/pmpsl", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-29 23:01:13 UTC", "last_seen": "2026-03-29 23:01:13 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.83/bins/parm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-29 23:01:13 UTC", "last_seen": "2026-03-29 23:01:13 UTC", "sightings": 1 }, { "indicator": "http://87.121.79.97/i-5.8-6.SNOOPY", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "gafgyt", "ua-wget" ], "first_seen": "2026-03-29 23:01:13 UTC", "last_seen": "2026-03-29 23:01:13 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.83/bins/parm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-29 23:01:13 UTC", "last_seen": "2026-03-29 23:01:13 UTC", "sightings": 1 }, { "indicator": "http://87.121.79.97/m-6.8-k.SNOOPY", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "gafgyt", "ua-wget" ], "first_seen": "2026-03-29 23:01:13 UTC", "last_seen": "2026-03-29 23:01:13 UTC", "sightings": 1 }, { "indicator": "http://87.121.79.97/s-h.4-.SNOOPY", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "gafgyt", "ua-wget" ], "first_seen": "2026-03-29 23:01:13 UTC", "last_seen": "2026-03-29 23:01:13 UTC", "sightings": 1 }, { "indicator": "http://87.121.79.97/m-i.p-s.SNOOPY", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "gafgyt", "ua-wget" ], "first_seen": "2026-03-29 23:01:13 UTC", "last_seen": "2026-03-29 23:01:13 UTC", "sightings": 1 }, { "indicator": "http://172.86.91.224/bins/arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-29 23:01:13 UTC", "last_seen": "2026-03-29 23:01:13 UTC", "sightings": 1 }, { "indicator": "http://172.86.91.224/bins/m68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-29 23:01:13 UTC", "last_seen": "2026-03-29 23:01:13 UTC", "sightings": 1 }, { "indicator": "http://172.86.91.224/bins/arm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-29 23:01:13 UTC", "last_seen": "2026-03-29 23:01:13 UTC", "sightings": 1 }, { "indicator": "http://172.86.91.224/bins/ppc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-29 23:01:13 UTC", "last_seen": "2026-03-29 23:01:13 UTC", "sightings": 1 }, { "indicator": "http://172.86.91.224/bins/x86", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-29 23:01:13 UTC", "last_seen": "2026-03-29 23:01:13 UTC", "sightings": 1 }, { "indicator": "http://87.121.79.97/x-8.6-.SNOOPY", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "gafgyt", "ua-wget" ], "first_seen": "2026-03-29 23:01:13 UTC", "last_seen": "2026-03-29 23:01:13 UTC", "sightings": 1 }, { "indicator": "http://172.86.91.224/bins/arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-29 23:01:13 UTC", "last_seen": "2026-03-29 23:01:13 UTC", "sightings": 1 }, { "indicator": "http://172.86.91.224/bins/mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-29 23:01:13 UTC", "last_seen": "2026-03-29 23:01:13 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.83/bins/parm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-29 23:01:09 UTC", "last_seen": "2026-03-29 23:01:09 UTC", "sightings": 1 }, { "indicator": "http://87.121.79.97/a-r.m-6.SNOOPY", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "gafgyt", "ua-wget" ], "first_seen": "2026-03-29 23:01:09 UTC", "last_seen": "2026-03-29 23:01:09 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.83/bins/parm", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-29 23:01:09 UTC", "last_seen": "2026-03-29 23:01:09 UTC", "sightings": 1 }, { "indicator": "http://87.121.79.97/a-r.m-7.SNOOPY", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "gafgyt", "ua-wget" ], "first_seen": "2026-03-29 23:01:09 UTC", "last_seen": "2026-03-29 23:01:09 UTC", "sightings": 1 }, { "indicator": "http://87.121.79.97/m-p.s-l.SNOOPY", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "gafgyt", "ua-wget" ], "first_seen": "2026-03-29 23:01:09 UTC", "last_seen": "2026-03-29 23:01:09 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.83/bins/px86", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-29 23:01:09 UTC", "last_seen": "2026-03-29 23:01:09 UTC", "sightings": 1 }, { "indicator": "http://172.86.91.224/bins/sh4", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-29 23:01:09 UTC", "last_seen": "2026-03-29 23:01:09 UTC", "sightings": 1 }, { "indicator": "https://relief-view.topographictrace.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 23:00:11 UTC", "last_seen": "2026-03-29 23:00:11 UTC", "sightings": 1 }, { "indicator": "https://point-cloud.topographictrace.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 22:56:08 UTC", "last_seen": "2026-03-29 22:56:08 UTC", "sightings": 1 }, { "indicator": "http://180.190.187.61:51605/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-29 22:54:17 UTC", "last_seen": "2026-03-29 22:54:17 UTC", "sightings": 1 }, { "indicator": "http://113.221.77.197:37910/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-29 22:53:18 UTC", "last_seen": "2026-03-29 22:53:18 UTC", "sightings": 1 }, { "indicator": "https://chart-plotter.topographictrace.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 22:52:10 UTC", "last_seen": "2026-03-29 22:52:10 UTC", "sightings": 1 }, { "indicator": "http://85.239.147.6/files/8756257131/nbql7zY.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-29 22:49:06 UTC", "last_seen": "2026-03-29 22:49:06 UTC", "sightings": 1 }, { "indicator": "https://map-overlay.topographictrace.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 22:47:08 UTC", "last_seen": "2026-03-29 22:47:08 UTC", "sightings": 1 }, { "indicator": "https://core-tunnel.integratedduct.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 22:42:08 UTC", "last_seen": "2026-03-29 22:42:08 UTC", "sightings": 1 }, { "indicator": "https://drain-gate.integratedduct.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 22:38:07 UTC", "last_seen": "2026-03-29 22:38:07 UTC", "sightings": 1 }, { "indicator": "http://117.253.69.102:50382/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-29 22:37:08 UTC", "last_seen": "2026-03-29 22:37:08 UTC", "sightings": 1 }, { "indicator": "https://pipe-line.integratedduct.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 22:34:12 UTC", "last_seen": "2026-03-29 22:34:12 UTC", "sightings": 1 }, { "indicator": "http://124.29.223.148:52946/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-29 22:32:07 UTC", "last_seen": "2026-03-29 22:32:07 UTC", "sightings": 1 }, { "indicator": "http://123.10.70.191:60783/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-29 22:30:19 UTC", "last_seen": "2026-03-29 22:30:19 UTC", "sightings": 1 }, { "indicator": "https://vent-access.integratedduct.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 22:29:06 UTC", "last_seen": "2026-03-29 22:29:06 UTC", "sightings": 1 }, { "indicator": "http://45.205.1.19/nuts/poop", "indicator_type": "url", "source": "URLhaus", "tags": [ "CoinMiner", "elf", "ua-wget", "x86" ], "first_seen": "2026-03-29 22:28:15 UTC", "last_seen": "2026-03-29 22:28:15 UTC", "sightings": 1 }, { "indicator": "http://110.37.48.94:51957/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 22:28:10 UTC", "last_seen": "2026-03-29 22:28:10 UTC", "sightings": 1 }, { "indicator": "http://180.190.187.61:51605/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-29 22:26:24 UTC", "last_seen": "2026-03-29 22:26:24 UTC", "sightings": 1 }, { "indicator": "http://59.97.255.211:48481/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 22:24:21 UTC", "last_seen": "2026-03-29 22:24:21 UTC", "sightings": 1 }, { "indicator": "https://flow-sensor.integratedduct.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 22:24:11 UTC", "last_seen": "2026-03-29 22:24:11 UTC", "sightings": 1 }, { "indicator": "http://117.205.175.142:60557/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 22:22:21 UTC", "last_seen": "2026-03-29 22:22:21 UTC", "sightings": 1 }, { "indicator": "http://112.248.114.151:60712/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 22:20:38 UTC", "last_seen": "2026-03-29 22:20:38 UTC", "sightings": 1 }, { "indicator": "http://110.38.192.30:50587/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 22:19:31 UTC", "last_seen": "2026-03-29 22:19:31 UTC", "sightings": 1 }, { "indicator": "https://main-conduit.integratedduct.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 22:19:09 UTC", "last_seen": "2026-03-29 22:19:09 UTC", "sightings": 1 }, { "indicator": "https://pair-connect.symmetricalflow.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 22:15:10 UTC", "last_seen": "2026-03-29 22:15:10 UTC", "sightings": 1 }, { "indicator": "http://27.37.27.70:42155/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 22:13:17 UTC", "last_seen": "2026-03-29 22:13:17 UTC", "sightings": 1 }, { "indicator": "http://124.29.223.148:52946/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-29 22:12:07 UTC", "last_seen": "2026-03-29 22:12:07 UTC", "sightings": 1 }, { "indicator": "https://match-point.symmetricalflow.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 22:10:14 UTC", "last_seen": "2026-03-29 22:10:14 UTC", "sightings": 1 }, { "indicator": "http://110.37.44.158:52674/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-29 22:08:25 UTC", "last_seen": "2026-03-29 22:08:25 UTC", "sightings": 1 }, { "indicator": "http://103.164.128.50:33037/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-29 22:07:08 UTC", "last_seen": "2026-03-29 22:07:08 UTC", "sightings": 1 }, { "indicator": "https://equal-logic.symmetricalflow.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 22:05:10 UTC", "last_seen": "2026-03-29 22:05:10 UTC", "sightings": 1 }, { "indicator": "https://dual-stream.symmetricalflow.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 22:02:08 UTC", "last_seen": "2026-03-29 22:02:08 UTC", "sightings": 1 }, { "indicator": "http://123.10.70.191:60783/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-29 22:00:21 UTC", "last_seen": "2026-03-29 22:00:21 UTC", "sightings": 1 }, { "indicator": "http://59.97.255.211:48481/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 21:58:20 UTC", "last_seen": "2026-03-29 21:58:20 UTC", "sightings": 1 }, { "indicator": "https://mirror-sync.symmetricalflow.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 21:57:09 UTC", "last_seen": "2026-03-29 21:57:09 UTC", "sightings": 1 }, { "indicator": "http://110.38.192.30:50587/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 21:56:24 UTC", "last_seen": "2026-03-29 21:56:24 UTC", "sightings": 1 }, { "indicator": "http://121.238.240.83:3588/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 21:52:12 UTC", "last_seen": "2026-03-29 21:52:12 UTC", "sightings": 1 }, { "indicator": "https://balanced-io.symmetricalflow.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 21:51:10 UTC", "last_seen": "2026-03-29 21:51:10 UTC", "sightings": 1 }, { "indicator": "http://180.115.167.234:60666/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-29 21:49:20 UTC", "last_seen": "2026-03-29 21:49:20 UTC", "sightings": 1 }, { "indicator": "http://59.184.246.34:39063/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-29 21:47:32 UTC", "last_seen": "2026-03-29 21:47:32 UTC", "sightings": 1 }, { "indicator": "https://alt-server.elevationnodebox.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 21:46:13 UTC", "last_seen": "2026-03-29 21:46:13 UTC", "sightings": 1 }, { "indicator": "http://61.53.81.193:35668/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 21:43:21 UTC", "last_seen": "2026-03-29 21:43:21 UTC", "sightings": 1 }, { "indicator": "https://summit-dev.elevationnodebox.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 21:40:10 UTC", "last_seen": "2026-03-29 21:40:10 UTC", "sightings": 1 }, { "indicator": "http://27.216.167.20:58590/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 21:35:27 UTC", "last_seen": "2026-03-29 21:35:27 UTC", "sightings": 1 }, { "indicator": "http://176.226.205.220:37523/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 21:35:22 UTC", "last_seen": "2026-03-29 21:35:22 UTC", "sightings": 1 }, { "indicator": "https://level-check.elevationnodebox.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 21:34:07 UTC", "last_seen": "2026-03-29 21:34:07 UTC", "sightings": 1 }, { "indicator": "https://peak-traffic.elevationnodebox.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 21:31:13 UTC", "last_seen": "2026-03-29 21:31:13 UTC", "sightings": 1 }, { "indicator": "https://top-tier.elevationnodebox.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 21:28:08 UTC", "last_seen": "2026-03-29 21:28:08 UTC", "sightings": 1 }, { "indicator": "http://110.37.59.132:48632/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 21:27:07 UTC", "last_seen": "2026-03-29 21:27:07 UTC", "sightings": 1 }, { "indicator": "http://180.115.167.234:60666/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-29 21:19:23 UTC", "last_seen": "2026-03-29 21:19:23 UTC", "sightings": 1 }, { "indicator": "https://high-point.elevationnodebox.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 21:18:09 UTC", "last_seen": "2026-03-29 21:18:09 UTC", "sightings": 1 }, { "indicator": "http://61.53.81.193:35668/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 21:15:27 UTC", "last_seen": "2026-03-29 21:15:27 UTC", "sightings": 1 }, { "indicator": "http://182.121.80.108:52075/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 21:15:27 UTC", "last_seen": "2026-03-29 21:15:27 UTC", "sightings": 1 }, { "indicator": "http://176.226.205.220:37523/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 21:15:26 UTC", "last_seen": "2026-03-29 21:15:26 UTC", "sightings": 1 }, { "indicator": "https://arch-tunnel.cantileverbridge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 21:12:14 UTC", "last_seen": "2026-03-29 21:12:14 UTC", "sightings": 1 }, { "indicator": "https://truss-api.cantileverbridge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 21:07:08 UTC", "last_seen": "2026-03-29 21:07:08 UTC", "sightings": 1 }, { "indicator": "http://182.121.80.108:52075/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 21:00:19 UTC", "last_seen": "2026-03-29 21:00:19 UTC", "sightings": 1 }, { "indicator": "https://beam-handler.cantileverbridge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 21:00:11 UTC", "last_seen": "2026-03-29 21:00:11 UTC", "sightings": 1 }, { "indicator": "http://110.37.59.132:48632/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 20:59:17 UTC", "last_seen": "2026-03-29 20:59:17 UTC", "sightings": 1 }, { "indicator": "http://117.212.18.77:41273/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 20:57:18 UTC", "last_seen": "2026-03-29 20:57:18 UTC", "sightings": 1 }, { "indicator": "https://stress-test.cantileverbridge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 20:56:08 UTC", "last_seen": "2026-03-29 20:56:08 UTC", "sightings": 1 }, { "indicator": "https://load-balancer.cantileverbridge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 20:49:09 UTC", "last_seen": "2026-03-29 20:49:09 UTC", "sightings": 1 }, { "indicator": "http://110.37.82.79:56951/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-29 20:47:07 UTC", "last_seen": "2026-03-29 20:47:07 UTC", "sightings": 1 }, { "indicator": "https://span-control.cantileverbridge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 20:44:11 UTC", "last_seen": "2026-03-29 20:44:11 UTC", "sightings": 1 }, { "indicator": "http://113.221.77.197:37910/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-29 20:42:07 UTC", "last_seen": "2026-03-29 20:42:07 UTC", "sightings": 1 }, { "indicator": "https://archive-site.alignmentstorage.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 20:39:08 UTC", "last_seen": "2026-03-29 20:39:08 UTC", "sightings": 1 }, { "indicator": "http://110.37.82.79:56951/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-29 20:37:06 UTC", "last_seen": "2026-03-29 20:37:06 UTC", "sightings": 1 }, { "indicator": "http://185.50.148.169:42129/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-29 20:33:16 UTC", "last_seen": "2026-03-29 20:33:16 UTC", "sightings": 1 }, { "indicator": "https://backup-hub.alignmentstorage.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 20:32:08 UTC", "last_seen": "2026-03-29 20:32:08 UTC", "sightings": 1 }, { "indicator": "http://219.155.203.107:48310/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 20:31:20 UTC", "last_seen": "2026-03-29 20:31:20 UTC", "sightings": 1 }, { "indicator": "https://cache-node.alignmentstorage.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 20:27:07 UTC", "last_seen": "2026-03-29 20:27:07 UTC", "sightings": 1 }, { "indicator": "http://59.103.121.32:52860/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 20:23:21 UTC", "last_seen": "2026-03-29 20:23:21 UTC", "sightings": 1 }, { "indicator": "https://file-share.alignmentstorage.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 20:22:08 UTC", "last_seen": "2026-03-29 20:22:08 UTC", "sightings": 1 }, { "indicator": "https://block-storage.alignmentstorage.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 20:17:10 UTC", "last_seen": "2026-03-29 20:17:10 UTC", "sightings": 1 }, { "indicator": "https://sync-portal.alignmentstorage.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 20:11:07 UTC", "last_seen": "2026-03-29 20:11:07 UTC", "sightings": 1 }, { "indicator": "http://42.236.223.242:48800/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 20:10:18 UTC", "last_seen": "2026-03-29 20:10:18 UTC", "sightings": 1 }, { "indicator": "https://index-master.foundationmetric.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 20:05:10 UTC", "last_seen": "2026-03-29 20:05:10 UTC", "sightings": 1 }, { "indicator": "https://legacy-bridge.foundationmetric.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 20:00:12 UTC", "last_seen": "2026-03-29 20:00:12 UTC", "sightings": 1 }, { "indicator": "http://110.37.38.176:54723/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-29 19:57:07 UTC", "last_seen": "2026-03-29 19:57:07 UTC", "sightings": 1 }, { "indicator": "http://59.103.121.32:52860/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 19:55:19 UTC", "last_seen": "2026-03-29 19:55:19 UTC", "sightings": 1 }, { "indicator": "https://stat-collector.foundationmetric.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 19:53:09 UTC", "last_seen": "2026-03-29 19:53:09 UTC", "sightings": 1 }, { "indicator": "http://185.50.148.169:42129/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-29 19:50:18 UTC", "last_seen": "2026-03-29 19:50:18 UTC", "sightings": 1 }, { "indicator": "https://audit-trail.foundationmetric.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 19:50:14 UTC", "last_seen": "2026-03-29 19:50:14 UTC", "sightings": 1 }, { "indicator": "https://root-access.foundationmetric.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 19:47:10 UTC", "last_seen": "2026-03-29 19:47:10 UTC", "sightings": 1 }, { "indicator": "http://123.12.153.43:55444/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-29 19:42:07 UTC", "last_seen": "2026-03-29 19:42:07 UTC", "sightings": 1 }, { "indicator": "http://115.49.27.49:38620/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 19:39:21 UTC", "last_seen": "2026-03-29 19:39:21 UTC", "sightings": 1 }, { "indicator": "https://github.com/Camj020205/Telegram-XO-Game-Bot-PHP/raw/refs/heads/main/twangle/PHP-Game-Bot-X-Telegram-1.7.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 19:39:15 UTC", "last_seen": "2026-03-29 19:39:15 UTC", "sightings": 1 }, { "indicator": "https://github.com/O-FB/3DSConverters/raw/refs/heads/main/3DS-Converters/bin/3DSConverters_3.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 19:39:14 UTC", "last_seen": "2026-03-29 19:39:14 UTC", "sightings": 1 }, { "indicator": "https://grid-backbone.reinforcedmatrix.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 19:39:14 UTC", "last_seen": "2026-03-29 19:39:14 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/syedsuleman07/Jonas-Review-Guesser/refs/heads/main/data/Review_Guesser_Jonas_2.0.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 19:39:14 UTC", "last_seen": "2026-03-29 19:39:14 UTC", "sightings": 1 }, { "indicator": "https://tensor-unit.reinforcedmatrix.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 19:39:14 UTC", "last_seen": "2026-03-29 19:39:14 UTC", "sightings": 1 }, { "indicator": "https://github.com/anheoanthit/tmodloader-docker/raw/refs/heads/main/mindlessness/tmodloader_docker_2.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 19:39:14 UTC", "last_seen": "2026-03-29 19:39:14 UTC", "sightings": 1 }, { "indicator": "https://base-logic.foundationmetric.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 19:39:14 UTC", "last_seen": "2026-03-29 19:39:14 UTC", "sightings": 1 }, { "indicator": "https://github.com/Josh-debug123/Jogo_da_Velha/raw/refs/heads/main/menometastasis/Jogo_da_Velha_3.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 19:39:14 UTC", "last_seen": "2026-03-29 19:39:14 UTC", "sightings": 1 }, { "indicator": "https://github.com/Zak12810/GameHub/raw/refs/heads/main/ios/GameHub/Hub-Game-v3.2-beta.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 19:39:14 UTC", "last_seen": "2026-03-29 19:39:14 UTC", "sightings": 1 }, { "indicator": "https://github.com/syedsuleman07/Jonas-Review-Guesser/raw/refs/heads/main/data/Review_Guesser_Jonas_2.0.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 19:39:13 UTC", "last_seen": "2026-03-29 19:39:13 UTC", "sightings": 1 }, { "indicator": "https://github.com/KMA66/Playtesters.API/raw/refs/heads/master/src/UseCases/API-Playtesters-1.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 19:39:13 UTC", "last_seen": "2026-03-29 19:39:13 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Zak12810/GameHub/refs/heads/main/ios/GameHub/Hub-Game-v3.2-beta.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 19:39:12 UTC", "last_seen": "2026-03-29 19:39:12 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Camj020205/Telegram-XO-Game-Bot-PHP/refs/heads/main/twangle/PHP-Game-Bot-X-Telegram-1.7.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 19:39:12 UTC", "last_seen": "2026-03-29 19:39:12 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Josh-debug123/Jogo_da_Velha/refs/heads/main/menometastasis/Jogo_da_Velha_3.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 19:39:12 UTC", "last_seen": "2026-03-29 19:39:12 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/KMA66/Playtesters.API/refs/heads/master/src/UseCases/API-Playtesters-1.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 19:39:12 UTC", "last_seen": "2026-03-29 19:39:12 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/anheoanthit/tmodloader-docker/refs/heads/main/mindlessness/tmodloader_docker_2.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 19:39:12 UTC", "last_seen": "2026-03-29 19:39:12 UTC", "sightings": 1 }, { "indicator": "http://110.37.38.176:54723/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-29 19:39:10 UTC", "last_seen": "2026-03-29 19:39:10 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/gourav3365/MCBE-Mouse-Cursor/refs/heads/master/punchboard/Mouse_Cursor_MCB_2.7-alpha.4.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 19:39:10 UTC", "last_seen": "2026-03-29 19:39:10 UTC", "sightings": 1 }, { "indicator": "http://85.239.147.6/files/7571480282/0ZsEYbN.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-29 19:39:07 UTC", "last_seen": "2026-03-29 19:39:07 UTC", "sightings": 1 }, { "indicator": "https://github.com/beamed123/open-source-games/raw/refs/heads/main/staphylomycosis/open_games_source_v2.7-alpha.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 19:23:12 UTC", "last_seen": "2026-03-29 19:23:12 UTC", "sightings": 1 }, { "indicator": "https://github.com/tiendaunomx/wave-defender/raw/refs/heads/main/counterstatement/wave_defender_3.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 19:23:12 UTC", "last_seen": "2026-03-29 19:23:12 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/axeldnd1980/infinity-paradox-game/refs/heads/main/life-scenarios/infinity_game_paradox_udo.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 19:23:12 UTC", "last_seen": "2026-03-29 19:23:12 UTC", "sightings": 1 }, { "indicator": "https://github.com/gourav3365/MCBE-Mouse-Cursor/raw/refs/heads/master/punchboard/Mouse_Cursor_MCB_2.7-alpha.4.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 19:23:12 UTC", "last_seen": "2026-03-29 19:23:12 UTC", "sightings": 1 }, { "indicator": "https://github.com/axeldnd1980/infinity-paradox-game/raw/refs/heads/main/life-scenarios/infinity_game_paradox_udo.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 19:23:12 UTC", "last_seen": "2026-03-29 19:23:12 UTC", "sightings": 1 }, { "indicator": "https://github.com/ninjas21/gamehub-lite/raw/refs/heads/main/api/gamehub-lite-1.4.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 19:23:12 UTC", "last_seen": "2026-03-29 19:23:12 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/ninjas21/gamehub-lite/refs/heads/main/api/gamehub-lite-1.4.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 19:23:12 UTC", "last_seen": "2026-03-29 19:23:12 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/andreyukzl/verl/refs/heads/main/verl/model_merger/Software-v1.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 19:23:11 UTC", "last_seen": "2026-03-29 19:23:11 UTC", "sightings": 1 }, { "indicator": "https://github.com/andreyukzl/verl/raw/refs/heads/main/verl/model_merger/Software-v1.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 19:23:11 UTC", "last_seen": "2026-03-29 19:23:11 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/O-FB/3DSConverters/refs/heads/main/3DS-Converters/bin/3DSConverters_3.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 19:23:11 UTC", "last_seen": "2026-03-29 19:23:11 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/beamed123/open-source-games/refs/heads/main/staphylomycosis/open_games_source_v2.7-alpha.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 19:23:11 UTC", "last_seen": "2026-03-29 19:23:11 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/tiendaunomx/wave-defender/refs/heads/main/counterstatement/wave_defender_3.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 19:23:11 UTC", "last_seen": "2026-03-29 19:23:11 UTC", "sightings": 1 }, { "indicator": "https://shield-relay.reinforcedmatrix.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 19:20:10 UTC", "last_seen": "2026-03-29 19:20:10 UTC", "sightings": 1 }, { "indicator": "https://github.com/Genuspedilanthusgroundsloth505/Osiris/raw/refs/heads/main/Source/Features/Visuals/ModelGlow/WeaponModelGlow/Software-unidolatrous.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 19:19:10 UTC", "last_seen": "2026-03-29 19:19:10 UTC", "sightings": 1 }, { "indicator": "https://github.com/thunde5061/Discord-Twitch-Bot/raw/refs/heads/main/unspontaneous/Discord_Bot_Twitch_1.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 19:19:10 UTC", "last_seen": "2026-03-29 19:19:10 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Genuspedilanthusgroundsloth505/Osiris/refs/heads/main/Source/Features/Visuals/ModelGlow/WeaponModelGlow/Software-unidolatrous.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 19:19:10 UTC", "last_seen": "2026-03-29 19:19:10 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Pharyngeal-haredi673/twitch-account-creator/refs/heads/main/results/twitch_account_creator_require.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 19:19:09 UTC", "last_seen": "2026-03-29 19:19:09 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/provosaintbride913/TwitchFollowers/refs/heads/main/recoast/Followers-Twitch-counterpray.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 19:19:09 UTC", "last_seen": "2026-03-29 19:19:09 UTC", "sightings": 1 }, { "indicator": "https://github.com/Pharyngeal-haredi673/twitch-account-creator/raw/refs/heads/main/results/twitch_account_creator_require.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 19:19:09 UTC", "last_seen": "2026-03-29 19:19:09 UTC", "sightings": 1 }, { "indicator": "https://github.com/commonsdisintegration93/Rust-Stability-Companion/raw/refs/heads/main/shoppy/Rust-Stability-Companion_2.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 19:19:09 UTC", "last_seen": "2026-03-29 19:19:09 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/a-ettahri/NullRAT/refs/heads/main/NullRAT/RAT_Null_1.4-beta.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 19:19:09 UTC", "last_seen": "2026-03-29 19:19:09 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/commonsdisintegration93/Rust-Stability-Companion/refs/heads/main/shoppy/Rust-Stability-Companion_2.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 19:19:09 UTC", "last_seen": "2026-03-29 19:19:09 UTC", "sightings": 1 }, { "indicator": "https://github.com/a-ettahri/NullRAT/raw/refs/heads/main/NullRAT/RAT_Null_1.4-beta.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 19:19:09 UTC", "last_seen": "2026-03-29 19:19:09 UTC", "sightings": 1 }, { "indicator": "https://github.com/provosaintbride913/TwitchFollowers/raw/refs/heads/main/recoast/Followers-Twitch-counterpray.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 19:19:09 UTC", "last_seen": "2026-03-29 19:19:09 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/thunde5061/Discord-Twitch-Bot/refs/heads/main/unspontaneous/Discord_Bot_Twitch_1.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 19:19:08 UTC", "last_seen": "2026-03-29 19:19:08 UTC", "sightings": 1 }, { "indicator": "http://123.12.153.43:55444/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-29 19:17:07 UTC", "last_seen": "2026-03-29 19:17:07 UTC", "sightings": 1 }, { "indicator": "https://mesh-gateway.reinforcedmatrix.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 19:14:08 UTC", "last_seen": "2026-03-29 19:14:08 UTC", "sightings": 1 }, { "indicator": "http://115.49.27.49:38620/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 19:13:18 UTC", "last_seen": "2026-03-29 19:13:18 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/zouag94/map/refs/heads/main/or/75.txt", "indicator_type": "url", "source": "URLhaus", "tags": [ "lua", "SmartLoader" ], "first_seen": "2026-03-29 19:12:07 UTC", "last_seen": "2026-03-29 19:12:07 UTC", "sightings": 1 }, { "indicator": "https://github.com/zouag94/map/raw/refs/heads/main/or/75.txt", "indicator_type": "url", "source": "URLhaus", "tags": [ "lua", "SmartLoader" ], "first_seen": "2026-03-29 19:12:07 UTC", "last_seen": "2026-03-29 19:12:07 UTC", "sightings": 1 }, { "indicator": "https://fiber-optic.reinforcedmatrix.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 19:09:06 UTC", "last_seen": "2026-03-29 19:09:06 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Kupcsi/bounce_zero/refs/heads/main/lang/bounce_zero_v1.0.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 19:07:10 UTC", "last_seen": "2026-03-29 19:07:10 UTC", "sightings": 1 }, { "indicator": "https://github.com/mustkimkureshi/CAFE-ERP-SYSTEM/raw/refs/heads/main/css/SYSTEM-ER-CAF-v3.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 19:07:10 UTC", "last_seen": "2026-03-29 19:07:10 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Nopaleafifo630/Tic-Tac-Toe-Game/refs/heads/main/nepotistical/Game_Tac_Toe_Tic_v1.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 19:07:10 UTC", "last_seen": "2026-03-29 19:07:10 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/mustkimkureshi/CAFE-ERP-SYSTEM/refs/heads/main/css/SYSTEM-ER-CAF-v3.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 19:07:10 UTC", "last_seen": "2026-03-29 19:07:10 UTC", "sightings": 1 }, { "indicator": "https://github.com/Nopaleafifo630/Tic-Tac-Toe-Game/raw/refs/heads/main/nepotistical/Game_Tac_Toe_Tic_v1.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 19:07:10 UTC", "last_seen": "2026-03-29 19:07:10 UTC", "sightings": 1 }, { "indicator": "https://github.com/FauzanOktavianto/typing-game/raw/refs/heads/main/app/api/leaderboard/top/game_typing_2.7.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 19:07:10 UTC", "last_seen": "2026-03-29 19:07:10 UTC", "sightings": 1 }, { "indicator": "https://github.com/jeckef/unnamed_game_1_v2/raw/refs/heads/main/epidictical/game-unnamed-v-1.3-beta.4.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 19:07:10 UTC", "last_seen": "2026-03-29 19:07:10 UTC", "sightings": 1 }, { "indicator": "http://182.114.48.68:59286/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-29 19:07:09 UTC", "last_seen": "2026-03-29 19:07:09 UTC", "sightings": 1 }, { "indicator": "https://github.com/tadiseeek/FineSweeper/raw/refs/heads/main/camass/Sweeper-Fine-v1.6.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 19:07:09 UTC", "last_seen": "2026-03-29 19:07:09 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/tadiseeek/FineSweeper/refs/heads/main/camass/Sweeper-Fine-v1.6.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 19:07:09 UTC", "last_seen": "2026-03-29 19:07:09 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/mustkimkureshi/blood-donation-sql-project/refs/heads/main/reference/project-blood-sql-donation-1.4-beta.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 19:07:09 UTC", "last_seen": "2026-03-29 19:07:09 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/ImkozZ/Microverse/refs/heads/main/scene/characters/Software-v1.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 19:07:09 UTC", "last_seen": "2026-03-29 19:07:09 UTC", "sightings": 1 }, { "indicator": "https://github.com/mustkimkureshi/blood-donation-sql-project/raw/refs/heads/main/reference/project-blood-sql-donation-1.4-beta.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 19:07:09 UTC", "last_seen": "2026-03-29 19:07:09 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/FauzanOktavianto/typing-game/refs/heads/main/app/api/leaderboard/top/game_typing_2.7.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 19:07:09 UTC", "last_seen": "2026-03-29 19:07:09 UTC", "sightings": 1 }, { "indicator": "https://github.com/ImkozZ/Microverse/raw/refs/heads/main/scene/characters/Software-v1.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 19:07:09 UTC", "last_seen": "2026-03-29 19:07:09 UTC", "sightings": 1 }, { "indicator": "https://core-lattice.reinforcedmatrix.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 19:03:11 UTC", "last_seen": "2026-03-29 19:03:11 UTC", "sightings": 1 }, { "indicator": "http://96.245.232.251:54940/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 19:01:21 UTC", "last_seen": "2026-03-29 19:01:21 UTC", "sightings": 1 }, { "indicator": "http://222.137.161.32:42982/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 19:00:19 UTC", "last_seen": "2026-03-29 19:00:19 UTC", "sightings": 1 }, { "indicator": "https://mapping-svc.navigationalpath.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 18:58:09 UTC", "last_seen": "2026-03-29 18:58:09 UTC", "sightings": 1 }, { "indicator": "https://github.com/El1asz/osu-on-linux/raw/refs/heads/main/tint2/on-osu-linux-2.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 18:56:10 UTC", "last_seen": "2026-03-29 18:56:10 UTC", "sightings": 1 }, { "indicator": "https://github.com/Jaisinghchoudhary/Finales-Abschlussprojekt/raw/refs/heads/main/sellable/Abschlussprojekt_Finales_v3.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 18:56:09 UTC", "last_seen": "2026-03-29 18:56:09 UTC", "sightings": 1 }, { "indicator": "https://github.com/gooberbenzenoid132/interactive-sora/raw/refs/heads/main/frontend/node_modules/rollup/dist/bin/sora_interactive_2.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 18:56:09 UTC", "last_seen": "2026-03-29 18:56:09 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/gooberbenzenoid132/interactive-sora/refs/heads/main/frontend/node_modules/rollup/dist/bin/sora_interactive_2.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 18:56:09 UTC", "last_seen": "2026-03-29 18:56:09 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Jaisinghchoudhary/Apocalust007-UpdateForge/refs/heads/main/isopropyl/Apocalust-Update-Forge-v3.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 18:56:09 UTC", "last_seen": "2026-03-29 18:56:09 UTC", "sightings": 1 }, { "indicator": "https://github.com/xtancordy/DX12BindlessUnity/raw/refs/heads/master/Assets/Bindless-Unity-D-1.4.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 18:56:09 UTC", "last_seen": "2026-03-29 18:56:09 UTC", "sightings": 1 }, { "indicator": "https://github.com/gilmariog12/osu-on-linux/raw/refs/heads/master/Rhenish/linux_osu_on_3.6.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 18:56:09 UTC", "last_seen": "2026-03-29 18:56:09 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/gilmariog12/osu-on-linux/refs/heads/master/Rhenish/linux_osu_on_3.6.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 18:56:08 UTC", "last_seen": "2026-03-29 18:56:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/gilmariog12/exemplos-qua209030/refs/heads/master/.vscode/qua_exemplos_1.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 18:56:08 UTC", "last_seen": "2026-03-29 18:56:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/gilmariog12/exemplos-qua209030/raw/refs/heads/master/.vscode/qua_exemplos_1.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 18:56:08 UTC", "last_seen": "2026-03-29 18:56:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/Jaisinghchoudhary/Apocalust007-UpdateForge/raw/refs/heads/main/isopropyl/Apocalust-Update-Forge-v3.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 18:56:08 UTC", "last_seen": "2026-03-29 18:56:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/xtancordy/DX12BindlessUnity/refs/heads/master/Assets/Bindless-Unity-D-1.4.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 18:56:07 UTC", "last_seen": "2026-03-29 18:56:07 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Shiraori879/PUBG-Mobile-Bypass-Source-fixed/refs/heads/main/packages/System.Numerics.Vectors.4.4.0/ref/xamarinwatchos10/Bypass_Source_PUB_Mobile_fixed_v1.9.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 18:52:12 UTC", "last_seen": "2026-03-29 18:52:12 UTC", "sightings": 1 }, { "indicator": "https://github.com/Shiraori879/PUBG-Mobile-Bypass-Source-fixed/raw/refs/heads/main/packages/System.Numerics.Vectors.4.4.0/ref/xamarinwatchos10/Bypass_Source_PUB_Mobile_fixed_v1.9.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 18:52:12 UTC", "last_seen": "2026-03-29 18:52:12 UTC", "sightings": 1 }, { "indicator": "https://github.com/Cheat360/rank-no-taisen-front/raw/refs/heads/main/public/no-taisen-front-rank-3.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 18:52:12 UTC", "last_seen": "2026-03-29 18:52:12 UTC", "sightings": 1 }, { "indicator": "https://github.com/kalbou/BMO-AI-Chatbot/raw/refs/heads/main/frontend/src/components/BM-A-Chatbot-3.0.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 18:52:12 UTC", "last_seen": "2026-03-29 18:52:12 UTC", "sightings": 1 }, { "indicator": "https://vector-base.navigationalpath.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 18:52:12 UTC", "last_seen": "2026-03-29 18:52:12 UTC", "sightings": 1 }, { "indicator": "https://github.com/Jaspreet-1234/gaming-website/raw/refs/heads/master/assets/gaming-website-v2.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 18:52:12 UTC", "last_seen": "2026-03-29 18:52:12 UTC", "sightings": 1 }, { "indicator": "https://github.com/Sergioam1/Elden-ring-leetcode-extension/raw/refs/heads/main/public/sounds/extension_leetcode_Elden_ring_v3.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 18:52:12 UTC", "last_seen": "2026-03-29 18:52:12 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Jaspreet-1234/gaming-website/refs/heads/master/assets/gaming-website-v2.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 18:52:12 UTC", "last_seen": "2026-03-29 18:52:12 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Sergioam1/Elden-ring-leetcode-extension/refs/heads/main/public/sounds/extension_leetcode_Elden_ring_v3.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 18:52:12 UTC", "last_seen": "2026-03-29 18:52:12 UTC", "sightings": 1 }, { "indicator": "https://github.com/xyinia/Super-Mario-Bros.-Remastered-Public/raw/refs/heads/main/Scripts/Classes/Entities/Public_Bros_Super_Mario_Remastered_A.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 18:52:11 UTC", "last_seen": "2026-03-29 18:52:11 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/xyinia/Super-Mario-Bros.-Remastered-Public/refs/heads/main/Scripts/Classes/Entities/Public_Bros_Super_Mario_Remastered_A.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 18:52:11 UTC", "last_seen": "2026-03-29 18:52:11 UTC", "sightings": 1 }, { "indicator": "https://github.com/REUBENLAMPTEY/Nova-Arcade-HTML-5-Game-Portal-CMS-PHP-Script/raw/refs/heads/main/technographically/Game-Nova-PH-Arcade-HTM-Portal-CM-Script-incessably.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 18:52:11 UTC", "last_seen": "2026-03-29 18:52:11 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/kalbou/BMO-AI-Chatbot/refs/heads/main/frontend/src/components/BM-A-Chatbot-3.0.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 18:52:11 UTC", "last_seen": "2026-03-29 18:52:11 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Cheat360/rank-no-taisen-front/refs/heads/main/public/no-taisen-front-rank-3.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 18:52:11 UTC", "last_seen": "2026-03-29 18:52:11 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/REUBENLAMPTEY/Nova-Arcade-HTML-5-Game-Portal-CMS-PHP-Script/refs/heads/main/technographically/Game-Nova-PH-Arcade-HTM-Portal-CM-Script-incessably.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 18:52:07 UTC", "last_seen": "2026-03-29 18:52:07 UTC", "sightings": 1 }, { "indicator": "https://trace-beacon.navigationalpath.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 18:46:09 UTC", "last_seen": "2026-03-29 18:46:09 UTC", "sightings": 1 }, { "indicator": "https://geo-spatial.navigationalpath.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 18:41:08 UTC", "last_seen": "2026-03-29 18:41:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/MohdSardar/Python-Libraries-for-Data-Science-/refs/heads/main/Asilidae/for-Science-Data-Libraries-Python-alkalimetry.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 18:37:10 UTC", "last_seen": "2026-03-29 18:37:10 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/MohdSardar/raylib4PlayStation2/refs/heads/main/samples/shapes/mix/Play-raylib-Station-v1.6.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 18:37:10 UTC", "last_seen": "2026-03-29 18:37:10 UTC", "sightings": 1 }, { "indicator": "https://github.com/MohdSardar/Python-Libraries-for-Data-Science-/raw/refs/heads/main/Asilidae/for-Science-Data-Libraries-Python-alkalimetry.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 18:37:08 UTC", "last_seen": "2026-03-29 18:37:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/MohdSardar/GenAI_App-AI-Code-Reviewer/refs/heads/main/anthracnose/Gen-Code-Reviewer-A-App-2.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 18:37:08 UTC", "last_seen": "2026-03-29 18:37:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/cosggg/Simon-Says-RAG-Android/raw/refs/heads/main/app/src/main/res/drawable/Android-RA-Says-Simon-transparentness.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 18:37:08 UTC", "last_seen": "2026-03-29 18:37:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/MohdSardar/Uber-Data-Analysis/refs/heads/main/chlorochromic/Analysis_Data_Uber_v2.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 18:37:08 UTC", "last_seen": "2026-03-29 18:37:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/MohdSardar/Uber-Data-Analysis/raw/refs/heads/main/chlorochromic/Analysis_Data_Uber_v2.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 18:37:08 UTC", "last_seen": "2026-03-29 18:37:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/MohdSardar/GenAI_App-AI-Code-Reviewer/raw/refs/heads/main/anthracnose/Gen-Code-Reviewer-A-App-2.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 18:37:08 UTC", "last_seen": "2026-03-29 18:37:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/cosggg/Simon-Says-RAG-Android/refs/heads/main/app/src/main/res/drawable/Android-RA-Says-Simon-transparentness.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 18:37:08 UTC", "last_seen": "2026-03-29 18:37:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/MohdSardar/raylib4PlayStation2/raw/refs/heads/main/samples/shapes/mix/Play-raylib-Station-v1.6.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 18:37:08 UTC", "last_seen": "2026-03-29 18:37:08 UTC", "sightings": 1 }, { "indicator": "https://route-engine.navigationalpath.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 18:35:10 UTC", "last_seen": "2026-03-29 18:35:10 UTC", "sightings": 1 }, { "indicator": "http://222.137.161.32:42982/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 18:33:12 UTC", "last_seen": "2026-03-29 18:33:12 UTC", "sightings": 1 }, { "indicator": "http://27.215.80.254:32973/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 18:31:20 UTC", "last_seen": "2026-03-29 18:31:20 UTC", "sightings": 1 }, { "indicator": "http://144.31.156.1:4477/CheatClients/rata.exe", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-29 18:31:07 UTC", "last_seen": "2026-03-29 18:31:07 UTC", "sightings": 1 }, { "indicator": "https://waypoint-alfa.navigationalpath.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 18:30:09 UTC", "last_seen": "2026-03-29 18:30:09 UTC", "sightings": 1 }, { "indicator": "http://110.37.27.87:35208/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 18:27:17 UTC", "last_seen": "2026-03-29 18:27:17 UTC", "sightings": 1 }, { "indicator": "https://edge-proxy.structuralgridhub.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 18:25:07 UTC", "last_seen": "2026-03-29 18:25:07 UTC", "sightings": 1 }, { "indicator": "http://45.177.33.135:59736/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-29 18:21:09 UTC", "last_seen": "2026-03-29 18:21:09 UTC", "sightings": 1 }, { "indicator": "https://log-monitor.structuralgridhub.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 18:18:09 UTC", "last_seen": "2026-03-29 18:18:09 UTC", "sightings": 1 }, { "indicator": "https://cdn-static.structuralgridhub.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 18:13:08 UTC", "last_seen": "2026-03-29 18:13:08 UTC", "sightings": 1 }, { "indicator": "https://data-vault.structuralgridhub.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 18:08:07 UTC", "last_seen": "2026-03-29 18:08:07 UTC", "sightings": 1 }, { "indicator": "http://27.215.80.254:32973/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 18:07:20 UTC", "last_seen": "2026-03-29 18:07:20 UTC", "sightings": 1 }, { "indicator": "https://api-cluster.structuralgridhub.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 18:01:08 UTC", "last_seen": "2026-03-29 18:01:08 UTC", "sightings": 1 }, { "indicator": "http://117.216.184.179:55889/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-29 17:57:13 UTC", "last_seen": "2026-03-29 17:57:13 UTC", "sightings": 1 }, { "indicator": "http://42.232.76.175:48346/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-29 17:57:08 UTC", "last_seen": "2026-03-29 17:57:08 UTC", "sightings": 1 }, { "indicator": "http://59.176.103.94:49905/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-29 17:57:07 UTC", "last_seen": "2026-03-29 17:57:07 UTC", "sightings": 1 }, { "indicator": "https://auth-secure.structuralgridhub.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 17:56:09 UTC", "last_seen": "2026-03-29 17:56:09 UTC", "sightings": 1 }, { "indicator": "http://85.239.147.6/files/1781548144/ebJvLxF.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-03-29 17:53:04 UTC", "last_seen": "2026-03-29 17:53:04 UTC", "sightings": 1 }, { "indicator": "http://45.177.33.135:59736/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-29 17:50:19 UTC", "last_seen": "2026-03-29 17:50:19 UTC", "sightings": 1 }, { "indicator": "https://hruckb.radiantventurex.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 17:50:08 UTC", "last_seen": "2026-03-29 17:50:08 UTC", "sightings": 1 }, { "indicator": "http://112.198.239.194:52823/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-29 17:47:14 UTC", "last_seen": "2026-03-29 17:47:14 UTC", "sightings": 1 }, { "indicator": "https://opt1-chain.radiantventurex.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 17:45:09 UTC", "last_seen": "2026-03-29 17:45:09 UTC", "sightings": 1 }, { "indicator": "http://47.160.151.251:60697/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-29 17:42:07 UTC", "last_seen": "2026-03-29 17:42:07 UTC", "sightings": 1 }, { "indicator": "https://snbz.radiantventurex.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 17:39:13 UTC", "last_seen": "2026-03-29 17:39:13 UTC", "sightings": 1 }, { "indicator": "http://196.189.198.193:41989/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-29 17:35:59 UTC", "last_seen": "2026-03-29 17:35:59 UTC", "sightings": 1 }, { "indicator": "https://qhsgsm.radiantventurex.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 17:34:07 UTC", "last_seen": "2026-03-29 17:34:07 UTC", "sightings": 1 }, { "indicator": "http://59.176.103.94:49905/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-29 17:32:11 UTC", "last_seen": "2026-03-29 17:32:11 UTC", "sightings": 1 }, { "indicator": "http://42.5.53.147:51709/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 17:28:13 UTC", "last_seen": "2026-03-29 17:28:13 UTC", "sightings": 1 }, { "indicator": "https://soli-cast.radiantventurex.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 17:28:10 UTC", "last_seen": "2026-03-29 17:28:10 UTC", "sightings": 1 }, { "indicator": "http://110.37.121.43:44715/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 17:26:18 UTC", "last_seen": "2026-03-29 17:26:18 UTC", "sightings": 1 }, { "indicator": "http://110.37.121.43:44715/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 17:26:18 UTC", "last_seen": "2026-03-29 17:26:18 UTC", "sightings": 1 }, { "indicator": "http://110.37.100.152:60191/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 17:22:09 UTC", "last_seen": "2026-03-29 17:22:09 UTC", "sightings": 1 }, { "indicator": "https://curiousdrift.radiantventurex.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 17:22:09 UTC", "last_seen": "2026-03-29 17:22:09 UTC", "sightings": 1 }, { "indicator": "http://219.155.210.59:43889/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 17:20:23 UTC", "last_seen": "2026-03-29 17:20:23 UTC", "sightings": 1 }, { "indicator": "http://110.37.65.205:59034/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-29 17:18:17 UTC", "last_seen": "2026-03-29 17:18:17 UTC", "sightings": 1 }, { "indicator": "https://adapterlog.latticeharbora.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 17:16:08 UTC", "last_seen": "2026-03-29 17:16:08 UTC", "sightings": 1 }, { "indicator": "http://196.189.198.193:41989/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-29 17:13:39 UTC", "last_seen": "2026-03-29 17:13:39 UTC", "sightings": 1 }, { "indicator": "http://60.19.71.200:59561/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-29 17:12:05 UTC", "last_seen": "2026-03-29 17:12:05 UTC", "sightings": 1 }, { "indicator": "https://sampl-cav.latticeharbora.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 17:11:08 UTC", "last_seen": "2026-03-29 17:11:08 UTC", "sightings": 1 }, { "indicator": "http://110.37.118.241:38063/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-29 17:10:19 UTC", "last_seen": "2026-03-29 17:10:19 UTC", "sightings": 1 }, { "indicator": "http://42.5.53.147:51709/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 17:10:19 UTC", "last_seen": "2026-03-29 17:10:19 UTC", "sightings": 1 }, { "indicator": "http://42.59.197.45:36986/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 17:05:18 UTC", "last_seen": "2026-03-29 17:05:18 UTC", "sightings": 1 }, { "indicator": "https://travelwes.latticeharbora.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 17:05:11 UTC", "last_seen": "2026-03-29 17:05:11 UTC", "sightings": 1 }, { "indicator": "https://wswzw.latticeharbora.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 17:00:08 UTC", "last_seen": "2026-03-29 17:00:08 UTC", "sightings": 1 }, { "indicator": "http://59.97.181.179:35388/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 16:59:16 UTC", "last_seen": "2026-03-29 16:59:16 UTC", "sightings": 1 }, { "indicator": "http://59.97.181.179:35388/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 16:58:09 UTC", "last_seen": "2026-03-29 16:58:09 UTC", "sightings": 1 }, { "indicator": "http://117.244.79.12:37634/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 16:56:20 UTC", "last_seen": "2026-03-29 16:56:20 UTC", "sightings": 1 }, { "indicator": "https://drawvall.latticeharbora.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 16:55:12 UTC", "last_seen": "2026-03-29 16:55:12 UTC", "sightings": 1 }, { "indicator": "http://219.155.210.59:43889/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 16:54:17 UTC", "last_seen": "2026-03-29 16:54:17 UTC", "sightings": 1 }, { "indicator": "http://115.63.49.148:44854/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 16:50:13 UTC", "last_seen": "2026-03-29 16:50:13 UTC", "sightings": 1 }, { "indicator": "https://vor-lineet.latticeharbora.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 16:50:10 UTC", "last_seen": "2026-03-29 16:50:10 UTC", "sightings": 1 }, { "indicator": "https://mz48d.apexharbinger.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 16:47:08 UTC", "last_seen": "2026-03-29 16:47:08 UTC", "sightings": 1 }, { "indicator": "http://110.39.246.84:33231/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 16:44:18 UTC", "last_seen": "2026-03-29 16:44:18 UTC", "sightings": 1 }, { "indicator": "http://38.196.90.139:40459/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 16:40:21 UTC", "last_seen": "2026-03-29 16:40:21 UTC", "sightings": 1 }, { "indicator": "http://110.37.103.93:37633/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 16:39:18 UTC", "last_seen": "2026-03-29 16:39:18 UTC", "sightings": 1 }, { "indicator": "http://117.244.79.12:37634/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 16:39:18 UTC", "last_seen": "2026-03-29 16:39:18 UTC", "sightings": 1 }, { "indicator": "http://110.37.118.241:38063/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-29 16:39:17 UTC", "last_seen": "2026-03-29 16:39:17 UTC", "sightings": 1 }, { "indicator": "http://118.232.137.101:35565/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-29 16:39:17 UTC", "last_seen": "2026-03-29 16:39:17 UTC", "sightings": 1 }, { "indicator": "https://merfluxar8.apexharbinger.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 16:39:11 UTC", "last_seen": "2026-03-29 16:39:11 UTC", "sightings": 1 }, { "indicator": "https://pcep.apexharbinger.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 16:39:11 UTC", "last_seen": "2026-03-29 16:39:11 UTC", "sightings": 1 }, { "indicator": "https://69hjs0.apexharbinger.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 16:39:09 UTC", "last_seen": "2026-03-29 16:39:09 UTC", "sightings": 1 }, { "indicator": "http://85.239.147.6/files/8042875554/Abyf8rb.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-29 16:39:06 UTC", "last_seen": "2026-03-29 16:39:06 UTC", "sightings": 1 }, { "indicator": "http://39.40.151.56:49098/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 16:24:43 UTC", "last_seen": "2026-03-29 16:24:43 UTC", "sightings": 1 }, { "indicator": "http://206.0.183.28:48994/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 16:24:30 UTC", "last_seen": "2026-03-29 16:24:30 UTC", "sightings": 1 }, { "indicator": "http://110.39.246.84:33231/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 16:24:20 UTC", "last_seen": "2026-03-29 16:24:20 UTC", "sightings": 1 }, { "indicator": "http://182.121.41.96:36911/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 16:24:20 UTC", "last_seen": "2026-03-29 16:24:20 UTC", "sightings": 1 }, { "indicator": "http://38.196.90.139:40459/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 16:24:20 UTC", "last_seen": "2026-03-29 16:24:20 UTC", "sightings": 1 }, { "indicator": "http://118.232.137.101:35565/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-29 16:24:18 UTC", "last_seen": "2026-03-29 16:24:18 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/mondry1013/Delta-Menu-Force-Hack/refs/heads/main/Tshi/Delta-Force-Hack-Menu-1.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 16:24:17 UTC", "last_seen": "2026-03-29 16:24:17 UTC", "sightings": 1 }, { "indicator": "https://lgwdtq.paragonprospera.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 16:24:17 UTC", "last_seen": "2026-03-29 16:24:17 UTC", "sightings": 1 }, { "indicator": "https://sparrowpine.apexharbinger.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 16:24:17 UTC", "last_seen": "2026-03-29 16:24:17 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Komfuu0963/Latency-Minimizer/refs/heads/main/cloudward/Minimizer_Latency_3.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 16:24:16 UTC", "last_seen": "2026-03-29 16:24:16 UTC", "sightings": 1 }, { "indicator": "https://github.com/Komfuu0963/Latency-Minimizer/raw/refs/heads/main/cloudward/Minimizer_Latency_3.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 16:24:16 UTC", "last_seen": "2026-03-29 16:24:16 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Dean12345644533/gamepulse-rawg-ml-api/refs/heads/main/sql/gamepulse_api_ml_rawg_v3.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 16:24:15 UTC", "last_seen": "2026-03-29 16:24:15 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/zorddddsd/zorddddsd.github.io/refs/heads/main/anthribid/github-io-zorddddsd-3.6.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 16:24:15 UTC", "last_seen": "2026-03-29 16:24:15 UTC", "sightings": 1 }, { "indicator": "https://github.com/Dean12345644533/gamepulse-rawg-ml-api/raw/refs/heads/main/sql/gamepulse_api_ml_rawg_v3.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 16:24:15 UTC", "last_seen": "2026-03-29 16:24:15 UTC", "sightings": 1 }, { "indicator": "https://github.com/zorddddsd/zorddddsd.github.io/raw/refs/heads/main/anthribid/github-io-zorddddsd-3.6.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 16:24:14 UTC", "last_seen": "2026-03-29 16:24:14 UTC", "sightings": 1 }, { "indicator": "https://github.com/lanjingwei2026-maker/fps-ping-booster-new/raw/refs/heads/main/yusdrum/booster_fps_ping_new_v1.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 16:24:14 UTC", "last_seen": "2026-03-29 16:24:14 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/anonymss642/James-Bond-Quantum-of-Solace-PC-Fix-Controller-Support/refs/heads/main/build/obj/Win32/Debug/Quantum-Fix-of-Controller-Solace-Bond-Support-P-James-2.6.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 16:24:13 UTC", "last_seen": "2026-03-29 16:24:13 UTC", "sightings": 1 }, { "indicator": "https://github.com/ShweGyi0000/shwegyi0000.github.io/raw/refs/heads/main/unframed/shwegyi_github_io_3.0.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 16:24:13 UTC", "last_seen": "2026-03-29 16:24:13 UTC", "sightings": 1 }, { "indicator": "https://github.com/mondry1013/Delta-Menu-Force-Hack/raw/refs/heads/main/Tshi/Delta-Force-Hack-Menu-1.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 16:24:13 UTC", "last_seen": "2026-03-29 16:24:13 UTC", "sightings": 1 }, { "indicator": "https://github.com/bhoomagopala28/sd2-slus-move-editor/raw/refs/heads/master/assets/editor_sd_slus_move_1.7-alpha.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 16:24:13 UTC", "last_seen": "2026-03-29 16:24:13 UTC", "sightings": 1 }, { "indicator": "https://github.com/ShweGyi0000/hytale2mc/raw/refs/heads/main/event-stream/src/main/mc_hytale_1.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 16:24:13 UTC", "last_seen": "2026-03-29 16:24:13 UTC", "sightings": 1 }, { "indicator": "https://github.com/zorddddsd/ArcPass/raw/refs/heads/main/unharbored/Pass-Arc-Centricae.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 16:24:13 UTC", "last_seen": "2026-03-29 16:24:13 UTC", "sightings": 1 }, { "indicator": "https://github.com/anonymss642/James-Bond-Quantum-of-Solace-PC-Fix-Controller-Support/raw/refs/heads/main/build/obj/Win32/Debug/Quantum-Fix-of-Controller-Solace-Bond-Support-P-James-2.6.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 16:24:13 UTC", "last_seen": "2026-03-29 16:24:13 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/bhoomagopala28/sd2-slus-move-editor/refs/heads/master/assets/editor_sd_slus_move_1.7-alpha.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 16:24:13 UTC", "last_seen": "2026-03-29 16:24:13 UTC", "sightings": 1 }, { "indicator": "https://g51vxer.paragonprospera.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 16:24:13 UTC", "last_seen": "2026-03-29 16:24:13 UTC", "sightings": 1 }, { "indicator": "https://github.com/araykusuma/Gaming-Fix-Hub-2026/raw/refs/heads/main/excitosecretory/Hub-Fix-Gaming-3.4.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 16:24:13 UTC", "last_seen": "2026-03-29 16:24:13 UTC", "sightings": 1 }, { "indicator": "https://github.com/mondry1013/Delta-Menu-Force-Hack/raw/refs/heads/main/Tshi/Hack_Force_Delta_Menu_2.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 16:24:13 UTC", "last_seen": "2026-03-29 16:24:13 UTC", "sightings": 1 }, { "indicator": "https://github.com/anonymss642/anonymss642.github.io/raw/refs/heads/main/butterwort/github-io-anonymss-1.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 16:24:12 UTC", "last_seen": "2026-03-29 16:24:12 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/ShweGyi0000/shwegyi0000.github.io/refs/heads/main/unframed/shwegyi_github_io_3.0.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 16:24:12 UTC", "last_seen": "2026-03-29 16:24:12 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/zorddddsd/ArcPass/refs/heads/main/unharbored/Pass-Arc-Centricae.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 16:24:12 UTC", "last_seen": "2026-03-29 16:24:12 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/lanjingwei2026-maker/fps-ping-booster-new/refs/heads/main/yusdrum/booster_fps_ping_new_v1.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 16:24:11 UTC", "last_seen": "2026-03-29 16:24:11 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/mondry1013/Delta-Menu-Force-Hack/refs/heads/main/Tshi/Hack_Force_Delta_Menu_2.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 16:24:10 UTC", "last_seen": "2026-03-29 16:24:10 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/ShweGyi0000/hytale2mc/refs/heads/main/event-stream/src/main/mc_hytale_1.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 16:24:10 UTC", "last_seen": "2026-03-29 16:24:10 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/anonymss642/anonymss642.github.io/refs/heads/main/butterwort/github-io-anonymss-1.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 16:24:10 UTC", "last_seen": "2026-03-29 16:24:10 UTC", "sightings": 1 }, { "indicator": "http://110.37.103.93:37633/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 16:08:21 UTC", "last_seen": "2026-03-29 16:08:21 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/araykusuma/css/refs/heads/main/sarlak/Software-v1.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 16:08:11 UTC", "last_seen": "2026-03-29 16:08:11 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/nate90911/dodhacks/refs/heads/main/dodhacks-module-src/microsoft/Release.AVX2/Software-v2.6.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 16:08:10 UTC", "last_seen": "2026-03-29 16:08:10 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/TanveerMalik97/steam-badges-db/refs/heads/main/mogitocia/steam_badges_db_2.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 16:08:10 UTC", "last_seen": "2026-03-29 16:08:10 UTC", "sightings": 1 }, { "indicator": "https://github.com/human172/RPG.Game/raw/refs/heads/main/capocchia/Game_RP_1.4-alpha.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 16:08:10 UTC", "last_seen": "2026-03-29 16:08:10 UTC", "sightings": 1 }, { "indicator": "https://github.com/TanveerMalik97/steam-badges-db/raw/refs/heads/main/mogitocia/steam_badges_db_2.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 16:08:10 UTC", "last_seen": "2026-03-29 16:08:10 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/human172/RPG.Game/refs/heads/main/capocchia/Game_RP_1.4-alpha.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 16:08:10 UTC", "last_seen": "2026-03-29 16:08:10 UTC", "sightings": 1 }, { "indicator": "https://github.com/nate90911/dodhacks/raw/refs/heads/main/dodhacks-module-src/microsoft/Release.AVX2/Software-v2.6.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 16:08:10 UTC", "last_seen": "2026-03-29 16:08:10 UTC", "sightings": 1 }, { "indicator": "https://github.com/GASSNY/NagaKeyMapper/raw/refs/heads/main/src/Key_Mapper_Naga_1.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 16:08:10 UTC", "last_seen": "2026-03-29 16:08:10 UTC", "sightings": 1 }, { "indicator": "https://github.com/GRAHHHHH99/MiniVitaTV/raw/refs/heads/main/dunch/Vita_Mini_TV_2.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 16:08:10 UTC", "last_seen": "2026-03-29 16:08:10 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/GASSNY/NagaKeyMapper/refs/heads/main/src/Key_Mapper_Naga_1.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 16:08:10 UTC", "last_seen": "2026-03-29 16:08:10 UTC", "sightings": 1 }, { "indicator": "https://github.com/mraflyaditya/hytale-server/raw/refs/heads/main/docs/en/server_hytale_2.9.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 16:08:10 UTC", "last_seen": "2026-03-29 16:08:10 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/mraflyaditya/hytale-server/refs/heads/main/docs/en/server_hytale_2.9.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 16:08:10 UTC", "last_seen": "2026-03-29 16:08:10 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/GRAHHHHH99/MiniVitaTV/refs/heads/main/dunch/Vita_Mini_TV_2.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 16:08:10 UTC", "last_seen": "2026-03-29 16:08:10 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/araykusuma/Gaming-Fix-Hub-2026/refs/heads/main/excitosecretory/Hub-Fix-Gaming-3.4.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 16:08:10 UTC", "last_seen": "2026-03-29 16:08:10 UTC", "sightings": 1 }, { "indicator": "https://github.com/araykusuma/css/raw/refs/heads/main/sarlak/Software-v1.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 16:08:10 UTC", "last_seen": "2026-03-29 16:08:10 UTC", "sightings": 1 }, { "indicator": "http://42.59.197.45:36986/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 16:05:18 UTC", "last_seen": "2026-03-29 16:05:18 UTC", "sightings": 1 }, { "indicator": "https://solvale4a.paragonprospera.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 16:01:10 UTC", "last_seen": "2026-03-29 16:01:10 UTC", "sightings": 1 }, { "indicator": "https://github.com/itsyxc/now.gg-roblox-in-browser/raw/refs/heads/main/Turkomanic/browser-gg-roblox-in-now-1.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 16:00:11 UTC", "last_seen": "2026-03-29 16:00:11 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/itsyxc/now.gg-roblox-in-browser/refs/heads/main/Turkomanic/browser-gg-roblox-in-now-1.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-29 16:00:11 UTC", "last_seen": "2026-03-29 16:00:11 UTC", "sightings": 1 }, { "indicator": "http://110.37.61.44:44511/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-29 15:58:24 UTC", "last_seen": "2026-03-29 15:58:24 UTC", "sightings": 1 }, { "indicator": "https://blenddense.paragonprospera.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 15:56:10 UTC", "last_seen": "2026-03-29 15:56:10 UTC", "sightings": 1 }, { "indicator": "https://github.com/sharrend/Silentum-Spoofer/raw/refs/heads/main/Silentum_Spoofer.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "BRAT", "exe" ], "first_seen": "2026-03-29 15:53:12 UTC", "last_seen": "2026-03-29 15:53:12 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/sharrend/Silentum-Spoofer/refs/heads/main/Silentum_Spoofer.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "BRAT", "exe" ], "first_seen": "2026-03-29 15:53:10 UTC", "last_seen": "2026-03-29 15:53:10 UTC", "sightings": 1 }, { "indicator": "https://noblebalan.paragonprospera.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 15:50:13 UTC", "last_seen": "2026-03-29 15:50:13 UTC", "sightings": 1 }, { "indicator": "https://b7vwxeo.paragonprospera.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 15:47:14 UTC", "last_seen": "2026-03-29 15:47:14 UTC", "sightings": 1 }, { "indicator": "http://115.55.128.28:46018/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 15:46:16 UTC", "last_seen": "2026-03-29 15:46:16 UTC", "sightings": 1 }, { "indicator": "https://dz0ly973.quantumpatronage.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 15:38:08 UTC", "last_seen": "2026-03-29 15:38:08 UTC", "sightings": 1 }, { "indicator": "http://125.113.156.251:39635/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-29 15:35:19 UTC", "last_seen": "2026-03-29 15:35:19 UTC", "sightings": 1 }, { "indicator": "http://110.37.61.44:44511/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-29 15:32:18 UTC", "last_seen": "2026-03-29 15:32:18 UTC", "sightings": 1 }, { "indicator": "https://impor-hinge.quantumpatronage.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 15:32:09 UTC", "last_seen": "2026-03-29 15:32:09 UTC", "sightings": 1 }, { "indicator": "http://61.53.149.230:56810/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-29 15:32:07 UTC", "last_seen": "2026-03-29 15:32:07 UTC", "sightings": 1 }, { "indicator": "http://5.165.103.185:35163/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 15:29:20 UTC", "last_seen": "2026-03-29 15:29:20 UTC", "sightings": 1 }, { "indicator": "http://5.165.103.185:35163/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 15:28:22 UTC", "last_seen": "2026-03-29 15:28:22 UTC", "sightings": 1 }, { "indicator": "http://202.111.130.60:55074/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 15:27:20 UTC", "last_seen": "2026-03-29 15:27:20 UTC", "sightings": 1 }, { "indicator": "https://vorcoreen8.quantumpatronage.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 15:27:08 UTC", "last_seen": "2026-03-29 15:27:08 UTC", "sightings": 1 }, { "indicator": "http://115.55.128.28:46018/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 15:23:22 UTC", "last_seen": "2026-03-29 15:23:22 UTC", "sightings": 1 }, { "indicator": "http://112.237.192.167:38972/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-29 15:22:07 UTC", "last_seen": "2026-03-29 15:22:07 UTC", "sightings": 1 }, { "indicator": "http://95.165.187.102:56551/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 15:21:26 UTC", "last_seen": "2026-03-29 15:21:26 UTC", "sightings": 1 }, { "indicator": "https://br0o-wave.quantumpatronage.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 15:21:10 UTC", "last_seen": "2026-03-29 15:21:10 UTC", "sightings": 1 }, { "indicator": "http://115.61.97.252:33035/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 15:17:20 UTC", "last_seen": "2026-03-29 15:17:20 UTC", "sightings": 1 }, { "indicator": "http://61.53.149.230:56810/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 15:16:19 UTC", "last_seen": "2026-03-29 15:16:19 UTC", "sightings": 1 }, { "indicator": "https://gidwwlm.quantumpatronage.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 15:15:10 UTC", "last_seen": "2026-03-29 15:15:10 UTC", "sightings": 1 }, { "indicator": "http://125.113.156.251:39635/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-29 15:10:25 UTC", "last_seen": "2026-03-29 15:10:25 UTC", "sightings": 1 }, { "indicator": "https://quorvale2or.quantumpatronage.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 15:09:10 UTC", "last_seen": "2026-03-29 15:09:10 UTC", "sightings": 1 }, { "indicator": "https://sfjgv.momentumventurex.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 15:04:06 UTC", "last_seen": "2026-03-29 15:04:06 UTC", "sightings": 1 }, { "indicator": "http://114.226.127.57:46202/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-29 15:03:18 UTC", "last_seen": "2026-03-29 15:03:18 UTC", "sightings": 1 }, { "indicator": "http://112.237.192.167:38972/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-29 15:02:31 UTC", "last_seen": "2026-03-29 15:02:31 UTC", "sightings": 1 }, { "indicator": "https://visu-line.momentumventurex.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 14:58:10 UTC", "last_seen": "2026-03-29 14:58:10 UTC", "sightings": 1 }, { "indicator": "http://59.88.12.200:58557/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 14:56:18 UTC", "last_seen": "2026-03-29 14:56:18 UTC", "sightings": 1 }, { "indicator": "http://117.245.136.13:39786/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 14:54:09 UTC", "last_seen": "2026-03-29 14:54:09 UTC", "sightings": 1 }, { "indicator": "https://fierter.momentumventurex.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 14:53:08 UTC", "last_seen": "2026-03-29 14:53:08 UTC", "sightings": 1 }, { "indicator": "http://60.211.45.156:45103/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 14:52:09 UTC", "last_seen": "2026-03-29 14:52:09 UTC", "sightings": 1 }, { "indicator": "http://117.193.170.47:41629/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 14:50:26 UTC", "last_seen": "2026-03-29 14:50:26 UTC", "sightings": 1 }, { "indicator": "http://58.242.20.192:43063/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-29 14:47:20 UTC", "last_seen": "2026-03-29 14:47:20 UTC", "sightings": 1 }, { "indicator": "https://hpi496.momentumventurex.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 14:47:08 UTC", "last_seen": "2026-03-29 14:47:08 UTC", "sightings": 1 }, { "indicator": "http://114.226.127.57:46202/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-29 14:43:15 UTC", "last_seen": "2026-03-29 14:43:15 UTC", "sightings": 1 }, { "indicator": "https://hlhni.momentumventurex.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 14:42:10 UTC", "last_seen": "2026-03-29 14:42:10 UTC", "sightings": 1 }, { "indicator": "http://60.211.45.156:45103/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 14:39:18 UTC", "last_seen": "2026-03-29 14:39:18 UTC", "sightings": 1 }, { "indicator": "http://61.1.26.99:39180/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 14:36:11 UTC", "last_seen": "2026-03-29 14:36:11 UTC", "sightings": 1 }, { "indicator": "https://ytun75fm.momentumventurex.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 14:36:07 UTC", "last_seen": "2026-03-29 14:36:07 UTC", "sightings": 1 }, { "indicator": "http://115.61.97.252:33035/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 14:34:07 UTC", "last_seen": "2026-03-29 14:34:07 UTC", "sightings": 1 }, { "indicator": "https://019a.covenantpatronage.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 14:31:10 UTC", "last_seen": "2026-03-29 14:31:10 UTC", "sightings": 1 }, { "indicator": "http://196.191.231.12:36897/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-29 14:25:20 UTC", "last_seen": "2026-03-29 14:25:20 UTC", "sightings": 1 }, { "indicator": "https://velmarkon.covenantpatronage.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 14:24:08 UTC", "last_seen": "2026-03-29 14:24:08 UTC", "sightings": 1 }, { "indicator": "http://110.186.229.137:33344/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-29 14:20:21 UTC", "last_seen": "2026-03-29 14:20:21 UTC", "sightings": 1 }, { "indicator": "https://gpkvcvl.covenantpatronage.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 14:20:11 UTC", "last_seen": "2026-03-29 14:20:11 UTC", "sightings": 1 }, { "indicator": "http://196.191.231.12:36897/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-29 14:19:18 UTC", "last_seen": "2026-03-29 14:19:18 UTC", "sightings": 1 }, { "indicator": "http://42.242.128.121:50917/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-29 14:19:10 UTC", "last_seen": "2026-03-29 14:19:10 UTC", "sightings": 1 }, { "indicator": "http://59.88.12.200:58557/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 14:18:13 UTC", "last_seen": "2026-03-29 14:18:13 UTC", "sightings": 1 }, { "indicator": "http://27.37.27.70:42155/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 14:16:20 UTC", "last_seen": "2026-03-29 14:16:20 UTC", "sightings": 1 }, { "indicator": "http://182.239.81.126:44367/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 14:15:18 UTC", "last_seen": "2026-03-29 14:15:18 UTC", "sightings": 1 }, { "indicator": "http://58.242.20.192:43063/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-29 14:14:19 UTC", "last_seen": "2026-03-29 14:14:19 UTC", "sightings": 1 }, { "indicator": "http://182.239.81.126:44367/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 14:12:16 UTC", "last_seen": "2026-03-29 14:12:16 UTC", "sightings": 1 }, { "indicator": "https://362fon24.covenantpatronage.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 14:11:10 UTC", "last_seen": "2026-03-29 14:11:10 UTC", "sightings": 1 }, { "indicator": "https://otzv.covenantpatronage.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 14:08:08 UTC", "last_seen": "2026-03-29 14:08:08 UTC", "sightings": 1 }, { "indicator": "http://110.37.5.55:34278/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 14:04:13 UTC", "last_seen": "2026-03-29 14:04:13 UTC", "sightings": 1 }, { "indicator": "https://fidels.b-cdn.net/ScreenConnect.ClientSetup.msi", "indicator_type": "url", "source": "URLhaus", "tags": [ "connectwise" ], "first_seen": "2026-03-29 14:00:17 UTC", "last_seen": "2026-03-29 14:00:17 UTC", "sightings": 1 }, { "indicator": "https://ilonermailc.net/WORDPRESS%202026.zip", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-29 14:00:14 UTC", "last_seen": "2026-03-29 14:00:14 UTC", "sightings": 1 }, { "indicator": "https://in-oman-liner.com/WORDPRESS%202026.zip", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-29 14:00:14 UTC", "last_seen": "2026-03-29 14:00:14 UTC", "sightings": 1 }, { "indicator": "https://pub-b4da4442f31f48e59847169454eb667a.r2.dev/SOCIAL-SECURITY_DOCUMENT_2025.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "DattoRMM" ], "first_seen": "2026-03-29 14:00:14 UTC", "last_seen": "2026-03-29 14:00:14 UTC", "sightings": 1 }, { "indicator": "https://rigpacket.com/COUTURE_LOGISTICS_ONLINE_PACKET_PORTAL_2026.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "DattoRMM" ], "first_seen": "2026-03-29 14:00:14 UTC", "last_seen": "2026-03-29 14:00:14 UTC", "sightings": 1 }, { "indicator": "http://206.189.22.92/1.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai", "script" ], "first_seen": "2026-03-29 14:00:13 UTC", "last_seen": "2026-03-29 14:00:13 UTC", "sightings": 1 }, { "indicator": "https://hemailsendlin.com/WORDPRESS%202026.zip", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-29 14:00:13 UTC", "last_seen": "2026-03-29 14:00:13 UTC", "sightings": 1 }, { "indicator": "https://hemailsendlin.org/WORDPRESS%202026.zip", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-29 14:00:13 UTC", "last_seen": "2026-03-29 14:00:13 UTC", "sightings": 1 }, { "indicator": "https://ilonermailc.org/WORDPRESS%202026.zip", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-29 14:00:13 UTC", "last_seen": "2026-03-29 14:00:13 UTC", "sightings": 1 }, { "indicator": "https://inomanliner.net/WORDPRESS%202026.zip", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-29 14:00:13 UTC", "last_seen": "2026-03-29 14:00:13 UTC", "sightings": 1 }, { "indicator": "https://ilonermailc.com/WORDPRESS%202026.zip", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-29 14:00:13 UTC", "last_seen": "2026-03-29 14:00:13 UTC", "sightings": 1 }, { "indicator": "http://46.203.233.35/m68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-29 14:00:12 UTC", "last_seen": "2026-03-29 14:00:12 UTC", "sightings": 1 }, { "indicator": "http://206.189.22.92/windyloveyou/windy.mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-29 14:00:10 UTC", "last_seen": "2026-03-29 14:00:10 UTC", "sightings": 1 }, { "indicator": "http://206.189.22.92/windyloveyou/windy.arc", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-29 14:00:10 UTC", "last_seen": "2026-03-29 14:00:10 UTC", "sightings": 1 }, { "indicator": "http://206.189.22.92/windyloveyou/windy.x86", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-29 14:00:10 UTC", "last_seen": "2026-03-29 14:00:10 UTC", "sightings": 1 }, { "indicator": "https://puremartbd.shop/zzms/ZoomWorkspace_JViVMy7g_installer.msi", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-29 14:00:09 UTC", "last_seen": "2026-03-29 14:00:09 UTC", "sightings": 1 }, { "indicator": "http://206.189.22.92/windyloveyou/windy.i468", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-29 14:00:08 UTC", "last_seen": "2026-03-29 14:00:08 UTC", "sightings": 1 }, { "indicator": "http://110.186.229.137:33344/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-29 13:58:20 UTC", "last_seen": "2026-03-29 13:58:20 UTC", "sightings": 1 }, { "indicator": "https://794kd31.covenantpatronage.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 13:57:13 UTC", "last_seen": "2026-03-29 13:57:13 UTC", "sightings": 1 }, { "indicator": "https://ss86rj.latticeprospera.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 13:48:10 UTC", "last_seen": "2026-03-29 13:48:10 UTC", "sightings": 1 }, { "indicator": "https://massivepatte.latticeprospera.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 13:41:08 UTC", "last_seen": "2026-03-29 13:41:08 UTC", "sightings": 1 }, { "indicator": "http://42.242.128.121:50917/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-29 13:38:16 UTC", "last_seen": "2026-03-29 13:38:16 UTC", "sightings": 1 }, { "indicator": "https://pingla.latticeprospera.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 13:33:12 UTC", "last_seen": "2026-03-29 13:33:12 UTC", "sightings": 1 }, { "indicator": "http://204.137.166.139:42101/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-29 13:31:18 UTC", "last_seen": "2026-03-29 13:31:18 UTC", "sightings": 1 }, { "indicator": "https://vzf6.latticeprospera.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 13:26:10 UTC", "last_seen": "2026-03-29 13:26:10 UTC", "sightings": 1 }, { "indicator": "http://123.189.149.14:40270/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 13:20:20 UTC", "last_seen": "2026-03-29 13:20:20 UTC", "sightings": 1 }, { "indicator": "https://warm-grid.latticeprospera.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 13:18:10 UTC", "last_seen": "2026-03-29 13:18:10 UTC", "sightings": 1 }, { "indicator": "http://85.239.147.6/files/6849343518/kYApj4E.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-03-29 13:11:05 UTC", "last_seen": "2026-03-29 13:11:05 UTC", "sightings": 1 }, { "indicator": "https://binsap.latticeprospera.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 13:10:09 UTC", "last_seen": "2026-03-29 13:10:09 UTC", "sightings": 1 }, { "indicator": "http://204.137.166.139:42101/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-29 13:08:10 UTC", "last_seen": "2026-03-29 13:08:10 UTC", "sightings": 1 }, { "indicator": "https://rybfb.radiantharbinger.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 13:03:09 UTC", "last_seen": "2026-03-29 13:03:09 UTC", "sightings": 1 }, { "indicator": "http://116.55.64.167:35466/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-29 13:00:38 UTC", "last_seen": "2026-03-29 13:00:38 UTC", "sightings": 1 }, { "indicator": "https://plassplit.radiantharbinger.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 12:55:10 UTC", "last_seen": "2026-03-29 12:55:10 UTC", "sightings": 1 }, { "indicator": "https://hyper-tr4cke.radiantharbinger.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 12:47:07 UTC", "last_seen": "2026-03-29 12:47:07 UTC", "sightings": 1 }, { "indicator": "https://sparr04-path.radiantharbinger.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 12:39:09 UTC", "last_seen": "2026-03-29 12:39:09 UTC", "sightings": 1 }, { "indicator": "https://gloscarrie.radiantharbinger.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 12:32:09 UTC", "last_seen": "2026-03-29 12:32:09 UTC", "sightings": 1 }, { "indicator": "https://8aij4a.radiantharbinger.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 12:25:12 UTC", "last_seen": "2026-03-29 12:25:12 UTC", "sightings": 1 }, { "indicator": "http://110.36.15.18:37109/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-29 12:17:07 UTC", "last_seen": "2026-03-29 12:17:07 UTC", "sightings": 1 }, { "indicator": "https://1earn-scope.zenithventurex.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 12:17:07 UTC", "last_seen": "2026-03-29 12:17:07 UTC", "sightings": 1 }, { "indicator": "http://110.36.15.18:37109/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-29 12:12:06 UTC", "last_seen": "2026-03-29 12:12:06 UTC", "sightings": 1 }, { "indicator": "http://117.247.209.183:46825/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 12:10:12 UTC", "last_seen": "2026-03-29 12:10:12 UTC", "sightings": 1 }, { "indicator": "https://p4yl-phase.zenithventurex.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 12:09:08 UTC", "last_seen": "2026-03-29 12:09:08 UTC", "sightings": 1 }, { "indicator": "https://microbecip.zenithventurex.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 12:02:09 UTC", "last_seen": "2026-03-29 12:02:09 UTC", "sightings": 1 }, { "indicator": "https://lumvale4en.zenithventurex.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 11:54:10 UTC", "last_seen": "2026-03-29 11:54:10 UTC", "sightings": 1 }, { "indicator": "http://112.198.132.186:42747/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-29 11:47:07 UTC", "last_seen": "2026-03-29 11:47:07 UTC", "sightings": 1 }, { "indicator": "https://tri-crestar.zenithventurex.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 11:46:09 UTC", "last_seen": "2026-03-29 11:46:09 UTC", "sightings": 1 }, { "indicator": "http://39.74.57.29:55438/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 11:40:19 UTC", "last_seen": "2026-03-29 11:40:19 UTC", "sightings": 1 }, { "indicator": "http://59.180.186.247:40729/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 11:39:12 UTC", "last_seen": "2026-03-29 11:39:12 UTC", "sightings": 1 }, { "indicator": "https://arkspireix.zenithventurex.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 11:38:08 UTC", "last_seen": "2026-03-29 11:38:08 UTC", "sightings": 1 }, { "indicator": "https://vor-crestex.ironvale.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 11:31:08 UTC", "last_seen": "2026-03-29 11:31:08 UTC", "sightings": 1 }, { "indicator": "http://125.44.193.224:41136/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-29 11:27:08 UTC", "last_seen": "2026-03-29 11:27:08 UTC", "sightings": 1 }, { "indicator": "https://brandpale.ironvale.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 11:23:11 UTC", "last_seen": "2026-03-29 11:23:11 UTC", "sightings": 1 }, { "indicator": "https://0colppvc.ironvale.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 11:16:08 UTC", "last_seen": "2026-03-29 11:16:08 UTC", "sightings": 1 }, { "indicator": "http://112.198.132.186:42747/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-29 11:12:07 UTC", "last_seen": "2026-03-29 11:12:07 UTC", "sightings": 1 }, { "indicator": "https://nor-lithor.cr0wnfern.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 11:07:08 UTC", "last_seen": "2026-03-29 11:07:08 UTC", "sightings": 1 }, { "indicator": "http://39.74.57.29:55438/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 11:03:19 UTC", "last_seen": "2026-03-29 11:03:19 UTC", "sightings": 1 }, { "indicator": "https://mof4x8.cr0wnfern.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 11:01:13 UTC", "last_seen": "2026-03-29 11:01:13 UTC", "sightings": 1 }, { "indicator": "https://dynmarkon.cr0wnfern.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 10:53:07 UTC", "last_seen": "2026-03-29 10:53:07 UTC", "sightings": 1 }, { "indicator": "http://59.97.252.186:53332/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 10:51:10 UTC", "last_seen": "2026-03-29 10:51:10 UTC", "sightings": 1 }, { "indicator": "http://222.137.73.213:59696/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 10:50:25 UTC", "last_seen": "2026-03-29 10:50:25 UTC", "sightings": 1 }, { "indicator": "http://221.225.225.55:34502/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 10:50:25 UTC", "last_seen": "2026-03-29 10:50:25 UTC", "sightings": 1 }, { "indicator": "http://221.11.172.25:46427/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips" ], "first_seen": "2026-03-29 10:49:19 UTC", "last_seen": "2026-03-29 10:49:19 UTC", "sightings": 1 }, { "indicator": "https://spruc39-dock.cr0wnfern.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 10:45:11 UTC", "last_seen": "2026-03-29 10:45:11 UTC", "sightings": 1 }, { "indicator": "https://storefield.cr0wnfern.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 10:37:09 UTC", "last_seen": "2026-03-29 10:37:09 UTC", "sightings": 1 }, { "indicator": "http://110.37.35.89:34070/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 10:32:21 UTC", "last_seen": "2026-03-29 10:32:21 UTC", "sightings": 1 }, { "indicator": "https://alignaudio.mosslark.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 10:31:08 UTC", "last_seen": "2026-03-29 10:31:08 UTC", "sightings": 1 }, { "indicator": "http://221.11.172.25:46427/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips" ], "first_seen": "2026-03-29 10:28:13 UTC", "last_seen": "2026-03-29 10:28:13 UTC", "sightings": 1 }, { "indicator": "https://fabv2b.mosslark.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 10:22:08 UTC", "last_seen": "2026-03-29 10:22:08 UTC", "sightings": 1 }, { "indicator": "http://221.225.225.55:34502/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 10:15:09 UTC", "last_seen": "2026-03-29 10:15:09 UTC", "sightings": 1 }, { "indicator": "https://brigh-orche.mosslark.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 10:14:09 UTC", "last_seen": "2026-03-29 10:14:09 UTC", "sightings": 1 }, { "indicator": "http://85.12.229.54:33369/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-29 10:12:06 UTC", "last_seen": "2026-03-29 10:12:06 UTC", "sightings": 1 }, { "indicator": "http://123.5.125.71:42784/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 10:07:19 UTC", "last_seen": "2026-03-29 10:07:19 UTC", "sightings": 1 }, { "indicator": "https://authcraft.mosslark.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 10:07:08 UTC", "last_seen": "2026-03-29 10:07:08 UTC", "sightings": 1 }, { "indicator": "http://222.127.171.38:58479/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-29 10:04:12 UTC", "last_seen": "2026-03-29 10:04:12 UTC", "sightings": 1 }, { "indicator": "http://123.185.34.154:41929/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-29 10:03:23 UTC", "last_seen": "2026-03-29 10:03:23 UTC", "sightings": 1 }, { "indicator": "https://icegri.mosslark.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 09:59:09 UTC", "last_seen": "2026-03-29 09:59:09 UTC", "sightings": 1 }, { "indicator": "https://wint-node.foxwhirl.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 09:52:10 UTC", "last_seen": "2026-03-29 09:52:10 UTC", "sightings": 1 }, { "indicator": "http://115.56.98.89:41048/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 09:49:22 UTC", "last_seen": "2026-03-29 09:49:22 UTC", "sightings": 1 }, { "indicator": "http://123.185.34.154:41929/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-29 09:46:18 UTC", "last_seen": "2026-03-29 09:46:18 UTC", "sightings": 1 }, { "indicator": "http://222.137.73.213:59696/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 09:46:17 UTC", "last_seen": "2026-03-29 09:46:17 UTC", "sightings": 1 }, { "indicator": "http://112.140.191.204:58703/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-29 09:45:17 UTC", "last_seen": "2026-03-29 09:45:17 UTC", "sightings": 1 }, { "indicator": "https://azuregrowth.foxwhirl.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 09:44:08 UTC", "last_seen": "2026-03-29 09:44:08 UTC", "sightings": 1 }, { "indicator": "http://85.12.229.54:33369/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-29 09:42:07 UTC", "last_seen": "2026-03-29 09:42:07 UTC", "sightings": 1 }, { "indicator": "http://222.127.171.38:58479/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-29 09:38:24 UTC", "last_seen": "2026-03-29 09:38:24 UTC", "sightings": 1 }, { "indicator": "http://123.5.125.71:42784/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 09:37:21 UTC", "last_seen": "2026-03-29 09:37:21 UTC", "sightings": 1 }, { "indicator": "http://110.37.5.55:34278/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 09:36:20 UTC", "last_seen": "2026-03-29 09:36:20 UTC", "sightings": 1 }, { "indicator": "https://oohdvj.foxwhirl.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 09:36:10 UTC", "last_seen": "2026-03-29 09:36:10 UTC", "sightings": 1 }, { "indicator": "https://0dxtenvl.foxwhirl.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 09:29:08 UTC", "last_seen": "2026-03-29 09:29:08 UTC", "sightings": 1 }, { "indicator": "http://182.122.223.237:33129/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-29 09:22:09 UTC", "last_seen": "2026-03-29 09:22:09 UTC", "sightings": 1 }, { "indicator": "https://raven-core.foxwhirl.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 09:21:08 UTC", "last_seen": "2026-03-29 09:21:08 UTC", "sightings": 1 }, { "indicator": "https://norspireen5.stormcove.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 09:13:07 UTC", "last_seen": "2026-03-29 09:13:07 UTC", "sightings": 1 }, { "indicator": "http://162.250.16.76:40084/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 09:11:15 UTC", "last_seen": "2026-03-29 09:11:15 UTC", "sightings": 1 }, { "indicator": "http://110.37.28.119:48256/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 09:11:15 UTC", "last_seen": "2026-03-29 09:11:15 UTC", "sightings": 1 }, { "indicator": "http://162.250.16.76:40084/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 09:10:22 UTC", "last_seen": "2026-03-29 09:10:22 UTC", "sightings": 1 }, { "indicator": "http://59.88.234.108:51775/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 09:09:24 UTC", "last_seen": "2026-03-29 09:09:24 UTC", "sightings": 1 }, { "indicator": "http://27.206.35.240:50622/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-29 09:07:08 UTC", "last_seen": "2026-03-29 09:07:08 UTC", "sightings": 1 }, { "indicator": "https://qu1c-mesh.stormcove.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 09:06:07 UTC", "last_seen": "2026-03-29 09:06:07 UTC", "sightings": 1 }, { "indicator": "http://27.202.73.219:55495/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 09:05:23 UTC", "last_seen": "2026-03-29 09:05:23 UTC", "sightings": 1 }, { "indicator": "https://ahbn5c.stormcove.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 08:58:08 UTC", "last_seen": "2026-03-29 08:58:08 UTC", "sightings": 1 }, { "indicator": "https://quorfluxet.stormcove.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 08:50:10 UTC", "last_seen": "2026-03-29 08:50:10 UTC", "sightings": 1 }, { "indicator": "http://59.89.65.192:41113/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 08:44:12 UTC", "last_seen": "2026-03-29 08:44:12 UTC", "sightings": 1 }, { "indicator": "http://59.89.65.192:41113/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 08:43:11 UTC", "last_seen": "2026-03-29 08:43:11 UTC", "sightings": 1 }, { "indicator": "http://27.207.206.229:44131/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 08:43:10 UTC", "last_seen": "2026-03-29 08:43:10 UTC", "sightings": 1 }, { "indicator": "http://59.88.234.108:51775/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 08:43:10 UTC", "last_seen": "2026-03-29 08:43:10 UTC", "sightings": 1 }, { "indicator": "https://woodspeci.stormcove.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 08:42:08 UTC", "last_seen": "2026-03-29 08:42:08 UTC", "sightings": 1 }, { "indicator": "http://110.37.28.119:48256/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 08:39:13 UTC", "last_seen": "2026-03-29 08:39:13 UTC", "sightings": 1 }, { "indicator": "https://arnb3r-line.n1ghtbloom.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 08:35:10 UTC", "last_seen": "2026-03-29 08:35:10 UTC", "sightings": 1 }, { "indicator": "https://import-loop.n1ghtbloom.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 08:27:10 UTC", "last_seen": "2026-03-29 08:27:10 UTC", "sightings": 1 }, { "indicator": "http://115.202.189.41:59146/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-29 08:23:13 UTC", "last_seen": "2026-03-29 08:23:13 UTC", "sightings": 1 }, { "indicator": "http://117.253.151.212:60235/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 08:23:09 UTC", "last_seen": "2026-03-29 08:23:09 UTC", "sightings": 1 }, { "indicator": "https://geyserclient.n1ghtbloom.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 08:20:11 UTC", "last_seen": "2026-03-29 08:20:11 UTC", "sightings": 1 }, { "indicator": "http://113.238.102.56:34587/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 08:19:17 UTC", "last_seen": "2026-03-29 08:19:17 UTC", "sightings": 1 }, { "indicator": "http://42.6.32.230:38376/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-29 08:17:07 UTC", "last_seen": "2026-03-29 08:17:07 UTC", "sightings": 1 }, { "indicator": "http://222.140.187.197:37177/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 08:16:08 UTC", "last_seen": "2026-03-29 08:16:08 UTC", "sightings": 1 }, { "indicator": "http://125.44.19.100:49561/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 08:13:17 UTC", "last_seen": "2026-03-29 08:13:17 UTC", "sightings": 1 }, { "indicator": "https://wlikkfq.n1ghtbloom.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 08:13:08 UTC", "last_seen": "2026-03-29 08:13:08 UTC", "sightings": 1 }, { "indicator": "https://trustedotter.n1ghtbloom.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 08:04:09 UTC", "last_seen": "2026-03-29 08:04:09 UTC", "sightings": 1 }, { "indicator": "http://120.28.194.30:54484/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-29 07:57:17 UTC", "last_seen": "2026-03-29 07:57:17 UTC", "sightings": 1 }, { "indicator": "https://r9y47.quillridge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 07:57:10 UTC", "last_seen": "2026-03-29 07:57:10 UTC", "sightings": 1 }, { "indicator": "http://196.189.101.82:39387/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-29 07:56:19 UTC", "last_seen": "2026-03-29 07:56:19 UTC", "sightings": 1 }, { "indicator": "http://115.202.189.41:59146/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-29 07:54:12 UTC", "last_seen": "2026-03-29 07:54:12 UTC", "sightings": 1 }, { "indicator": "http://113.238.102.56:34587/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 07:53:17 UTC", "last_seen": "2026-03-29 07:53:17 UTC", "sightings": 1 }, { "indicator": "https://shadowdispatch.quillridge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 07:49:08 UTC", "last_seen": "2026-03-29 07:49:08 UTC", "sightings": 1 }, { "indicator": "http://42.59.114.164:39179/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-29 07:47:07 UTC", "last_seen": "2026-03-29 07:47:07 UTC", "sightings": 1 }, { "indicator": "http://125.44.19.100:49561/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 07:44:09 UTC", "last_seen": "2026-03-29 07:44:09 UTC", "sightings": 1 }, { "indicator": "https://processblo.quillridge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 07:42:09 UTC", "last_seen": "2026-03-29 07:42:09 UTC", "sightings": 1 }, { "indicator": "http://42.6.32.230:38376/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-29 07:37:07 UTC", "last_seen": "2026-03-29 07:37:07 UTC", "sightings": 1 }, { "indicator": "http://222.127.214.87:32954/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-29 07:34:10 UTC", "last_seen": "2026-03-29 07:34:10 UTC", "sightings": 1 }, { "indicator": "https://manif-graph.quillridge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 07:33:07 UTC", "last_seen": "2026-03-29 07:33:07 UTC", "sightings": 1 }, { "indicator": "http://117.207.203.251:33063/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 07:31:15 UTC", "last_seen": "2026-03-29 07:31:15 UTC", "sightings": 1 }, { "indicator": "http://120.28.194.30:54484/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-29 07:31:11 UTC", "last_seen": "2026-03-29 07:31:11 UTC", "sightings": 1 }, { "indicator": "http://117.253.151.212:60235/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 07:30:13 UTC", "last_seen": "2026-03-29 07:30:13 UTC", "sightings": 1 }, { "indicator": "https://torren5-plate.quillridge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 07:30:13 UTC", "last_seen": "2026-03-29 07:30:13 UTC", "sightings": 1 }, { "indicator": "http://110.37.11.215:59096/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 07:28:20 UTC", "last_seen": "2026-03-29 07:28:20 UTC", "sightings": 1 }, { "indicator": "https://arkvenum2.silvermuse.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 07:19:07 UTC", "last_seen": "2026-03-29 07:19:07 UTC", "sightings": 1 }, { "indicator": "http://196.189.101.82:39387/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-29 07:16:20 UTC", "last_seen": "2026-03-29 07:16:20 UTC", "sightings": 1 }, { "indicator": "https://my07cfit.silvermuse.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 07:11:08 UTC", "last_seen": "2026-03-29 07:11:08 UTC", "sightings": 1 }, { "indicator": "http://110.37.106.206:50383/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-29 07:07:07 UTC", "last_seen": "2026-03-29 07:07:07 UTC", "sightings": 1 }, { "indicator": "http://222.127.214.87:32954/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-29 07:06:21 UTC", "last_seen": "2026-03-29 07:06:21 UTC", "sightings": 1 }, { "indicator": "https://gzcj.silvermuse.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 07:03:08 UTC", "last_seen": "2026-03-29 07:03:08 UTC", "sightings": 1 }, { "indicator": "http://110.37.35.89:34070/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 07:01:09 UTC", "last_seen": "2026-03-29 07:01:09 UTC", "sightings": 1 }, { "indicator": "http://219.154.172.227:52478/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 06:56:21 UTC", "last_seen": "2026-03-29 06:56:21 UTC", "sightings": 1 }, { "indicator": "https://solarcres.si1vermuse.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 06:55:09 UTC", "last_seen": "2026-03-29 06:55:09 UTC", "sightings": 1 }, { "indicator": "http://42.229.240.197:54791/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-29 06:52:07 UTC", "last_seen": "2026-03-29 06:52:07 UTC", "sightings": 1 }, { "indicator": "http://221.203.253.220:44248/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 06:49:10 UTC", "last_seen": "2026-03-29 06:49:10 UTC", "sightings": 1 }, { "indicator": "http://182.173.199.8:35114/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-29 06:48:16 UTC", "last_seen": "2026-03-29 06:48:16 UTC", "sightings": 1 }, { "indicator": "https://silve-scale.si1vermuse.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 06:48:11 UTC", "last_seen": "2026-03-29 06:48:11 UTC", "sightings": 1 }, { "indicator": "http://219.154.172.227:52478/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 06:47:24 UTC", "last_seen": "2026-03-29 06:47:24 UTC", "sightings": 1 }, { "indicator": "http://196.190.133.180:54221/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-29 06:47:06 UTC", "last_seen": "2026-03-29 06:47:06 UTC", "sightings": 1 }, { "indicator": "http://115.56.98.89:41048/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-29 06:42:09 UTC", "last_seen": "2026-03-29 06:42:09 UTC", "sightings": 1 }, { "indicator": "https://merfluxen2.si1vermuse.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 06:40:14 UTC", "last_seen": "2026-03-29 06:40:14 UTC", "sightings": 1 }, { "indicator": "http://42.229.240.197:54791/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-29 06:28:08 UTC", "last_seen": "2026-03-29 06:28:08 UTC", "sightings": 1 }, { "indicator": "http://111.50.70.34:48986/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-29 06:27:08 UTC", "last_seen": "2026-03-29 06:27:08 UTC", "sightings": 1 }, { "indicator": "http://111.50.70.34:48986/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-29 06:27:08 UTC", "last_seen": "2026-03-29 06:27:08 UTC", "sightings": 1 }, { "indicator": "http://123.13.38.236:57833/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 06:21:17 UTC", "last_seen": "2026-03-29 06:21:17 UTC", "sightings": 1 }, { "indicator": "http://196.188.135.20:34589/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-29 06:20:13 UTC", "last_seen": "2026-03-29 06:20:13 UTC", "sightings": 1 }, { "indicator": "https://densrunw.vertexharbinger.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 06:18:09 UTC", "last_seen": "2026-03-29 06:18:09 UTC", "sightings": 1 }, { "indicator": "http://219.155.200.53:56583/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 06:12:17 UTC", "last_seen": "2026-03-29 06:12:17 UTC", "sightings": 1 }, { "indicator": "http://115.55.4.10:36422/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-29 06:07:06 UTC", "last_seen": "2026-03-29 06:07:06 UTC", "sightings": 1 }, { "indicator": "https://k3rne8-phase.luminousventurex.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 06:06:07 UTC", "last_seen": "2026-03-29 06:06:07 UTC", "sightings": 1 }, { "indicator": "http://115.55.4.10:36422/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-29 06:02:08 UTC", "last_seen": "2026-03-29 06:02:08 UTC", "sightings": 1 }, { "indicator": "http://123.14.37.70:43647/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 06:01:23 UTC", "last_seen": "2026-03-29 06:01:23 UTC", "sightings": 1 }, { "indicator": "http://196.188.135.20:34589/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-29 05:59:14 UTC", "last_seen": "2026-03-29 05:59:14 UTC", "sightings": 1 }, { "indicator": "https://jk6kmhz.luminousventurex.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 05:59:07 UTC", "last_seen": "2026-03-29 05:59:07 UTC", "sightings": 1 }, { "indicator": "http://123.14.37.70:43647/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 05:58:20 UTC", "last_seen": "2026-03-29 05:58:20 UTC", "sightings": 1 }, { "indicator": "http://123.13.38.236:57833/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 05:52:18 UTC", "last_seen": "2026-03-29 05:52:18 UTC", "sightings": 1 }, { "indicator": "http://182.173.199.8:35114/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-29 05:51:20 UTC", "last_seen": "2026-03-29 05:51:20 UTC", "sightings": 1 }, { "indicator": "http://39.81.43.185:50349/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 05:51:18 UTC", "last_seen": "2026-03-29 05:51:18 UTC", "sightings": 1 }, { "indicator": "https://icfsj.keystonepatronage.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 05:51:11 UTC", "last_seen": "2026-03-29 05:51:11 UTC", "sightings": 1 }, { "indicator": "http://182.116.79.89:52003/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 05:46:16 UTC", "last_seen": "2026-03-29 05:46:16 UTC", "sightings": 1 }, { "indicator": "http://219.155.200.53:56583/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 05:44:24 UTC", "last_seen": "2026-03-29 05:44:24 UTC", "sightings": 1 }, { "indicator": "https://1nsight-route.keystonepatronage.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 05:43:09 UTC", "last_seen": "2026-03-29 05:43:09 UTC", "sightings": 1 }, { "indicator": "https://cap1ta-flow.spectrumprospera.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 05:35:10 UTC", "last_seen": "2026-03-29 05:35:10 UTC", "sightings": 1 }, { "indicator": "https://dr80gbyv.spectrumprospera.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 05:28:08 UTC", "last_seen": "2026-03-29 05:28:08 UTC", "sightings": 1 }, { "indicator": "http://123.9.91.152:43498/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 05:24:08 UTC", "last_seen": "2026-03-29 05:24:08 UTC", "sightings": 1 }, { "indicator": "https://tensor-line.paragonharbinger.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 05:21:09 UTC", "last_seen": "2026-03-29 05:21:09 UTC", "sightings": 1 }, { "indicator": "http://123.9.91.152:43498/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 05:20:12 UTC", "last_seen": "2026-03-29 05:20:12 UTC", "sightings": 1 }, { "indicator": "http://39.81.43.185:50349/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 05:20:11 UTC", "last_seen": "2026-03-29 05:20:11 UTC", "sightings": 1 }, { "indicator": "http://115.63.49.148:44854/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 05:18:20 UTC", "last_seen": "2026-03-29 05:18:20 UTC", "sightings": 1 }, { "indicator": "http://115.61.102.84:47655/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-29 05:18:20 UTC", "last_seen": "2026-03-29 05:18:20 UTC", "sightings": 1 }, { "indicator": "http://27.37.108.178:60330/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 05:14:30 UTC", "last_seen": "2026-03-29 05:14:30 UTC", "sightings": 1 }, { "indicator": "https://rave-branch.paragonharbinger.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 05:13:08 UTC", "last_seen": "2026-03-29 05:13:08 UTC", "sightings": 1 }, { "indicator": "http://60.23.194.17:36814/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-29 05:12:07 UTC", "last_seen": "2026-03-29 05:12:07 UTC", "sightings": 1 }, { "indicator": "https://islelaunch.quantumventurex.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 05:07:08 UTC", "last_seen": "2026-03-29 05:07:08 UTC", "sightings": 1 }, { "indicator": "http://221.15.16.194:45784/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 05:01:09 UTC", "last_seen": "2026-03-29 05:01:09 UTC", "sightings": 1 }, { "indicator": "https://du5k-cast.quantumventurex.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 05:01:08 UTC", "last_seen": "2026-03-29 05:01:08 UTC", "sightings": 1 }, { "indicator": "http://27.200.15.27:34393/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-29 04:58:19 UTC", "last_seen": "2026-03-29 04:58:19 UTC", "sightings": 1 }, { "indicator": "http://42.5.69.103:52212/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-29 04:57:06 UTC", "last_seen": "2026-03-29 04:57:06 UTC", "sightings": 1 }, { "indicator": "https://sol-lithos.nexusprospera.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 04:54:08 UTC", "last_seen": "2026-03-29 04:54:08 UTC", "sightings": 1 }, { "indicator": "http://115.61.102.84:47655/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-29 04:51:19 UTC", "last_seen": "2026-03-29 04:51:19 UTC", "sightings": 1 }, { "indicator": "https://spk77w.nexusprospera.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 04:47:10 UTC", "last_seen": "2026-03-29 04:47:10 UTC", "sightings": 1 }, { "indicator": "http://117.192.37.240:51848/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 04:43:19 UTC", "last_seen": "2026-03-29 04:43:19 UTC", "sightings": 1 }, { "indicator": "http://85.239.147.6/files/7903503838/7k3hpXA.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-29 04:43:06 UTC", "last_seen": "2026-03-29 04:43:06 UTC", "sightings": 1 }, { "indicator": "http://60.23.194.17:36814/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-29 04:42:07 UTC", "last_seen": "2026-03-29 04:42:07 UTC", "sightings": 1 }, { "indicator": "https://wgnh.vectorpatronage.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 04:41:08 UTC", "last_seen": "2026-03-29 04:41:08 UTC", "sightings": 1 }, { "indicator": "http://117.206.108.202:44416/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 04:36:18 UTC", "last_seen": "2026-03-29 04:36:18 UTC", "sightings": 1 }, { "indicator": "http://221.15.16.194:45784/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 04:34:20 UTC", "last_seen": "2026-03-29 04:34:20 UTC", "sightings": 1 }, { "indicator": "https://1ukqsofb.vectorpatronage.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 04:33:08 UTC", "last_seen": "2026-03-29 04:33:08 UTC", "sightings": 1 }, { "indicator": "https://grasand.momentumprospera.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 04:27:08 UTC", "last_seen": "2026-03-29 04:27:08 UTC", "sightings": 1 }, { "indicator": "http://42.5.69.103:52212/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-29 04:27:07 UTC", "last_seen": "2026-03-29 04:27:07 UTC", "sightings": 1 }, { "indicator": "http://117.206.108.202:44416/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 04:24:17 UTC", "last_seen": "2026-03-29 04:24:17 UTC", "sightings": 1 }, { "indicator": "https://hyper-opt1.momentumprospera.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 04:21:09 UTC", "last_seen": "2026-03-29 04:21:09 UTC", "sightings": 1 }, { "indicator": "https://loadmatr.apexventurex.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 04:14:08 UTC", "last_seen": "2026-03-29 04:14:08 UTC", "sightings": 1 }, { "indicator": "https://pitchreed.apexventurex.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 04:08:07 UTC", "last_seen": "2026-03-29 04:08:07 UTC", "sightings": 1 }, { "indicator": "https://compi-vault.covenantprospera.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 04:02:07 UTC", "last_seen": "2026-03-29 04:02:07 UTC", "sightings": 1 }, { "indicator": "http://117.216.63.154:56506/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 03:58:17 UTC", "last_seen": "2026-03-29 03:58:17 UTC", "sightings": 1 }, { "indicator": "https://reviewglyph.covenantprospera.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 03:55:12 UTC", "last_seen": "2026-03-29 03:55:12 UTC", "sightings": 1 }, { "indicator": "https://apgjh.latticeharbinger.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 03:52:08 UTC", "last_seen": "2026-03-29 03:52:08 UTC", "sightings": 1 }, { "indicator": "http://182.121.41.96:36911/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-29 03:52:07 UTC", "last_seen": "2026-03-29 03:52:07 UTC", "sightings": 1 }, { "indicator": "http://117.81.38.146:57904/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-29 03:43:21 UTC", "last_seen": "2026-03-29 03:43:21 UTC", "sightings": 1 }, { "indicator": "https://lfgs.latticeharbinger.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 03:41:08 UTC", "last_seen": "2026-03-29 03:41:08 UTC", "sightings": 1 }, { "indicator": "https://rende-trig.radiantpatronage.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 03:36:08 UTC", "last_seen": "2026-03-29 03:36:08 UTC", "sightings": 1 }, { "indicator": "https://cliencampa.radiantpatronage.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 03:33:09 UTC", "last_seen": "2026-03-29 03:33:09 UTC", "sightings": 1 }, { "indicator": "http://117.216.63.154:56506/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 03:32:31 UTC", "last_seen": "2026-03-29 03:32:31 UTC", "sightings": 1 }, { "indicator": "http://117.81.38.146:57904/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-29 03:30:20 UTC", "last_seen": "2026-03-29 03:30:20 UTC", "sightings": 1 }, { "indicator": "http://196.189.197.131:39004/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-29 03:26:20 UTC", "last_seen": "2026-03-29 03:26:20 UTC", "sightings": 1 }, { "indicator": "https://binarydelive.zenithprospera.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 03:23:10 UTC", "last_seen": "2026-03-29 03:23:10 UTC", "sightings": 1 }, { "indicator": "http://61.1.194.130:53596/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 03:20:20 UTC", "last_seen": "2026-03-29 03:20:20 UTC", "sightings": 1 }, { "indicator": "https://proto-wi1d.zenithprospera.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 03:18:09 UTC", "last_seen": "2026-03-29 03:18:09 UTC", "sightings": 1 }, { "indicator": "http://196.189.197.131:39004/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-29 03:14:15 UTC", "last_seen": "2026-03-29 03:14:15 UTC", "sightings": 1 }, { "indicator": "https://svc4link.vertexharbinger.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 03:11:15 UTC", "last_seen": "2026-03-29 03:11:15 UTC", "sightings": 1 }, { "indicator": "http://42.228.246.157:50227/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-29 03:07:07 UTC", "last_seen": "2026-03-29 03:07:07 UTC", "sightings": 1 }, { "indicator": "https://svc3user.vertexharbinger.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 03:06:10 UTC", "last_seen": "2026-03-29 03:06:10 UTC", "sightings": 1 }, { "indicator": "http://113.237.241.90:53823/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-29 03:02:06 UTC", "last_seen": "2026-03-29 03:02:06 UTC", "sightings": 1 }, { "indicator": "https://svc2base.vertexharbinger.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 03:00:09 UTC", "last_seen": "2026-03-29 03:00:09 UTC", "sightings": 1 }, { "indicator": "http://117.221.25.33:41326/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "mirai" ], "first_seen": "2026-03-29 02:58:19 UTC", "last_seen": "2026-03-29 02:58:19 UTC", "sightings": 1 }, { "indicator": "http://61.1.194.130:53596/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 02:58:14 UTC", "last_seen": "2026-03-29 02:58:14 UTC", "sightings": 1 }, { "indicator": "https://svc1infra.vertexharbinger.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 02:58:09 UTC", "last_seen": "2026-03-29 02:58:09 UTC", "sightings": 1 }, { "indicator": "http://112.248.105.184:40158/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-29 02:52:32 UTC", "last_seen": "2026-03-29 02:52:32 UTC", "sightings": 1 }, { "indicator": "http://42.235.51.166:47120/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 02:51:16 UTC", "last_seen": "2026-03-29 02:51:16 UTC", "sightings": 1 }, { "indicator": "http://117.221.25.33:41326/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "mirai" ], "first_seen": "2026-03-29 02:34:30 UTC", "last_seen": "2026-03-29 02:34:30 UTC", "sightings": 1 }, { "indicator": "http://42.235.51.166:47120/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 02:31:19 UTC", "last_seen": "2026-03-29 02:31:19 UTC", "sightings": 1 }, { "indicator": "https://cl4link.luminousventurex.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 02:28:11 UTC", "last_seen": "2026-03-29 02:28:11 UTC", "sightings": 1 }, { "indicator": "https://cl3dev.luminousventurex.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 02:21:06 UTC", "last_seen": "2026-03-29 02:21:06 UTC", "sightings": 1 }, { "indicator": "https://cl2remote.luminousventurex.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 02:17:09 UTC", "last_seen": "2026-03-29 02:17:09 UTC", "sightings": 1 }, { "indicator": "http://196.190.69.149:34552/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-29 02:17:06 UTC", "last_seen": "2026-03-29 02:17:06 UTC", "sightings": 1 }, { "indicator": "http://124.95.8.227:46020/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 02:17:06 UTC", "last_seen": "2026-03-29 02:17:06 UTC", "sightings": 1 }, { "indicator": "http://182.122.208.236:48138/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 02:12:08 UTC", "last_seen": "2026-03-29 02:12:08 UTC", "sightings": 1 }, { "indicator": "https://cl1store.luminousventurex.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 02:10:13 UTC", "last_seen": "2026-03-29 02:10:13 UTC", "sightings": 1 }, { "indicator": "http://27.37.113.10:42841/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 02:05:19 UTC", "last_seen": "2026-03-29 02:05:19 UTC", "sightings": 1 }, { "indicator": "http://61.0.98.134:40236/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 02:05:19 UTC", "last_seen": "2026-03-29 02:05:19 UTC", "sightings": 1 }, { "indicator": "https://ext4sync.keystonepatronage.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 02:04:07 UTC", "last_seen": "2026-03-29 02:04:07 UTC", "sightings": 1 }, { "indicator": "http://123.7.220.96:55847/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-29 02:02:06 UTC", "last_seen": "2026-03-29 02:02:06 UTC", "sightings": 1 }, { "indicator": "http://117.209.27.222:32923/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 02:01:28 UTC", "last_seen": "2026-03-29 02:01:28 UTC", "sightings": 1 }, { "indicator": "https://ext3gate.keystonepatronage.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 01:59:11 UTC", "last_seen": "2026-03-29 01:59:11 UTC", "sightings": 1 }, { "indicator": "https://ext2proc.keystonepatronage.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 01:53:07 UTC", "last_seen": "2026-03-29 01:53:07 UTC", "sightings": 1 }, { "indicator": "https://ext1meta.keystonepatronage.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 01:48:07 UTC", "last_seen": "2026-03-29 01:48:07 UTC", "sightings": 1 }, { "indicator": "http://182.122.208.236:48138/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 01:44:11 UTC", "last_seen": "2026-03-29 01:44:11 UTC", "sightings": 1 }, { "indicator": "https://cl4static.spectrumprospera.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 01:42:08 UTC", "last_seen": "2026-03-29 01:42:08 UTC", "sightings": 1 }, { "indicator": "https://cl3edge.spectrumprospera.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 01:37:09 UTC", "last_seen": "2026-03-29 01:37:09 UTC", "sightings": 1 }, { "indicator": "http://123.7.220.96:55847/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-29 01:37:07 UTC", "last_seen": "2026-03-29 01:37:07 UTC", "sightings": 1 }, { "indicator": "https://cl2data.spectrumprospera.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 01:31:08 UTC", "last_seen": "2026-03-29 01:31:08 UTC", "sightings": 1 }, { "indicator": "http://110.37.78.200:51492/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 01:26:17 UTC", "last_seen": "2026-03-29 01:26:17 UTC", "sightings": 1 }, { "indicator": "https://cl1sync.spectrumprospera.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 01:26:07 UTC", "last_seen": "2026-03-29 01:26:07 UTC", "sightings": 1 }, { "indicator": "https://ext4point.paragonharbinger.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 01:20:10 UTC", "last_seen": "2026-03-29 01:20:10 UTC", "sightings": 1 }, { "indicator": "http://219.157.62.44:43694/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 01:14:16 UTC", "last_seen": "2026-03-29 01:14:16 UTC", "sightings": 1 }, { "indicator": "https://ext3data.paragonharbinger.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 01:14:09 UTC", "last_seen": "2026-03-29 01:14:09 UTC", "sightings": 1 }, { "indicator": "http://59.97.248.162:48976/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 01:12:08 UTC", "last_seen": "2026-03-29 01:12:08 UTC", "sightings": 1 }, { "indicator": "http://182.126.113.22:54888/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 01:10:19 UTC", "last_seen": "2026-03-29 01:10:19 UTC", "sightings": 1 }, { "indicator": "https://ext2proxy.paragonharbinger.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 01:08:07 UTC", "last_seen": "2026-03-29 01:08:07 UTC", "sightings": 1 }, { "indicator": "http://115.62.177.68:56872/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 01:03:16 UTC", "last_seen": "2026-03-29 01:03:16 UTC", "sightings": 1 }, { "indicator": "http://110.37.78.200:51492/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 01:02:09 UTC", "last_seen": "2026-03-29 01:02:09 UTC", "sightings": 1 }, { "indicator": "https://ext1infra.paragonharbinger.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 01:02:08 UTC", "last_seen": "2026-03-29 01:02:08 UTC", "sightings": 1 }, { "indicator": "https://svc4sat.quantumventurex.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 00:58:09 UTC", "last_seen": "2026-03-29 00:58:09 UTC", "sightings": 1 }, { "indicator": "https://svc3core.quantumventurex.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 00:53:06 UTC", "last_seen": "2026-03-29 00:53:06 UTC", "sightings": 1 }, { "indicator": "http://200.115.102.16:39145/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-29 00:52:08 UTC", "last_seen": "2026-03-29 00:52:08 UTC", "sightings": 1 }, { "indicator": "http://59.97.248.162:48976/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 00:47:11 UTC", "last_seen": "2026-03-29 00:47:11 UTC", "sightings": 1 }, { "indicator": "https://svc2steel.quantumventurex.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 00:46:10 UTC", "last_seen": "2026-03-29 00:46:10 UTC", "sightings": 1 }, { "indicator": "http://182.126.113.22:54888/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 00:45:09 UTC", "last_seen": "2026-03-29 00:45:09 UTC", "sightings": 1 }, { "indicator": "https://svc1proc.quantumventurex.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 00:41:09 UTC", "last_seen": "2026-03-29 00:41:09 UTC", "sightings": 1 }, { "indicator": "https://dev4space.nexusprospera.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 00:35:11 UTC", "last_seen": "2026-03-29 00:35:11 UTC", "sightings": 1 }, { "indicator": "http://115.63.11.247:43248/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 00:33:17 UTC", "last_seen": "2026-03-29 00:33:17 UTC", "sightings": 1 }, { "indicator": "https://dev3field.nexusprospera.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 00:33:08 UTC", "last_seen": "2026-03-29 00:33:08 UTC", "sightings": 1 }, { "indicator": "http://27.215.109.219:35574/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 00:29:11 UTC", "last_seen": "2026-03-29 00:29:11 UTC", "sightings": 1 }, { "indicator": "http://95.32.111.24:48837/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 00:28:16 UTC", "last_seen": "2026-03-29 00:28:16 UTC", "sightings": 1 }, { "indicator": "http://115.55.147.49:36372/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 00:28:13 UTC", "last_seen": "2026-03-29 00:28:13 UTC", "sightings": 1 }, { "indicator": "https://dev2outer.nexusprospera.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 00:25:11 UTC", "last_seen": "2026-03-29 00:25:11 UTC", "sightings": 1 }, { "indicator": "http://95.32.111.24:48837/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 00:22:21 UTC", "last_seen": "2026-03-29 00:22:21 UTC", "sightings": 1 }, { "indicator": "https://dev1proc.nexusprospera.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 00:22:09 UTC", "last_seen": "2026-03-29 00:22:09 UTC", "sightings": 1 }, { "indicator": "http://85.239.147.6/files/1781548144/3UFJ4Lc.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-03-29 00:20:07 UTC", "last_seen": "2026-03-29 00:20:07 UTC", "sightings": 1 }, { "indicator": "https://cl4path.vectorpatronage.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 00:12:08 UTC", "last_seen": "2026-03-29 00:12:08 UTC", "sightings": 1 }, { "indicator": "https://cl3view.vectorpatronage.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 00:07:11 UTC", "last_seen": "2026-03-29 00:07:11 UTC", "sightings": 1 }, { "indicator": "http://115.55.147.49:36372/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 00:03:18 UTC", "last_seen": "2026-03-29 00:03:18 UTC", "sightings": 1 }, { "indicator": "http://117.253.156.207:40223/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-29 00:02:18 UTC", "last_seen": "2026-03-29 00:02:18 UTC", "sightings": 1 }, { "indicator": "https://cl2point.vectorpatronage.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-29 00:01:12 UTC", "last_seen": "2026-03-29 00:01:12 UTC", "sightings": 1 }, { "indicator": "http://123.8.172.228:33143/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-28 23:57:07 UTC", "last_seen": "2026-03-28 23:57:07 UTC", "sightings": 1 }, { "indicator": "https://cl1proc.vectorpatronage.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 23:56:08 UTC", "last_seen": "2026-03-28 23:56:08 UTC", "sightings": 1 }, { "indicator": "https://ext4view.momentumprospera.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 23:50:13 UTC", "last_seen": "2026-03-28 23:50:13 UTC", "sightings": 1 }, { "indicator": "https://ext3ghost.momentumprospera.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 23:45:10 UTC", "last_seen": "2026-03-28 23:45:10 UTC", "sightings": 1 }, { "indicator": "https://ext2core.momentumprospera.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 23:39:07 UTC", "last_seen": "2026-03-28 23:39:07 UTC", "sightings": 1 }, { "indicator": "http://85.239.147.6/files/8042875554/V5VVpk2.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-28 23:37:06 UTC", "last_seen": "2026-03-28 23:37:06 UTC", "sightings": 1 }, { "indicator": "https://ext1proc.momentumprospera.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 23:35:13 UTC", "last_seen": "2026-03-28 23:35:13 UTC", "sightings": 1 }, { "indicator": "https://svc4link.apexventurex.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 23:27:11 UTC", "last_seen": "2026-03-28 23:27:11 UTC", "sightings": 1 }, { "indicator": "http://110.37.48.94:51957/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 23:22:18 UTC", "last_seen": "2026-03-28 23:22:18 UTC", "sightings": 1 }, { "indicator": "https://svc3user.apexventurex.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 23:22:09 UTC", "last_seen": "2026-03-28 23:22:09 UTC", "sightings": 1 }, { "indicator": "http://42.224.177.115:48731/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-28 23:22:09 UTC", "last_seen": "2026-03-28 23:22:09 UTC", "sightings": 1 }, { "indicator": "http://221.200.208.192:54706/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-28 23:22:09 UTC", "last_seen": "2026-03-28 23:22:09 UTC", "sightings": 1 }, { "indicator": "http://115.48.239.102:38252/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 23:18:19 UTC", "last_seen": "2026-03-28 23:18:19 UTC", "sightings": 1 }, { "indicator": "https://svc2base.apexventurex.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 23:16:09 UTC", "last_seen": "2026-03-28 23:16:09 UTC", "sightings": 1 }, { "indicator": "https://svc1infra.apexventurex.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 23:11:07 UTC", "last_seen": "2026-03-28 23:11:07 UTC", "sightings": 1 }, { "indicator": "https://dev4work.covenantprospera.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 23:05:11 UTC", "last_seen": "2026-03-28 23:05:11 UTC", "sightings": 1 }, { "indicator": "https://dev3local.covenantprospera.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 22:59:09 UTC", "last_seen": "2026-03-28 22:59:09 UTC", "sightings": 1 }, { "indicator": "http://115.48.239.102:38252/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 22:58:16 UTC", "last_seen": "2026-03-28 22:58:16 UTC", "sightings": 1 }, { "indicator": "http://59.91.172.253:46603/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 22:54:10 UTC", "last_seen": "2026-03-28 22:54:10 UTC", "sightings": 1 }, { "indicator": "https://dev2power.covenantprospera.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 22:53:08 UTC", "last_seen": "2026-03-28 22:53:08 UTC", "sightings": 1 }, { "indicator": "http://219.157.62.44:43694/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 22:50:10 UTC", "last_seen": "2026-03-28 22:50:10 UTC", "sightings": 1 }, { "indicator": "https://dev1proc.covenantprospera.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 22:49:09 UTC", "last_seen": "2026-03-28 22:49:09 UTC", "sightings": 1 }, { "indicator": "http://61.53.237.14:42105/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 22:48:14 UTC", "last_seen": "2026-03-28 22:48:14 UTC", "sightings": 1 }, { "indicator": "http://175.168.253.206:46688/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 22:48:14 UTC", "last_seen": "2026-03-28 22:48:14 UTC", "sightings": 1 }, { "indicator": "https://cl4link.latticeharbinger.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 22:44:07 UTC", "last_seen": "2026-03-28 22:44:07 UTC", "sightings": 1 }, { "indicator": "http://110.37.120.17:58586/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 22:41:17 UTC", "last_seen": "2026-03-28 22:41:17 UTC", "sightings": 1 }, { "indicator": "https://cl3dev.latticeharbinger.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 22:41:09 UTC", "last_seen": "2026-03-28 22:41:09 UTC", "sightings": 1 }, { "indicator": "https://cl2remote.latticeharbinger.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 22:34:11 UTC", "last_seen": "2026-03-28 22:34:11 UTC", "sightings": 1 }, { "indicator": "https://cl1store.latticeharbinger.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 22:25:11 UTC", "last_seen": "2026-03-28 22:25:11 UTC", "sightings": 1 }, { "indicator": "http://61.53.237.14:42105/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 22:21:15 UTC", "last_seen": "2026-03-28 22:21:15 UTC", "sightings": 1 }, { "indicator": "http://42.236.223.132:48800/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 22:20:21 UTC", "last_seen": "2026-03-28 22:20:21 UTC", "sightings": 1 }, { "indicator": "https://ext4sync.radiantpatronage.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 22:20:12 UTC", "last_seen": "2026-03-28 22:20:12 UTC", "sightings": 1 }, { "indicator": "http://59.91.172.253:46603/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 22:19:32 UTC", "last_seen": "2026-03-28 22:19:32 UTC", "sightings": 1 }, { "indicator": "http://110.37.120.17:58586/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 22:19:30 UTC", "last_seen": "2026-03-28 22:19:30 UTC", "sightings": 1 }, { "indicator": "https://ext3gate.radiantpatronage.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 22:15:12 UTC", "last_seen": "2026-03-28 22:15:12 UTC", "sightings": 1 }, { "indicator": "http://92.38.51.64:45709/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 22:13:19 UTC", "last_seen": "2026-03-28 22:13:19 UTC", "sightings": 1 }, { "indicator": "https://ext2proc.radiantpatronage.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 22:09:08 UTC", "last_seen": "2026-03-28 22:09:08 UTC", "sightings": 1 }, { "indicator": "https://ext1meta.radiantpatronage.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 22:03:10 UTC", "last_seen": "2026-03-28 22:03:10 UTC", "sightings": 1 }, { "indicator": "http://110.37.35.235:59236/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-28 22:02:07 UTC", "last_seen": "2026-03-28 22:02:07 UTC", "sightings": 1 }, { "indicator": "http://42.236.213.216:38541/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-28 22:02:07 UTC", "last_seen": "2026-03-28 22:02:07 UTC", "sightings": 1 }, { "indicator": "https://svc4static.zenithprospera.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 21:57:08 UTC", "last_seen": "2026-03-28 21:57:08 UTC", "sightings": 1 }, { "indicator": "http://110.37.3.227:59501/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 21:55:17 UTC", "last_seen": "2026-03-28 21:55:17 UTC", "sightings": 1 }, { "indicator": "http://92.38.51.64:45709/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 21:52:20 UTC", "last_seen": "2026-03-28 21:52:20 UTC", "sightings": 1 }, { "indicator": "https://svc3edge.zenithprospera.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 21:52:10 UTC", "last_seen": "2026-03-28 21:52:10 UTC", "sightings": 1 }, { "indicator": "http://110.37.28.220:55801/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 21:47:21 UTC", "last_seen": "2026-03-28 21:47:21 UTC", "sightings": 1 }, { "indicator": "https://svc2data.zenithprospera.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 21:47:14 UTC", "last_seen": "2026-03-28 21:47:14 UTC", "sightings": 1 }, { "indicator": "https://svc1sync.zenithprospera.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 21:41:09 UTC", "last_seen": "2026-03-28 21:41:09 UTC", "sightings": 1 }, { "indicator": "http://42.236.213.216:38541/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-28 21:37:22 UTC", "last_seen": "2026-03-28 21:37:22 UTC", "sightings": 1 }, { "indicator": "http://110.37.35.235:59236/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-28 21:37:21 UTC", "last_seen": "2026-03-28 21:37:21 UTC", "sightings": 1 }, { "indicator": "http://60.19.7.73:46106/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 21:37:21 UTC", "last_seen": "2026-03-28 21:37:21 UTC", "sightings": 1 }, { "indicator": "http://115.49.6.55:46312/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 21:36:19 UTC", "last_seen": "2026-03-28 21:36:19 UTC", "sightings": 1 }, { "indicator": "https://ext4point.authenticoperation.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 21:35:13 UTC", "last_seen": "2026-03-28 21:35:13 UTC", "sightings": 1 }, { "indicator": "http://60.19.7.73:46106/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 21:31:18 UTC", "last_seen": "2026-03-28 21:31:18 UTC", "sightings": 1 }, { "indicator": "https://ext3data.authenticoperation.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 21:29:10 UTC", "last_seen": "2026-03-28 21:29:10 UTC", "sightings": 1 }, { "indicator": "http://85.239.147.6/files/7260582679/3AqaBYF.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-28 21:26:06 UTC", "last_seen": "2026-03-28 21:26:06 UTC", "sightings": 1 }, { "indicator": "https://ext2proxy.authenticoperation.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 21:24:10 UTC", "last_seen": "2026-03-28 21:24:10 UTC", "sightings": 1 }, { "indicator": "https://ext1infra.authenticoperation.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 21:21:10 UTC", "last_seen": "2026-03-28 21:21:10 UTC", "sightings": 1 }, { "indicator": "https://svc3core.fundamentaldivision.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 21:12:08 UTC", "last_seen": "2026-03-28 21:12:08 UTC", "sightings": 1 }, { "indicator": "http://113.221.24.138:40886/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-28 21:05:24 UTC", "last_seen": "2026-03-28 21:05:24 UTC", "sightings": 1 }, { "indicator": "https://svc2steel.fundamentaldivision.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-28 21:02:07 UTC", "last_seen": "2026-03-28 21:02:07 UTC", "sightings": 1 }, { "indicator": "http://115.58.163.212:51435/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-28 20:57:07 UTC", "last_seen": "2026-03-28 20:57:07 UTC", "sightings": 1 }, { "indicator": "https://svc1proc.fundamentaldivision.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 20:57:07 UTC", "last_seen": "2026-03-28 20:57:07 UTC", "sightings": 1 }, { "indicator": "https://dev4space.permanentancillary.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 20:51:08 UTC", "last_seen": "2026-03-28 20:51:08 UTC", "sightings": 1 }, { "indicator": "http://85.239.147.6/files/7359455182/GqzS5NO.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-03-28 20:49:06 UTC", "last_seen": "2026-03-28 20:49:06 UTC", "sightings": 1 }, { "indicator": "https://dev3field.permanentancillary.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 20:47:07 UTC", "last_seen": "2026-03-28 20:47:07 UTC", "sightings": 1 }, { "indicator": "https://dev2outer.permanentancillary.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 20:44:07 UTC", "last_seen": "2026-03-28 20:44:07 UTC", "sightings": 1 }, { "indicator": "http://117.216.178.96:44006/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 20:42:15 UTC", "last_seen": "2026-03-28 20:42:15 UTC", "sightings": 1 }, { "indicator": "http://113.221.24.138:40886/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-28 20:39:16 UTC", "last_seen": "2026-03-28 20:39:16 UTC", "sightings": 1 }, { "indicator": "https://dev1proc.permanentancillary.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 20:33:14 UTC", "last_seen": "2026-03-28 20:33:14 UTC", "sightings": 1 }, { "indicator": "http://110.37.61.34:55188/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 20:32:18 UTC", "last_seen": "2026-03-28 20:32:18 UTC", "sightings": 1 }, { "indicator": "http://115.58.163.212:51435/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 20:29:15 UTC", "last_seen": "2026-03-28 20:29:15 UTC", "sightings": 1 }, { "indicator": "https://cl4path.ubiquitousfoundry.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 20:28:08 UTC", "last_seen": "2026-03-28 20:28:08 UTC", "sightings": 1 }, { "indicator": "http://27.215.109.219:35574/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 20:25:23 UTC", "last_seen": "2026-03-28 20:25:23 UTC", "sightings": 1 }, { "indicator": "https://cl3view.ubiquitousfoundry.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 20:22:07 UTC", "last_seen": "2026-03-28 20:22:07 UTC", "sightings": 1 }, { "indicator": "http://117.216.178.96:44006/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 20:20:25 UTC", "last_seen": "2026-03-28 20:20:25 UTC", "sightings": 1 }, { "indicator": "https://5eed8sf5.covenantventure.digital/?=check&&actmn=myJGOqngWIVrLfSA", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-28 20:20:07 UTC", "last_seen": "2026-03-28 20:20:07 UTC", "sightings": 1 }, { "indicator": "https://cl2point.ubiquitousfoundry.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 20:17:08 UTC", "last_seen": "2026-03-28 20:17:08 UTC", "sightings": 1 }, { "indicator": "https://cl1proc.ubiquitousfoundry.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 20:14:07 UTC", "last_seen": "2026-03-28 20:14:07 UTC", "sightings": 1 }, { "indicator": "https://ext4view.resonantcommercial.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 20:10:09 UTC", "last_seen": "2026-03-28 20:10:09 UTC", "sightings": 1 }, { "indicator": "http://110.37.61.34:55188/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 20:05:17 UTC", "last_seen": "2026-03-28 20:05:17 UTC", "sightings": 1 }, { "indicator": "https://ext3ghost.resonantcommercial.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 20:01:07 UTC", "last_seen": "2026-03-28 20:01:07 UTC", "sightings": 1 }, { "indicator": "http://222.142.241.29:50447/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 19:59:25 UTC", "last_seen": "2026-03-28 19:59:25 UTC", "sightings": 1 }, { "indicator": "http://61.53.108.199:35895/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 19:54:17 UTC", "last_seen": "2026-03-28 19:54:17 UTC", "sightings": 1 }, { "indicator": "https://ext2core.resonantcommercial.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 19:54:09 UTC", "last_seen": "2026-03-28 19:54:09 UTC", "sightings": 1 }, { "indicator": "http://222.142.241.29:50447/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 19:50:18 UTC", "last_seen": "2026-03-28 19:50:18 UTC", "sightings": 1 }, { "indicator": "http://117.211.209.140:36604/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 19:49:17 UTC", "last_seen": "2026-03-28 19:49:17 UTC", "sightings": 1 }, { "indicator": "http://61.53.108.199:35895/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 19:49:17 UTC", "last_seen": "2026-03-28 19:49:17 UTC", "sightings": 1 }, { "indicator": "http://125.41.220.58:51856/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 19:48:19 UTC", "last_seen": "2026-03-28 19:48:19 UTC", "sightings": 1 }, { "indicator": "http://180.115.166.171:57187/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-28 19:48:19 UTC", "last_seen": "2026-03-28 19:48:19 UTC", "sightings": 1 }, { "indicator": "http://42.55.41.89:49208/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 19:48:18 UTC", "last_seen": "2026-03-28 19:48:18 UTC", "sightings": 1 }, { "indicator": "https://ext1proc.resonantcommercial.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 19:48:09 UTC", "last_seen": "2026-03-28 19:48:09 UTC", "sightings": 1 }, { "indicator": "http://123.9.196.22:49285/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 19:44:18 UTC", "last_seen": "2026-03-28 19:44:18 UTC", "sightings": 1 }, { "indicator": "https://svc4link.absolutecontinuity.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 19:43:08 UTC", "last_seen": "2026-03-28 19:43:08 UTC", "sightings": 1 }, { "indicator": "http://222.219.74.234:35285/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-28 19:42:07 UTC", "last_seen": "2026-03-28 19:42:07 UTC", "sightings": 1 }, { "indicator": "http://42.225.228.61:58140/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-28 19:42:07 UTC", "last_seen": "2026-03-28 19:42:07 UTC", "sightings": 1 }, { "indicator": "https://svc3user.absolutecontinuity.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 19:38:07 UTC", "last_seen": "2026-03-28 19:38:07 UTC", "sightings": 1 }, { "indicator": "http://222.219.74.234:35285/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-28 19:37:17 UTC", "last_seen": "2026-03-28 19:37:17 UTC", "sightings": 1 }, { "indicator": "https://svc2base.absolutecontinuity.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 19:32:08 UTC", "last_seen": "2026-03-28 19:32:08 UTC", "sightings": 1 }, { "indicator": "http://222.142.208.17:34890/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-28 19:32:07 UTC", "last_seen": "2026-03-28 19:32:07 UTC", "sightings": 1 }, { "indicator": "https://svc1infra.absolutecontinuity.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 19:27:06 UTC", "last_seen": "2026-03-28 19:27:06 UTC", "sightings": 1 }, { "indicator": "https://dev4work.manifestdelivery.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 19:21:06 UTC", "last_seen": "2026-03-28 19:21:06 UTC", "sightings": 1 }, { "indicator": "https://dev3local.manifestdelivery.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 19:15:12 UTC", "last_seen": "2026-03-28 19:15:12 UTC", "sightings": 1 }, { "indicator": "https://dev2power.manifestdelivery.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 19:12:06 UTC", "last_seen": "2026-03-28 19:12:06 UTC", "sightings": 1 }, { "indicator": "https://dev1proc.manifestdelivery.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 19:08:08 UTC", "last_seen": "2026-03-28 19:08:08 UTC", "sightings": 1 }, { "indicator": "http://113.231.92.89:36861/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 19:03:28 UTC", "last_seen": "2026-03-28 19:03:28 UTC", "sightings": 1 }, { "indicator": "https://cl4link.sovereignprotocol.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 18:58:09 UTC", "last_seen": "2026-03-28 18:58:09 UTC", "sightings": 1 }, { "indicator": "http://222.142.208.17:34890/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-28 18:52:09 UTC", "last_seen": "2026-03-28 18:52:09 UTC", "sightings": 1 }, { "indicator": "https://cl3dev.sovereignprotocol.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 18:52:08 UTC", "last_seen": "2026-03-28 18:52:08 UTC", "sightings": 1 }, { "indicator": "https://cl2remote.sovereignprotocol.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 18:47:09 UTC", "last_seen": "2026-03-28 18:47:09 UTC", "sightings": 1 }, { "indicator": "http://125.47.212.110:45672/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-28 18:42:07 UTC", "last_seen": "2026-03-28 18:42:07 UTC", "sightings": 1 }, { "indicator": "https://cl1store.sovereignprotocol.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 18:41:07 UTC", "last_seen": "2026-03-28 18:41:07 UTC", "sightings": 1 }, { "indicator": "https://ext4sync.intrinsiclogistics.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 18:36:08 UTC", "last_seen": "2026-03-28 18:36:08 UTC", "sightings": 1 }, { "indicator": "http://119.116.35.76:36288/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 18:33:24 UTC", "last_seen": "2026-03-28 18:33:24 UTC", "sightings": 1 }, { "indicator": "https://ext3gate.intrinsiclogistics.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 18:30:15 UTC", "last_seen": "2026-03-28 18:30:15 UTC", "sightings": 1 }, { "indicator": "https://ext2proc.intrinsiclogistics.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 18:25:08 UTC", "last_seen": "2026-03-28 18:25:08 UTC", "sightings": 1 }, { "indicator": "https://ext1meta.intrinsiclogistics.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 18:19:09 UTC", "last_seen": "2026-03-28 18:19:09 UTC", "sightings": 1 }, { "indicator": "http://178.16.52.148/rebirth.mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mips", "mirai", "ua-wget" ], "first_seen": "2026-03-28 18:17:20 UTC", "last_seen": "2026-03-28 18:17:20 UTC", "sightings": 1 }, { "indicator": "http://178.16.52.148/rebirth.arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "arm", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-28 18:17:20 UTC", "last_seen": "2026-03-28 18:17:20 UTC", "sightings": 1 }, { "indicator": "https://svc4static.primordialconsensus.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 18:14:09 UTC", "last_seen": "2026-03-28 18:14:09 UTC", "sightings": 1 }, { "indicator": "https://svc3edge.primordialconsensus.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 18:08:08 UTC", "last_seen": "2026-03-28 18:08:08 UTC", "sightings": 1 }, { "indicator": "https://svc2data.primordialconsensus.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 18:03:11 UTC", "last_seen": "2026-03-28 18:03:11 UTC", "sightings": 1 }, { "indicator": "http://125.40.86.155:34773/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 17:57:14 UTC", "last_seen": "2026-03-28 17:57:14 UTC", "sightings": 1 }, { "indicator": "https://svc1sync.primordialconsensus.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 17:57:10 UTC", "last_seen": "2026-03-28 17:57:10 UTC", "sightings": 1 }, { "indicator": "https://1dxll.keystoneprospera.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 17:51:13 UTC", "last_seen": "2026-03-28 17:51:13 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.81/hiddenbin/boatnet.i686", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget", "x86" ], "first_seen": "2026-03-28 17:49:19 UTC", "last_seen": "2026-03-28 17:49:19 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.81/hiddenbin/boatnet.ppc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "PowerPC", "ua-wget" ], "first_seen": "2026-03-28 17:49:19 UTC", "last_seen": "2026-03-28 17:49:19 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.81/hiddenbin/boatnet.x86", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget", "x86" ], "first_seen": "2026-03-28 17:49:19 UTC", "last_seen": "2026-03-28 17:49:19 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.81/hiddenbin/boatnet.spc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "sparc", "ua-wget" ], "first_seen": "2026-03-28 17:49:10 UTC", "last_seen": "2026-03-28 17:49:10 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.81/hiddenbin/boatnet.arm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "arm", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-28 17:48:15 UTC", "last_seen": "2026-03-28 17:48:15 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.81/ohshit.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai", "sh", "ua-wget" ], "first_seen": "2026-03-28 17:48:13 UTC", "last_seen": "2026-03-28 17:48:13 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.81/hiddenbin/boatnet.sh4", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "SuperH", "ua-wget" ], "first_seen": "2026-03-28 17:48:13 UTC", "last_seen": "2026-03-28 17:48:13 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.81/hiddenbin/boatnet.m68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "m68k", "mirai", "ua-wget" ], "first_seen": "2026-03-28 17:48:11 UTC", "last_seen": "2026-03-28 17:48:11 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.81/hiddenbin/boatnet.arm", "indicator_type": "url", "source": "URLhaus", "tags": [ "arm", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-28 17:48:11 UTC", "last_seen": "2026-03-28 17:48:11 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.81/hiddenbin/boatnet.arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "arm", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-28 17:48:11 UTC", "last_seen": "2026-03-28 17:48:11 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.81/hiddenbin/boatnet.x86_64", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget", "x86" ], "first_seen": "2026-03-28 17:48:11 UTC", "last_seen": "2026-03-28 17:48:11 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.81/hiddenbin/boatnet.mpsl", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mips", "mirai", "ua-wget" ], "first_seen": "2026-03-28 17:48:11 UTC", "last_seen": "2026-03-28 17:48:11 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.81/hiddenbin/boatnet.mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mips", "mirai", "ua-wget" ], "first_seen": "2026-03-28 17:48:11 UTC", "last_seen": "2026-03-28 17:48:11 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.81/hiddenbin/boatnet.arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "arm", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-28 17:48:11 UTC", "last_seen": "2026-03-28 17:48:11 UTC", "sightings": 1 }, { "indicator": "http://94.240.216.78:60740/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 17:48:10 UTC", "last_seen": "2026-03-28 17:48:10 UTC", "sightings": 1 }, { "indicator": "http://114.227.63.144:51956/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-28 17:47:08 UTC", "last_seen": "2026-03-28 17:47:08 UTC", "sightings": 1 }, { "indicator": "http://77.247.93.86:46594/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-28 17:47:05 UTC", "last_seen": "2026-03-28 17:47:05 UTC", "sightings": 1 }, { "indicator": "https://yzl9.keystoneprospera.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 17:46:08 UTC", "last_seen": "2026-03-28 17:46:08 UTC", "sightings": 1 }, { "indicator": "https://unpf0.spectrumforge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 17:40:09 UTC", "last_seen": "2026-03-28 17:40:09 UTC", "sightings": 1 }, { "indicator": "http://60.19.71.200:59561/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-28 17:37:07 UTC", "last_seen": "2026-03-28 17:37:07 UTC", "sightings": 1 }, { "indicator": "http://110.37.102.128:41601/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 17:35:12 UTC", "last_seen": "2026-03-28 17:35:12 UTC", "sightings": 1 }, { "indicator": "https://j7pyx.spectrumforge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 17:34:09 UTC", "last_seen": "2026-03-28 17:34:09 UTC", "sightings": 1 }, { "indicator": "https://qudo8h54.paragonventure.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 17:30:10 UTC", "last_seen": "2026-03-28 17:30:10 UTC", "sightings": 1 }, { "indicator": "http://221.203.253.220:44248/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 17:27:11 UTC", "last_seen": "2026-03-28 17:27:11 UTC", "sightings": 1 }, { "indicator": "https://ser-crestal.paragonventure.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 17:23:09 UTC", "last_seen": "2026-03-28 17:23:09 UTC", "sightings": 1 }, { "indicator": "http://39.89.174.35:47979/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-28 17:22:07 UTC", "last_seen": "2026-03-28 17:22:07 UTC", "sightings": 1 }, { "indicator": "http://94.240.216.78:60740/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 17:19:19 UTC", "last_seen": "2026-03-28 17:19:19 UTC", "sightings": 1 }, { "indicator": "https://zenven2ix.quantumprospera.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 17:18:10 UTC", "last_seen": "2026-03-28 17:18:10 UTC", "sightings": 1 }, { "indicator": "https://linkstudi.quantumprospera.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 17:11:11 UTC", "last_seen": "2026-03-28 17:11:11 UTC", "sightings": 1 }, { "indicator": "http://110.37.102.128:41601/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 17:08:13 UTC", "last_seen": "2026-03-28 17:08:13 UTC", "sightings": 1 }, { "indicator": "https://vvatch9-array.nexusharbora.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 17:07:09 UTC", "last_seen": "2026-03-28 17:07:09 UTC", "sightings": 1 }, { "indicator": "https://r2tf.nexusharbora.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 17:00:13 UTC", "last_seen": "2026-03-28 17:00:13 UTC", "sightings": 1 }, { "indicator": "https://scuh266.luminouspatron.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 16:55:09 UTC", "last_seen": "2026-03-28 16:55:09 UTC", "sightings": 1 }, { "indicator": "http://219.156.7.40:39726/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 16:52:17 UTC", "last_seen": "2026-03-28 16:52:17 UTC", "sightings": 1 }, { "indicator": "https://print6-lab.luminouspatron.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 16:50:11 UTC", "last_seen": "2026-03-28 16:50:11 UTC", "sightings": 1 }, { "indicator": "https://zd3cs.apexbloomera.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 16:45:12 UTC", "last_seen": "2026-03-28 16:45:12 UTC", "sightings": 1 }, { "indicator": "https://columnbinary.apexbloomera.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 16:38:08 UTC", "last_seen": "2026-03-28 16:38:08 UTC", "sightings": 1 }, { "indicator": "http://116.138.44.176:49328/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-28 16:37:07 UTC", "last_seen": "2026-03-28 16:37:07 UTC", "sightings": 1 }, { "indicator": "http://117.209.80.214:34946/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 16:35:25 UTC", "last_seen": "2026-03-28 16:35:25 UTC", "sightings": 1 }, { "indicator": "https://rvfh.horizonprospera.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 16:32:11 UTC", "last_seen": "2026-03-28 16:32:11 UTC", "sightings": 1 }, { "indicator": "http://116.248.120.213:58539/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-28 16:30:18 UTC", "last_seen": "2026-03-28 16:30:18 UTC", "sightings": 1 }, { "indicator": "https://gather-line.horizonprospera.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 16:28:12 UTC", "last_seen": "2026-03-28 16:28:12 UTC", "sightings": 1 }, { "indicator": "http://87.121.84.56/nuts/poop", "indicator_type": "url", "source": "URLhaus", "tags": [ "CoinMiner", "elf", "ua-wget", "x86" ], "first_seen": "2026-03-28 16:27:46 UTC", "last_seen": "2026-03-28 16:27:46 UTC", "sightings": 1 }, { "indicator": "https://cgnnhw.catalystventure.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 16:24:13 UTC", "last_seen": "2026-03-28 16:24:13 UTC", "sightings": 1 }, { "indicator": "https://trivenen2.catalystventure.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 16:20:14 UTC", "last_seen": "2026-03-28 16:20:14 UTC", "sightings": 1 }, { "indicator": "http://182.127.128.113:42688/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 16:18:31 UTC", "last_seen": "2026-03-28 16:18:31 UTC", "sightings": 1 }, { "indicator": "http://59.97.252.217:41205/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 16:18:21 UTC", "last_seen": "2026-03-28 16:18:21 UTC", "sightings": 1 }, { "indicator": "http://117.209.80.214:34946/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 16:12:24 UTC", "last_seen": "2026-03-28 16:12:24 UTC", "sightings": 1 }, { "indicator": "http://59.88.133.192:54820/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-28 16:12:09 UTC", "last_seen": "2026-03-28 16:12:09 UTC", "sightings": 1 }, { "indicator": "http://116.138.44.176:49328/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-28 16:12:07 UTC", "last_seen": "2026-03-28 16:12:07 UTC", "sightings": 1 }, { "indicator": "http://120.86.71.216:43364/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 16:11:26 UTC", "last_seen": "2026-03-28 16:11:26 UTC", "sightings": 1 }, { "indicator": "https://ultra-r0ug.vectorharbinger.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 16:11:09 UTC", "last_seen": "2026-03-28 16:11:09 UTC", "sightings": 1 }, { "indicator": "http://116.248.120.213:58539/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-28 16:07:37 UTC", "last_seen": "2026-03-28 16:07:37 UTC", "sightings": 1 }, { "indicator": "https://c0lo-scope.vectorharbinger.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 16:05:13 UTC", "last_seen": "2026-03-28 16:05:13 UTC", "sightings": 1 }, { "indicator": "https://neurafor.pozellant.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 15:59:09 UTC", "last_seen": "2026-03-28 15:59:09 UTC", "sightings": 1 }, { "indicator": "http://59.97.252.217:41205/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 15:55:27 UTC", "last_seen": "2026-03-28 15:55:27 UTC", "sightings": 1 }, { "indicator": "http://182.126.126.235:50537/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 15:54:31 UTC", "last_seen": "2026-03-28 15:54:31 UTC", "sightings": 1 }, { "indicator": "https://scanque.pozellant.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 15:53:08 UTC", "last_seen": "2026-03-28 15:53:08 UTC", "sightings": 1 }, { "indicator": "http://182.127.128.113:42688/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 15:52:19 UTC", "last_seen": "2026-03-28 15:52:19 UTC", "sightings": 1 }, { "indicator": "http://110.38.201.154:60945/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 15:52:18 UTC", "last_seen": "2026-03-28 15:52:18 UTC", "sightings": 1 }, { "indicator": "https://59fxy.chromeflack.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 15:48:09 UTC", "last_seen": "2026-03-28 15:48:09 UTC", "sightings": 1 }, { "indicator": "http://175.149.113.54:54382/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 15:47:21 UTC", "last_seen": "2026-03-28 15:47:21 UTC", "sightings": 1 }, { "indicator": "https://ypmd72xu.latticepatronage.digital/?=check&&actmn=mCJWEHcuLYoWVKFg", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-28 15:47:07 UTC", "last_seen": "2026-03-28 15:47:07 UTC", "sightings": 1 }, { "indicator": "http://110.37.44.158:52674/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-28 15:43:38 UTC", "last_seen": "2026-03-28 15:43:38 UTC", "sightings": 1 }, { "indicator": "https://triforgeix.chromeflack.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 15:43:09 UTC", "last_seen": "2026-03-28 15:43:09 UTC", "sightings": 1 }, { "indicator": "https://dyn-tidear.dockhype.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 15:37:09 UTC", "last_seen": "2026-03-28 15:37:09 UTC", "sightings": 1 }, { "indicator": "https://thifleet.dockhype.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 15:31:11 UTC", "last_seen": "2026-03-28 15:31:11 UTC", "sightings": 1 }, { "indicator": "http://182.126.126.235:50537/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 15:30:27 UTC", "last_seen": "2026-03-28 15:30:27 UTC", "sightings": 1 }, { "indicator": "http://219.70.95.15:37817/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-28 15:27:11 UTC", "last_seen": "2026-03-28 15:27:11 UTC", "sightings": 1 }, { "indicator": "http://110.37.3.227:59501/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-28 15:27:09 UTC", "last_seen": "2026-03-28 15:27:09 UTC", "sightings": 1 }, { "indicator": "https://gridfocus.cloudfloot.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 15:25:15 UTC", "last_seen": "2026-03-28 15:25:15 UTC", "sightings": 1 }, { "indicator": "http://175.149.113.54:54382/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 15:24:24 UTC", "last_seen": "2026-03-28 15:24:24 UTC", "sightings": 1 }, { "indicator": "https://336yzvub.cloudfloot.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 15:21:10 UTC", "last_seen": "2026-03-28 15:21:10 UTC", "sightings": 1 }, { "indicator": "http://120.28.195.142:60380/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-28 15:17:22 UTC", "last_seen": "2026-03-28 15:17:22 UTC", "sightings": 1 }, { "indicator": "https://zenmarken4.hostyard.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 15:14:10 UTC", "last_seen": "2026-03-28 15:14:10 UTC", "sightings": 1 }, { "indicator": "https://tw9hk.hostyard.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 15:11:08 UTC", "last_seen": "2026-03-28 15:11:08 UTC", "sightings": 1 }, { "indicator": "http://27.37.215.195:36801/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 15:09:28 UTC", "last_seen": "2026-03-28 15:09:28 UTC", "sightings": 1 }, { "indicator": "https://binscree.matchexact.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 15:07:12 UTC", "last_seen": "2026-03-28 15:07:12 UTC", "sightings": 1 }, { "indicator": "http://85.239.147.6/files/7048186296/a8cOT32.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-03-28 15:05:06 UTC", "last_seen": "2026-03-28 15:05:06 UTC", "sightings": 1 }, { "indicator": "https://git33.matchexact.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 14:58:11 UTC", "last_seen": "2026-03-28 14:58:11 UTC", "sightings": 1 }, { "indicator": "http://85.239.147.6/files/7359455182/S5AKPxu.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-03-28 14:58:05 UTC", "last_seen": "2026-03-28 14:58:05 UTC", "sightings": 1 }, { "indicator": "https://patternprint.productter.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 14:52:10 UTC", "last_seen": "2026-03-28 14:52:10 UTC", "sightings": 1 }, { "indicator": "http://120.28.222.207:55994/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-28 14:52:06 UTC", "last_seen": "2026-03-28 14:52:06 UTC", "sightings": 1 }, { "indicator": "http://120.28.197.150:60037/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-28 14:50:24 UTC", "last_seen": "2026-03-28 14:50:24 UTC", "sightings": 1 }, { "indicator": "https://circuittraile.productter.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 14:45:09 UTC", "last_seen": "2026-03-28 14:45:09 UTC", "sightings": 1 }, { "indicator": "https://merlithex.tockentrue.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 14:41:10 UTC", "last_seen": "2026-03-28 14:41:10 UTC", "sightings": 1 }, { "indicator": "http://27.206.35.240:50622/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-28 14:37:06 UTC", "last_seen": "2026-03-28 14:37:06 UTC", "sightings": 1 }, { "indicator": "https://emberbroker.tockentrue.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 14:35:09 UTC", "last_seen": "2026-03-28 14:35:09 UTC", "sightings": 1 }, { "indicator": "https://gr0w-grid.paragonbloomera.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 14:30:09 UTC", "last_seen": "2026-03-28 14:30:09 UTC", "sightings": 1 }, { "indicator": "https://lumforgea.paragonbloomera.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 14:24:11 UTC", "last_seen": "2026-03-28 14:24:11 UTC", "sightings": 1 }, { "indicator": "http://119.179.249.67:52244/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 14:23:15 UTC", "last_seen": "2026-03-28 14:23:15 UTC", "sightings": 1 }, { "indicator": "http://119.162.228.112:60556/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 14:20:10 UTC", "last_seen": "2026-03-28 14:20:10 UTC", "sightings": 1 }, { "indicator": "https://capitalultra.quantumharbinger.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 14:19:10 UTC", "last_seen": "2026-03-28 14:19:10 UTC", "sightings": 1 }, { "indicator": "http://110.36.86.84:58715/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 14:14:08 UTC", "last_seen": "2026-03-28 14:14:08 UTC", "sightings": 1 }, { "indicator": "https://hyperobs.nexuspatronage.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 14:12:09 UTC", "last_seen": "2026-03-28 14:12:09 UTC", "sightings": 1 }, { "indicator": "https://cleanrain.vectorprospera.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 14:06:08 UTC", "last_seen": "2026-03-28 14:06:08 UTC", "sightings": 1 }, { "indicator": "http://42.227.176.23:38866/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-28 14:02:06 UTC", "last_seen": "2026-03-28 14:02:06 UTC", "sightings": 1 }, { "indicator": "https://568sx.momentumbloomera.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 14:01:08 UTC", "last_seen": "2026-03-28 14:01:08 UTC", "sightings": 1 }, { "indicator": "http://119.179.249.67:52244/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 13:55:12 UTC", "last_seen": "2026-03-28 13:55:12 UTC", "sightings": 1 }, { "indicator": "https://24dw.apexharvestor.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 13:55:10 UTC", "last_seen": "2026-03-28 13:55:10 UTC", "sightings": 1 }, { "indicator": "http://42.228.43.250:35412/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 13:54:10 UTC", "last_seen": "2026-03-28 13:54:10 UTC", "sightings": 1 }, { "indicator": "http://42.228.43.250:35412/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 13:52:17 UTC", "last_seen": "2026-03-28 13:52:17 UTC", "sightings": 1 }, { "indicator": "https://meta-latt1c.covenantventure.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 13:49:08 UTC", "last_seen": "2026-03-28 13:49:08 UTC", "sightings": 1 }, { "indicator": "http://42.224.172.121:56327/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 13:47:13 UTC", "last_seen": "2026-03-28 13:47:13 UTC", "sightings": 1 }, { "indicator": "http://221.15.224.250:60117/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-28 13:47:07 UTC", "last_seen": "2026-03-28 13:47:07 UTC", "sightings": 1 }, { "indicator": "https://vect01-gate.latticepatronage.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 13:44:10 UTC", "last_seen": "2026-03-28 13:44:10 UTC", "sightings": 1 }, { "indicator": "http://libss.0x504.com/xlh/cccc.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "sh", "ua-wget" ], "first_seen": "2026-03-28 13:42:17 UTC", "last_seen": "2026-03-28 13:42:17 UTC", "sightings": 1 }, { "indicator": "https://arkmeshum2.radiantprospera.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 13:38:08 UTC", "last_seen": "2026-03-28 13:38:08 UTC", "sightings": 1 }, { "indicator": "http://123.7.240.22:56534/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 13:37:14 UTC", "last_seen": "2026-03-28 13:37:14 UTC", "sightings": 1 }, { "indicator": "https://sync-route.radiantprospera.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 13:34:08 UTC", "last_seen": "2026-03-28 13:34:08 UTC", "sightings": 1 }, { "indicator": "https://mm52vg.zenithharbinger.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 13:28:09 UTC", "last_seen": "2026-03-28 13:28:09 UTC", "sightings": 1 }, { "indicator": "https://boldoffe.zenithharbinger.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 13:22:07 UTC", "last_seen": "2026-03-28 13:22:07 UTC", "sightings": 1 }, { "indicator": "https://notmar.pozellant.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 13:13:10 UTC", "last_seen": "2026-03-28 13:13:10 UTC", "sightings": 1 }, { "indicator": "http://42.227.176.23:38866/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-28 13:12:07 UTC", "last_seen": "2026-03-28 13:12:07 UTC", "sightings": 1 }, { "indicator": "https://kjpf3o93.radiantprospera.digital/?=check&&actmn=pJMOHCsZoEDmHUgU", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-28 13:06:08 UTC", "last_seen": "2026-03-28 13:06:08 UTC", "sightings": 1 }, { "indicator": "http://45.168.22.54:44879/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-28 13:02:08 UTC", "last_seen": "2026-03-28 13:02:08 UTC", "sightings": 1 }, { "indicator": "http://110.36.95.252:33222/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 13:01:15 UTC", "last_seen": "2026-03-28 13:01:15 UTC", "sightings": 1 }, { "indicator": "https://daemondeli.chromeflack.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 13:01:10 UTC", "last_seen": "2026-03-28 13:01:10 UTC", "sightings": 1 }, { "indicator": "http://77.236.74.65:35923/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-28 12:57:06 UTC", "last_seen": "2026-03-28 12:57:06 UTC", "sightings": 1 }, { "indicator": "https://oi52ewc.dockhype.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 12:55:09 UTC", "last_seen": "2026-03-28 12:55:09 UTC", "sightings": 1 }, { "indicator": "http://182.116.38.6:53546/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-28 12:52:07 UTC", "last_seen": "2026-03-28 12:52:07 UTC", "sightings": 1 }, { "indicator": "https://sun-line.cloudfloot.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 12:50:09 UTC", "last_seen": "2026-03-28 12:50:09 UTC", "sightings": 1 }, { "indicator": "http://124.6.167.18:46984/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-28 12:44:16 UTC", "last_seen": "2026-03-28 12:44:16 UTC", "sightings": 1 }, { "indicator": "http://45.168.22.54:44879/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-28 12:44:16 UTC", "last_seen": "2026-03-28 12:44:16 UTC", "sightings": 1 }, { "indicator": "https://dyn-coreal.hostyard.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 12:44:07 UTC", "last_seen": "2026-03-28 12:44:07 UTC", "sightings": 1 }, { "indicator": "http://77.245.107.223:34597/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 12:42:12 UTC", "last_seen": "2026-03-28 12:42:12 UTC", "sightings": 1 }, { "indicator": "https://dockswitch.matchexact.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 12:38:10 UTC", "last_seen": "2026-03-28 12:38:10 UTC", "sightings": 1 }, { "indicator": "http://182.116.38.6:53546/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 12:34:18 UTC", "last_seen": "2026-03-28 12:34:18 UTC", "sightings": 1 }, { "indicator": "https://cfp1laq8.productter.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 12:33:09 UTC", "last_seen": "2026-03-28 12:33:09 UTC", "sightings": 1 }, { "indicator": "http://110.36.95.252:33222/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 12:32:15 UTC", "last_seen": "2026-03-28 12:32:15 UTC", "sightings": 1 }, { "indicator": "http://110.36.15.1:52084/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 12:27:16 UTC", "last_seen": "2026-03-28 12:27:16 UTC", "sightings": 1 }, { "indicator": "https://velflux0or.tockentrue.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 12:27:09 UTC", "last_seen": "2026-03-28 12:27:09 UTC", "sightings": 1 }, { "indicator": "http://125.41.109.105:42271/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-28 12:22:07 UTC", "last_seen": "2026-03-28 12:22:07 UTC", "sightings": 1 }, { "indicator": "http://124.6.167.18:46984/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-28 12:21:14 UTC", "last_seen": "2026-03-28 12:21:14 UTC", "sightings": 1 }, { "indicator": "https://duskgrand.paragonbloomera.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 12:21:11 UTC", "last_seen": "2026-03-28 12:21:11 UTC", "sightings": 1 }, { "indicator": "http://218.59.105.0:54583/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-28 12:20:16 UTC", "last_seen": "2026-03-28 12:20:16 UTC", "sightings": 1 }, { "indicator": "http://77.245.107.223:34597/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 12:16:14 UTC", "last_seen": "2026-03-28 12:16:14 UTC", "sightings": 1 }, { "indicator": "https://optic5-dock.paragonbloomera.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 12:15:14 UTC", "last_seen": "2026-03-28 12:15:14 UTC", "sightings": 1 }, { "indicator": "http://110.36.15.1:52084/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 12:13:12 UTC", "last_seen": "2026-03-28 12:13:12 UTC", "sightings": 1 }, { "indicator": "https://2woz.quantumharbinger.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 12:10:10 UTC", "last_seen": "2026-03-28 12:10:10 UTC", "sightings": 1 }, { "indicator": "https://hnz4q1fw.zenithharbinger.digital/?=check&&actmn=ssfTNKJvkmecvvKT", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-28 12:07:09 UTC", "last_seen": "2026-03-28 12:07:09 UTC", "sightings": 1 }, { "indicator": "http://42.224.172.121:56327/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 12:04:21 UTC", "last_seen": "2026-03-28 12:04:21 UTC", "sightings": 1 }, { "indicator": "https://arkline9ar.quantumharbinger.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 12:04:10 UTC", "last_seen": "2026-03-28 12:04:10 UTC", "sightings": 1 }, { "indicator": "http://59.96.140.111:51367/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 12:02:16 UTC", "last_seen": "2026-03-28 12:02:16 UTC", "sightings": 1 }, { "indicator": "https://pol43-plate.nexuspatronage.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 12:00:13 UTC", "last_seen": "2026-03-28 12:00:13 UTC", "sightings": 1 }, { "indicator": "https://lecbyj6.nexuspatronage.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 11:57:10 UTC", "last_seen": "2026-03-28 11:57:10 UTC", "sightings": 1 }, { "indicator": "http://103.70.167.206:52080/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 11:56:32 UTC", "last_seen": "2026-03-28 11:56:32 UTC", "sightings": 1 }, { "indicator": "http://182.113.201.144:40446/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 11:55:17 UTC", "last_seen": "2026-03-28 11:55:17 UTC", "sightings": 1 }, { "indicator": "http://110.36.27.244:57931/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-28 11:52:06 UTC", "last_seen": "2026-03-28 11:52:06 UTC", "sightings": 1 }, { "indicator": "http://218.59.105.0:54583/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-28 11:49:14 UTC", "last_seen": "2026-03-28 11:49:14 UTC", "sightings": 1 }, { "indicator": "https://zwyyuczn.vectorprospera.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 11:48:08 UTC", "last_seen": "2026-03-28 11:48:08 UTC", "sightings": 1 }, { "indicator": "http://110.37.27.87:35208/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 11:47:16 UTC", "last_seen": "2026-03-28 11:47:16 UTC", "sightings": 1 }, { "indicator": "http://116.140.73.201:36845/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-28 11:47:06 UTC", "last_seen": "2026-03-28 11:47:06 UTC", "sightings": 1 }, { "indicator": "https://wylzkl.vectorprospera.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 11:42:08 UTC", "last_seen": "2026-03-28 11:42:08 UTC", "sightings": 1 }, { "indicator": "https://serdraos.momentumbloomera.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 11:37:11 UTC", "last_seen": "2026-03-28 11:37:11 UTC", "sightings": 1 }, { "indicator": "http://119.162.228.112:60556/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 11:35:21 UTC", "last_seen": "2026-03-28 11:35:21 UTC", "sightings": 1 }, { "indicator": "http://59.96.140.111:51367/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 11:32:11 UTC", "last_seen": "2026-03-28 11:32:11 UTC", "sightings": 1 }, { "indicator": "https://pale-line.momentumbloomera.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 11:31:07 UTC", "last_seen": "2026-03-28 11:31:07 UTC", "sightings": 1 }, { "indicator": "https://nimblestitch.apexharvestor.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 11:26:09 UTC", "last_seen": "2026-03-28 11:26:09 UTC", "sightings": 1 }, { "indicator": "http://182.113.201.144:40446/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 11:24:12 UTC", "last_seen": "2026-03-28 11:24:12 UTC", "sightings": 1 }, { "indicator": "https://proto-pub1.apexharvestor.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 11:19:09 UTC", "last_seen": "2026-03-28 11:19:09 UTC", "sightings": 1 }, { "indicator": "http://113.221.47.10:48596/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-28 11:18:18 UTC", "last_seen": "2026-03-28 11:18:18 UTC", "sightings": 1 }, { "indicator": "https://roufal.covenantventure.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 11:13:09 UTC", "last_seen": "2026-03-28 11:13:09 UTC", "sightings": 1 }, { "indicator": "https://ukswf.covenantventure.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 11:12:11 UTC", "last_seen": "2026-03-28 11:12:11 UTC", "sightings": 1 }, { "indicator": "http://110.39.237.16:44311/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 11:08:16 UTC", "last_seen": "2026-03-28 11:08:16 UTC", "sightings": 1 }, { "indicator": "http://117.206.101.160:38578/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 11:05:27 UTC", "last_seen": "2026-03-28 11:05:27 UTC", "sightings": 1 }, { "indicator": "https://c0upon1-sheet.latticepatronage.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 11:03:11 UTC", "last_seen": "2026-03-28 11:03:11 UTC", "sightings": 1 }, { "indicator": "http://222.142.196.246:59233/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 11:03:10 UTC", "last_seen": "2026-03-28 11:03:10 UTC", "sightings": 1 }, { "indicator": "http://110.37.78.177:53621/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 11:01:16 UTC", "last_seen": "2026-03-28 11:01:16 UTC", "sightings": 1 }, { "indicator": "http://123.12.18.236:58165/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-28 10:57:08 UTC", "last_seen": "2026-03-28 10:57:08 UTC", "sightings": 1 }, { "indicator": "https://focu-stream.latticepatronage.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 10:57:08 UTC", "last_seen": "2026-03-28 10:57:08 UTC", "sightings": 1 }, { "indicator": "http://123.144.89.68:58717/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-28 10:54:11 UTC", "last_seen": "2026-03-28 10:54:11 UTC", "sightings": 1 }, { "indicator": "http://110.37.72.176:59477/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 10:51:16 UTC", "last_seen": "2026-03-28 10:51:16 UTC", "sightings": 1 }, { "indicator": "https://xuyk.radiantprospera.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 10:51:09 UTC", "last_seen": "2026-03-28 10:51:09 UTC", "sightings": 1 }, { "indicator": "http://110.37.72.176:59477/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 10:50:16 UTC", "last_seen": "2026-03-28 10:50:16 UTC", "sightings": 1 }, { "indicator": "http://113.221.47.10:48596/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-28 10:49:09 UTC", "last_seen": "2026-03-28 10:49:09 UTC", "sightings": 1 }, { "indicator": "http://110.36.18.167:52977/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 10:48:16 UTC", "last_seen": "2026-03-28 10:48:16 UTC", "sightings": 1 }, { "indicator": "https://tal-marka.radiantprospera.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 10:47:11 UTC", "last_seen": "2026-03-28 10:47:11 UTC", "sightings": 1 }, { "indicator": "http://110.39.237.16:44311/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 10:46:22 UTC", "last_seen": "2026-03-28 10:46:22 UTC", "sightings": 1 }, { "indicator": "http://41.248.16.180:39340/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 10:45:24 UTC", "last_seen": "2026-03-28 10:45:24 UTC", "sightings": 1 }, { "indicator": "http://41.248.16.180:39340/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 10:45:24 UTC", "last_seen": "2026-03-28 10:45:24 UTC", "sightings": 1 }, { "indicator": "http://117.209.95.42:54706/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 10:45:23 UTC", "last_seen": "2026-03-28 10:45:23 UTC", "sightings": 1 }, { "indicator": "http://117.235.225.145:32879/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 10:44:22 UTC", "last_seen": "2026-03-28 10:44:22 UTC", "sightings": 1 }, { "indicator": "http://222.142.196.246:59233/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 10:42:18 UTC", "last_seen": "2026-03-28 10:42:18 UTC", "sightings": 1 }, { "indicator": "http://123.12.18.236:58165/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-28 10:42:07 UTC", "last_seen": "2026-03-28 10:42:07 UTC", "sightings": 1 }, { "indicator": "https://railglyph.zenithharbinger.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 10:40:09 UTC", "last_seen": "2026-03-28 10:40:09 UTC", "sightings": 1 }, { "indicator": "https://lqlk.zenithharbinger.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 10:35:11 UTC", "last_seen": "2026-03-28 10:35:11 UTC", "sightings": 1 }, { "indicator": "http://78.171.123.16:42188/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 10:34:16 UTC", "last_seen": "2026-03-28 10:34:16 UTC", "sightings": 1 }, { "indicator": "http://110.37.78.177:53621/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 10:30:18 UTC", "last_seen": "2026-03-28 10:30:18 UTC", "sightings": 1 }, { "indicator": "http://124.95.8.227:46020/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 10:29:35 UTC", "last_seen": "2026-03-28 10:29:35 UTC", "sightings": 1 }, { "indicator": "http://45.164.179.97:10080/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 10:29:21 UTC", "last_seen": "2026-03-28 10:29:21 UTC", "sightings": 1 }, { "indicator": "https://2xxws.pozellant.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 10:29:08 UTC", "last_seen": "2026-03-28 10:29:08 UTC", "sightings": 1 }, { "indicator": "http://61.52.82.225:33925/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 10:25:22 UTC", "last_seen": "2026-03-28 10:25:22 UTC", "sightings": 1 }, { "indicator": "http://110.36.18.167:52977/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 10:23:21 UTC", "last_seen": "2026-03-28 10:23:21 UTC", "sightings": 1 }, { "indicator": "https://linkclie.pozellant.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 10:23:13 UTC", "last_seen": "2026-03-28 10:23:13 UTC", "sightings": 1 }, { "indicator": "http://175.165.85.133:41598/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 10:19:22 UTC", "last_seen": "2026-03-28 10:19:22 UTC", "sightings": 1 }, { "indicator": "https://e457.pozellant.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 10:19:08 UTC", "last_seen": "2026-03-28 10:19:08 UTC", "sightings": 1 }, { "indicator": "http://78.171.123.16:42188/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 10:17:14 UTC", "last_seen": "2026-03-28 10:17:14 UTC", "sightings": 1 }, { "indicator": "http://117.209.95.42:54706/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 10:13:22 UTC", "last_seen": "2026-03-28 10:13:22 UTC", "sightings": 1 }, { "indicator": "https://1att0-crest.pozellant.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 10:13:09 UTC", "last_seen": "2026-03-28 10:13:09 UTC", "sightings": 1 }, { "indicator": "http://115.62.159.144:51272/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 10:06:17 UTC", "last_seen": "2026-03-28 10:06:17 UTC", "sightings": 1 }, { "indicator": "https://soltidea3.pozellant.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 10:06:11 UTC", "last_seen": "2026-03-28 10:06:11 UTC", "sightings": 1 }, { "indicator": "https://kelvenon1.chromeflack.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 10:01:13 UTC", "last_seen": "2026-03-28 10:01:13 UTC", "sightings": 1 }, { "indicator": "http://45.164.179.97:10080/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 09:59:17 UTC", "last_seen": "2026-03-28 09:59:17 UTC", "sightings": 1 }, { "indicator": "http://61.52.82.225:33925/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 09:58:23 UTC", "last_seen": "2026-03-28 09:58:23 UTC", "sightings": 1 }, { "indicator": "https://ffvwks.chromeflack.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 09:55:09 UTC", "last_seen": "2026-03-28 09:55:09 UTC", "sightings": 1 }, { "indicator": "http://182.114.48.68:59286/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 09:54:24 UTC", "last_seen": "2026-03-28 09:54:24 UTC", "sightings": 1 }, { "indicator": "http://222.246.41.89:35002/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-28 09:51:12 UTC", "last_seen": "2026-03-28 09:51:12 UTC", "sightings": 1 }, { "indicator": "http://112.248.186.172:48317/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 09:50:43 UTC", "last_seen": "2026-03-28 09:50:43 UTC", "sightings": 1 }, { "indicator": "https://0iwbrl.chromeflack.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 09:50:12 UTC", "last_seen": "2026-03-28 09:50:12 UTC", "sightings": 1 }, { "indicator": "http://182.113.234.132:48228/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 09:49:20 UTC", "last_seen": "2026-03-28 09:49:20 UTC", "sightings": 1 }, { "indicator": "http://196.190.1.39:43032/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-28 09:46:22 UTC", "last_seen": "2026-03-28 09:46:22 UTC", "sightings": 1 }, { "indicator": "https://vehb.chromeflack.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 09:44:11 UTC", "last_seen": "2026-03-28 09:44:11 UTC", "sightings": 1 }, { "indicator": "https://nortideix9.chromeflack.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 09:38:11 UTC", "last_seen": "2026-03-28 09:38:11 UTC", "sightings": 1 }, { "indicator": "http://182.113.234.132:48228/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 09:35:17 UTC", "last_seen": "2026-03-28 09:35:17 UTC", "sightings": 1 }, { "indicator": "https://pilhar.dockhype.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 09:33:13 UTC", "last_seen": "2026-03-28 09:33:13 UTC", "sightings": 1 }, { "indicator": "http://180.191.230.61:51275/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-28 09:31:17 UTC", "last_seen": "2026-03-28 09:31:17 UTC", "sightings": 1 }, { "indicator": "https://compi1e-well.dockhype.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 09:27:10 UTC", "last_seen": "2026-03-28 09:27:10 UTC", "sightings": 1 }, { "indicator": "http://112.251.87.12:57219/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-28 09:27:06 UTC", "last_seen": "2026-03-28 09:27:06 UTC", "sightings": 1 }, { "indicator": "https://decodeass.dockhype.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 09:22:10 UTC", "last_seen": "2026-03-28 09:22:10 UTC", "sightings": 1 }, { "indicator": "http://115.62.159.144:51272/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 09:19:25 UTC", "last_seen": "2026-03-28 09:19:25 UTC", "sightings": 1 }, { "indicator": "http://112.251.87.12:57219/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-28 09:17:24 UTC", "last_seen": "2026-03-28 09:17:24 UTC", "sightings": 1 }, { "indicator": "http://219.155.201.138:56070/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 09:16:19 UTC", "last_seen": "2026-03-28 09:16:19 UTC", "sightings": 1 }, { "indicator": "https://sertideos6.dockhype.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 09:16:10 UTC", "last_seen": "2026-03-28 09:16:10 UTC", "sightings": 1 }, { "indicator": "http://123.144.89.68:58717/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-28 09:13:25 UTC", "last_seen": "2026-03-28 09:13:25 UTC", "sightings": 1 }, { "indicator": "https://f0x8-frame.dockhype.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 09:11:11 UTC", "last_seen": "2026-03-28 09:11:11 UTC", "sightings": 1 }, { "indicator": "http://182.112.12.70:38474/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 09:09:21 UTC", "last_seen": "2026-03-28 09:09:21 UTC", "sightings": 1 }, { "indicator": "http://180.191.230.61:51275/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-28 09:08:18 UTC", "last_seen": "2026-03-28 09:08:18 UTC", "sightings": 1 }, { "indicator": "https://59zvgq.cloudfloot.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 09:05:10 UTC", "last_seen": "2026-03-28 09:05:10 UTC", "sightings": 1 }, { "indicator": "http://119.167.27.116:60256/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-28 09:02:07 UTC", "last_seen": "2026-03-28 09:02:07 UTC", "sightings": 1 }, { "indicator": "https://broa-glow.cloudfloot.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 08:59:09 UTC", "last_seen": "2026-03-28 08:59:09 UTC", "sightings": 1 }, { "indicator": "https://flowmer.cloudfloot.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 08:54:08 UTC", "last_seen": "2026-03-28 08:54:08 UTC", "sightings": 1 }, { "indicator": "http://110.39.244.189:56858/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 08:52:08 UTC", "last_seen": "2026-03-28 08:52:08 UTC", "sightings": 1 }, { "indicator": "http://110.37.39.146:49339/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-28 08:52:08 UTC", "last_seen": "2026-03-28 08:52:08 UTC", "sightings": 1 }, { "indicator": "http://90.224.208.161:48263/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 08:50:19 UTC", "last_seen": "2026-03-28 08:50:19 UTC", "sightings": 1 }, { "indicator": "https://pur34-grid.cloudfloot.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 08:48:11 UTC", "last_seen": "2026-03-28 08:48:11 UTC", "sightings": 1 }, { "indicator": "http://42.58.124.72:45797/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 08:45:19 UTC", "last_seen": "2026-03-28 08:45:19 UTC", "sightings": 1 }, { "indicator": "https://chorusschema.cloudfloot.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 08:42:10 UTC", "last_seen": "2026-03-28 08:42:10 UTC", "sightings": 1 }, { "indicator": "http://119.167.27.116:60256/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-28 08:37:12 UTC", "last_seen": "2026-03-28 08:37:12 UTC", "sightings": 1 }, { "indicator": "https://fi3ld-mount.hostyard.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 08:37:10 UTC", "last_seen": "2026-03-28 08:37:10 UTC", "sightings": 1 }, { "indicator": "http://120.28.139.94:57035/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-28 08:36:17 UTC", "last_seen": "2026-03-28 08:36:17 UTC", "sightings": 1 }, { "indicator": "http://110.39.244.189:56858/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 08:32:09 UTC", "last_seen": "2026-03-28 08:32:09 UTC", "sightings": 1 }, { "indicator": "http://27.37.62.32:46073/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 08:31:18 UTC", "last_seen": "2026-03-28 08:31:18 UTC", "sightings": 1 }, { "indicator": "https://bxorbuj.hostyard.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 08:31:11 UTC", "last_seen": "2026-03-28 08:31:11 UTC", "sightings": 1 }, { "indicator": "https://5tor-bridge.hostyard.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 08:26:10 UTC", "last_seen": "2026-03-28 08:26:10 UTC", "sightings": 1 }, { "indicator": "https://datadir.hostyard.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 08:20:10 UTC", "last_seen": "2026-03-28 08:20:10 UTC", "sightings": 1 }, { "indicator": "https://vor-draa.hostyard.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 08:15:11 UTC", "last_seen": "2026-03-28 08:15:11 UTC", "sightings": 1 }, { "indicator": "http://42.58.124.72:45797/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 08:11:08 UTC", "last_seen": "2026-03-28 08:11:08 UTC", "sightings": 1 }, { "indicator": "https://ibdav4vt.matchexact.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 08:09:08 UTC", "last_seen": "2026-03-28 08:09:08 UTC", "sightings": 1 }, { "indicator": "https://meta-qu4nt.matchexact.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 08:03:08 UTC", "last_seen": "2026-03-28 08:03:08 UTC", "sightings": 1 }, { "indicator": "http://200.115.102.16:39145/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-28 08:02:06 UTC", "last_seen": "2026-03-28 08:02:06 UTC", "sightings": 1 }, { "indicator": "https://ressilen.matchexact.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 07:57:08 UTC", "last_seen": "2026-03-28 07:57:08 UTC", "sightings": 1 }, { "indicator": "http://125.40.86.155:34773/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 07:57:07 UTC", "last_seen": "2026-03-28 07:57:07 UTC", "sightings": 1 }, { "indicator": "http://123.8.5.28:36155/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 07:56:10 UTC", "last_seen": "2026-03-28 07:56:10 UTC", "sightings": 1 }, { "indicator": "http://182.112.12.70:38474/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 07:55:21 UTC", "last_seen": "2026-03-28 07:55:21 UTC", "sightings": 1 }, { "indicator": "https://lafc2.matchexact.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 07:53:09 UTC", "last_seen": "2026-03-28 07:53:09 UTC", "sightings": 1 }, { "indicator": "http://110.37.54.31:34473/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 07:47:17 UTC", "last_seen": "2026-03-28 07:47:17 UTC", "sightings": 1 }, { "indicator": "https://9uclkz8z.matchexact.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 07:46:09 UTC", "last_seen": "2026-03-28 07:46:09 UTC", "sightings": 1 }, { "indicator": "http://110.37.52.73:35664/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 07:44:16 UTC", "last_seen": "2026-03-28 07:44:16 UTC", "sightings": 1 }, { "indicator": "https://stitchreed.productter.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 07:40:10 UTC", "last_seen": "2026-03-28 07:40:10 UTC", "sightings": 1 }, { "indicator": "http://110.36.89.2:52557/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-28 07:37:07 UTC", "last_seen": "2026-03-28 07:37:07 UTC", "sightings": 1 }, { "indicator": "https://rjpx.productter.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 07:35:11 UTC", "last_seen": "2026-03-28 07:35:11 UTC", "sightings": 1 }, { "indicator": "http://123.8.5.28:36155/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 07:32:16 UTC", "last_seen": "2026-03-28 07:32:16 UTC", "sightings": 1 }, { "indicator": "https://me5h-sheet.productter.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 07:31:08 UTC", "last_seen": "2026-03-28 07:31:08 UTC", "sightings": 1 }, { "indicator": "https://geo-thr3.productter.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 07:28:07 UTC", "last_seen": "2026-03-28 07:28:07 UTC", "sightings": 1 }, { "indicator": "http://219.140.6.233:59311/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-28 07:27:16 UTC", "last_seen": "2026-03-28 07:27:16 UTC", "sightings": 1 }, { "indicator": "http://117.222.166.66:53775/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 07:26:18 UTC", "last_seen": "2026-03-28 07:26:18 UTC", "sightings": 1 }, { "indicator": "https://pe4k-chain.productter.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 07:19:10 UTC", "last_seen": "2026-03-28 07:19:10 UTC", "sightings": 1 }, { "indicator": "http://110.37.54.31:34473/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 07:16:08 UTC", "last_seen": "2026-03-28 07:16:08 UTC", "sightings": 1 }, { "indicator": "https://69woakx5.tockentrue.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 07:13:08 UTC", "last_seen": "2026-03-28 07:13:08 UTC", "sightings": 1 }, { "indicator": "http://39.89.174.35:47979/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 07:10:18 UTC", "last_seen": "2026-03-28 07:10:18 UTC", "sightings": 1 }, { "indicator": "https://48bc.tockentrue.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 07:08:08 UTC", "last_seen": "2026-03-28 07:08:08 UTC", "sightings": 1 }, { "indicator": "http://42.238.248.100:33782/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 07:07:09 UTC", "last_seen": "2026-03-28 07:07:09 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.80/596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mpsl", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-28 07:07:08 UTC", "last_seen": "2026-03-28 07:07:08 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.80/596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.ppc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-28 07:06:18 UTC", "last_seen": "2026-03-28 07:06:18 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.80/596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-28 07:06:18 UTC", "last_seen": "2026-03-28 07:06:18 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.80/596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.arc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-28 07:06:18 UTC", "last_seen": "2026-03-28 07:06:18 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.80/596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-28 07:06:18 UTC", "last_seen": "2026-03-28 07:06:18 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.80/596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.i686", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-28 07:06:18 UTC", "last_seen": "2026-03-28 07:06:18 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.80/596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.sh4", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-28 07:06:18 UTC", "last_seen": "2026-03-28 07:06:18 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.80/596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.arm", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-28 07:06:18 UTC", "last_seen": "2026-03-28 07:06:18 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.80/596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.m68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-28 07:06:18 UTC", "last_seen": "2026-03-28 07:06:18 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.80/596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.arm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-28 07:06:18 UTC", "last_seen": "2026-03-28 07:06:18 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.80/596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-28 07:06:18 UTC", "last_seen": "2026-03-28 07:06:18 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.80/596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.x64", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-28 07:06:18 UTC", "last_seen": "2026-03-28 07:06:18 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.80/596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.x86", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-28 07:06:07 UTC", "last_seen": "2026-03-28 07:06:07 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.80/596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.spc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-28 07:06:07 UTC", "last_seen": "2026-03-28 07:06:07 UTC", "sightings": 1 }, { "indicator": "http://117.222.166.66:53775/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 07:05:14 UTC", "last_seen": "2026-03-28 07:05:14 UTC", "sightings": 1 }, { "indicator": "http://79.124.59.142/index.ps1", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ascii", "powershell", "ps1" ], "first_seen": "2026-03-28 07:03:17 UTC", "last_seen": "2026-03-28 07:03:17 UTC", "sightings": 1 }, { "indicator": "http://219.156.174.89:58798/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 07:03:17 UTC", "last_seen": "2026-03-28 07:03:17 UTC", "sightings": 1 }, { "indicator": "https://quorcrestum4.tockentrue.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 07:02:09 UTC", "last_seen": "2026-03-28 07:02:09 UTC", "sightings": 1 }, { "indicator": "http://110.36.89.2:52557/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 07:01:15 UTC", "last_seen": "2026-03-28 07:01:15 UTC", "sightings": 1 }, { "indicator": "http://144.31.191.28/MvRWIgmy.exe", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-28 06:59:05 UTC", "last_seen": "2026-03-28 06:59:05 UTC", "sightings": 1 }, { "indicator": "http://144.31.191.28/user_h7Hgn7SD9Jm/ZurfeZKG.exe", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-28 06:59:05 UTC", "last_seen": "2026-03-28 06:59:05 UTC", "sightings": 1 }, { "indicator": "https://sprble.tockentrue.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 06:56:08 UTC", "last_seen": "2026-03-28 06:56:08 UTC", "sightings": 1 }, { "indicator": "http://182.112.233.85:42504/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 06:53:17 UTC", "last_seen": "2026-03-28 06:53:17 UTC", "sightings": 1 }, { "indicator": "http://110.36.86.0:51117/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 06:52:12 UTC", "last_seen": "2026-03-28 06:52:12 UTC", "sightings": 1 }, { "indicator": "https://primefierc.tockentrue.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 06:52:09 UTC", "last_seen": "2026-03-28 06:52:09 UTC", "sightings": 1 }, { "indicator": "http://219.156.174.89:58798/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 06:51:16 UTC", "last_seen": "2026-03-28 06:51:16 UTC", "sightings": 1 }, { "indicator": "https://ext4point.paragonbloomera.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 06:49:09 UTC", "last_seen": "2026-03-28 06:49:09 UTC", "sightings": 1 }, { "indicator": "http://182.127.176.191:35668/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 06:48:11 UTC", "last_seen": "2026-03-28 06:48:11 UTC", "sightings": 1 }, { "indicator": "http://45.137.70.27:8080/arm", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-28 06:47:05 UTC", "last_seen": "2026-03-28 06:47:05 UTC", "sightings": 1 }, { "indicator": "http://91.92.243.119/steam/lemon.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "exe", "LemonStealer" ], "first_seen": "2026-03-28 06:46:19 UTC", "last_seen": "2026-03-28 06:46:19 UTC", "sightings": 1 }, { "indicator": "http://185.244.182.35/arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "arm", "mirai", "mossadbotnet" ], "first_seen": "2026-03-28 06:46:19 UTC", "last_seen": "2026-03-28 06:46:19 UTC", "sightings": 1 }, { "indicator": "http://45.137.70.27:8080/mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-28 06:46:08 UTC", "last_seen": "2026-03-28 06:46:08 UTC", "sightings": 1 }, { "indicator": "http://45.137.70.27:8080/aarch64", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-28 06:46:08 UTC", "last_seen": "2026-03-28 06:46:08 UTC", "sightings": 1 }, { "indicator": "http://167.148.41.234:8040/bin/support.client.exe?i=&e=Support&y=Guest&r=", "indicator_type": "url", "source": "URLhaus", "tags": [ "connectwise", "screenconnect" ], "first_seen": "2026-03-28 06:46:08 UTC", "last_seen": "2026-03-28 06:46:08 UTC", "sightings": 1 }, { "indicator": "http://45.137.70.27:8080/mipsel", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-28 06:46:08 UTC", "last_seen": "2026-03-28 06:46:08 UTC", "sightings": 1 }, { "indicator": "https://download-version.1-7-2.com/claude", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-28 06:46:08 UTC", "last_seen": "2026-03-28 06:46:08 UTC", "sightings": 1 }, { "indicator": "http://115.63.11.200:34206/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-28 06:46:07 UTC", "last_seen": "2026-03-28 06:46:07 UTC", "sightings": 1 }, { "indicator": "http://206.189.22.92/all.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "script" ], "first_seen": "2026-03-28 06:46:04 UTC", "last_seen": "2026-03-28 06:46:04 UTC", "sightings": 1 }, { "indicator": "http://117.196.7.158:39509/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 06:45:11 UTC", "last_seen": "2026-03-28 06:45:11 UTC", "sightings": 1 }, { "indicator": "https://ext3data.paragonbloomera.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 06:40:11 UTC", "last_seen": "2026-03-28 06:40:11 UTC", "sightings": 1 }, { "indicator": "http://42.238.248.100:33782/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 06:39:07 UTC", "last_seen": "2026-03-28 06:39:07 UTC", "sightings": 1 }, { "indicator": "http://42.225.228.61:58140/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 06:36:11 UTC", "last_seen": "2026-03-28 06:36:11 UTC", "sightings": 1 }, { "indicator": "https://ext2proxy.paragonbloomera.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 06:34:08 UTC", "last_seen": "2026-03-28 06:34:08 UTC", "sightings": 1 }, { "indicator": "https://ext1infra.paragonbloomera.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 06:29:08 UTC", "last_seen": "2026-03-28 06:29:08 UTC", "sightings": 1 }, { "indicator": "http://115.63.11.200:34206/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-28 06:27:08 UTC", "last_seen": "2026-03-28 06:27:08 UTC", "sightings": 1 }, { "indicator": "http://110.37.52.73:35664/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 06:23:13 UTC", "last_seen": "2026-03-28 06:23:13 UTC", "sightings": 1 }, { "indicator": "https://svc4sat.quantumharbinger.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 06:22:12 UTC", "last_seen": "2026-03-28 06:22:12 UTC", "sightings": 1 }, { "indicator": "https://svc3core.quantumharbinger.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 06:16:08 UTC", "last_seen": "2026-03-28 06:16:08 UTC", "sightings": 1 }, { "indicator": "http://117.196.7.158:39509/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 06:13:09 UTC", "last_seen": "2026-03-28 06:13:09 UTC", "sightings": 1 }, { "indicator": "https://svc2steel.quantumharbinger.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 06:11:10 UTC", "last_seen": "2026-03-28 06:11:10 UTC", "sightings": 1 }, { "indicator": "https://svc1proc.quantumharbinger.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 06:05:14 UTC", "last_seen": "2026-03-28 06:05:14 UTC", "sightings": 1 }, { "indicator": "http://182.112.233.85:42504/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 06:00:15 UTC", "last_seen": "2026-03-28 06:00:15 UTC", "sightings": 1 }, { "indicator": "https://dev4space.nexuspatronage.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 06:00:10 UTC", "last_seen": "2026-03-28 06:00:10 UTC", "sightings": 1 }, { "indicator": "https://dev3field.nexuspatronage.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 05:58:09 UTC", "last_seen": "2026-03-28 05:58:09 UTC", "sightings": 1 }, { "indicator": "http://110.39.249.140:39687/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-28 05:57:07 UTC", "last_seen": "2026-03-28 05:57:07 UTC", "sightings": 1 }, { "indicator": "http://182.127.176.191:35668/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 05:56:13 UTC", "last_seen": "2026-03-28 05:56:13 UTC", "sightings": 1 }, { "indicator": "http://110.39.249.140:39687/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-28 05:52:06 UTC", "last_seen": "2026-03-28 05:52:06 UTC", "sightings": 1 }, { "indicator": "https://dev2outer.nexuspatronage.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 05:49:08 UTC", "last_seen": "2026-03-28 05:49:08 UTC", "sightings": 1 }, { "indicator": "http://120.28.215.129:56751/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-28 05:48:07 UTC", "last_seen": "2026-03-28 05:48:07 UTC", "sightings": 1 }, { "indicator": "https://dev1proc.nexuspatronage.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 05:43:08 UTC", "last_seen": "2026-03-28 05:43:08 UTC", "sightings": 1 }, { "indicator": "http://110.38.221.182:50047/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 05:40:08 UTC", "last_seen": "2026-03-28 05:40:08 UTC", "sightings": 1 }, { "indicator": "https://cl4path.vectorprospera.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 05:37:11 UTC", "last_seen": "2026-03-28 05:37:11 UTC", "sightings": 1 }, { "indicator": "http://110.39.242.156:55753/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 05:36:13 UTC", "last_seen": "2026-03-28 05:36:13 UTC", "sightings": 1 }, { "indicator": "https://cl3view.vectorprospera.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 05:34:14 UTC", "last_seen": "2026-03-28 05:34:14 UTC", "sightings": 1 }, { "indicator": "http://110.39.242.156:55753/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 05:32:07 UTC", "last_seen": "2026-03-28 05:32:07 UTC", "sightings": 1 }, { "indicator": "https://cl2point.vectorprospera.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 05:31:10 UTC", "last_seen": "2026-03-28 05:31:10 UTC", "sightings": 1 }, { "indicator": "http://123.188.114.222:45402/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-28 05:27:06 UTC", "last_seen": "2026-03-28 05:27:06 UTC", "sightings": 1 }, { "indicator": "http://117.247.109.76:50301/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 05:24:14 UTC", "last_seen": "2026-03-28 05:24:14 UTC", "sightings": 1 }, { "indicator": "https://cl1proc.vectorprospera.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 05:21:09 UTC", "last_seen": "2026-03-28 05:21:09 UTC", "sightings": 1 }, { "indicator": "http://39.40.188.128:49098/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 05:17:13 UTC", "last_seen": "2026-03-28 05:17:13 UTC", "sightings": 1 }, { "indicator": "http://120.28.215.129:56751/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-28 05:16:13 UTC", "last_seen": "2026-03-28 05:16:13 UTC", "sightings": 1 }, { "indicator": "https://ext4view.momentumbloomera.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 05:15:11 UTC", "last_seen": "2026-03-28 05:15:11 UTC", "sightings": 1 }, { "indicator": "http://110.38.221.182:50047/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 05:11:13 UTC", "last_seen": "2026-03-28 05:11:13 UTC", "sightings": 1 }, { "indicator": "http://175.165.80.194:36221/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 05:10:14 UTC", "last_seen": "2026-03-28 05:10:14 UTC", "sightings": 1 }, { "indicator": "https://ext3ghost.momentumbloomera.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 05:09:09 UTC", "last_seen": "2026-03-28 05:09:09 UTC", "sightings": 1 }, { "indicator": "http://110.37.24.11:41012/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 05:05:07 UTC", "last_seen": "2026-03-28 05:05:07 UTC", "sightings": 1 }, { "indicator": "https://ext2core.momentumbloomera.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 05:04:10 UTC", "last_seen": "2026-03-28 05:04:10 UTC", "sightings": 1 }, { "indicator": "http://110.36.80.173:52559/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 05:01:12 UTC", "last_seen": "2026-03-28 05:01:12 UTC", "sightings": 1 }, { "indicator": "https://ext1proc.momentumbloomera.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 04:59:09 UTC", "last_seen": "2026-03-28 04:59:09 UTC", "sightings": 1 }, { "indicator": "http://39.40.188.128:49098/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 04:56:20 UTC", "last_seen": "2026-03-28 04:56:20 UTC", "sightings": 1 }, { "indicator": "http://60.162.207.49:59356/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-28 04:55:12 UTC", "last_seen": "2026-03-28 04:55:12 UTC", "sightings": 1 }, { "indicator": "http://60.162.207.49:59356/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-28 04:55:11 UTC", "last_seen": "2026-03-28 04:55:11 UTC", "sightings": 1 }, { "indicator": "https://svc4link.apexharvestor.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 04:53:08 UTC", "last_seen": "2026-03-28 04:53:08 UTC", "sightings": 1 }, { "indicator": "http://175.165.80.194:36221/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 04:50:09 UTC", "last_seen": "2026-03-28 04:50:09 UTC", "sightings": 1 }, { "indicator": "https://svc3user.apexharvestor.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 04:47:10 UTC", "last_seen": "2026-03-28 04:47:10 UTC", "sightings": 1 }, { "indicator": "http://59.96.141.250:41205/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 04:45:15 UTC", "last_seen": "2026-03-28 04:45:15 UTC", "sightings": 1 }, { "indicator": "https://svc2base.apexharvestor.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 04:41:09 UTC", "last_seen": "2026-03-28 04:41:09 UTC", "sightings": 1 }, { "indicator": "http://117.253.152.49:40223/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 04:39:13 UTC", "last_seen": "2026-03-28 04:39:13 UTC", "sightings": 1 }, { "indicator": "http://42.234.75.160:49372/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-28 04:37:08 UTC", "last_seen": "2026-03-28 04:37:08 UTC", "sightings": 1 }, { "indicator": "https://svc1infra.apexharvestor.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 04:36:08 UTC", "last_seen": "2026-03-28 04:36:08 UTC", "sightings": 1 }, { "indicator": "http://182.123.199.207:59522/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 04:31:07 UTC", "last_seen": "2026-03-28 04:31:07 UTC", "sightings": 1 }, { "indicator": "https://dev4work.covenantventure.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 04:30:10 UTC", "last_seen": "2026-03-28 04:30:10 UTC", "sightings": 1 }, { "indicator": "http://125.41.225.108:59914/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 04:28:11 UTC", "last_seen": "2026-03-28 04:28:11 UTC", "sightings": 1 }, { "indicator": "https://dev3local.covenantventure.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 04:25:10 UTC", "last_seen": "2026-03-28 04:25:10 UTC", "sightings": 1 }, { "indicator": "http://182.123.199.207:59522/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 04:23:14 UTC", "last_seen": "2026-03-28 04:23:14 UTC", "sightings": 1 }, { "indicator": "http://123.235.242.150:58241/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-28 04:22:06 UTC", "last_seen": "2026-03-28 04:22:06 UTC", "sightings": 1 }, { "indicator": "https://dev2power.covenantventure.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 04:19:12 UTC", "last_seen": "2026-03-28 04:19:12 UTC", "sightings": 1 }, { "indicator": "http://117.253.152.49:40223/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 04:17:14 UTC", "last_seen": "2026-03-28 04:17:14 UTC", "sightings": 1 }, { "indicator": "http://42.234.75.160:49372/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-28 04:17:07 UTC", "last_seen": "2026-03-28 04:17:07 UTC", "sightings": 1 }, { "indicator": "https://dev1proc.covenantventure.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 04:14:08 UTC", "last_seen": "2026-03-28 04:14:08 UTC", "sightings": 1 }, { "indicator": "http://123.235.242.150:58241/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-28 04:12:07 UTC", "last_seen": "2026-03-28 04:12:07 UTC", "sightings": 1 }, { "indicator": "https://cl4link.latticepatronage.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 04:08:08 UTC", "last_seen": "2026-03-28 04:08:08 UTC", "sightings": 1 }, { "indicator": "https://cl3dev.latticepatronage.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 04:02:11 UTC", "last_seen": "2026-03-28 04:02:11 UTC", "sightings": 1 }, { "indicator": "http://125.41.225.108:59914/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 04:01:18 UTC", "last_seen": "2026-03-28 04:01:18 UTC", "sightings": 1 }, { "indicator": "http://182.96.165.80:52373/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-28 03:57:08 UTC", "last_seen": "2026-03-28 03:57:08 UTC", "sightings": 1 }, { "indicator": "https://cl2remote.latticepatronage.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 03:57:08 UTC", "last_seen": "2026-03-28 03:57:08 UTC", "sightings": 1 }, { "indicator": "http://110.37.40.14:60839/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 03:55:08 UTC", "last_seen": "2026-03-28 03:55:08 UTC", "sightings": 1 }, { "indicator": "https://cl1store.latticepatronage.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 03:54:07 UTC", "last_seen": "2026-03-28 03:54:07 UTC", "sightings": 1 }, { "indicator": "http://219.155.210.6:34979/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-28 03:52:07 UTC", "last_seen": "2026-03-28 03:52:07 UTC", "sightings": 1 }, { "indicator": "https://ext4sync.radiantprospera.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 03:44:12 UTC", "last_seen": "2026-03-28 03:44:12 UTC", "sightings": 1 }, { "indicator": "http://110.37.73.69:32906/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 03:44:07 UTC", "last_seen": "2026-03-28 03:44:07 UTC", "sightings": 1 }, { "indicator": "http://182.114.189.127:52671/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-28 03:43:14 UTC", "last_seen": "2026-03-28 03:43:14 UTC", "sightings": 1 }, { "indicator": "http://110.37.73.69:32906/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 03:43:12 UTC", "last_seen": "2026-03-28 03:43:12 UTC", "sightings": 1 }, { "indicator": "http://117.223.143.73:52428/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-28 03:42:07 UTC", "last_seen": "2026-03-28 03:42:07 UTC", "sightings": 1 }, { "indicator": "https://ext3gate.radiantprospera.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 03:38:08 UTC", "last_seen": "2026-03-28 03:38:08 UTC", "sightings": 1 }, { "indicator": "https://ext2proc.radiantprospera.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 03:32:16 UTC", "last_seen": "2026-03-28 03:32:16 UTC", "sightings": 1 }, { "indicator": "http://117.253.154.211:34591/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 03:31:16 UTC", "last_seen": "2026-03-28 03:31:16 UTC", "sightings": 1 }, { "indicator": "http://110.37.98.220:49877/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 03:27:13 UTC", "last_seen": "2026-03-28 03:27:13 UTC", "sightings": 1 }, { "indicator": "https://ext1meta.radiantprospera.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 03:27:11 UTC", "last_seen": "2026-03-28 03:27:11 UTC", "sightings": 1 }, { "indicator": "http://110.36.95.252:58319/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-28 03:27:06 UTC", "last_seen": "2026-03-28 03:27:06 UTC", "sightings": 1 }, { "indicator": "http://27.215.180.182:42951/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 03:24:11 UTC", "last_seen": "2026-03-28 03:24:11 UTC", "sightings": 1 }, { "indicator": "http://118.253.80.156:48921/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-28 03:24:11 UTC", "last_seen": "2026-03-28 03:24:11 UTC", "sightings": 1 }, { "indicator": "http://27.215.180.182:42951/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 03:24:10 UTC", "last_seen": "2026-03-28 03:24:10 UTC", "sightings": 1 }, { "indicator": "http://219.155.210.6:34979/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-28 03:22:08 UTC", "last_seen": "2026-03-28 03:22:08 UTC", "sightings": 1 }, { "indicator": "https://svc4static.zenithharbinger.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 03:21:08 UTC", "last_seen": "2026-03-28 03:21:08 UTC", "sightings": 1 }, { "indicator": "https://svc3edge.zenithharbinger.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 03:15:12 UTC", "last_seen": "2026-03-28 03:15:12 UTC", "sightings": 1 }, { "indicator": "http://117.223.143.73:52428/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-28 03:12:10 UTC", "last_seen": "2026-03-28 03:12:10 UTC", "sightings": 1 }, { "indicator": "https://svc2data.zenithharbinger.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 03:09:13 UTC", "last_seen": "2026-03-28 03:09:13 UTC", "sightings": 1 }, { "indicator": "http://221.225.238.133:34049/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-28 03:07:08 UTC", "last_seen": "2026-03-28 03:07:08 UTC", "sightings": 1 }, { "indicator": "http://182.127.53.90:48976/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-28 03:07:06 UTC", "last_seen": "2026-03-28 03:07:06 UTC", "sightings": 1 }, { "indicator": "http://118.253.80.156:48921/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-28 03:05:17 UTC", "last_seen": "2026-03-28 03:05:17 UTC", "sightings": 1 }, { "indicator": "https://svc1sync.zenithharbinger.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 03:05:15 UTC", "last_seen": "2026-03-28 03:05:15 UTC", "sightings": 1 }, { "indicator": "http://110.37.96.168:49364/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 03:02:13 UTC", "last_seen": "2026-03-28 03:02:13 UTC", "sightings": 1 }, { "indicator": "http://42.56.218.24:32964/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 03:00:16 UTC", "last_seen": "2026-03-28 03:00:16 UTC", "sightings": 1 }, { "indicator": "https://ext4point.keystoneprospera.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 02:59:10 UTC", "last_seen": "2026-03-28 02:59:10 UTC", "sightings": 1 }, { "indicator": "https://ext3data.keystoneprospera.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 02:53:07 UTC", "last_seen": "2026-03-28 02:53:07 UTC", "sightings": 1 }, { "indicator": "http://120.28.218.245:60982/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-28 02:52:06 UTC", "last_seen": "2026-03-28 02:52:06 UTC", "sightings": 1 }, { "indicator": "http://60.18.122.186:45482/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 02:49:15 UTC", "last_seen": "2026-03-28 02:49:15 UTC", "sightings": 1 }, { "indicator": "http://110.37.98.220:49877/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 02:48:27 UTC", "last_seen": "2026-03-28 02:48:27 UTC", "sightings": 1 }, { "indicator": "https://ext2proxy.keystoneprospera.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 02:48:10 UTC", "last_seen": "2026-03-28 02:48:10 UTC", "sightings": 1 }, { "indicator": "http://27.202.30.50:48021/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 02:46:15 UTC", "last_seen": "2026-03-28 02:46:15 UTC", "sightings": 1 }, { "indicator": "https://ext1infra.keystoneprospera.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 02:42:08 UTC", "last_seen": "2026-03-28 02:42:08 UTC", "sightings": 1 }, { "indicator": "http://180.190.189.204:56375/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-28 02:42:08 UTC", "last_seen": "2026-03-28 02:42:08 UTC", "sightings": 1 }, { "indicator": "http://182.127.53.90:48976/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-28 02:42:08 UTC", "last_seen": "2026-03-28 02:42:08 UTC", "sightings": 1 }, { "indicator": "https://svc4sat.spectrumforge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 02:36:13 UTC", "last_seen": "2026-03-28 02:36:13 UTC", "sightings": 1 }, { "indicator": "http://117.253.154.211:34591/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 02:33:06 UTC", "last_seen": "2026-03-28 02:33:06 UTC", "sightings": 1 }, { "indicator": "http://42.56.218.24:32964/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 02:33:06 UTC", "last_seen": "2026-03-28 02:33:06 UTC", "sightings": 1 }, { "indicator": "https://svc3core.spectrumforge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 02:31:07 UTC", "last_seen": "2026-03-28 02:31:07 UTC", "sightings": 1 }, { "indicator": "http://110.37.96.168:49364/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 02:28:15 UTC", "last_seen": "2026-03-28 02:28:15 UTC", "sightings": 1 }, { "indicator": "http://112.231.134.13:56814/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 02:25:18 UTC", "last_seen": "2026-03-28 02:25:18 UTC", "sightings": 1 }, { "indicator": "https://svc2steel.spectrumforge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 02:25:09 UTC", "last_seen": "2026-03-28 02:25:09 UTC", "sightings": 1 }, { "indicator": "http://110.37.65.205:36745/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-28 02:23:15 UTC", "last_seen": "2026-03-28 02:23:15 UTC", "sightings": 1 }, { "indicator": "http://60.18.122.186:45482/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 02:23:15 UTC", "last_seen": "2026-03-28 02:23:15 UTC", "sightings": 1 }, { "indicator": "https://svc1proc.spectrumforge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 02:19:08 UTC", "last_seen": "2026-03-28 02:19:08 UTC", "sightings": 1 }, { "indicator": "http://112.231.134.13:56814/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 02:17:47 UTC", "last_seen": "2026-03-28 02:17:47 UTC", "sightings": 1 }, { "indicator": "http://125.41.109.105:42271/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 02:14:16 UTC", "last_seen": "2026-03-28 02:14:16 UTC", "sightings": 1 }, { "indicator": "http://180.190.189.204:56375/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-28 02:14:15 UTC", "last_seen": "2026-03-28 02:14:15 UTC", "sightings": 1 }, { "indicator": "https://dev4space.paragonventure.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 02:14:10 UTC", "last_seen": "2026-03-28 02:14:10 UTC", "sightings": 1 }, { "indicator": "http://110.37.89.129:49857/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-28 02:12:14 UTC", "last_seen": "2026-03-28 02:12:14 UTC", "sightings": 1 }, { "indicator": "https://dev3field.paragonventure.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 02:12:08 UTC", "last_seen": "2026-03-28 02:12:08 UTC", "sightings": 1 }, { "indicator": "http://42.56.155.190:38798/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 02:10:14 UTC", "last_seen": "2026-03-28 02:10:14 UTC", "sightings": 1 }, { "indicator": "http://110.37.65.205:36745/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-28 02:04:12 UTC", "last_seen": "2026-03-28 02:04:12 UTC", "sightings": 1 }, { "indicator": "https://dev2outer.paragonventure.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 02:02:13 UTC", "last_seen": "2026-03-28 02:02:13 UTC", "sightings": 1 }, { "indicator": "http://182.60.12.214:39237/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-28 02:02:10 UTC", "last_seen": "2026-03-28 02:02:10 UTC", "sightings": 1 }, { "indicator": "http://110.36.95.252:58319/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-28 02:02:06 UTC", "last_seen": "2026-03-28 02:02:06 UTC", "sightings": 1 }, { "indicator": "http://27.202.30.50:48021/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 01:58:13 UTC", "last_seen": "2026-03-28 01:58:13 UTC", "sightings": 1 }, { "indicator": "https://dev1proc.paragonventure.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 01:57:09 UTC", "last_seen": "2026-03-28 01:57:09 UTC", "sightings": 1 }, { "indicator": "http://42.56.155.190:38798/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 01:54:13 UTC", "last_seen": "2026-03-28 01:54:13 UTC", "sightings": 1 }, { "indicator": "https://cl4path.quantumprospera.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 01:52:09 UTC", "last_seen": "2026-03-28 01:52:09 UTC", "sightings": 1 }, { "indicator": "http://110.37.89.129:49857/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-28 01:48:11 UTC", "last_seen": "2026-03-28 01:48:11 UTC", "sightings": 1 }, { "indicator": "http://115.50.42.80:36101/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 01:46:15 UTC", "last_seen": "2026-03-28 01:46:15 UTC", "sightings": 1 }, { "indicator": "https://cl3view.quantumprospera.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 01:46:08 UTC", "last_seen": "2026-03-28 01:46:08 UTC", "sightings": 1 }, { "indicator": "http://112.198.140.250:47540/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-28 01:40:13 UTC", "last_seen": "2026-03-28 01:40:13 UTC", "sightings": 1 }, { "indicator": "https://cl2point.quantumprospera.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 01:40:10 UTC", "last_seen": "2026-03-28 01:40:10 UTC", "sightings": 1 }, { "indicator": "http://115.55.241.16:49325/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-28 01:37:07 UTC", "last_seen": "2026-03-28 01:37:07 UTC", "sightings": 1 }, { "indicator": "https://cl1proc.quantumprospera.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 01:35:10 UTC", "last_seen": "2026-03-28 01:35:10 UTC", "sightings": 1 }, { "indicator": "https://ext4view.nexusharbora.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 01:29:08 UTC", "last_seen": "2026-03-28 01:29:08 UTC", "sightings": 1 }, { "indicator": "https://ext3ghost.nexusharbora.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 01:23:09 UTC", "last_seen": "2026-03-28 01:23:09 UTC", "sightings": 1 }, { "indicator": "http://115.50.42.80:36101/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 01:23:08 UTC", "last_seen": "2026-03-28 01:23:08 UTC", "sightings": 1 }, { "indicator": "https://ext2core.nexusharbora.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 01:18:11 UTC", "last_seen": "2026-03-28 01:18:11 UTC", "sightings": 1 }, { "indicator": "http://59.177.108.44:51130/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 01:13:16 UTC", "last_seen": "2026-03-28 01:13:16 UTC", "sightings": 1 }, { "indicator": "https://ext1proc.nexusharbora.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 01:12:10 UTC", "last_seen": "2026-03-28 01:12:10 UTC", "sightings": 1 }, { "indicator": "http://124.148.224.41:39098/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-28 01:12:08 UTC", "last_seen": "2026-03-28 01:12:08 UTC", "sightings": 1 }, { "indicator": "http://117.212.168.67:60175/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 01:11:06 UTC", "last_seen": "2026-03-28 01:11:06 UTC", "sightings": 1 }, { "indicator": "http://117.205.92.22:44723/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 01:09:14 UTC", "last_seen": "2026-03-28 01:09:14 UTC", "sightings": 1 }, { "indicator": "https://svc4link.luminouspatron.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 01:07:07 UTC", "last_seen": "2026-03-28 01:07:07 UTC", "sightings": 1 }, { "indicator": "http://196.189.68.239:58922/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-28 01:04:13 UTC", "last_seen": "2026-03-28 01:04:13 UTC", "sightings": 1 }, { "indicator": "http://117.205.92.22:44723/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 01:03:12 UTC", "last_seen": "2026-03-28 01:03:12 UTC", "sightings": 1 }, { "indicator": "http://42.224.22.108:33129/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-28 01:02:06 UTC", "last_seen": "2026-03-28 01:02:06 UTC", "sightings": 1 }, { "indicator": "https://svc3user.luminouspatron.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 01:01:11 UTC", "last_seen": "2026-03-28 01:01:11 UTC", "sightings": 1 }, { "indicator": "http://110.38.220.112:48037/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-28 00:57:06 UTC", "last_seen": "2026-03-28 00:57:06 UTC", "sightings": 1 }, { "indicator": "http://110.38.223.5:43479/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 00:55:13 UTC", "last_seen": "2026-03-28 00:55:13 UTC", "sightings": 1 }, { "indicator": "https://svc2base.luminouspatron.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 00:55:12 UTC", "last_seen": "2026-03-28 00:55:12 UTC", "sightings": 1 }, { "indicator": "http://110.38.220.112:48037/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-28 00:52:06 UTC", "last_seen": "2026-03-28 00:52:06 UTC", "sightings": 1 }, { "indicator": "https://svc1infra.luminouspatron.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 00:50:12 UTC", "last_seen": "2026-03-28 00:50:12 UTC", "sightings": 1 }, { "indicator": "http://110.38.223.5:43479/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-28 00:49:14 UTC", "last_seen": "2026-03-28 00:49:14 UTC", "sightings": 1 }, { "indicator": "https://dev4work.apexbloomera.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 00:44:08 UTC", "last_seen": "2026-03-28 00:44:08 UTC", "sightings": 1 }, { "indicator": "http://113.94.58.172:41687/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-28 00:39:07 UTC", "last_seen": "2026-03-28 00:39:07 UTC", "sightings": 1 }, { "indicator": "https://dev3local.apexbloomera.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 00:38:09 UTC", "last_seen": "2026-03-28 00:38:09 UTC", "sightings": 1 }, { "indicator": "http://115.49.156.235:38187/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-28 00:35:13 UTC", "last_seen": "2026-03-28 00:35:13 UTC", "sightings": 1 }, { "indicator": "https://dev2power.apexbloomera.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 00:33:08 UTC", "last_seen": "2026-03-28 00:33:08 UTC", "sightings": 1 }, { "indicator": "https://dev1proc.apexbloomera.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 00:28:08 UTC", "last_seen": "2026-03-28 00:28:08 UTC", "sightings": 1 }, { "indicator": "https://cl4link.horizonprospera.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 00:23:13 UTC", "last_seen": "2026-03-28 00:23:13 UTC", "sightings": 1 }, { "indicator": "http://85.239.147.6/files/8316621590/q4bDNVB.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-03-28 00:20:05 UTC", "last_seen": "2026-03-28 00:20:05 UTC", "sightings": 1 }, { "indicator": "https://cl3dev.horizonprospera.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 00:18:09 UTC", "last_seen": "2026-03-28 00:18:09 UTC", "sightings": 1 }, { "indicator": "https://cl2remote.horizonprospera.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 00:15:10 UTC", "last_seen": "2026-03-28 00:15:10 UTC", "sightings": 1 }, { "indicator": "http://124.130.70.134:56245/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-28 00:09:16 UTC", "last_seen": "2026-03-28 00:09:16 UTC", "sightings": 1 }, { "indicator": "http://115.49.156.235:38187/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-28 00:09:13 UTC", "last_seen": "2026-03-28 00:09:13 UTC", "sightings": 1 }, { "indicator": "http://113.94.58.172:41687/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-28 00:08:12 UTC", "last_seen": "2026-03-28 00:08:12 UTC", "sightings": 1 }, { "indicator": "http://27.121.83.226:44966/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-28 00:07:06 UTC", "last_seen": "2026-03-28 00:07:06 UTC", "sightings": 1 }, { "indicator": "https://cl1store.horizonprospera.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-28 00:05:12 UTC", "last_seen": "2026-03-28 00:05:12 UTC", "sightings": 1 }, { "indicator": "https://ext4sync.catalystventure.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 23:59:09 UTC", "last_seen": "2026-03-27 23:59:09 UTC", "sightings": 1 }, { "indicator": "http://27.121.83.226:44966/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-27 23:57:06 UTC", "last_seen": "2026-03-27 23:57:06 UTC", "sightings": 1 }, { "indicator": "http://115.55.8.37:33509/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 23:56:16 UTC", "last_seen": "2026-03-27 23:56:16 UTC", "sightings": 1 }, { "indicator": "http://115.53.22.206:60177/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 23:56:16 UTC", "last_seen": "2026-03-27 23:56:16 UTC", "sightings": 1 }, { "indicator": "https://ext3gate.catalystventure.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 23:53:08 UTC", "last_seen": "2026-03-27 23:53:08 UTC", "sightings": 1 }, { "indicator": "https://ext2proc.catalystventure.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 23:49:09 UTC", "last_seen": "2026-03-27 23:49:09 UTC", "sightings": 1 }, { "indicator": "http://222.127.55.231:45203/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-27 23:48:20 UTC", "last_seen": "2026-03-27 23:48:20 UTC", "sightings": 1 }, { "indicator": "https://ext1meta.catalystventure.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 23:43:10 UTC", "last_seen": "2026-03-27 23:43:10 UTC", "sightings": 1 }, { "indicator": "http://85.239.147.6/files/8434554557/X8cqVrA.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-03-27 23:43:05 UTC", "last_seen": "2026-03-27 23:43:05 UTC", "sightings": 1 }, { "indicator": "http://85.239.147.6/files/gop/random.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-27 23:43:05 UTC", "last_seen": "2026-03-27 23:43:05 UTC", "sightings": 1 }, { "indicator": "http://85.239.147.6/test/random.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-03-27 23:43:05 UTC", "last_seen": "2026-03-27 23:43:05 UTC", "sightings": 1 }, { "indicator": "http://85.239.147.6/files/8317177049/7tdJ9Hz.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-03-27 23:43:05 UTC", "last_seen": "2026-03-27 23:43:05 UTC", "sightings": 1 }, { "indicator": "http://85.239.147.6/files/rdx/random.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-03-27 23:43:05 UTC", "last_seen": "2026-03-27 23:43:05 UTC", "sightings": 1 }, { "indicator": "http://85.239.147.6/files/6608710704/ltjL6cP.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-27 23:43:05 UTC", "last_seen": "2026-03-27 23:43:05 UTC", "sightings": 1 }, { "indicator": "http://85.239.147.6/files/7281753217/qrTFBw7.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-03-27 23:42:05 UTC", "last_seen": "2026-03-27 23:42:05 UTC", "sightings": 1 }, { "indicator": "http://85.239.147.6/final/random.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-27 23:42:05 UTC", "last_seen": "2026-03-27 23:42:05 UTC", "sightings": 1 }, { "indicator": "http://85.239.147.6/files/8525074840/yxPIfd2.msi", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-27 23:42:04 UTC", "last_seen": "2026-03-27 23:42:04 UTC", "sightings": 1 }, { "indicator": "http://85.239.147.6/files/5900855435/eNLe4nm.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-27 23:42:04 UTC", "last_seen": "2026-03-27 23:42:04 UTC", "sightings": 1 }, { "indicator": "http://117.215.190.120:55376/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 23:41:10 UTC", "last_seen": "2026-03-27 23:41:10 UTC", "sightings": 1 }, { "indicator": "http://117.209.25.86:33099/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 23:41:07 UTC", "last_seen": "2026-03-27 23:41:07 UTC", "sightings": 1 }, { "indicator": "http://85.239.147.6/files/7341834371/BgAtGH0.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-27 23:41:04 UTC", "last_seen": "2026-03-27 23:41:04 UTC", "sightings": 1 }, { "indicator": "https://svc4static.vectorharbinger.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 23:38:10 UTC", "last_seen": "2026-03-27 23:38:10 UTC", "sightings": 1 }, { "indicator": "https://svc3edge.vectorharbinger.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 23:36:10 UTC", "last_seen": "2026-03-27 23:36:10 UTC", "sightings": 1 }, { "indicator": "http://115.55.8.37:33509/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 23:33:06 UTC", "last_seen": "2026-03-27 23:33:06 UTC", "sightings": 1 }, { "indicator": "http://115.53.22.206:60177/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 23:32:15 UTC", "last_seen": "2026-03-27 23:32:15 UTC", "sightings": 1 }, { "indicator": "http://85.239.147.6/vid/random.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-27 23:32:05 UTC", "last_seen": "2026-03-27 23:32:05 UTC", "sightings": 1 }, { "indicator": "http://27.220.132.248:34177/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-27 23:28:12 UTC", "last_seen": "2026-03-27 23:28:12 UTC", "sightings": 1 }, { "indicator": "https://svc2data.vectorharbinger.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 23:26:08 UTC", "last_seen": "2026-03-27 23:26:08 UTC", "sightings": 1 }, { "indicator": "http://222.127.55.231:45203/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-27 23:24:14 UTC", "last_seen": "2026-03-27 23:24:14 UTC", "sightings": 1 }, { "indicator": "http://123.168.208.78:50607/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-27 23:22:07 UTC", "last_seen": "2026-03-27 23:22:07 UTC", "sightings": 1 }, { "indicator": "https://svc1sync.vectorharbinger.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 23:20:16 UTC", "last_seen": "2026-03-27 23:20:16 UTC", "sightings": 1 }, { "indicator": "http://120.28.201.138:49356/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-27 23:19:07 UTC", "last_seen": "2026-03-27 23:19:07 UTC", "sightings": 1 }, { "indicator": "https://ext4point.possibilsubject.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 23:15:10 UTC", "last_seen": "2026-03-27 23:15:10 UTC", "sightings": 1 }, { "indicator": "http://182.121.145.55:56161/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 23:11:06 UTC", "last_seen": "2026-03-27 23:11:06 UTC", "sightings": 1 }, { "indicator": "https://ext3data.possibilsubject.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 23:09:09 UTC", "last_seen": "2026-03-27 23:09:09 UTC", "sightings": 1 }, { "indicator": "https://ext2proxy.possibilsubject.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 23:03:09 UTC", "last_seen": "2026-03-27 23:03:09 UTC", "sightings": 1 }, { "indicator": "http://27.220.132.248:34177/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-27 23:01:14 UTC", "last_seen": "2026-03-27 23:01:14 UTC", "sightings": 1 }, { "indicator": "https://ext1infra.possibilsubject.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 22:58:08 UTC", "last_seen": "2026-03-27 22:58:08 UTC", "sightings": 1 }, { "indicator": "http://120.28.210.78:36313/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-27 22:57:15 UTC", "last_seen": "2026-03-27 22:57:15 UTC", "sightings": 1 }, { "indicator": "http://42.5.233.192:37282/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-27 22:57:06 UTC", "last_seen": "2026-03-27 22:57:06 UTC", "sightings": 1 }, { "indicator": "http://120.28.201.138:49356/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-27 22:56:12 UTC", "last_seen": "2026-03-27 22:56:12 UTC", "sightings": 1 }, { "indicator": "http://117.235.234.165:50071/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-27 22:52:11 UTC", "last_seen": "2026-03-27 22:52:11 UTC", "sightings": 1 }, { "indicator": "http://117.235.234.165:50071/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-27 22:52:11 UTC", "last_seen": "2026-03-27 22:52:11 UTC", "sightings": 1 }, { "indicator": "https://svc4sat.greyreduction.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 22:52:08 UTC", "last_seen": "2026-03-27 22:52:08 UTC", "sightings": 1 }, { "indicator": "http://221.15.186.7:34326/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 22:51:14 UTC", "last_seen": "2026-03-27 22:51:14 UTC", "sightings": 1 }, { "indicator": "http://182.121.145.55:56161/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 22:50:09 UTC", "last_seen": "2026-03-27 22:50:09 UTC", "sightings": 1 }, { "indicator": "https://svc3core.greyreduction.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 22:46:07 UTC", "last_seen": "2026-03-27 22:46:07 UTC", "sightings": 1 }, { "indicator": "https://svc2steel.greyreduction.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 22:40:11 UTC", "last_seen": "2026-03-27 22:40:11 UTC", "sightings": 1 }, { "indicator": "http://42.86.141.4:48332/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 22:39:35 UTC", "last_seen": "2026-03-27 22:39:35 UTC", "sightings": 1 }, { "indicator": "https://svc1proc.greyreduction.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 22:35:09 UTC", "last_seen": "2026-03-27 22:35:09 UTC", "sightings": 1 }, { "indicator": "http://120.28.210.78:36313/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-27 22:33:17 UTC", "last_seen": "2026-03-27 22:33:17 UTC", "sightings": 1 }, { "indicator": "http://120.57.126.204:38692/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-27 22:32:06 UTC", "last_seen": "2026-03-27 22:32:06 UTC", "sightings": 1 }, { "indicator": "https://dev4space.meaningvitiaty.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 22:29:11 UTC", "last_seen": "2026-03-27 22:29:11 UTC", "sightings": 1 }, { "indicator": "http://58.65.215.0:37798/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 22:28:17 UTC", "last_seen": "2026-03-27 22:28:17 UTC", "sightings": 1 }, { "indicator": "https://dev3field.meaningvitiaty.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 22:25:13 UTC", "last_seen": "2026-03-27 22:25:13 UTC", "sightings": 1 }, { "indicator": "http://221.15.186.7:34326/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 22:22:15 UTC", "last_seen": "2026-03-27 22:22:15 UTC", "sightings": 1 }, { "indicator": "https://dev2outer.meaningvitiaty.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 22:18:09 UTC", "last_seen": "2026-03-27 22:18:09 UTC", "sightings": 1 }, { "indicator": "http://166.1.89.46/files/7782139129/S6xWuZ1.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-03-27 22:18:04 UTC", "last_seen": "2026-03-27 22:18:04 UTC", "sightings": 1 }, { "indicator": "http://166.1.89.46/files/gop/random.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-03-27 22:18:04 UTC", "last_seen": "2026-03-27 22:18:04 UTC", "sightings": 1 }, { "indicator": "http://42.86.141.4:48332/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 22:17:14 UTC", "last_seen": "2026-03-27 22:17:14 UTC", "sightings": 1 }, { "indicator": "http://166.1.89.46/files/8317177049/7tdJ9Hz.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-03-27 22:17:04 UTC", "last_seen": "2026-03-27 22:17:04 UTC", "sightings": 1 }, { "indicator": "http://166.1.89.46/files/8434554557/X8cqVrA.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-27 22:16:05 UTC", "last_seen": "2026-03-27 22:16:05 UTC", "sightings": 1 }, { "indicator": "https://dev1proc.meaningvitiaty.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 22:13:09 UTC", "last_seen": "2026-03-27 22:13:09 UTC", "sightings": 1 }, { "indicator": "http://113.221.25.83:38644/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-27 22:12:08 UTC", "last_seen": "2026-03-27 22:12:08 UTC", "sightings": 1 }, { "indicator": "http://166.1.89.46/files/7281753217/qrTFBw7.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-03-27 22:11:04 UTC", "last_seen": "2026-03-27 22:11:04 UTC", "sightings": 1 }, { "indicator": "http://166.1.89.46/files/7341834371/BgAtGH0.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-27 22:11:04 UTC", "last_seen": "2026-03-27 22:11:04 UTC", "sightings": 1 }, { "indicator": "http://166.1.89.46/files/8525074840/yxPIfd2.msi", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-27 22:11:04 UTC", "last_seen": "2026-03-27 22:11:04 UTC", "sightings": 1 }, { "indicator": "http://166.1.89.46/files/5900855435/eNLe4nm.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-27 22:11:04 UTC", "last_seen": "2026-03-27 22:11:04 UTC", "sightings": 1 }, { "indicator": "http://166.1.89.46/files/6608710704/ltjL6cP.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-27 22:10:06 UTC", "last_seen": "2026-03-27 22:10:06 UTC", "sightings": 1 }, { "indicator": "https://cl4path.sororatspot.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 22:09:08 UTC", "last_seen": "2026-03-27 22:09:08 UTC", "sightings": 1 }, { "indicator": "http://36.84.113.27:55577/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-27 22:07:13 UTC", "last_seen": "2026-03-27 22:07:13 UTC", "sightings": 1 }, { "indicator": "http://120.57.126.204:38692/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-27 22:07:06 UTC", "last_seen": "2026-03-27 22:07:06 UTC", "sightings": 1 }, { "indicator": "https://cl3view.sororatspot.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 22:06:09 UTC", "last_seen": "2026-03-27 22:06:09 UTC", "sightings": 1 }, { "indicator": "http://223.151.251.178:37348/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-27 22:04:19 UTC", "last_seen": "2026-03-27 22:04:19 UTC", "sightings": 1 }, { "indicator": "https://cl2point.sororatspot.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 21:56:09 UTC", "last_seen": "2026-03-27 21:56:09 UTC", "sightings": 1 }, { "indicator": "http://83.219.1.198:34528/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 21:51:18 UTC", "last_seen": "2026-03-27 21:51:18 UTC", "sightings": 1 }, { "indicator": "https://cl1proc.sororatspot.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 21:51:08 UTC", "last_seen": "2026-03-27 21:51:08 UTC", "sightings": 1 }, { "indicator": "http://83.219.1.198:34528/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 21:47:16 UTC", "last_seen": "2026-03-27 21:47:16 UTC", "sightings": 1 }, { "indicator": "https://ext4view.pleasedprism.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 21:45:09 UTC", "last_seen": "2026-03-27 21:45:09 UTC", "sightings": 1 }, { "indicator": "http://39.65.213.216:44466/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 21:42:15 UTC", "last_seen": "2026-03-27 21:42:15 UTC", "sightings": 1 }, { "indicator": "http://36.84.113.27:55577/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-27 21:38:31 UTC", "last_seen": "2026-03-27 21:38:31 UTC", "sightings": 1 }, { "indicator": "https://ext3ghost.pleasedprism.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 21:38:13 UTC", "last_seen": "2026-03-27 21:38:13 UTC", "sightings": 1 }, { "indicator": "https://ext2core.pleasedprism.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 21:34:08 UTC", "last_seen": "2026-03-27 21:34:08 UTC", "sightings": 1 }, { "indicator": "http://118.232.137.101:35076/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-27 21:27:18 UTC", "last_seen": "2026-03-27 21:27:18 UTC", "sightings": 1 }, { "indicator": "http://123.9.196.22:49285/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-27 21:27:07 UTC", "last_seen": "2026-03-27 21:27:07 UTC", "sightings": 1 }, { "indicator": "http://118.232.137.101:35076/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-27 21:26:15 UTC", "last_seen": "2026-03-27 21:26:15 UTC", "sightings": 1 }, { "indicator": "https://ext1proc.pleasedprism.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 21:25:12 UTC", "last_seen": "2026-03-27 21:25:12 UTC", "sightings": 1 }, { "indicator": "https://svc4link.canisterget.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 21:21:08 UTC", "last_seen": "2026-03-27 21:21:08 UTC", "sightings": 1 }, { "indicator": "http://39.65.213.216:44466/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 21:19:21 UTC", "last_seen": "2026-03-27 21:19:21 UTC", "sightings": 1 }, { "indicator": "https://svc3user.canisterget.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 21:15:13 UTC", "last_seen": "2026-03-27 21:15:13 UTC", "sightings": 1 }, { "indicator": "https://svc2base.canisterget.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 21:10:16 UTC", "last_seen": "2026-03-27 21:10:16 UTC", "sightings": 1 }, { "indicator": "http://166.1.89.46/test/random.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-27 21:09:05 UTC", "last_seen": "2026-03-27 21:09:05 UTC", "sightings": 1 }, { "indicator": "http://166.1.89.46/final/random.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-27 21:09:05 UTC", "last_seen": "2026-03-27 21:09:05 UTC", "sightings": 1 }, { "indicator": "http://166.1.89.46/files/rdx/random.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-27 21:09:05 UTC", "last_seen": "2026-03-27 21:09:05 UTC", "sightings": 1 }, { "indicator": "http://166.1.89.46/vid/random.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-27 21:06:06 UTC", "last_seen": "2026-03-27 21:06:06 UTC", "sightings": 1 }, { "indicator": "https://svc1infra.canisterget.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 21:03:16 UTC", "last_seen": "2026-03-27 21:03:16 UTC", "sightings": 1 }, { "indicator": "http://59.93.178.25:58236/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 21:00:27 UTC", "last_seen": "2026-03-27 21:00:27 UTC", "sightings": 1 }, { "indicator": "http://219.157.58.236:58936/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 20:58:11 UTC", "last_seen": "2026-03-27 20:58:11 UTC", "sightings": 1 }, { "indicator": "https://dev4work.dressingsix.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 20:57:09 UTC", "last_seen": "2026-03-27 20:57:09 UTC", "sightings": 1 }, { "indicator": "http://110.37.117.225:52111/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-27 20:57:06 UTC", "last_seen": "2026-03-27 20:57:06 UTC", "sightings": 1 }, { "indicator": "https://dev3local.dressingsix.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 20:53:08 UTC", "last_seen": "2026-03-27 20:53:08 UTC", "sightings": 1 }, { "indicator": "https://dev2power.dressingsix.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 20:47:10 UTC", "last_seen": "2026-03-27 20:47:10 UTC", "sightings": 1 }, { "indicator": "http://60.18.62.126:45414/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 20:46:09 UTC", "last_seen": "2026-03-27 20:46:09 UTC", "sightings": 1 }, { "indicator": "https://dev1proc.dressingsix.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 20:41:09 UTC", "last_seen": "2026-03-27 20:41:09 UTC", "sightings": 1 }, { "indicator": "https://cl4link.duralmanganese.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 20:36:08 UTC", "last_seen": "2026-03-27 20:36:08 UTC", "sightings": 1 }, { "indicator": "http://27.220.13.64:53068/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 20:34:12 UTC", "last_seen": "2026-03-27 20:34:12 UTC", "sightings": 1 }, { "indicator": "http://59.93.178.25:58236/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 20:31:11 UTC", "last_seen": "2026-03-27 20:31:11 UTC", "sightings": 1 }, { "indicator": "https://cl3dev.duralmanganese.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 20:29:09 UTC", "last_seen": "2026-03-27 20:29:09 UTC", "sightings": 1 }, { "indicator": "https://cl2remote.duralmanganese.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 20:24:09 UTC", "last_seen": "2026-03-27 20:24:09 UTC", "sightings": 1 }, { "indicator": "http://222.142.210.224:56954/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 20:22:15 UTC", "last_seen": "2026-03-27 20:22:15 UTC", "sightings": 1 }, { "indicator": "http://222.142.210.224:56954/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 20:19:15 UTC", "last_seen": "2026-03-27 20:19:15 UTC", "sightings": 1 }, { "indicator": "https://cl1store.duralmanganese.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 20:19:07 UTC", "last_seen": "2026-03-27 20:19:07 UTC", "sightings": 1 }, { "indicator": "http://27.220.13.64:53068/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 20:15:15 UTC", "last_seen": "2026-03-27 20:15:15 UTC", "sightings": 1 }, { "indicator": "https://ext4sync.altruistchimes.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 20:13:08 UTC", "last_seen": "2026-03-27 20:13:08 UTC", "sightings": 1 }, { "indicator": "http://110.37.43.128:54322/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-27 20:12:16 UTC", "last_seen": "2026-03-27 20:12:16 UTC", "sightings": 1 }, { "indicator": "https://ext3gate.altruistchimes.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 20:08:10 UTC", "last_seen": "2026-03-27 20:08:10 UTC", "sightings": 1 }, { "indicator": "https://ext2proc.altruistchimes.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 20:02:08 UTC", "last_seen": "2026-03-27 20:02:08 UTC", "sightings": 1 }, { "indicator": "https://ext1meta.altruistchimes.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 19:56:10 UTC", "last_seen": "2026-03-27 19:56:10 UTC", "sightings": 1 }, { "indicator": "https://svc4static.pendantwhip.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 19:50:11 UTC", "last_seen": "2026-03-27 19:50:11 UTC", "sightings": 1 }, { "indicator": "http://110.37.43.128:54322/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-27 19:47:16 UTC", "last_seen": "2026-03-27 19:47:16 UTC", "sightings": 1 }, { "indicator": "https://svc3edge.pendantwhip.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 19:45:11 UTC", "last_seen": "2026-03-27 19:45:11 UTC", "sightings": 1 }, { "indicator": "https://svc2data.pendantwhip.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 19:39:10 UTC", "last_seen": "2026-03-27 19:39:10 UTC", "sightings": 1 }, { "indicator": "http://221.15.193.209:55925/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 19:35:15 UTC", "last_seen": "2026-03-27 19:35:15 UTC", "sightings": 1 }, { "indicator": "https://svc1sync.pendantwhip.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 19:34:08 UTC", "last_seen": "2026-03-27 19:34:08 UTC", "sightings": 1 }, { "indicator": "http://59.98.188.114:56511/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 19:33:16 UTC", "last_seen": "2026-03-27 19:33:16 UTC", "sightings": 1 }, { "indicator": "https://ext4point.hastyraja.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 19:27:08 UTC", "last_seen": "2026-03-27 19:27:08 UTC", "sightings": 1 }, { "indicator": "http://221.15.193.209:55925/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 19:22:19 UTC", "last_seen": "2026-03-27 19:22:19 UTC", "sightings": 1 }, { "indicator": "https://ext3data.hastyraja.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 19:22:09 UTC", "last_seen": "2026-03-27 19:22:09 UTC", "sightings": 1 }, { "indicator": "http://27.37.113.10:42841/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 19:18:17 UTC", "last_seen": "2026-03-27 19:18:17 UTC", "sightings": 1 }, { "indicator": "http://123.14.253.20:37488/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 19:18:12 UTC", "last_seen": "2026-03-27 19:18:12 UTC", "sightings": 1 }, { "indicator": "https://ext2proxy.hastyraja.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 19:16:08 UTC", "last_seen": "2026-03-27 19:16:08 UTC", "sightings": 1 }, { "indicator": "https://ext1infra.hastyraja.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 19:12:08 UTC", "last_seen": "2026-03-27 19:12:08 UTC", "sightings": 1 }, { "indicator": "http://121.231.159.254:3745/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 19:09:16 UTC", "last_seen": "2026-03-27 19:09:16 UTC", "sightings": 1 }, { "indicator": "http://110.182.236.7:49179/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-27 19:08:06 UTC", "last_seen": "2026-03-27 19:08:06 UTC", "sightings": 1 }, { "indicator": "https://svc4sat.playrevenater.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 19:06:10 UTC", "last_seen": "2026-03-27 19:06:10 UTC", "sightings": 1 }, { "indicator": "http://120.28.197.150:60037/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-27 19:02:07 UTC", "last_seen": "2026-03-27 19:02:07 UTC", "sightings": 1 }, { "indicator": "https://svc3core.playrevenater.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 19:01:12 UTC", "last_seen": "2026-03-27 19:01:12 UTC", "sightings": 1 }, { "indicator": "http://123.14.253.20:37488/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 18:59:13 UTC", "last_seen": "2026-03-27 18:59:13 UTC", "sightings": 1 }, { "indicator": "https://svc2steel.playrevenater.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 18:55:12 UTC", "last_seen": "2026-03-27 18:55:12 UTC", "sightings": 1 }, { "indicator": "https://svc1proc.playrevenater.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 18:49:09 UTC", "last_seen": "2026-03-27 18:49:09 UTC", "sightings": 1 }, { "indicator": "http://27.220.12.253:33548/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-27 18:47:06 UTC", "last_seen": "2026-03-27 18:47:06 UTC", "sightings": 1 }, { "indicator": "http://121.231.159.254:3745/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 18:46:18 UTC", "last_seen": "2026-03-27 18:46:18 UTC", "sightings": 1 }, { "indicator": "https://dev4space.controlpeople.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 18:43:11 UTC", "last_seen": "2026-03-27 18:43:11 UTC", "sightings": 1 }, { "indicator": "http://60.23.232.151:40378/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 18:42:17 UTC", "last_seen": "2026-03-27 18:42:17 UTC", "sightings": 1 }, { "indicator": "http://110.182.236.7:49179/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-27 18:40:20 UTC", "last_seen": "2026-03-27 18:40:20 UTC", "sightings": 1 }, { "indicator": "http://59.98.188.114:56511/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 18:38:16 UTC", "last_seen": "2026-03-27 18:38:16 UTC", "sightings": 1 }, { "indicator": "https://dev3field.controlpeople.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 18:37:09 UTC", "last_seen": "2026-03-27 18:37:09 UTC", "sightings": 1 }, { "indicator": "http://27.200.15.27:34393/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-27 18:36:13 UTC", "last_seen": "2026-03-27 18:36:13 UTC", "sightings": 1 }, { "indicator": "https://dev2outer.controlpeople.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 18:32:11 UTC", "last_seen": "2026-03-27 18:32:11 UTC", "sightings": 1 }, { "indicator": "http://27.220.12.253:33548/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-27 18:32:07 UTC", "last_seen": "2026-03-27 18:32:07 UTC", "sightings": 1 }, { "indicator": "http://150.251.145.178/files/oblivora/random.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-27 18:29:05 UTC", "last_seen": "2026-03-27 18:29:05 UTC", "sightings": 1 }, { "indicator": "http://110.37.48.162:46953/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 18:28:08 UTC", "last_seen": "2026-03-27 18:28:08 UTC", "sightings": 1 }, { "indicator": "https://dev1proc.controlpeople.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 18:26:08 UTC", "last_seen": "2026-03-27 18:26:08 UTC", "sightings": 1 }, { "indicator": "http://114.226.85.222:60666/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-27 18:21:19 UTC", "last_seen": "2026-03-27 18:21:19 UTC", "sightings": 1 }, { "indicator": "https://cl4path.mesozoicunder.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 18:21:10 UTC", "last_seen": "2026-03-27 18:21:10 UTC", "sightings": 1 }, { "indicator": "http://60.23.232.151:40378/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 18:19:22 UTC", "last_seen": "2026-03-27 18:19:22 UTC", "sightings": 1 }, { "indicator": "https://cl3view.mesozoicunder.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 18:16:10 UTC", "last_seen": "2026-03-27 18:16:10 UTC", "sightings": 1 }, { "indicator": "http://123.7.240.22:56534/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-27 18:12:07 UTC", "last_seen": "2026-03-27 18:12:07 UTC", "sightings": 1 }, { "indicator": "https://cl2point.mesozoicunder.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 18:10:09 UTC", "last_seen": "2026-03-27 18:10:09 UTC", "sightings": 1 }, { "indicator": "https://cl1proc.mesozoicunder.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 18:04:10 UTC", "last_seen": "2026-03-27 18:04:10 UTC", "sightings": 1 }, { "indicator": "https://ext4view.archaicwillow.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 18:01:07 UTC", "last_seen": "2026-03-27 18:01:07 UTC", "sightings": 1 }, { "indicator": "https://ext3ghost.archaicwillow.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 17:57:11 UTC", "last_seen": "2026-03-27 17:57:11 UTC", "sightings": 1 }, { "indicator": "http://123.9.101.253:40086/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 17:48:09 UTC", "last_seen": "2026-03-27 17:48:09 UTC", "sightings": 1 }, { "indicator": "https://ext2core.archaicwillow.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 17:47:09 UTC", "last_seen": "2026-03-27 17:47:09 UTC", "sightings": 1 }, { "indicator": "https://ext1proc.archaicwillow.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 17:42:11 UTC", "last_seen": "2026-03-27 17:42:11 UTC", "sightings": 1 }, { "indicator": "http://107.172.135.4/219/img_003843.png", "indicator_type": "url", "source": "URLhaus", "tags": [ "rat", "RemcosRAT" ], "first_seen": "2026-03-27 17:42:08 UTC", "last_seen": "2026-03-27 17:42:08 UTC", "sightings": 1 }, { "indicator": "http://107.172.135.4/219/goodpeopleswithbestfeeling.hta", "indicator_type": "url", "source": "URLhaus", "tags": [ "hta", "rat", "RemcosRAT" ], "first_seen": "2026-03-27 17:41:06 UTC", "last_seen": "2026-03-27 17:41:06 UTC", "sightings": 1 }, { "indicator": "http://123.188.114.222:45402/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 17:40:18 UTC", "last_seen": "2026-03-27 17:40:18 UTC", "sightings": 1 }, { "indicator": "http://150.251.145.178/files/8525074840/mdOjagm.msi", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-03-27 17:37:05 UTC", "last_seen": "2026-03-27 17:37:05 UTC", "sightings": 1 }, { "indicator": "http://150.251.145.201/files/final/random.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-03-27 17:36:20 UTC", "last_seen": "2026-03-27 17:36:20 UTC", "sightings": 1 }, { "indicator": "https://svc4link.accomplicerepreh.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 17:36:12 UTC", "last_seen": "2026-03-27 17:36:12 UTC", "sightings": 1 }, { "indicator": "https://mainly-trim-lizard.cloudpub.ru/test1.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "CoinMiner", "Intellix", "SheetRAT", "stealer", "XoriumStealer" ], "first_seen": "2026-03-27 17:36:12 UTC", "last_seen": "2026-03-27 17:36:12 UTC", "sightings": 1 }, { "indicator": "https://mainly-trim-lizard.cloudpub.ru/test2.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "CoinMiner", "Intellix", "SheetRAT", "stealer" ], "first_seen": "2026-03-27 17:36:12 UTC", "last_seen": "2026-03-27 17:36:12 UTC", "sightings": 1 }, { "indicator": "https://mainly-trim-lizard.cloudpub.ru/test3.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "CoinMiner", "Intellix", "SheetRAT", "stealer" ], "first_seen": "2026-03-27 17:36:12 UTC", "last_seen": "2026-03-27 17:36:12 UTC", "sightings": 1 }, { "indicator": "http://150.251.145.178/files/185.224.215.205/1.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-03-27 17:36:05 UTC", "last_seen": "2026-03-27 17:36:05 UTC", "sightings": 1 }, { "indicator": "http://110.37.48.162:46953/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 17:35:17 UTC", "last_seen": "2026-03-27 17:35:17 UTC", "sightings": 1 }, { "indicator": "http://60.214.59.181:51012/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 17:33:18 UTC", "last_seen": "2026-03-27 17:33:18 UTC", "sightings": 1 }, { "indicator": "https://svc3user.accomplicerepreh.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 17:31:09 UTC", "last_seen": "2026-03-27 17:31:09 UTC", "sightings": 1 }, { "indicator": "http://60.214.59.181:51012/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 17:28:08 UTC", "last_seen": "2026-03-27 17:28:08 UTC", "sightings": 1 }, { "indicator": "http://150.251.145.178/files/gop/random.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-03-27 17:27:04 UTC", "last_seen": "2026-03-27 17:27:04 UTC", "sightings": 1 }, { "indicator": "http://150.251.145.178/files/8317177049/7tdJ9Hz.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-03-27 17:26:05 UTC", "last_seen": "2026-03-27 17:26:05 UTC", "sightings": 1 }, { "indicator": "http://150.251.145.178/files/8525074840/yxPIfd2.msi", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-03-27 17:26:05 UTC", "last_seen": "2026-03-27 17:26:05 UTC", "sightings": 1 }, { "indicator": "http://150.251.145.178/files/7782139129/S6xWuZ1.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-03-27 17:26:05 UTC", "last_seen": "2026-03-27 17:26:05 UTC", "sightings": 1 }, { "indicator": "http://150.251.145.178/files/7281753217/qrTFBw7.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-03-27 17:26:04 UTC", "last_seen": "2026-03-27 17:26:04 UTC", "sightings": 1 }, { "indicator": "https://svc2base.accomplicerepreh.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 17:25:13 UTC", "last_seen": "2026-03-27 17:25:13 UTC", "sightings": 1 }, { "indicator": "http://150.251.145.178/files/6334661508/lzyfkOs.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-03-27 17:25:06 UTC", "last_seen": "2026-03-27 17:25:06 UTC", "sightings": 1 }, { "indicator": "http://150.251.145.178/files/7341834371/BgAtGH0.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-27 17:24:06 UTC", "last_seen": "2026-03-27 17:24:06 UTC", "sightings": 1 }, { "indicator": "http://150.251.145.178/files/6608710704/ltjL6cP.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-27 17:24:06 UTC", "last_seen": "2026-03-27 17:24:06 UTC", "sightings": 1 }, { "indicator": "http://150.251.145.178/files/8434554557/X8cqVrA.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-03-27 17:24:06 UTC", "last_seen": "2026-03-27 17:24:06 UTC", "sightings": 1 }, { "indicator": "http://150.251.145.178/files/5900855435/eNLe4nm.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-27 17:24:06 UTC", "last_seen": "2026-03-27 17:24:06 UTC", "sightings": 1 }, { "indicator": "https://svc1infra.accomplicerepreh.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 17:19:09 UTC", "last_seen": "2026-03-27 17:19:09 UTC", "sightings": 1 }, { "indicator": "http://39.79.193.140:49806/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 17:16:17 UTC", "last_seen": "2026-03-27 17:16:17 UTC", "sightings": 1 }, { "indicator": "https://dev4work.banchiktend.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 17:14:10 UTC", "last_seen": "2026-03-27 17:14:10 UTC", "sightings": 1 }, { "indicator": "https://dev3local.banchiktend.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 17:08:09 UTC", "last_seen": "2026-03-27 17:08:09 UTC", "sightings": 1 }, { "indicator": "https://dev2power.banchiktend.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 17:03:09 UTC", "last_seen": "2026-03-27 17:03:09 UTC", "sightings": 1 }, { "indicator": "https://dev1proc.banchiktend.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 16:56:08 UTC", "last_seen": "2026-03-27 16:56:08 UTC", "sightings": 1 }, { "indicator": "http://175.168.253.206:46688/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 16:55:09 UTC", "last_seen": "2026-03-27 16:55:09 UTC", "sightings": 1 }, { "indicator": "https://cl4link.conditoverwinter.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 16:51:10 UTC", "last_seen": "2026-03-27 16:51:10 UTC", "sightings": 1 }, { "indicator": "http://39.79.193.140:49806/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 16:49:11 UTC", "last_seen": "2026-03-27 16:49:11 UTC", "sightings": 1 }, { "indicator": "https://cl3dev.conditoverwinter.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 16:46:09 UTC", "last_seen": "2026-03-27 16:46:09 UTC", "sightings": 1 }, { "indicator": "http://123.9.101.253:40086/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 16:43:18 UTC", "last_seen": "2026-03-27 16:43:18 UTC", "sightings": 1 }, { "indicator": "http://150.251.145.178/test/random.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-27 16:42:05 UTC", "last_seen": "2026-03-27 16:42:05 UTC", "sightings": 1 }, { "indicator": "http://150.251.145.178/final/random.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-03-27 16:42:05 UTC", "last_seen": "2026-03-27 16:42:05 UTC", "sightings": 1 }, { "indicator": "http://150.251.145.178/files/rdx/random.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-27 16:42:05 UTC", "last_seen": "2026-03-27 16:42:05 UTC", "sightings": 1 }, { "indicator": "https://cl2remote.conditoverwinter.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 16:40:15 UTC", "last_seen": "2026-03-27 16:40:15 UTC", "sightings": 1 }, { "indicator": "http://115.222.153.80:58207/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-27 16:39:15 UTC", "last_seen": "2026-03-27 16:39:15 UTC", "sightings": 1 }, { "indicator": "http://112.140.191.204:58703/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-27 16:37:06 UTC", "last_seen": "2026-03-27 16:37:06 UTC", "sightings": 1 }, { "indicator": "http://150.251.145.178/vid/random.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-27 16:35:07 UTC", "last_seen": "2026-03-27 16:35:07 UTC", "sightings": 1 }, { "indicator": "http://41.108.173.185:47790/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 16:34:18 UTC", "last_seen": "2026-03-27 16:34:18 UTC", "sightings": 1 }, { "indicator": "https://cl1store.conditoverwinter.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 16:34:09 UTC", "last_seen": "2026-03-27 16:34:09 UTC", "sightings": 1 }, { "indicator": "https://ext4sync.droolingman.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 16:28:11 UTC", "last_seen": "2026-03-27 16:28:11 UTC", "sightings": 1 }, { "indicator": "https://ext3gate.droolingman.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 16:23:10 UTC", "last_seen": "2026-03-27 16:23:10 UTC", "sightings": 1 }, { "indicator": "https://ext2proc.droolingman.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 16:18:10 UTC", "last_seen": "2026-03-27 16:18:10 UTC", "sightings": 1 }, { "indicator": "http://110.37.107.203:55777/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-27 16:17:06 UTC", "last_seen": "2026-03-27 16:17:06 UTC", "sightings": 1 }, { "indicator": "http://150.251.145.201/files/rdx/random.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-27 16:16:05 UTC", "last_seen": "2026-03-27 16:16:05 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.67/iran.mipsrouter", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-27 16:15:19 UTC", "last_seen": "2026-03-27 16:15:19 UTC", "sightings": 1 }, { "indicator": "https://ext1meta.droolingman.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 16:12:10 UTC", "last_seen": "2026-03-27 16:12:10 UTC", "sightings": 1 }, { "indicator": "http://59.88.0.216:36885/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 16:10:21 UTC", "last_seen": "2026-03-27 16:10:21 UTC", "sightings": 1 }, { "indicator": "http://150.251.145.201/final/random.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-27 16:10:05 UTC", "last_seen": "2026-03-27 16:10:05 UTC", "sightings": 1 }, { "indicator": "http://150.251.145.201/test/random.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-03-27 16:10:05 UTC", "last_seen": "2026-03-27 16:10:05 UTC", "sightings": 1 }, { "indicator": "http://150.251.145.201/files/test/random.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-27 16:09:05 UTC", "last_seen": "2026-03-27 16:09:05 UTC", "sightings": 1 }, { "indicator": "https://svc4static.apatitemoshka.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 16:07:11 UTC", "last_seen": "2026-03-27 16:07:11 UTC", "sightings": 1 }, { "indicator": "http://117.209.95.37:46185/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 16:01:19 UTC", "last_seen": "2026-03-27 16:01:19 UTC", "sightings": 1 }, { "indicator": "https://svc3edge.apatitemoshka.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 16:01:12 UTC", "last_seen": "2026-03-27 16:01:12 UTC", "sightings": 1 }, { "indicator": "http://42.224.25.241:38898/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 15:58:19 UTC", "last_seen": "2026-03-27 15:58:19 UTC", "sightings": 1 }, { "indicator": "http://110.37.119.14:50607/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 15:55:21 UTC", "last_seen": "2026-03-27 15:55:21 UTC", "sightings": 1 }, { "indicator": "https://svc2data.apatitemoshka.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 15:55:14 UTC", "last_seen": "2026-03-27 15:55:14 UTC", "sightings": 1 }, { "indicator": "http://115.222.153.80:58207/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-27 15:54:26 UTC", "last_seen": "2026-03-27 15:54:26 UTC", "sightings": 1 }, { "indicator": "http://110.37.55.23:37938/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 15:53:21 UTC", "last_seen": "2026-03-27 15:53:21 UTC", "sightings": 1 }, { "indicator": "http://113.221.25.83:38644/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-27 15:50:20 UTC", "last_seen": "2026-03-27 15:50:20 UTC", "sightings": 1 }, { "indicator": "https://svc1sync.apatitemoshka.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 15:49:12 UTC", "last_seen": "2026-03-27 15:49:12 UTC", "sightings": 1 }, { "indicator": "http://110.37.91.29:44254/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 15:43:23 UTC", "last_seen": "2026-03-27 15:43:23 UTC", "sightings": 1 }, { "indicator": "http://207.231.107.52/mipsle", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-27 15:39:25 UTC", "last_seen": "2026-03-27 15:39:25 UTC", "sightings": 1 }, { "indicator": "http://143.20.185.225/update.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai", "sh", "ua-wget" ], "first_seen": "2026-03-27 15:37:25 UTC", "last_seen": "2026-03-27 15:37:25 UTC", "sightings": 1 }, { "indicator": "http://150.251.145.201/vid/random.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-27 15:37:05 UTC", "last_seen": "2026-03-27 15:37:05 UTC", "sightings": 1 }, { "indicator": "http://143.20.185.225/dl.php?t=0101011001000010010011110101010001001100010011010100000101001111&arch=attd", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-27 15:36:21 UTC", "last_seen": "2026-03-27 15:36:21 UTC", "sightings": 1 }, { "indicator": "http://143.20.185.225/dl.php?t=0101011001000010010011110101010001001100010011010100000101001111&arch=sshdd", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-27 15:36:21 UTC", "last_seen": "2026-03-27 15:36:21 UTC", "sightings": 1 }, { "indicator": "http://143.20.185.225/dl.php?t=0101011001000010010011110101010001001100010011010100000101001111&arch=udevdpd", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "gafgyt", "mirai", "ua-wget" ], "first_seen": "2026-03-27 15:36:21 UTC", "last_seen": "2026-03-27 15:36:21 UTC", "sightings": 1 }, { "indicator": "http://143.20.185.225/dl.php?t=0101011001000010010011110101010001001100010011010100000101001111&arch=cronn", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-27 15:36:21 UTC", "last_seen": "2026-03-27 15:36:21 UTC", "sightings": 1 }, { "indicator": "http://143.20.185.225/dl.php?t=0101011001000010010011110101010001001100010011010100000101001111&arch=telentd", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-27 15:36:21 UTC", "last_seen": "2026-03-27 15:36:21 UTC", "sightings": 1 }, { "indicator": "http://143.20.185.225/dl.php?t=0101011001000010010011110101010001001100010011010100000101001111&arch=acppid", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-27 15:36:21 UTC", "last_seen": "2026-03-27 15:36:21 UTC", "sightings": 1 }, { "indicator": "http://143.20.185.225/dl.php?t=0101011001000010010011110101010001001100010011010100000101001111&arch=upnnpd", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-27 15:36:21 UTC", "last_seen": "2026-03-27 15:36:21 UTC", "sightings": 1 }, { "indicator": "http://143.20.185.225/dl.php?t=0101011001000010010011110101010001001100010011010100000101001111&arch=avahi-deamon", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-27 15:36:21 UTC", "last_seen": "2026-03-27 15:36:21 UTC", "sightings": 1 }, { "indicator": "http://143.20.185.225/dl.php?t=0101011001000010010011110101010001001100010011010100000101001111&arch=lighttpdd", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-27 15:36:21 UTC", "last_seen": "2026-03-27 15:36:21 UTC", "sightings": 1 }, { "indicator": "http://143.20.185.225/dl.php?t=0101011001000010010011110101010001001100010011010100000101001111&arch=httppd", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-27 15:36:21 UTC", "last_seen": "2026-03-27 15:36:21 UTC", "sightings": 1 }, { "indicator": "http://143.20.185.225/dl.php?t=0101011001000010010011110101010001001100010011010100000101001111&arch=miniiupnpd", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-27 15:36:21 UTC", "last_seen": "2026-03-27 15:36:21 UTC", "sightings": 1 }, { "indicator": "http://143.20.185.225/dl.php?t=0101011001000010010011110101010001001100010011010100000101001111&arch=net-workd", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-27 15:36:21 UTC", "last_seen": "2026-03-27 15:36:21 UTC", "sightings": 1 }, { "indicator": "http://143.20.185.225/dl.php?t=0101011001000010010011110101010001001100010011010100000101001111&arch=systmed-login", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-27 15:36:21 UTC", "last_seen": "2026-03-27 15:36:21 UTC", "sightings": 1 }, { "indicator": "http://143.20.185.225/dl.php?t=0101011001000010010011110101010001001100010011010100000101001111&arch=dbsu-daemon", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-27 15:36:16 UTC", "last_seen": "2026-03-27 15:36:16 UTC", "sightings": 1 }, { "indicator": "http://42.224.25.241:38898/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 15:35:20 UTC", "last_seen": "2026-03-27 15:35:20 UTC", "sightings": 1 }, { "indicator": "http://42.4.113.196:36062/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 15:34:20 UTC", "last_seen": "2026-03-27 15:34:20 UTC", "sightings": 1 }, { "indicator": "http://37.52.250.118:50437/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 15:34:19 UTC", "last_seen": "2026-03-27 15:34:19 UTC", "sightings": 1 }, { "indicator": "https://extendecho.keystonebloom.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 15:34:11 UTC", "last_seen": "2026-03-27 15:34:11 UTC", "sightings": 1 }, { "indicator": "http://110.37.119.14:50607/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 15:31:23 UTC", "last_seen": "2026-03-27 15:31:23 UTC", "sightings": 1 }, { "indicator": "http://223.123.38.33:45168/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-27 15:31:05 UTC", "last_seen": "2026-03-27 15:31:05 UTC", "sightings": 1 }, { "indicator": "http://117.209.95.37:46185/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 15:30:23 UTC", "last_seen": "2026-03-27 15:30:23 UTC", "sightings": 1 }, { "indicator": "http://196.189.104.106:34920/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-27 15:29:22 UTC", "last_seen": "2026-03-27 15:29:22 UTC", "sightings": 1 }, { "indicator": "http://121.127.34.138/hiddenbin/boatnet.mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-27 15:28:13 UTC", "last_seen": "2026-03-27 15:28:13 UTC", "sightings": 1 }, { "indicator": "http://121.127.34.138/hiddenbin/boatnet.m68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-27 15:28:13 UTC", "last_seen": "2026-03-27 15:28:13 UTC", "sightings": 1 }, { "indicator": "http://121.127.34.138/hiddenbin/boatnet.ppc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-27 15:28:13 UTC", "last_seen": "2026-03-27 15:28:13 UTC", "sightings": 1 }, { "indicator": "http://121.127.34.138/hiddenbin/boatnet.arm", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-27 15:28:13 UTC", "last_seen": "2026-03-27 15:28:13 UTC", "sightings": 1 }, { "indicator": "http://121.127.34.138/hiddenbin/boatnet.sh4", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-27 15:28:13 UTC", "last_seen": "2026-03-27 15:28:13 UTC", "sightings": 1 }, { "indicator": "http://110.37.91.29:44254/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 15:28:12 UTC", "last_seen": "2026-03-27 15:28:12 UTC", "sightings": 1 }, { "indicator": "http://121.127.34.138/hiddenbin/boatnet.x86", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-27 15:28:12 UTC", "last_seen": "2026-03-27 15:28:12 UTC", "sightings": 1 }, { "indicator": "http://121.127.34.138/hiddenbin/boatnet.arm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-27 15:28:12 UTC", "last_seen": "2026-03-27 15:28:12 UTC", "sightings": 1 }, { "indicator": "http://121.127.34.138/hiddenbin/boatnet.mpsl", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-27 15:28:12 UTC", "last_seen": "2026-03-27 15:28:12 UTC", "sightings": 1 }, { "indicator": "http://121.127.34.138/hiddenbin/boatnet.arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-27 15:28:12 UTC", "last_seen": "2026-03-27 15:28:12 UTC", "sightings": 1 }, { "indicator": "http://121.127.34.138/hiddenbin/boatnet.arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-27 15:28:12 UTC", "last_seen": "2026-03-27 15:28:12 UTC", "sightings": 1 }, { "indicator": "http://121.127.34.138/hiddenbin/boatnet.spc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-27 15:28:12 UTC", "last_seen": "2026-03-27 15:28:12 UTC", "sightings": 1 }, { "indicator": "http://121.127.34.138/hiddenbin/boatnet.arc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-27 15:28:12 UTC", "last_seen": "2026-03-27 15:28:12 UTC", "sightings": 1 }, { "indicator": "http://121.127.34.138/ohshit.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai", "sh", "ua-wget" ], "first_seen": "2026-03-27 15:28:12 UTC", "last_seen": "2026-03-27 15:28:12 UTC", "sightings": 1 }, { "indicator": "https://raildecode.radiantventure.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 15:27:10 UTC", "last_seen": "2026-03-27 15:27:10 UTC", "sightings": 1 }, { "indicator": "http://119.187.137.161:36957/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 15:25:19 UTC", "last_seen": "2026-03-27 15:25:19 UTC", "sightings": 1 }, { "indicator": "http://110.37.55.23:37938/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 15:24:22 UTC", "last_seen": "2026-03-27 15:24:22 UTC", "sightings": 1 }, { "indicator": "http://113.222.147.221:49582/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-27 15:23:25 UTC", "last_seen": "2026-03-27 15:23:25 UTC", "sightings": 1 }, { "indicator": "http://144.172.105.56/nullnet_bin_dir/nullnet_load.i486", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-27 15:23:24 UTC", "last_seen": "2026-03-27 15:23:24 UTC", "sightings": 1 }, { "indicator": "http://144.172.105.56/nullnet_bash.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai", "sh", "ua-wget" ], "first_seen": "2026-03-27 15:23:15 UTC", "last_seen": "2026-03-27 15:23:15 UTC", "sightings": 1 }, { "indicator": "http://144.172.105.56/nullnet_bin_dir/nullnet_load.spc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-27 15:23:15 UTC", "last_seen": "2026-03-27 15:23:15 UTC", "sightings": 1 }, { "indicator": "http://144.172.105.56/nullnet_bin_dir/nullnet_load.i686", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-27 15:23:15 UTC", "last_seen": "2026-03-27 15:23:15 UTC", "sightings": 1 }, { "indicator": "http://144.172.105.56/nullnet_bin_dir/nullnet_load.x86_64", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-27 15:23:15 UTC", "last_seen": "2026-03-27 15:23:15 UTC", "sightings": 1 }, { "indicator": "https://lumvenon7.echelonprosper.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 15:22:08 UTC", "last_seen": "2026-03-27 15:22:08 UTC", "sightings": 1 }, { "indicator": "http://147.45.60.206/p.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "sh", "ua-wget" ], "first_seen": "2026-03-27 15:19:19 UTC", "last_seen": "2026-03-27 15:19:19 UTC", "sightings": 1 }, { "indicator": "http://147.45.60.206/tplink.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "sh", "ua-wget" ], "first_seen": "2026-03-27 15:18:24 UTC", "last_seen": "2026-03-27 15:18:24 UTC", "sightings": 1 }, { "indicator": "http://147.45.60.206/arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-27 15:17:16 UTC", "last_seen": "2026-03-27 15:17:16 UTC", "sightings": 1 }, { "indicator": "http://147.45.60.206/mpsl", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-27 15:17:16 UTC", "last_seen": "2026-03-27 15:17:16 UTC", "sightings": 1 }, { "indicator": "http://147.45.60.206/mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-27 15:17:16 UTC", "last_seen": "2026-03-27 15:17:16 UTC", "sightings": 1 }, { "indicator": "http://147.45.60.206/arm4", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-27 15:17:16 UTC", "last_seen": "2026-03-27 15:17:16 UTC", "sightings": 1 }, { "indicator": "http://147.45.60.206/mipsel", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-27 15:17:16 UTC", "last_seen": "2026-03-27 15:17:16 UTC", "sightings": 1 }, { "indicator": "http://147.45.60.206/x86", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-27 15:17:15 UTC", "last_seen": "2026-03-27 15:17:15 UTC", "sightings": 1 }, { "indicator": "https://spring-notif.paragonforge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 15:17:13 UTC", "last_seen": "2026-03-27 15:17:13 UTC", "sightings": 1 }, { "indicator": "http://150.251.145.201/app/window.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-27 15:16:05 UTC", "last_seen": "2026-03-27 15:16:05 UTC", "sightings": 1 }, { "indicator": "https://79iy.spectrumharvest.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 15:13:08 UTC", "last_seen": "2026-03-27 15:13:08 UTC", "sightings": 1 }, { "indicator": "http://59.97.181.138:42767/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 15:09:19 UTC", "last_seen": "2026-03-27 15:09:19 UTC", "sightings": 1 }, { "indicator": "http://42.4.113.196:36062/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 15:08:17 UTC", "last_seen": "2026-03-27 15:08:17 UTC", "sightings": 1 }, { "indicator": "http://110.37.39.230:49243/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-27 15:07:15 UTC", "last_seen": "2026-03-27 15:07:15 UTC", "sightings": 1 }, { "indicator": "http://207.231.107.52/mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-27 15:05:24 UTC", "last_seen": "2026-03-27 15:05:24 UTC", "sightings": 1 }, { "indicator": "https://4vggd.zenithpatron.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 15:04:14 UTC", "last_seen": "2026-03-27 15:04:14 UTC", "sightings": 1 }, { "indicator": "http://45.139.104.122/jack5tr.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai", "sh", "ua-wget" ], "first_seen": "2026-03-27 15:02:24 UTC", "last_seen": "2026-03-27 15:02:24 UTC", "sightings": 1 }, { "indicator": "https://flow-pil.covenantbloom.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 15:00:10 UTC", "last_seen": "2026-03-27 15:00:10 UTC", "sightings": 1 }, { "indicator": "https://unloadalig.latticeventure.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 14:56:08 UTC", "last_seen": "2026-03-27 14:56:08 UTC", "sightings": 1 }, { "indicator": "http://112.255.87.117:47979/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 14:50:30 UTC", "last_seen": "2026-03-27 14:50:30 UTC", "sightings": 1 }, { "indicator": "http://222.142.247.8:45873/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-27 14:47:06 UTC", "last_seen": "2026-03-27 14:47:06 UTC", "sightings": 1 }, { "indicator": "http://89.45.6.18/oPvjr94jfe/Plugins/vnc.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "exe", "tinynuke", "ua-wget" ], "first_seen": "2026-03-27 14:44:07 UTC", "last_seen": "2026-03-27 14:44:07 UTC", "sightings": 1 }, { "indicator": "http://59.97.181.138:42767/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 14:42:12 UTC", "last_seen": "2026-03-27 14:42:12 UTC", "sightings": 1 }, { "indicator": "https://audiodemand.momentumharbor.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 14:40:10 UTC", "last_seen": "2026-03-27 14:40:10 UTC", "sightings": 1 }, { "indicator": "http://178.141.152.167:42814/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 14:38:10 UTC", "last_seen": "2026-03-27 14:38:10 UTC", "sightings": 1 }, { "indicator": "http://110.37.39.230:49243/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-27 14:36:18 UTC", "last_seen": "2026-03-27 14:36:18 UTC", "sightings": 1 }, { "indicator": "https://3ep11.tr4cefox.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 14:35:15 UTC", "last_seen": "2026-03-27 14:35:15 UTC", "sightings": 1 }, { "indicator": "http://80.67.33.209:50245/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-27 14:32:16 UTC", "last_seen": "2026-03-27 14:32:16 UTC", "sightings": 1 }, { "indicator": "http://222.142.248.205:50447/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 14:32:16 UTC", "last_seen": "2026-03-27 14:32:16 UTC", "sightings": 1 }, { "indicator": "http://115.57.252.74:35458/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 14:30:17 UTC", "last_seen": "2026-03-27 14:30:17 UTC", "sightings": 1 }, { "indicator": "http://110.37.66.64:48056/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-27 14:29:35 UTC", "last_seen": "2026-03-27 14:29:35 UTC", "sightings": 1 }, { "indicator": "https://imagvalley.mirthbay.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 14:29:09 UTC", "last_seen": "2026-03-27 14:29:09 UTC", "sightings": 1 }, { "indicator": "http://222.142.247.8:45873/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-27 14:27:07 UTC", "last_seen": "2026-03-27 14:27:07 UTC", "sightings": 1 }, { "indicator": "https://sort-scope.larkspin.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 14:26:09 UTC", "last_seen": "2026-03-27 14:26:09 UTC", "sightings": 1 }, { "indicator": "https://qjbtkqgb.brimvale.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 14:23:08 UTC", "last_seen": "2026-03-27 14:23:08 UTC", "sightings": 1 }, { "indicator": "http://115.50.103.78:44224/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 14:16:05 UTC", "last_seen": "2026-03-27 14:16:05 UTC", "sightings": 1 }, { "indicator": "http://193.17.95.79/app/window.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-27 14:13:05 UTC", "last_seen": "2026-03-27 14:13:05 UTC", "sightings": 1 }, { "indicator": "https://prairialp.n1mbleoak.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 14:12:08 UTC", "last_seen": "2026-03-27 14:12:08 UTC", "sightings": 1 }, { "indicator": "http://178.141.152.167:42814/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 14:09:17 UTC", "last_seen": "2026-03-27 14:09:17 UTC", "sightings": 1 }, { "indicator": "http://42.231.205.164:48548/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 14:07:15 UTC", "last_seen": "2026-03-27 14:07:15 UTC", "sightings": 1 }, { "indicator": "https://finalvide.duskforge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 14:07:07 UTC", "last_seen": "2026-03-27 14:07:07 UTC", "sightings": 1 }, { "indicator": "http://115.57.252.74:35458/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 14:06:11 UTC", "last_seen": "2026-03-27 14:06:11 UTC", "sightings": 1 }, { "indicator": "http://110.37.66.64:48056/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-27 14:06:10 UTC", "last_seen": "2026-03-27 14:06:10 UTC", "sightings": 1 }, { "indicator": "http://165.22.252.236/windyloveyou/windy.spc", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-27 14:04:19 UTC", "last_seen": "2026-03-27 14:04:19 UTC", "sightings": 1 }, { "indicator": "http://165.22.252.236/windyloveyou/windy.arm5", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-27 14:04:19 UTC", "last_seen": "2026-03-27 14:04:19 UTC", "sightings": 1 }, { "indicator": "http://165.22.252.236/windyloveyou/windy.ppc", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-27 14:04:19 UTC", "last_seen": "2026-03-27 14:04:19 UTC", "sightings": 1 }, { "indicator": "http://192.177.26.196/files/185.224.215.205/1.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-03-27 14:04:19 UTC", "last_seen": "2026-03-27 14:04:19 UTC", "sightings": 1 }, { "indicator": "http://165.22.252.236/windyloveyou/windy.arc", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-27 14:04:19 UTC", "last_seen": "2026-03-27 14:04:19 UTC", "sightings": 1 }, { "indicator": "http://165.22.252.236/windyloveyou/windy.i686", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-27 14:04:19 UTC", "last_seen": "2026-03-27 14:04:19 UTC", "sightings": 1 }, { "indicator": "http://165.22.252.236/windyloveyou/windy.x86_64", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-27 14:04:19 UTC", "last_seen": "2026-03-27 14:04:19 UTC", "sightings": 1 }, { "indicator": "http://165.22.252.236/windyloveyou/windy.arm7", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-27 14:04:19 UTC", "last_seen": "2026-03-27 14:04:19 UTC", "sightings": 1 }, { "indicator": "http://165.22.252.236/windyloveyou/windy.sh4", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-27 14:04:19 UTC", "last_seen": "2026-03-27 14:04:19 UTC", "sightings": 1 }, { "indicator": "http://165.22.252.236/windyloveyou/windy.mpsl", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-27 14:04:19 UTC", "last_seen": "2026-03-27 14:04:19 UTC", "sightings": 1 }, { "indicator": "http://165.22.252.236/windyloveyou/windy.mips", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-27 14:03:20 UTC", "last_seen": "2026-03-27 14:03:20 UTC", "sightings": 1 }, { "indicator": "http://165.22.252.236/windyloveyou/windy.arm", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-27 14:03:20 UTC", "last_seen": "2026-03-27 14:03:20 UTC", "sightings": 1 }, { "indicator": "http://165.22.252.236/windyloveyou/windy.m68k", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-27 14:03:20 UTC", "last_seen": "2026-03-27 14:03:20 UTC", "sightings": 1 }, { "indicator": "http://165.22.252.236/windyloveyou/windy.arm6", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-27 14:03:20 UTC", "last_seen": "2026-03-27 14:03:20 UTC", "sightings": 1 }, { "indicator": "http://165.22.252.236/windyloveyou/windy.x86", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-27 14:03:20 UTC", "last_seen": "2026-03-27 14:03:20 UTC", "sightings": 1 }, { "indicator": "http://182.121.62.159:51810/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 14:02:10 UTC", "last_seen": "2026-03-27 14:02:10 UTC", "sightings": 1 }, { "indicator": "https://tipg.rivermint.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 14:01:12 UTC", "last_seen": "2026-03-27 14:01:12 UTC", "sightings": 1 }, { "indicator": "http://42.232.88.55:43933/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "mirai" ], "first_seen": "2026-03-27 13:57:12 UTC", "last_seen": "2026-03-27 13:57:12 UTC", "sightings": 1 }, { "indicator": "https://plasmapublic.flare-path.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 13:56:10 UTC", "last_seen": "2026-03-27 13:56:10 UTC", "sightings": 1 }, { "indicator": "http://193.17.95.79/app/windows.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-27 13:55:06 UTC", "last_seen": "2026-03-27 13:55:06 UTC", "sightings": 1 }, { "indicator": "http://110.36.93.253:46882/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 13:51:14 UTC", "last_seen": "2026-03-27 13:51:14 UTC", "sightings": 1 }, { "indicator": "http://115.50.103.78:44224/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 13:50:16 UTC", "last_seen": "2026-03-27 13:50:16 UTC", "sightings": 1 }, { "indicator": "http://110.37.96.210:53758/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 13:50:16 UTC", "last_seen": "2026-03-27 13:50:16 UTC", "sightings": 1 }, { "indicator": "https://ktyf9zwv.skyl0om.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 13:50:12 UTC", "last_seen": "2026-03-27 13:50:12 UTC", "sightings": 1 }, { "indicator": "http://110.36.81.71:38229/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 13:49:10 UTC", "last_seen": "2026-03-27 13:49:10 UTC", "sightings": 1 }, { "indicator": "http://123.8.36.0:51739/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 13:47:08 UTC", "last_seen": "2026-03-27 13:47:08 UTC", "sightings": 1 }, { "indicator": "http://123.8.36.0:51739/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 13:45:10 UTC", "last_seen": "2026-03-27 13:45:10 UTC", "sightings": 1 }, { "indicator": "https://cdecp45.graincrest.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 13:44:08 UTC", "last_seen": "2026-03-27 13:44:08 UTC", "sightings": 1 }, { "indicator": "http://117.196.183.1:34453/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 13:40:15 UTC", "last_seen": "2026-03-27 13:40:15 UTC", "sightings": 1 }, { "indicator": "https://yq6zjr5.q7ravo.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 13:40:10 UTC", "last_seen": "2026-03-27 13:40:10 UTC", "sightings": 1 }, { "indicator": "http://116.72.22.86:36710/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 13:36:21 UTC", "last_seen": "2026-03-27 13:36:21 UTC", "sightings": 1 }, { "indicator": "https://tensorecho.thistlecore.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 13:33:10 UTC", "last_seen": "2026-03-27 13:33:10 UTC", "sightings": 1 }, { "indicator": "http://78.153.140.16/sa.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "kinsing", "sh", "ua-wget" ], "first_seen": "2026-03-27 13:32:09 UTC", "last_seen": "2026-03-27 13:32:09 UTC", "sightings": 1 }, { "indicator": "http://78.153.140.16/ph.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "kinsing", "sh", "ua-wget" ], "first_seen": "2026-03-27 13:31:17 UTC", "last_seen": "2026-03-27 13:31:17 UTC", "sightings": 1 }, { "indicator": "http://78.153.140.16/xx.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "kinsing", "sh", "ua-wget" ], "first_seen": "2026-03-27 13:31:17 UTC", "last_seen": "2026-03-27 13:31:17 UTC", "sightings": 1 }, { "indicator": "http://42.232.88.55:43933/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "mirai" ], "first_seen": "2026-03-27 13:30:23 UTC", "last_seen": "2026-03-27 13:30:23 UTC", "sightings": 1 }, { "indicator": "http://78.153.140.16/i.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "kinsing", "sh", "ua-wget" ], "first_seen": "2026-03-27 13:30:19 UTC", "last_seen": "2026-03-27 13:30:19 UTC", "sightings": 1 }, { "indicator": "http://78.153.140.16/sc.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "kinsing", "sh", "ua-wget" ], "first_seen": "2026-03-27 13:30:19 UTC", "last_seen": "2026-03-27 13:30:19 UTC", "sightings": 1 }, { "indicator": "https://hhxxz.stone-blink.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 13:27:07 UTC", "last_seen": "2026-03-27 13:27:07 UTC", "sightings": 1 }, { "indicator": "http://39.81.52.74:38134/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 13:24:10 UTC", "last_seen": "2026-03-27 13:24:10 UTC", "sightings": 1 }, { "indicator": "http://80.67.33.209:50245/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-27 13:24:09 UTC", "last_seen": "2026-03-27 13:24:09 UTC", "sightings": 1 }, { "indicator": "https://invoicgran.cl0verrun.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 13:23:12 UTC", "last_seen": "2026-03-27 13:23:12 UTC", "sightings": 1 }, { "indicator": "http://110.37.96.210:53758/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 13:22:21 UTC", "last_seen": "2026-03-27 13:22:21 UTC", "sightings": 1 }, { "indicator": "http://45.177.33.135:33033/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-27 13:20:21 UTC", "last_seen": "2026-03-27 13:20:21 UTC", "sightings": 1 }, { "indicator": "http://110.36.81.71:38229/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 13:17:17 UTC", "last_seen": "2026-03-27 13:17:17 UTC", "sightings": 1 }, { "indicator": "http://39.81.52.74:38134/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 13:17:16 UTC", "last_seen": "2026-03-27 13:17:16 UTC", "sightings": 1 }, { "indicator": "https://wmwr.keystonebloom.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 13:16:09 UTC", "last_seen": "2026-03-27 13:16:09 UTC", "sightings": 1 }, { "indicator": "http://110.39.252.138:52880/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 13:14:06 UTC", "last_seen": "2026-03-27 13:14:06 UTC", "sightings": 1 }, { "indicator": "http://117.196.183.1:34453/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 13:13:18 UTC", "last_seen": "2026-03-27 13:13:18 UTC", "sightings": 1 }, { "indicator": "https://storagegust.keystonebloom.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 13:10:11 UTC", "last_seen": "2026-03-27 13:10:11 UTC", "sightings": 1 }, { "indicator": "http://112.198.186.100:33992/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-27 13:06:24 UTC", "last_seen": "2026-03-27 13:06:24 UTC", "sightings": 1 }, { "indicator": "https://5ync-branch.keystonebloom.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 13:05:10 UTC", "last_seen": "2026-03-27 13:05:10 UTC", "sightings": 1 }, { "indicator": "https://globaledi.keystonebloom.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 13:00:14 UTC", "last_seen": "2026-03-27 13:00:14 UTC", "sightings": 1 }, { "indicator": "http://110.37.2.210:54679/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 12:58:15 UTC", "last_seen": "2026-03-27 12:58:15 UTC", "sightings": 1 }, { "indicator": "http://183.158.90.158:58951/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-27 12:58:15 UTC", "last_seen": "2026-03-27 12:58:15 UTC", "sightings": 1 }, { "indicator": "https://p1ne-cache.keystonebloom.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 12:54:09 UTC", "last_seen": "2026-03-27 12:54:09 UTC", "sightings": 1 }, { "indicator": "http://119.116.157.9:47424/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 12:50:35 UTC", "last_seen": "2026-03-27 12:50:35 UTC", "sightings": 1 }, { "indicator": "http://110.37.86.252:40334/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 12:49:14 UTC", "last_seen": "2026-03-27 12:49:14 UTC", "sightings": 1 }, { "indicator": "https://dynflux2a.radiantventure.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 12:49:08 UTC", "last_seen": "2026-03-27 12:49:08 UTC", "sightings": 1 }, { "indicator": "http://42.238.168.242:45185/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 12:47:16 UTC", "last_seen": "2026-03-27 12:47:16 UTC", "sightings": 1 }, { "indicator": "http://117.209.27.149:38245/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 12:45:20 UTC", "last_seen": "2026-03-27 12:45:20 UTC", "sightings": 1 }, { "indicator": "http://27.7.83.253:36677/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 12:45:11 UTC", "last_seen": "2026-03-27 12:45:11 UTC", "sightings": 1 }, { "indicator": "http://61.53.81.61:44362/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 12:45:11 UTC", "last_seen": "2026-03-27 12:45:11 UTC", "sightings": 1 }, { "indicator": "https://ho1lo0-reach.radiantventure.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 12:43:10 UTC", "last_seen": "2026-03-27 12:43:10 UTC", "sightings": 1 }, { "indicator": "http://110.39.252.138:52880/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 12:40:28 UTC", "last_seen": "2026-03-27 12:40:28 UTC", "sightings": 1 }, { "indicator": "http://183.158.90.158:58951/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-27 12:39:18 UTC", "last_seen": "2026-03-27 12:39:18 UTC", "sightings": 1 }, { "indicator": "http://110.37.24.11:41012/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 12:39:07 UTC", "last_seen": "2026-03-27 12:39:07 UTC", "sightings": 1 }, { "indicator": "https://vorspire5os.radiantventure.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 12:37:10 UTC", "last_seen": "2026-03-27 12:37:10 UTC", "sightings": 1 }, { "indicator": "http://180.120.0.93:44129/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-27 12:37:07 UTC", "last_seen": "2026-03-27 12:37:07 UTC", "sightings": 1 }, { "indicator": "https://tr41l4-point.radiantventure.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 12:31:18 UTC", "last_seen": "2026-03-27 12:31:18 UTC", "sightings": 1 }, { "indicator": "https://wl58.radiantventure.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 12:24:10 UTC", "last_seen": "2026-03-27 12:24:10 UTC", "sightings": 1 }, { "indicator": "http://110.37.2.210:54679/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 12:23:14 UTC", "last_seen": "2026-03-27 12:23:14 UTC", "sightings": 1 }, { "indicator": "http://110.37.86.252:40334/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 12:21:18 UTC", "last_seen": "2026-03-27 12:21:18 UTC", "sightings": 1 }, { "indicator": "https://fqwhi8.echelonprosper.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 12:17:12 UTC", "last_seen": "2026-03-27 12:17:12 UTC", "sightings": 1 }, { "indicator": "http://115.51.40.165:55444/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 12:16:19 UTC", "last_seen": "2026-03-27 12:16:19 UTC", "sightings": 1 }, { "indicator": "https://shor-mesh.echelonprosper.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 12:10:10 UTC", "last_seen": "2026-03-27 12:10:10 UTC", "sightings": 1 }, { "indicator": "http://77.247.93.86:46594/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-27 12:08:21 UTC", "last_seen": "2026-03-27 12:08:21 UTC", "sightings": 1 }, { "indicator": "https://tra1-drive.echelonprosper.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 12:08:08 UTC", "last_seen": "2026-03-27 12:08:08 UTC", "sightings": 1 }, { "indicator": "http://120.59.137.37:34597/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 11:58:17 UTC", "last_seen": "2026-03-27 11:58:17 UTC", "sightings": 1 }, { "indicator": "https://norfluxis4.echelonprosper.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 11:57:08 UTC", "last_seen": "2026-03-27 11:57:08 UTC", "sightings": 1 }, { "indicator": "http://192.177.26.196/files/fnnetcdn.b-cdn.net/kurulum.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-03-27 11:50:21 UTC", "last_seen": "2026-03-27 11:50:21 UTC", "sightings": 1 }, { "indicator": "https://ynjrhuk4.echelonprosper.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 11:50:11 UTC", "last_seen": "2026-03-27 11:50:11 UTC", "sightings": 1 }, { "indicator": "http://165.22.252.236/1.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai", "script" ], "first_seen": "2026-03-27 11:50:08 UTC", "last_seen": "2026-03-27 11:50:08 UTC", "sightings": 1 }, { "indicator": "http://123.190.17.23:43870/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 11:48:10 UTC", "last_seen": "2026-03-27 11:48:10 UTC", "sightings": 1 }, { "indicator": "http://115.51.40.165:55444/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 11:48:09 UTC", "last_seen": "2026-03-27 11:48:09 UTC", "sightings": 1 }, { "indicator": "https://grand-optic.paragonforge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 11:44:07 UTC", "last_seen": "2026-03-27 11:44:07 UTC", "sightings": 1 }, { "indicator": "http://117.215.58.53:46350/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 11:39:15 UTC", "last_seen": "2026-03-27 11:39:15 UTC", "sightings": 1 }, { "indicator": "https://hyper-f4ll.paragonforge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 11:38:08 UTC", "last_seen": "2026-03-27 11:38:08 UTC", "sightings": 1 }, { "indicator": "http://123.7.97.109:39586/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-27 11:37:06 UTC", "last_seen": "2026-03-27 11:37:06 UTC", "sightings": 1 }, { "indicator": "http://117.209.92.111:60915/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 11:31:08 UTC", "last_seen": "2026-03-27 11:31:08 UTC", "sightings": 1 }, { "indicator": "https://measure6-loop.paragonforge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 11:30:10 UTC", "last_seen": "2026-03-27 11:30:10 UTC", "sightings": 1 }, { "indicator": "http://94.249.228.212/iran.mipsrouter", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-27 11:24:18 UTC", "last_seen": "2026-03-27 11:24:18 UTC", "sightings": 1 }, { "indicator": "https://qfakp.paragonforge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 11:24:13 UTC", "last_seen": "2026-03-27 11:24:13 UTC", "sightings": 1 }, { "indicator": "http://94.249.228.212/cat.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai", "sh", "ua-wget" ], "first_seen": "2026-03-27 11:23:14 UTC", "last_seen": "2026-03-27 11:23:14 UTC", "sightings": 1 }, { "indicator": "http://124.29.225.50:37864/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 11:20:16 UTC", "last_seen": "2026-03-27 11:20:16 UTC", "sightings": 1 }, { "indicator": "https://needlerefine.paragonforge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 11:18:08 UTC", "last_seen": "2026-03-27 11:18:08 UTC", "sightings": 1 }, { "indicator": "https://vdsh.spectrumharvest.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 11:11:08 UTC", "last_seen": "2026-03-27 11:11:08 UTC", "sightings": 1 }, { "indicator": "http://124.29.225.50:37864/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 11:06:18 UTC", "last_seen": "2026-03-27 11:06:18 UTC", "sightings": 1 }, { "indicator": "http://117.209.92.111:60915/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 11:05:19 UTC", "last_seen": "2026-03-27 11:05:19 UTC", "sightings": 1 }, { "indicator": "https://ce1l-mark.spectrumharvest.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 11:04:07 UTC", "last_seen": "2026-03-27 11:04:07 UTC", "sightings": 1 }, { "indicator": "https://t0ken-core.spectrumharvest.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 10:58:09 UTC", "last_seen": "2026-03-27 10:58:09 UTC", "sightings": 1 }, { "indicator": "https://9ecs80cc.skybit.digital/?=check&&actmn=BEHwfQcvGrnSJpmk", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-27 10:53:23 UTC", "last_seen": "2026-03-27 10:53:23 UTC", "sightings": 1 }, { "indicator": "http://113.75.27.151:55690/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-27 10:53:10 UTC", "last_seen": "2026-03-27 10:53:10 UTC", "sightings": 1 }, { "indicator": "http://168.227.66.143:59391/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-27 10:53:09 UTC", "last_seen": "2026-03-27 10:53:09 UTC", "sightings": 1 }, { "indicator": "https://r0ot-hinge.spectrumharvest.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 10:51:09 UTC", "last_seen": "2026-03-27 10:51:09 UTC", "sightings": 1 }, { "indicator": "http://222.127.154.221:47501/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-27 10:47:08 UTC", "last_seen": "2026-03-27 10:47:08 UTC", "sightings": 1 }, { "indicator": "https://c0re4-grid.spectrumharvest.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 10:44:10 UTC", "last_seen": "2026-03-27 10:44:10 UTC", "sightings": 1 }, { "indicator": "http://117.222.165.99:58329/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 10:38:18 UTC", "last_seen": "2026-03-27 10:38:18 UTC", "sightings": 1 }, { "indicator": "https://assetfilter.zenithpatron.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 10:37:08 UTC", "last_seen": "2026-03-27 10:37:08 UTC", "sightings": 1 }, { "indicator": "http://110.36.80.170:34833/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 10:32:08 UTC", "last_seen": "2026-03-27 10:32:08 UTC", "sightings": 1 }, { "indicator": "https://fallgateway.zenithpatron.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 10:31:09 UTC", "last_seen": "2026-03-27 10:31:09 UTC", "sightings": 1 }, { "indicator": "http://113.75.27.151:55690/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-27 10:30:19 UTC", "last_seen": "2026-03-27 10:30:19 UTC", "sightings": 1 }, { "indicator": "http://42.87.139.108:34258/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-27 10:28:35 UTC", "last_seen": "2026-03-27 10:28:35 UTC", "sightings": 1 }, { "indicator": "http://196.189.198.193:60657/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-27 10:28:34 UTC", "last_seen": "2026-03-27 10:28:34 UTC", "sightings": 1 }, { "indicator": "http://42.232.225.243:37616/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 10:26:28 UTC", "last_seen": "2026-03-27 10:26:28 UTC", "sightings": 1 }, { "indicator": "https://alt-rnanif3s.zenithpatron.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 10:24:11 UTC", "last_seen": "2026-03-27 10:24:11 UTC", "sightings": 1 }, { "indicator": "http://123.190.26.253:55761/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 10:22:19 UTC", "last_seen": "2026-03-27 10:22:19 UTC", "sightings": 1 }, { "indicator": "http://123.189.20.16:32826/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 10:20:22 UTC", "last_seen": "2026-03-27 10:20:22 UTC", "sightings": 1 }, { "indicator": "https://122jtw.zenithpatron.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 10:18:07 UTC", "last_seen": "2026-03-27 10:18:07 UTC", "sightings": 1 }, { "indicator": "http://110.39.249.174:55789/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 10:14:26 UTC", "last_seen": "2026-03-27 10:14:26 UTC", "sightings": 1 }, { "indicator": "https://conv35-ring.zenithpatron.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 10:11:14 UTC", "last_seen": "2026-03-27 10:11:14 UTC", "sightings": 1 }, { "indicator": "http://182.113.199.138:47824/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 10:10:16 UTC", "last_seen": "2026-03-27 10:10:16 UTC", "sightings": 1 }, { "indicator": "http://125.42.203.55:35759/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 10:06:31 UTC", "last_seen": "2026-03-27 10:06:31 UTC", "sightings": 1 }, { "indicator": "http://182.113.199.138:47824/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 10:06:20 UTC", "last_seen": "2026-03-27 10:06:20 UTC", "sightings": 1 }, { "indicator": "https://lumflux4um.covenantbloom.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 10:04:09 UTC", "last_seen": "2026-03-27 10:04:09 UTC", "sightings": 1 }, { "indicator": "http://196.189.198.193:60657/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-27 09:57:20 UTC", "last_seen": "2026-03-27 09:57:20 UTC", "sightings": 1 }, { "indicator": "https://sandboximport.covenantbloom.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 09:57:08 UTC", "last_seen": "2026-03-27 09:57:08 UTC", "sightings": 1 }, { "indicator": "http://123.189.20.16:32826/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 09:56:23 UTC", "last_seen": "2026-03-27 09:56:23 UTC", "sightings": 1 }, { "indicator": "http://123.190.26.253:55761/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 09:53:22 UTC", "last_seen": "2026-03-27 09:53:22 UTC", "sightings": 1 }, { "indicator": "http://123.10.68.23:60783/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-27 09:52:19 UTC", "last_seen": "2026-03-27 09:52:19 UTC", "sightings": 1 }, { "indicator": "http://125.42.203.55:35759/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 09:51:23 UTC", "last_seen": "2026-03-27 09:51:23 UTC", "sightings": 1 }, { "indicator": "https://89bqxcn.covenantbloom.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 09:51:07 UTC", "last_seen": "2026-03-27 09:51:07 UTC", "sightings": 1 }, { "indicator": "https://wlvyadr.covenantbloom.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 09:45:11 UTC", "last_seen": "2026-03-27 09:45:11 UTC", "sightings": 1 }, { "indicator": "http://42.225.231.74:50748/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-27 09:42:07 UTC", "last_seen": "2026-03-27 09:42:07 UTC", "sightings": 1 }, { "indicator": "https://cl1p-field.covenantbloom.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 09:38:09 UTC", "last_seen": "2026-03-27 09:38:09 UTC", "sightings": 1 }, { "indicator": "https://y4aw3.latticeventure.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 09:31:07 UTC", "last_seen": "2026-03-27 09:31:07 UTC", "sightings": 1 }, { "indicator": "http://123.10.68.23:60783/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-27 09:26:22 UTC", "last_seen": "2026-03-27 09:26:22 UTC", "sightings": 1 }, { "indicator": "https://unit-frame.latticeventure.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 09:25:10 UTC", "last_seen": "2026-03-27 09:25:10 UTC", "sightings": 1 }, { "indicator": "https://moss-spark.latticeventure.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 09:22:09 UTC", "last_seen": "2026-03-27 09:22:09 UTC", "sightings": 1 }, { "indicator": "http://42.225.231.74:50748/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-27 09:22:08 UTC", "last_seen": "2026-03-27 09:22:08 UTC", "sightings": 1 }, { "indicator": "http://221.14.38.231:55010/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 09:15:20 UTC", "last_seen": "2026-03-27 09:15:20 UTC", "sightings": 1 }, { "indicator": "http://112.248.113.183:35221/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 09:12:18 UTC", "last_seen": "2026-03-27 09:12:18 UTC", "sightings": 1 }, { "indicator": "https://serspireal.latticeventure.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 09:11:07 UTC", "last_seen": "2026-03-27 09:11:07 UTC", "sightings": 1 }, { "indicator": "http://27.37.76.184:53155/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 09:08:15 UTC", "last_seen": "2026-03-27 09:08:15 UTC", "sightings": 1 }, { "indicator": "http://61.53.123.43:59743/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 09:07:21 UTC", "last_seen": "2026-03-27 09:07:21 UTC", "sightings": 1 }, { "indicator": "https://daemonclear.latticeventure.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 09:06:26 UTC", "last_seen": "2026-03-27 09:06:26 UTC", "sightings": 1 }, { "indicator": "http://27.215.52.78:47877/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 08:57:35 UTC", "last_seen": "2026-03-27 08:57:35 UTC", "sightings": 1 }, { "indicator": "http://103.160.62.234/lemperluvkurayami/kurayami.i686", "indicator_type": "url", "source": "URLhaus", "tags": [ "ua-wget" ], "first_seen": "2026-03-27 08:56:22 UTC", "last_seen": "2026-03-27 08:56:22 UTC", "sightings": 1 }, { "indicator": "http://103.160.62.234/lemperluvkurayami/kurayami.arc", "indicator_type": "url", "source": "URLhaus", "tags": [ "ua-wget" ], "first_seen": "2026-03-27 08:56:20 UTC", "last_seen": "2026-03-27 08:56:20 UTC", "sightings": 1 }, { "indicator": "http://103.160.62.234/lemperluvkurayami/kurayami.arm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "ua-wget" ], "first_seen": "2026-03-27 08:56:20 UTC", "last_seen": "2026-03-27 08:56:20 UTC", "sightings": 1 }, { "indicator": "http://103.160.62.234/lemperluvkurayami/kurayami.x86_64", "indicator_type": "url", "source": "URLhaus", "tags": [ "ua-wget" ], "first_seen": "2026-03-27 08:56:20 UTC", "last_seen": "2026-03-27 08:56:20 UTC", "sightings": 1 }, { "indicator": "http://103.160.62.234/lemperluvkurayami/kurayami.m68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "ua-wget" ], "first_seen": "2026-03-27 08:56:20 UTC", "last_seen": "2026-03-27 08:56:20 UTC", "sightings": 1 }, { "indicator": "http://103.160.62.234/lemperluvkurayami/kurayami.x86", "indicator_type": "url", "source": "URLhaus", "tags": [ "ua-wget" ], "first_seen": "2026-03-27 08:56:20 UTC", "last_seen": "2026-03-27 08:56:20 UTC", "sightings": 1 }, { "indicator": "http://103.160.62.234/lemperluvkurayami/kurayami.arm64", "indicator_type": "url", "source": "URLhaus", "tags": [ "ua-wget" ], "first_seen": "2026-03-27 08:56:20 UTC", "last_seen": "2026-03-27 08:56:20 UTC", "sightings": 1 }, { "indicator": "http://103.160.62.234/lemperluvkurayami/kurayami.sh4", "indicator_type": "url", "source": "URLhaus", "tags": [ "ua-wget" ], "first_seen": "2026-03-27 08:56:20 UTC", "last_seen": "2026-03-27 08:56:20 UTC", "sightings": 1 }, { "indicator": "http://103.160.62.234/lemperluvkurayami/kurayami.mpsl", "indicator_type": "url", "source": "URLhaus", "tags": [ "ua-wget" ], "first_seen": "2026-03-27 08:56:20 UTC", "last_seen": "2026-03-27 08:56:20 UTC", "sightings": 1 }, { "indicator": "http://103.160.62.234/lemperluvkurayami/kurayami.mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "ua-wget" ], "first_seen": "2026-03-27 08:56:20 UTC", "last_seen": "2026-03-27 08:56:20 UTC", "sightings": 1 }, { "indicator": "http://103.160.62.234/lemperluvkurayami/kurayami.ppc", "indicator_type": "url", "source": "URLhaus", "tags": [ "ua-wget" ], "first_seen": "2026-03-27 08:56:20 UTC", "last_seen": "2026-03-27 08:56:20 UTC", "sightings": 1 }, { "indicator": "http://89.19.223.82:63239/kdngo8egh9oihgnpe9oahgliub/t", "indicator_type": "url", "source": "URLhaus", "tags": [ "ua-wget" ], "first_seen": "2026-03-27 08:56:20 UTC", "last_seen": "2026-03-27 08:56:20 UTC", "sightings": 1 }, { "indicator": "http://196.189.96.138:81/hiddenbin/dvr1.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "ua-wget" ], "first_seen": "2026-03-27 08:56:20 UTC", "last_seen": "2026-03-27 08:56:20 UTC", "sightings": 1 }, { "indicator": "http://103.160.62.234/lemperluvkurayami/kurayami.arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "ua-wget" ], "first_seen": "2026-03-27 08:56:20 UTC", "last_seen": "2026-03-27 08:56:20 UTC", "sightings": 1 }, { "indicator": "http://103.160.62.234/lemperluvkurayami/kurayami.arm", "indicator_type": "url", "source": "URLhaus", "tags": [ "ua-wget" ], "first_seen": "2026-03-27 08:56:20 UTC", "last_seen": "2026-03-27 08:56:20 UTC", "sightings": 1 }, { "indicator": "http://103.160.62.234/lemperluvkurayami/kurayami.spc", "indicator_type": "url", "source": "URLhaus", "tags": [ "ua-wget" ], "first_seen": "2026-03-27 08:56:20 UTC", "last_seen": "2026-03-27 08:56:20 UTC", "sightings": 1 }, { "indicator": "http://103.160.62.234/lemperluvkurayami/kurayami.i468", "indicator_type": "url", "source": "URLhaus", "tags": [ "ua-wget" ], "first_seen": "2026-03-27 08:56:20 UTC", "last_seen": "2026-03-27 08:56:20 UTC", "sightings": 1 }, { "indicator": "http://103.160.62.234/lemperluvkurayami/kurayami.arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "ua-wget" ], "first_seen": "2026-03-27 08:56:20 UTC", "last_seen": "2026-03-27 08:56:20 UTC", "sightings": 1 }, { "indicator": "http://94.249.228.212/iran.x86_64", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai", "ua-wget" ], "first_seen": "2026-03-27 08:56:06 UTC", "last_seen": "2026-03-27 08:56:06 UTC", "sightings": 1 }, { "indicator": "http://94.249.228.212/iran.m68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai", "ua-wget" ], "first_seen": "2026-03-27 08:56:06 UTC", "last_seen": "2026-03-27 08:56:06 UTC", "sightings": 1 }, { "indicator": "http://94.249.228.212/iran.aarch64", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai", "ua-wget" ], "first_seen": "2026-03-27 08:56:06 UTC", "last_seen": "2026-03-27 08:56:06 UTC", "sightings": 1 }, { "indicator": "http://94.249.228.212/iran.mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai", "ua-wget" ], "first_seen": "2026-03-27 08:56:06 UTC", "last_seen": "2026-03-27 08:56:06 UTC", "sightings": 1 }, { "indicator": "http://91.92.242.30/il24xgriequcys45", "indicator_type": "url", "source": "URLhaus", "tags": [ "ua-wget" ], "first_seen": "2026-03-27 08:56:05 UTC", "last_seen": "2026-03-27 08:56:05 UTC", "sightings": 1 }, { "indicator": "http://116.129.7.63:81/hiddenbin/dvr1.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "ua-wget" ], "first_seen": "2026-03-27 08:56:05 UTC", "last_seen": "2026-03-27 08:56:05 UTC", "sightings": 1 }, { "indicator": "http://59.96.143.46:34543/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 08:47:18 UTC", "last_seen": "2026-03-27 08:47:18 UTC", "sightings": 1 }, { "indicator": "http://61.53.123.43:59743/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 08:44:21 UTC", "last_seen": "2026-03-27 08:44:21 UTC", "sightings": 1 }, { "indicator": "http://117.209.86.30:59164/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 08:41:18 UTC", "last_seen": "2026-03-27 08:41:18 UTC", "sightings": 1 }, { "indicator": "http://111.127.234.122:49591/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-27 08:40:12 UTC", "last_seen": "2026-03-27 08:40:12 UTC", "sightings": 1 }, { "indicator": "http://27.215.52.78:47877/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 08:35:10 UTC", "last_seen": "2026-03-27 08:35:10 UTC", "sightings": 1 }, { "indicator": "http://117.241.51.71:56979/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-27 08:35:09 UTC", "last_seen": "2026-03-27 08:35:09 UTC", "sightings": 1 }, { "indicator": "https://syigenc6.momentumharbor.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 08:24:10 UTC", "last_seen": "2026-03-27 08:24:10 UTC", "sightings": 1 }, { "indicator": "http://182.113.3.20:44955/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 08:23:18 UTC", "last_seen": "2026-03-27 08:23:18 UTC", "sightings": 1 }, { "indicator": "http://45.232.75.59:47845/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-27 08:22:08 UTC", "last_seen": "2026-03-27 08:22:08 UTC", "sightings": 1 }, { "indicator": "http://45.232.75.59:47845/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-27 08:22:08 UTC", "last_seen": "2026-03-27 08:22:08 UTC", "sightings": 1 }, { "indicator": "http://117.209.86.30:59164/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 08:21:22 UTC", "last_seen": "2026-03-27 08:21:22 UTC", "sightings": 1 }, { "indicator": "http://115.55.56.252:43679/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 08:19:21 UTC", "last_seen": "2026-03-27 08:19:21 UTC", "sightings": 1 }, { "indicator": "https://vor-tideet.momentumharbor.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 08:19:09 UTC", "last_seen": "2026-03-27 08:19:09 UTC", "sightings": 1 }, { "indicator": "http://117.209.93.98:37577/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 08:17:13 UTC", "last_seen": "2026-03-27 08:17:13 UTC", "sightings": 1 }, { "indicator": "http://123.14.89.157:53887/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-27 08:17:05 UTC", "last_seen": "2026-03-27 08:17:05 UTC", "sightings": 1 }, { "indicator": "http://117.209.93.98:37577/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 08:13:13 UTC", "last_seen": "2026-03-27 08:13:13 UTC", "sightings": 1 }, { "indicator": "https://tri-forgeix.momentumharbor.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 08:12:07 UTC", "last_seen": "2026-03-27 08:12:07 UTC", "sightings": 1 }, { "indicator": "http://37.52.250.118:50437/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 08:11:22 UTC", "last_seen": "2026-03-27 08:11:22 UTC", "sightings": 1 }, { "indicator": "http://110.36.30.37:48662/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 08:11:22 UTC", "last_seen": "2026-03-27 08:11:22 UTC", "sightings": 1 }, { "indicator": "http://111.127.234.122:49591/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-27 08:05:15 UTC", "last_seen": "2026-03-27 08:05:15 UTC", "sightings": 1 }, { "indicator": "http://182.113.3.20:44955/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 08:05:13 UTC", "last_seen": "2026-03-27 08:05:13 UTC", "sightings": 1 }, { "indicator": "https://trares.momentumharbor.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 08:05:10 UTC", "last_seen": "2026-03-27 08:05:10 UTC", "sightings": 1 }, { "indicator": "https://nor-venen.momentumharbor.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 07:58:12 UTC", "last_seen": "2026-03-27 07:58:12 UTC", "sightings": 1 }, { "indicator": "http://112.248.113.183:35221/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 07:55:44 UTC", "last_seen": "2026-03-27 07:55:44 UTC", "sightings": 1 }, { "indicator": "http://115.55.56.252:43679/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 07:55:25 UTC", "last_seen": "2026-03-27 07:55:25 UTC", "sightings": 1 }, { "indicator": "http://110.36.30.37:48662/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 07:53:12 UTC", "last_seen": "2026-03-27 07:53:12 UTC", "sightings": 1 }, { "indicator": "https://open-obser.dawnspire.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 07:51:09 UTC", "last_seen": "2026-03-27 07:51:09 UTC", "sightings": 1 }, { "indicator": "http://42.228.39.28:54167/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 07:47:17 UTC", "last_seen": "2026-03-27 07:47:17 UTC", "sightings": 1 }, { "indicator": "https://kelforgear.amber-drift.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 07:45:35 UTC", "last_seen": "2026-03-27 07:45:35 UTC", "sightings": 1 }, { "indicator": "https://vel-spireix.gl1mmeroak.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 07:39:07 UTC", "last_seen": "2026-03-27 07:39:07 UTC", "sightings": 1 }, { "indicator": "http://77.247.88.83:34355/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-27 07:37:19 UTC", "last_seen": "2026-03-27 07:37:19 UTC", "sightings": 1 }, { "indicator": "http://64.89.163.118/california", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-27 07:32:23 UTC", "last_seen": "2026-03-27 07:32:23 UTC", "sightings": 1 }, { "indicator": "http://64.89.163.118/colorado", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-27 07:32:23 UTC", "last_seen": "2026-03-27 07:32:23 UTC", "sightings": 1 }, { "indicator": "http://64.89.163.118/connecticut", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-27 07:32:23 UTC", "last_seen": "2026-03-27 07:32:23 UTC", "sightings": 1 }, { "indicator": "http://64.89.163.118/alaska", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-27 07:32:23 UTC", "last_seen": "2026-03-27 07:32:23 UTC", "sightings": 1 }, { "indicator": "http://64.89.163.118/florida", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-27 07:32:23 UTC", "last_seen": "2026-03-27 07:32:23 UTC", "sightings": 1 }, { "indicator": "http://64.89.163.118/georgia", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-27 07:32:23 UTC", "last_seen": "2026-03-27 07:32:23 UTC", "sightings": 1 }, { "indicator": "http://64.89.163.118/illinois", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-27 07:32:23 UTC", "last_seen": "2026-03-27 07:32:23 UTC", "sightings": 1 }, { "indicator": "http://64.89.163.118/delaware", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-27 07:32:21 UTC", "last_seen": "2026-03-27 07:32:21 UTC", "sightings": 1 }, { "indicator": "http://64.89.163.118/indiana", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-27 07:32:21 UTC", "last_seen": "2026-03-27 07:32:21 UTC", "sightings": 1 }, { "indicator": "http://64.89.163.118/idaho", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-27 07:32:21 UTC", "last_seen": "2026-03-27 07:32:21 UTC", "sightings": 1 }, { "indicator": "http://64.89.163.118/arkansas", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-27 07:32:21 UTC", "last_seen": "2026-03-27 07:32:21 UTC", "sightings": 1 }, { "indicator": "http://64.89.163.118/alabama", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "gafgyt", "ua-wget" ], "first_seen": "2026-03-27 07:32:21 UTC", "last_seen": "2026-03-27 07:32:21 UTC", "sightings": 1 }, { "indicator": "http://64.89.163.118/hawaii", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-27 07:32:16 UTC", "last_seen": "2026-03-27 07:32:16 UTC", "sightings": 1 }, { "indicator": "http://64.89.163.118/iowa", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "gafgyt", "ua-wget" ], "first_seen": "2026-03-27 07:32:16 UTC", "last_seen": "2026-03-27 07:32:16 UTC", "sightings": 1 }, { "indicator": "http://64.89.163.118/arizona", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-27 07:32:16 UTC", "last_seen": "2026-03-27 07:32:16 UTC", "sightings": 1 }, { "indicator": "https://re4g3-dock.crestfall.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 07:32:13 UTC", "last_seen": "2026-03-27 07:32:13 UTC", "sightings": 1 }, { "indicator": "https://discov-sdk.velorune.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 07:26:08 UTC", "last_seen": "2026-03-27 07:26:08 UTC", "sightings": 1 }, { "indicator": "http://78.26.48.22:46267/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-27 07:19:23 UTC", "last_seen": "2026-03-27 07:19:23 UTC", "sightings": 1 }, { "indicator": "https://flamefinal.brisklume.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 07:18:11 UTC", "last_seen": "2026-03-27 07:18:11 UTC", "sightings": 1 }, { "indicator": "http://78.26.48.22:46267/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-27 07:11:18 UTC", "last_seen": "2026-03-27 07:11:18 UTC", "sightings": 1 }, { "indicator": "http://77.247.88.83:34355/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-27 07:11:17 UTC", "last_seen": "2026-03-27 07:11:17 UTC", "sightings": 1 }, { "indicator": "https://sectransi.f0xharbor.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 07:11:12 UTC", "last_seen": "2026-03-27 07:11:12 UTC", "sightings": 1 }, { "indicator": "http://122.51.128.201:88/A01/Items.dll", "indicator_type": "url", "source": "URLhaus", "tags": [ "BlackMoon" ], "first_seen": "2026-03-27 07:10:50 UTC", "last_seen": "2026-03-27 07:10:50 UTC", "sightings": 1 }, { "indicator": "http://38.76.194.131:2222/12.bin", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-27 07:08:21 UTC", "last_seen": "2026-03-27 07:08:21 UTC", "sightings": 1 }, { "indicator": "http://38.76.194.131:2222/bendi.exe", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-27 07:08:21 UTC", "last_seen": "2026-03-27 07:08:21 UTC", "sightings": 1 }, { "indicator": "http://38.76.194.131:2222/321.bin", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-27 07:08:20 UTC", "last_seen": "2026-03-27 07:08:20 UTC", "sightings": 1 }, { "indicator": "https://186.169.78.134/a.exe", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-27 07:08:20 UTC", "last_seen": "2026-03-27 07:08:20 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.168/files/8525074840/96CqMfy.bat", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-03-27 07:08:20 UTC", "last_seen": "2026-03-27 07:08:20 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.168/files/7281753217/2zVJACJ.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-03-27 07:08:20 UTC", "last_seen": "2026-03-27 07:08:20 UTC", "sightings": 1 }, { "indicator": "http://38.76.194.131:2222/shellcode.bin", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-27 07:08:20 UTC", "last_seen": "2026-03-27 07:08:20 UTC", "sightings": 1 }, { "indicator": "https://whreceiverrrrrrrrr.ru/files/jar/elevator", "indicator_type": "url", "source": "URLhaus", "tags": [ "WeedHack" ], "first_seen": "2026-03-27 07:08:17 UTC", "last_seen": "2026-03-27 07:08:17 UTC", "sightings": 1 }, { "indicator": "https://whreceiverrrrrrrrr.ru/files/jar/module", "indicator_type": "url", "source": "URLhaus", "tags": [ "WeedHack" ], "first_seen": "2026-03-27 07:08:17 UTC", "last_seen": "2026-03-27 07:08:17 UTC", "sightings": 1 }, { "indicator": "http://103.79.76.166:8443/agent_linux64", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-27 07:08:17 UTC", "last_seen": "2026-03-27 07:08:17 UTC", "sightings": 1 }, { "indicator": "http://103.79.76.166:8443/agent_darwinarm", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-27 07:08:17 UTC", "last_seen": "2026-03-27 07:08:17 UTC", "sightings": 1 }, { "indicator": "https://i.postimg.cc/Y04Mz1jp/image.png", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-27 07:08:17 UTC", "last_seen": "2026-03-27 07:08:17 UTC", "sightings": 1 }, { "indicator": "https://night-client-hub.lovable.app/downloads/night-soul-1.21.11-43.jar", "indicator_type": "url", "source": "URLhaus", "tags": [ "WeedHack" ], "first_seen": "2026-03-27 07:08:17 UTC", "last_seen": "2026-03-27 07:08:17 UTC", "sightings": 1 }, { "indicator": "https://night-client-hub.lovable.app/downloads/KryptonClient1.21.11-43.jar", "indicator_type": "url", "source": "URLhaus", "tags": [ "WeedHack" ], "first_seen": "2026-03-27 07:08:17 UTC", "last_seen": "2026-03-27 07:08:17 UTC", "sightings": 1 }, { "indicator": "http://122.51.128.201:88/A01/MEffect.dll", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-27 07:08:17 UTC", "last_seen": "2026-03-27 07:08:17 UTC", "sightings": 1 }, { "indicator": "http://103.79.76.166:8443/agent_win64.exe", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-27 07:08:17 UTC", "last_seen": "2026-03-27 07:08:17 UTC", "sightings": 1 }, { "indicator": "https://whreceiverrrrrrrrr.ru/files/jar/component", "indicator_type": "url", "source": "URLhaus", "tags": [ "WeedHack" ], "first_seen": "2026-03-27 07:08:16 UTC", "last_seen": "2026-03-27 07:08:16 UTC", "sightings": 1 }, { "indicator": "https://night-client-hub.lovable.app/downloads/dupeclient1.21.11-1.21.11.jar", "indicator_type": "url", "source": "URLhaus", "tags": [ "WeedHack" ], "first_seen": "2026-03-27 07:08:16 UTC", "last_seen": "2026-03-27 07:08:16 UTC", "sightings": 1 }, { "indicator": "https://whreceiverrrrrrrrr.ru/files/jar/module2", "indicator_type": "url", "source": "URLhaus", "tags": [ "WeedHack" ], "first_seen": "2026-03-27 07:08:16 UTC", "last_seen": "2026-03-27 07:08:16 UTC", "sightings": 1 }, { "indicator": "https://whreceiverrrrrrrrr.ru/files/jar/security", "indicator_type": "url", "source": "URLhaus", "tags": [ "WeedHack" ], "first_seen": "2026-03-27 07:08:13 UTC", "last_seen": "2026-03-27 07:08:13 UTC", "sightings": 1 }, { "indicator": "http://194.59.30.207/bins/xnxnxnxnxnxnxnxnm68kxnxn", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-27 07:08:13 UTC", "last_seen": "2026-03-27 07:08:13 UTC", "sightings": 1 }, { "indicator": "http://194.59.30.207/bins/xnxnxnxnxnxnxnxnaarch64xnxn", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-27 07:08:12 UTC", "last_seen": "2026-03-27 07:08:12 UTC", "sightings": 1 }, { "indicator": "http://122.51.128.201:88/A01/MFSvc2.dll", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-27 07:08:12 UTC", "last_seen": "2026-03-27 07:08:12 UTC", "sightings": 1 }, { "indicator": "http://122.51.128.201:88/A01/Login.dll", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-27 07:08:12 UTC", "last_seen": "2026-03-27 07:08:12 UTC", "sightings": 1 }, { "indicator": "http://194.59.30.207/bins/xnxnxnxnxnxnxnxnmicroblazexnxn", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-27 07:08:11 UTC", "last_seen": "2026-03-27 07:08:11 UTC", "sightings": 1 }, { "indicator": "http://192.177.26.196/files/8316621590/krjF0CY.msi", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-03-27 07:08:10 UTC", "last_seen": "2026-03-27 07:08:10 UTC", "sightings": 1 }, { "indicator": "http://64.89.163.118/cat.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "gafgyt", "script" ], "first_seen": "2026-03-27 07:08:10 UTC", "last_seen": "2026-03-27 07:08:10 UTC", "sightings": 1 }, { "indicator": "http://194.59.30.207/bins/xnxnxnxnxnxnxnxnpowerpcxnxn", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-27 07:08:10 UTC", "last_seen": "2026-03-27 07:08:10 UTC", "sightings": 1 }, { "indicator": "http://194.59.30.207/bins/xnxnxnxnxnxnxnxni386xnxn", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-27 07:08:10 UTC", "last_seen": "2026-03-27 07:08:10 UTC", "sightings": 1 }, { "indicator": "http://194.59.30.207/run.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-27 07:08:10 UTC", "last_seen": "2026-03-27 07:08:10 UTC", "sightings": 1 }, { "indicator": "http://194.59.30.207/bins/xnxnxnxnxnxnxnxnloongarch64xnxn", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-27 07:08:10 UTC", "last_seen": "2026-03-27 07:08:10 UTC", "sightings": 1 }, { "indicator": "http://194.59.30.207/bins/xnxnxnxnxnxnxnxnsh4xnxn", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-27 07:08:10 UTC", "last_seen": "2026-03-27 07:08:10 UTC", "sightings": 1 }, { "indicator": "http://194.59.30.207/bins/xnxnxnxnxnxnxnxnsh2xnxn", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-27 07:08:10 UTC", "last_seen": "2026-03-27 07:08:10 UTC", "sightings": 1 }, { "indicator": "http://194.59.30.207/bins/xnxnxnxnxnxnxnxnx86_64xnxn", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-27 07:08:10 UTC", "last_seen": "2026-03-27 07:08:10 UTC", "sightings": 1 }, { "indicator": "http://194.59.30.207/bins/xnxnxnxnxnxnxnxnriscv32xnxn", "indicator_type": "url", "source": "URLhaus", "tags": [ "gafgyt" ], "first_seen": "2026-03-27 07:08:10 UTC", "last_seen": "2026-03-27 07:08:10 UTC", "sightings": 1 }, { "indicator": "http://194.59.30.207/bins/xnxnxnxnxnxnxnxnmipsxnxn", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-27 07:08:10 UTC", "last_seen": "2026-03-27 07:08:10 UTC", "sightings": 1 }, { "indicator": "http://194.59.30.207/bins/xnxnxnxnxnxnxnxnriscv64xnxn", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-27 07:08:10 UTC", "last_seen": "2026-03-27 07:08:10 UTC", "sightings": 1 }, { "indicator": "http://194.59.30.207/bins/xnxnxnxnxnxnxnxnor1kxnxn", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-27 07:08:10 UTC", "last_seen": "2026-03-27 07:08:10 UTC", "sightings": 1 }, { "indicator": "http://192.177.26.196/files/8316621590/eeNfuRg.bat", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-03-27 07:08:09 UTC", "last_seen": "2026-03-27 07:08:09 UTC", "sightings": 1 }, { "indicator": "http://107.172.135.4/img/kobo/beautifulgirlfriend.hta", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-27 07:08:08 UTC", "last_seen": "2026-03-27 07:08:08 UTC", "sightings": 1 }, { "indicator": "https://41.216.188.231:4449/plugin", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-27 07:08:08 UTC", "last_seen": "2026-03-27 07:08:08 UTC", "sightings": 1 }, { "indicator": "http://192.177.26.196/test/random.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-03-27 07:08:07 UTC", "last_seen": "2026-03-27 07:08:07 UTC", "sightings": 1 }, { "indicator": "http://192.177.26.196/files/8525074840/96CqMfy.bat", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-03-27 07:08:07 UTC", "last_seen": "2026-03-27 07:08:07 UTC", "sightings": 1 }, { "indicator": "http://192.177.26.196/files/files/8316621590/60TJImw.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-03-27 07:08:07 UTC", "last_seen": "2026-03-27 07:08:07 UTC", "sightings": 1 }, { "indicator": "http://192.177.26.196/files/files/8316621590/flSJ7Eq.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-03-27 07:08:07 UTC", "last_seen": "2026-03-27 07:08:07 UTC", "sightings": 1 }, { "indicator": "http://192.177.26.196/files/8525074840/mdOjagm.msi", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-03-27 07:08:06 UTC", "last_seen": "2026-03-27 07:08:06 UTC", "sightings": 1 }, { "indicator": "http://194.41.113.246/files/8316621590/RIlX3pR.bat", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-03-27 07:08:06 UTC", "last_seen": "2026-03-27 07:08:06 UTC", "sightings": 1 }, { "indicator": "http://192.177.26.196/files/files/8316621590/qxeIBGu.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-03-27 07:08:06 UTC", "last_seen": "2026-03-27 07:08:06 UTC", "sightings": 1 }, { "indicator": "http://192.177.26.196/files/files/8316621590/mjN2ASs.bat", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-03-27 07:08:06 UTC", "last_seen": "2026-03-27 07:08:06 UTC", "sightings": 1 }, { "indicator": "https://whreceiverrrrrrrrr.ru/files/jar/RuntimeBroker.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "rustystealer", "WeedHack" ], "first_seen": "2026-03-27 07:07:13 UTC", "last_seen": "2026-03-27 07:07:13 UTC", "sightings": 1 }, { "indicator": "https://mercore9a.cinderpeak.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 07:06:09 UTC", "last_seen": "2026-03-27 07:06:09 UTC", "sightings": 1 }, { "indicator": "https://pzwvu.aurorift.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 06:58:07 UTC", "last_seen": "2026-03-27 06:58:07 UTC", "sightings": 1 }, { "indicator": "http://221.215.120.178:33456/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 06:56:09 UTC", "last_seen": "2026-03-27 06:56:09 UTC", "sightings": 1 }, { "indicator": "https://layer3-graph.stonemuse.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 06:53:08 UTC", "last_seen": "2026-03-27 06:53:08 UTC", "sightings": 1 }, { "indicator": "http://58.255.43.105:42841/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 06:49:23 UTC", "last_seen": "2026-03-27 06:49:23 UTC", "sightings": 1 }, { "indicator": "http://117.217.33.217:50014/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 06:48:18 UTC", "last_seen": "2026-03-27 06:48:18 UTC", "sightings": 1 }, { "indicator": "http://122.148.184.156:42550/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-27 06:46:20 UTC", "last_seen": "2026-03-27 06:46:20 UTC", "sightings": 1 }, { "indicator": "https://partnershape.n1ghtridge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 06:45:14 UTC", "last_seen": "2026-03-27 06:45:14 UTC", "sightings": 1 }, { "indicator": "http://77.79.160.210:35567/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-27 06:42:06 UTC", "last_seen": "2026-03-27 06:42:06 UTC", "sightings": 1 }, { "indicator": "http://59.91.168.60:56209/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 06:41:16 UTC", "last_seen": "2026-03-27 06:41:16 UTC", "sightings": 1 }, { "indicator": "http://59.91.168.60:56209/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 06:40:18 UTC", "last_seen": "2026-03-27 06:40:18 UTC", "sightings": 1 }, { "indicator": "https://ezjs.cl0udmere.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 06:38:09 UTC", "last_seen": "2026-03-27 06:38:09 UTC", "sightings": 1 }, { "indicator": "http://221.215.120.178:33456/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 06:35:09 UTC", "last_seen": "2026-03-27 06:35:09 UTC", "sightings": 1 }, { "indicator": "http://113.239.206.240:53076/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 06:32:18 UTC", "last_seen": "2026-03-27 06:32:18 UTC", "sightings": 1 }, { "indicator": "https://balan-forge.thornbyte.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 06:32:10 UTC", "last_seen": "2026-03-27 06:32:10 UTC", "sightings": 1 }, { "indicator": "http://122.148.184.156:42550/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-27 06:31:17 UTC", "last_seen": "2026-03-27 06:31:17 UTC", "sightings": 1 }, { "indicator": "http://119.117.253.142:37623/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 06:30:08 UTC", "last_seen": "2026-03-27 06:30:08 UTC", "sightings": 1 }, { "indicator": "https://aud1-frame.fablegrove.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 06:26:08 UTC", "last_seen": "2026-03-27 06:26:08 UTC", "sightings": 1 }, { "indicator": "http://110.37.13.110:58439/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 06:25:17 UTC", "last_seen": "2026-03-27 06:25:17 UTC", "sightings": 1 }, { "indicator": "http://77.247.88.82:48408/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-27 06:20:16 UTC", "last_seen": "2026-03-27 06:20:16 UTC", "sightings": 1 }, { "indicator": "https://d3m4nd-wave.z7hire.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 06:19:09 UTC", "last_seen": "2026-03-27 06:19:09 UTC", "sightings": 1 }, { "indicator": "http://124.95.44.164:60047/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 06:14:11 UTC", "last_seen": "2026-03-27 06:14:11 UTC", "sightings": 1 }, { "indicator": "http://182.121.168.81:59789/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 06:12:14 UTC", "last_seen": "2026-03-27 06:12:14 UTC", "sightings": 1 }, { "indicator": "https://urbanmicr.tires8f.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 06:12:08 UTC", "last_seen": "2026-03-27 06:12:08 UTC", "sightings": 1 }, { "indicator": "http://113.239.206.240:53076/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 06:09:20 UTC", "last_seen": "2026-03-27 06:09:20 UTC", "sightings": 1 }, { "indicator": "http://77.247.88.82:48408/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-27 06:09:17 UTC", "last_seen": "2026-03-27 06:09:17 UTC", "sightings": 1 }, { "indicator": "http://42.235.144.6:52917/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 06:06:16 UTC", "last_seen": "2026-03-27 06:06:16 UTC", "sightings": 1 }, { "indicator": "http://110.37.13.110:58439/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 06:05:22 UTC", "last_seen": "2026-03-27 06:05:22 UTC", "sightings": 1 }, { "indicator": "https://timberbundle.cl0verbyte.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 06:05:12 UTC", "last_seen": "2026-03-27 06:05:12 UTC", "sightings": 1 }, { "indicator": "http://119.117.253.142:37623/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 06:04:17 UTC", "last_seen": "2026-03-27 06:04:17 UTC", "sightings": 1 }, { "indicator": "https://talmark4a.foxglade.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 05:59:08 UTC", "last_seen": "2026-03-27 05:59:08 UTC", "sightings": 1 }, { "indicator": "http://124.95.44.164:60047/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 05:56:18 UTC", "last_seen": "2026-03-27 05:56:18 UTC", "sightings": 1 }, { "indicator": "http://79.50.155.57:55911/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-27 05:56:16 UTC", "last_seen": "2026-03-27 05:56:16 UTC", "sightings": 1 }, { "indicator": "http://192.177.26.196/files/8316621590/Vxx2ROp.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-03-27 05:55:06 UTC", "last_seen": "2026-03-27 05:55:06 UTC", "sightings": 1 }, { "indicator": "http://115.55.241.198:60597/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 05:54:11 UTC", "last_seen": "2026-03-27 05:54:11 UTC", "sightings": 1 }, { "indicator": "https://vorspireos3.bramblepath.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 05:53:08 UTC", "last_seen": "2026-03-27 05:53:08 UTC", "sightings": 1 }, { "indicator": "http://222.141.12.152:45319/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 05:51:06 UTC", "last_seen": "2026-03-27 05:51:06 UTC", "sightings": 1 }, { "indicator": "http://115.55.241.198:60597/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 05:49:18 UTC", "last_seen": "2026-03-27 05:49:18 UTC", "sightings": 1 }, { "indicator": "https://givs1.fabledock.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 05:45:10 UTC", "last_seen": "2026-03-27 05:45:10 UTC", "sightings": 1 }, { "indicator": "http://192.177.26.196/files/8316621590/g05Mb4u.bat", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-27 05:43:06 UTC", "last_seen": "2026-03-27 05:43:06 UTC", "sightings": 1 }, { "indicator": "http://182.121.168.81:59789/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 05:42:09 UTC", "last_seen": "2026-03-27 05:42:09 UTC", "sightings": 1 }, { "indicator": "http://117.222.165.4:50028/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-27 05:42:08 UTC", "last_seen": "2026-03-27 05:42:08 UTC", "sightings": 1 }, { "indicator": "http://119.116.37.62:51427/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 05:40:20 UTC", "last_seen": "2026-03-27 05:40:20 UTC", "sightings": 1 }, { "indicator": "http://192.177.26.196/files/8316621590/ioyFcJU.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-27 05:40:11 UTC", "last_seen": "2026-03-27 05:40:11 UTC", "sightings": 1 }, { "indicator": "https://mi5t-mount.x7lora.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 05:40:08 UTC", "last_seen": "2026-03-27 05:40:08 UTC", "sightings": 1 }, { "indicator": "http://117.222.165.4:50028/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-27 05:37:07 UTC", "last_seen": "2026-03-27 05:37:07 UTC", "sightings": 1 }, { "indicator": "http://192.177.26.196/files/8316621590/3v0svmA.bat", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-27 05:37:05 UTC", "last_seen": "2026-03-27 05:37:05 UTC", "sightings": 1 }, { "indicator": "http://192.177.26.196/files/8316621590/FIFbyh6.msi", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-03-27 05:34:06 UTC", "last_seen": "2026-03-27 05:34:06 UTC", "sightings": 1 }, { "indicator": "http://42.235.144.6:52917/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 05:33:10 UTC", "last_seen": "2026-03-27 05:33:10 UTC", "sightings": 1 }, { "indicator": "https://golbyte.ra8gera.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 05:32:07 UTC", "last_seen": "2026-03-27 05:32:07 UTC", "sightings": 1 }, { "indicator": "https://ext4point.synergybloom.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 05:26:07 UTC", "last_seen": "2026-03-27 05:26:07 UTC", "sightings": 1 }, { "indicator": "http://222.141.12.152:45319/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 05:25:17 UTC", "last_seen": "2026-03-27 05:25:17 UTC", "sightings": 1 }, { "indicator": "http://120.28.218.245:60982/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-27 05:25:16 UTC", "last_seen": "2026-03-27 05:25:16 UTC", "sightings": 1 }, { "indicator": "http://42.224.0.104:58857/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-27 05:22:07 UTC", "last_seen": "2026-03-27 05:22:07 UTC", "sightings": 1 }, { "indicator": "http://192.177.26.196/files/8316621590/BMpl5b7.bat", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-03-27 05:21:05 UTC", "last_seen": "2026-03-27 05:21:05 UTC", "sightings": 1 }, { "indicator": "https://ext3data.synergybloom.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 05:19:08 UTC", "last_seen": "2026-03-27 05:19:08 UTC", "sightings": 1 }, { "indicator": "http://120.28.219.218:40688/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-27 05:18:11 UTC", "last_seen": "2026-03-27 05:18:11 UTC", "sightings": 1 }, { "indicator": "http://110.38.199.197:56829/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 05:18:10 UTC", "last_seen": "2026-03-27 05:18:10 UTC", "sightings": 1 }, { "indicator": "http://120.60.225.225:46293/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 05:17:10 UTC", "last_seen": "2026-03-27 05:17:10 UTC", "sightings": 1 }, { "indicator": "http://193.169.209.115:51582/.i", "indicator_type": "url", "source": "URLhaus", "tags": [ "hajime" ], "first_seen": "2026-03-27 05:17:09 UTC", "last_seen": "2026-03-27 05:17:09 UTC", "sightings": 1 }, { "indicator": "https://ext2proxy.synergybloom.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 05:13:08 UTC", "last_seen": "2026-03-27 05:13:08 UTC", "sightings": 1 }, { "indicator": "http://192.177.26.196/files/8316621590/d0sNS9L.bat", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-27 05:11:06 UTC", "last_seen": "2026-03-27 05:11:06 UTC", "sightings": 1 }, { "indicator": "http://192.177.26.196/files/8316621590/mBfSSJn.bat", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-27 05:06:06 UTC", "last_seen": "2026-03-27 05:06:06 UTC", "sightings": 1 }, { "indicator": "https://ext1infra.synergybloom.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 05:05:12 UTC", "last_seen": "2026-03-27 05:05:12 UTC", "sightings": 1 }, { "indicator": "http://192.177.26.196/files/8316621590/KcbgpR4.bat", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-27 05:05:07 UTC", "last_seen": "2026-03-27 05:05:07 UTC", "sightings": 1 }, { "indicator": "http://110.38.199.197:56829/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 05:02:18 UTC", "last_seen": "2026-03-27 05:02:18 UTC", "sightings": 1 }, { "indicator": "https://svc4sat.elementpatron.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 05:00:11 UTC", "last_seen": "2026-03-27 05:00:11 UTC", "sightings": 1 }, { "indicator": "http://192.177.26.196/files/8316621590/bjxCKuP.bat", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-27 05:00:08 UTC", "last_seen": "2026-03-27 05:00:08 UTC", "sightings": 1 }, { "indicator": "https://svc3core.elementpatron.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 04:52:08 UTC", "last_seen": "2026-03-27 04:52:08 UTC", "sightings": 1 }, { "indicator": "http://182.114.34.240:52094/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-27 04:52:07 UTC", "last_seen": "2026-03-27 04:52:07 UTC", "sightings": 1 }, { "indicator": "http://42.224.0.104:58857/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-27 04:47:08 UTC", "last_seen": "2026-03-27 04:47:08 UTC", "sightings": 1 }, { "indicator": "https://svc2steel.elementpatron.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 04:46:08 UTC", "last_seen": "2026-03-27 04:46:08 UTC", "sightings": 1 }, { "indicator": "http://110.37.48.94:50136/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 04:42:22 UTC", "last_seen": "2026-03-27 04:42:22 UTC", "sightings": 1 }, { "indicator": "https://svc1proc.elementpatron.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 04:40:09 UTC", "last_seen": "2026-03-27 04:40:09 UTC", "sightings": 1 }, { "indicator": "http://112.248.185.131:57777/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 04:39:14 UTC", "last_seen": "2026-03-27 04:39:14 UTC", "sightings": 1 }, { "indicator": "https://dev4space.pinnacleforge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 04:33:09 UTC", "last_seen": "2026-03-27 04:33:09 UTC", "sightings": 1 }, { "indicator": "https://dev3field.pinnacleforge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 04:27:07 UTC", "last_seen": "2026-03-27 04:27:07 UTC", "sightings": 1 }, { "indicator": "http://192.177.26.196/files/8316621590/krjF0CY.bat", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-03-27 04:27:06 UTC", "last_seen": "2026-03-27 04:27:06 UTC", "sightings": 1 }, { "indicator": "https://dev2outer.pinnacleforge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 04:19:07 UTC", "last_seen": "2026-03-27 04:19:07 UTC", "sightings": 1 }, { "indicator": "http://110.37.48.94:50136/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 04:18:22 UTC", "last_seen": "2026-03-27 04:18:22 UTC", "sightings": 1 }, { "indicator": "http://192.177.26.196/files/8525074840/yxPIfd2.msi", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543", "QuasarRAT" ], "first_seen": "2026-03-27 04:17:07 UTC", "last_seen": "2026-03-27 04:17:07 UTC", "sightings": 1 }, { "indicator": "http://117.216.26.130:33793/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-27 04:12:13 UTC", "last_seen": "2026-03-27 04:12:13 UTC", "sightings": 1 }, { "indicator": "http://117.216.26.130:33793/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-27 04:12:09 UTC", "last_seen": "2026-03-27 04:12:09 UTC", "sightings": 1 }, { "indicator": "https://dev1proc.pinnacleforge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 04:12:09 UTC", "last_seen": "2026-03-27 04:12:09 UTC", "sightings": 1 }, { "indicator": "http://192.177.26.196/files/8316621590/eeNfuRg.msi", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-03-27 04:12:06 UTC", "last_seen": "2026-03-27 04:12:06 UTC", "sightings": 1 }, { "indicator": "http://110.39.249.174:55789/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 04:07:22 UTC", "last_seen": "2026-03-27 04:07:22 UTC", "sightings": 1 }, { "indicator": "http://221.15.21.8:38807/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 04:06:23 UTC", "last_seen": "2026-03-27 04:06:23 UTC", "sightings": 1 }, { "indicator": "https://cl4path.quantumbeacon.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 04:06:07 UTC", "last_seen": "2026-03-27 04:06:07 UTC", "sightings": 1 }, { "indicator": "http://192.177.26.196/files/test/random.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-03-27 04:05:07 UTC", "last_seen": "2026-03-27 04:05:07 UTC", "sightings": 1 }, { "indicator": "http://192.177.26.196/files/final/random.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey", "NirCmd" ], "first_seen": "2026-03-27 04:04:07 UTC", "last_seen": "2026-03-27 04:04:07 UTC", "sightings": 1 }, { "indicator": "http://112.248.185.131:57777/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-27 04:02:25 UTC", "last_seen": "2026-03-27 04:02:25 UTC", "sightings": 1 }, { "indicator": "https://cl3view.quantumbeacon.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 04:00:09 UTC", "last_seen": "2026-03-27 04:00:09 UTC", "sightings": 1 }, { "indicator": "http://59.182.155.32:46250/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 03:55:18 UTC", "last_seen": "2026-03-27 03:55:18 UTC", "sightings": 1 }, { "indicator": "http://115.55.54.234:50277/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 03:54:17 UTC", "last_seen": "2026-03-27 03:54:17 UTC", "sightings": 1 }, { "indicator": "https://cl2point.quantumbeacon.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 03:53:07 UTC", "last_seen": "2026-03-27 03:53:07 UTC", "sightings": 1 }, { "indicator": "https://cl1proc.quantumbeacon.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 03:46:08 UTC", "last_seen": "2026-03-27 03:46:08 UTC", "sightings": 1 }, { "indicator": "http://192.177.26.196/files/vid/random.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey", "Vidar" ], "first_seen": "2026-03-27 03:43:06 UTC", "last_seen": "2026-03-27 03:43:06 UTC", "sightings": 1 }, { "indicator": "https://ext4view.orbitprospera.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 03:39:06 UTC", "last_seen": "2026-03-27 03:39:06 UTC", "sightings": 1 }, { "indicator": "https://ext3ghost.orbitprospera.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 03:32:09 UTC", "last_seen": "2026-03-27 03:32:09 UTC", "sightings": 1 }, { "indicator": "http://115.55.54.234:50277/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 03:29:21 UTC", "last_seen": "2026-03-27 03:29:21 UTC", "sightings": 1 }, { "indicator": "http://59.182.155.32:46250/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 03:26:22 UTC", "last_seen": "2026-03-27 03:26:22 UTC", "sightings": 1 }, { "indicator": "https://ext2core.orbitprospera.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 03:26:08 UTC", "last_seen": "2026-03-27 03:26:08 UTC", "sightings": 1 }, { "indicator": "https://ext1proc.orbitprospera.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 03:20:10 UTC", "last_seen": "2026-03-27 03:20:10 UTC", "sightings": 1 }, { "indicator": "http://122.234.28.114:34459/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-27 03:18:26 UTC", "last_seen": "2026-03-27 03:18:26 UTC", "sightings": 1 }, { "indicator": "https://svc4link.nexusharvest.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 03:13:07 UTC", "last_seen": "2026-03-27 03:13:07 UTC", "sightings": 1 }, { "indicator": "http://42.224.125.169:40599/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-27 03:12:07 UTC", "last_seen": "2026-03-27 03:12:07 UTC", "sightings": 1 }, { "indicator": "https://svc3user.nexusharvest.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 03:07:06 UTC", "last_seen": "2026-03-27 03:07:06 UTC", "sightings": 1 }, { "indicator": "http://116.139.33.154:47075/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 03:06:18 UTC", "last_seen": "2026-03-27 03:06:18 UTC", "sightings": 1 }, { "indicator": "http://192.177.26.196/files/7281753217/qrTFBw7.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey", "rustystealer" ], "first_seen": "2026-03-27 03:02:08 UTC", "last_seen": "2026-03-27 03:02:08 UTC", "sightings": 1 }, { "indicator": "http://192.177.26.196/files/8525074840/mdOjagm.bat", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey", "QuasarRAT" ], "first_seen": "2026-03-27 03:02:08 UTC", "last_seen": "2026-03-27 03:02:08 UTC", "sightings": 1 }, { "indicator": "http://37.78.77.106:33914/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-27 03:01:23 UTC", "last_seen": "2026-03-27 03:01:23 UTC", "sightings": 1 }, { "indicator": "http://122.234.28.114:34459/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-27 02:59:33 UTC", "last_seen": "2026-03-27 02:59:33 UTC", "sightings": 1 }, { "indicator": "https://svc2base.nexusharvest.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 02:59:06 UTC", "last_seen": "2026-03-27 02:59:06 UTC", "sightings": 1 }, { "indicator": "https://svc1infra.nexusharvest.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 02:56:10 UTC", "last_seen": "2026-03-27 02:56:10 UTC", "sightings": 1 }, { "indicator": "http://117.209.116.126:44313/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-27 02:52:07 UTC", "last_seen": "2026-03-27 02:52:07 UTC", "sightings": 1 }, { "indicator": "http://115.54.179.147:43498/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-27 02:47:06 UTC", "last_seen": "2026-03-27 02:47:06 UTC", "sightings": 1 }, { "indicator": "https://dev4work.vertexpatron.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 02:45:08 UTC", "last_seen": "2026-03-27 02:45:08 UTC", "sightings": 1 }, { "indicator": "http://192.177.26.196/files/8316621590/SUwg9A8.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-27 02:40:10 UTC", "last_seen": "2026-03-27 02:40:10 UTC", "sightings": 1 }, { "indicator": "https://dev3local.vertexpatron.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 02:37:06 UTC", "last_seen": "2026-03-27 02:37:06 UTC", "sightings": 1 }, { "indicator": "http://116.139.33.154:47075/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 02:35:28 UTC", "last_seen": "2026-03-27 02:35:28 UTC", "sightings": 1 }, { "indicator": "https://dev2power.vertexpatron.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 02:31:07 UTC", "last_seen": "2026-03-27 02:31:07 UTC", "sightings": 1 }, { "indicator": "http://192.177.26.196/files/8316621590/nWPc0gW.bat", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-27 02:29:05 UTC", "last_seen": "2026-03-27 02:29:05 UTC", "sightings": 1 }, { "indicator": "https://dev1proc.vertexpatron.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 02:25:08 UTC", "last_seen": "2026-03-27 02:25:08 UTC", "sightings": 1 }, { "indicator": "http://110.36.93.253:46882/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 02:21:16 UTC", "last_seen": "2026-03-27 02:21:16 UTC", "sightings": 1 }, { "indicator": "https://cl4link.catalystbloom.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 02:17:07 UTC", "last_seen": "2026-03-27 02:17:07 UTC", "sightings": 1 }, { "indicator": "https://cl3dev.catalystbloom.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 02:11:06 UTC", "last_seen": "2026-03-27 02:11:06 UTC", "sightings": 1 }, { "indicator": "https://cl2remote.catalystbloom.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 02:04:08 UTC", "last_seen": "2026-03-27 02:04:08 UTC", "sightings": 1 }, { "indicator": "http://192.177.26.196/files/8316621590/sQhzWPZ.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-03-27 02:02:08 UTC", "last_seen": "2026-03-27 02:02:08 UTC", "sightings": 1 }, { "indicator": "http://115.54.179.147:43498/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-27 02:02:07 UTC", "last_seen": "2026-03-27 02:02:07 UTC", "sightings": 1 }, { "indicator": "https://cl1store.catalystbloom.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 01:59:06 UTC", "last_seen": "2026-03-27 01:59:06 UTC", "sightings": 1 }, { "indicator": "http://117.146.92.46:43157/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-27 01:57:06 UTC", "last_seen": "2026-03-27 01:57:06 UTC", "sightings": 1 }, { "indicator": "https://ext4sync.vectorprosper.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 01:56:06 UTC", "last_seen": "2026-03-27 01:56:06 UTC", "sightings": 1 }, { "indicator": "http://61.137.134.30:57465/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-27 01:52:06 UTC", "last_seen": "2026-03-27 01:52:06 UTC", "sightings": 1 }, { "indicator": "https://ext3gate.vectorprosper.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 01:44:06 UTC", "last_seen": "2026-03-27 01:44:06 UTC", "sightings": 1 }, { "indicator": "http://222.127.75.70:44143/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-27 01:38:15 UTC", "last_seen": "2026-03-27 01:38:15 UTC", "sightings": 1 }, { "indicator": "https://ext2proc.vectorprosper.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 01:37:06 UTC", "last_seen": "2026-03-27 01:37:06 UTC", "sightings": 1 }, { "indicator": "https://ext1meta.vectorprosper.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 01:31:10 UTC", "last_seen": "2026-03-27 01:31:10 UTC", "sightings": 1 }, { "indicator": "https://svc4static.fusionharvest.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 01:25:08 UTC", "last_seen": "2026-03-27 01:25:08 UTC", "sightings": 1 }, { "indicator": "http://117.146.92.46:43157/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-27 01:22:06 UTC", "last_seen": "2026-03-27 01:22:06 UTC", "sightings": 1 }, { "indicator": "http://115.50.134.153:33703/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 01:19:09 UTC", "last_seen": "2026-03-27 01:19:09 UTC", "sightings": 1 }, { "indicator": "https://svc3edge.fusionharvest.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 01:18:08 UTC", "last_seen": "2026-03-27 01:18:08 UTC", "sightings": 1 }, { "indicator": "https://svc2data.fusionharvest.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 01:12:09 UTC", "last_seen": "2026-03-27 01:12:09 UTC", "sightings": 1 }, { "indicator": "http://222.127.75.70:44143/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-27 01:10:29 UTC", "last_seen": "2026-03-27 01:10:29 UTC", "sightings": 1 }, { "indicator": "https://svc1sync.fusionharvest.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 01:09:07 UTC", "last_seen": "2026-03-27 01:09:07 UTC", "sightings": 1 }, { "indicator": "http://123.188.72.7:59592/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 01:05:12 UTC", "last_seen": "2026-03-27 01:05:12 UTC", "sightings": 1 }, { "indicator": "http://182.113.35.193:36305/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 01:02:15 UTC", "last_seen": "2026-03-27 01:02:15 UTC", "sightings": 1 }, { "indicator": "http://89.45.6.18/oPvjr94jfe/Plugins/cred64.dll", "indicator_type": "url", "source": "URLhaus", "tags": [ "1456c6", "Amadey", "cred64.dll", "dropped-by-amadey", "plugin" ], "first_seen": "2026-03-27 01:01:09 UTC", "last_seen": "2026-03-27 01:01:09 UTC", "sightings": 1 }, { "indicator": "http://89.45.6.18/oPvjr94jfe/Plugins/cred.dll", "indicator_type": "url", "source": "URLhaus", "tags": [ "1456c6", "Amadey", "cred.dll", "dropped-by-amadey", "plugin" ], "first_seen": "2026-03-27 01:01:08 UTC", "last_seen": "2026-03-27 01:01:08 UTC", "sightings": 1 }, { "indicator": "http://112.248.80.112:56411/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 00:59:37 UTC", "last_seen": "2026-03-27 00:59:37 UTC", "sightings": 1 }, { "indicator": "https://ext4point.libertystage.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 00:58:06 UTC", "last_seen": "2026-03-27 00:58:06 UTC", "sightings": 1 }, { "indicator": "http://192.177.26.196/files/8317177049/7tdJ9Hz.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543", "gcleaner" ], "first_seen": "2026-03-27 00:56:06 UTC", "last_seen": "2026-03-27 00:56:06 UTC", "sightings": 1 }, { "indicator": "http://192.177.26.196/files/7782139129/S6xWuZ1.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543", "Vidar" ], "first_seen": "2026-03-27 00:55:11 UTC", "last_seen": "2026-03-27 00:55:11 UTC", "sightings": 1 }, { "indicator": "http://192.177.26.196/files/7341834371/BgAtGH0.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey", "Stealc" ], "first_seen": "2026-03-27 00:55:08 UTC", "last_seen": "2026-03-27 00:55:08 UTC", "sightings": 1 }, { "indicator": "http://192.177.26.196/files/gop/random.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey", "Vidar" ], "first_seen": "2026-03-27 00:54:06 UTC", "last_seen": "2026-03-27 00:54:06 UTC", "sightings": 1 }, { "indicator": "http://192.177.26.196/files/6334661508/lzyfkOs.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "AsyncRAT", "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-03-27 00:54:06 UTC", "last_seen": "2026-03-27 00:54:06 UTC", "sightings": 1 }, { "indicator": "http://192.177.26.196/files/7281753217/2zVJACJ.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey", "rustystealer" ], "first_seen": "2026-03-27 00:53:08 UTC", "last_seen": "2026-03-27 00:53:08 UTC", "sightings": 1 }, { "indicator": "http://115.50.134.153:33703/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 00:52:11 UTC", "last_seen": "2026-03-27 00:52:11 UTC", "sightings": 1 }, { "indicator": "http://192.177.26.196/files/5900855435/eNLe4nm.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey", "Vidar" ], "first_seen": "2026-03-27 00:52:07 UTC", "last_seen": "2026-03-27 00:52:07 UTC", "sightings": 1 }, { "indicator": "http://192.177.26.196/files/8434554557/X8cqVrA.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543", "rustystealer" ], "first_seen": "2026-03-27 00:52:07 UTC", "last_seen": "2026-03-27 00:52:07 UTC", "sightings": 1 }, { "indicator": "https://ext3data.libertystage.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 00:52:07 UTC", "last_seen": "2026-03-27 00:52:07 UTC", "sightings": 1 }, { "indicator": "http://192.177.26.196/files/6608710704/ltjL6cP.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey", "Vidar" ], "first_seen": "2026-03-27 00:52:06 UTC", "last_seen": "2026-03-27 00:52:06 UTC", "sightings": 1 }, { "indicator": "http://192.177.26.196/files/1032264266/qvQb5og.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "CoinMiner", "dropped-by-amadey", "fbf543", "rustystealer" ], "first_seen": "2026-03-27 00:51:06 UTC", "last_seen": "2026-03-27 00:51:06 UTC", "sightings": 1 }, { "indicator": "http://61.52.158.171:48518/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 00:49:10 UTC", "last_seen": "2026-03-27 00:49:10 UTC", "sightings": 1 }, { "indicator": "https://ext2proxy.libertystage.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 00:46:08 UTC", "last_seen": "2026-03-27 00:46:08 UTC", "sightings": 1 }, { "indicator": "http://115.61.240.51:35391/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 00:44:16 UTC", "last_seen": "2026-03-27 00:44:16 UTC", "sightings": 1 }, { "indicator": "http://125.41.102.187:42056/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-27 00:42:08 UTC", "last_seen": "2026-03-27 00:42:08 UTC", "sightings": 1 }, { "indicator": "http://123.188.72.7:59592/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 00:39:17 UTC", "last_seen": "2026-03-27 00:39:17 UTC", "sightings": 1 }, { "indicator": "https://ext1infra.libertystage.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 00:39:08 UTC", "last_seen": "2026-03-27 00:39:08 UTC", "sightings": 1 }, { "indicator": "http://27.189.28.125:43841/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-27 00:38:18 UTC", "last_seen": "2026-03-27 00:38:18 UTC", "sightings": 1 }, { "indicator": "http://182.114.193.114:59129/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 00:37:07 UTC", "last_seen": "2026-03-27 00:37:07 UTC", "sightings": 1 }, { "indicator": "http://61.52.158.171:48518/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 00:33:18 UTC", "last_seen": "2026-03-27 00:33:18 UTC", "sightings": 1 }, { "indicator": "https://svc4sat.beakprosperity.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 00:32:07 UTC", "last_seen": "2026-03-27 00:32:07 UTC", "sightings": 1 }, { "indicator": "http://222.140.158.46:57493/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 00:30:15 UTC", "last_seen": "2026-03-27 00:30:15 UTC", "sightings": 1 }, { "indicator": "https://svc3core.beakprosperity.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 00:26:07 UTC", "last_seen": "2026-03-27 00:26:07 UTC", "sightings": 1 }, { "indicator": "http://115.61.240.51:35391/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 00:24:17 UTC", "last_seen": "2026-03-27 00:24:17 UTC", "sightings": 1 }, { "indicator": "http://42.236.150.45:33715/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 00:21:17 UTC", "last_seen": "2026-03-27 00:21:17 UTC", "sightings": 1 }, { "indicator": "http://222.140.158.46:57493/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 00:20:20 UTC", "last_seen": "2026-03-27 00:20:20 UTC", "sightings": 1 }, { "indicator": "http://39.88.131.13:47739/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 00:19:14 UTC", "last_seen": "2026-03-27 00:19:14 UTC", "sightings": 1 }, { "indicator": "http://182.114.193.114:59129/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 00:18:18 UTC", "last_seen": "2026-03-27 00:18:18 UTC", "sightings": 1 }, { "indicator": "https://svc2steel.beakprosperity.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 00:18:06 UTC", "last_seen": "2026-03-27 00:18:06 UTC", "sightings": 1 }, { "indicator": "http://115.49.30.85:32964/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 00:11:16 UTC", "last_seen": "2026-03-27 00:11:16 UTC", "sightings": 1 }, { "indicator": "https://svc1proc.beakprosperity.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 00:11:05 UTC", "last_seen": "2026-03-27 00:11:05 UTC", "sightings": 1 }, { "indicator": "http://117.209.15.204:36173/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 00:08:15 UTC", "last_seen": "2026-03-27 00:08:15 UTC", "sightings": 1 }, { "indicator": "http://42.236.150.45:33715/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 00:05:18 UTC", "last_seen": "2026-03-27 00:05:18 UTC", "sightings": 1 }, { "indicator": "https://dev4space.patronageshelk.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 00:05:09 UTC", "last_seen": "2026-03-27 00:05:09 UTC", "sightings": 1 }, { "indicator": "http://221.15.21.8:38807/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-27 00:00:16 UTC", "last_seen": "2026-03-27 00:00:16 UTC", "sightings": 1 }, { "indicator": "https://dev3field.patronageshelk.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-27 00:00:13 UTC", "last_seen": "2026-03-27 00:00:13 UTC", "sightings": 1 }, { "indicator": "http://110.36.76.24:47010/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 23:58:19 UTC", "last_seen": "2026-03-26 23:58:19 UTC", "sightings": 1 }, { "indicator": "http://59.91.252.88:50461/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-26 23:57:07 UTC", "last_seen": "2026-03-26 23:57:07 UTC", "sightings": 1 }, { "indicator": "http://59.91.252.88:50461/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-26 23:57:07 UTC", "last_seen": "2026-03-26 23:57:07 UTC", "sightings": 1 }, { "indicator": "http://182.114.34.240:52094/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 23:56:18 UTC", "last_seen": "2026-03-26 23:56:18 UTC", "sightings": 1 }, { "indicator": "http://39.88.131.13:47739/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 23:56:13 UTC", "last_seen": "2026-03-26 23:56:13 UTC", "sightings": 1 }, { "indicator": "https://dev2outer.patronageshelk.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 23:56:06 UTC", "last_seen": "2026-03-26 23:56:06 UTC", "sightings": 1 }, { "indicator": "http://192.177.26.196/files/rdx/random.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543", "Vidar" ], "first_seen": "2026-03-26 23:56:05 UTC", "last_seen": "2026-03-26 23:56:05 UTC", "sightings": 1 }, { "indicator": "http://110.37.31.174:50391/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-26 23:52:05 UTC", "last_seen": "2026-03-26 23:52:05 UTC", "sightings": 1 }, { "indicator": "http://61.53.74.47:44400/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 23:50:17 UTC", "last_seen": "2026-03-26 23:50:17 UTC", "sightings": 1 }, { "indicator": "https://dev1proc.patronageshelk.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 23:48:09 UTC", "last_seen": "2026-03-26 23:48:09 UTC", "sightings": 1 }, { "indicator": "http://36.64.184.26:42099/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-26 23:47:19 UTC", "last_seen": "2026-03-26 23:47:19 UTC", "sightings": 1 }, { "indicator": "https://cl4path.diversityvent.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 23:45:13 UTC", "last_seen": "2026-03-26 23:45:13 UTC", "sightings": 1 }, { "indicator": "http://178.163.34.244:26994/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-26 23:42:05 UTC", "last_seen": "2026-03-26 23:42:05 UTC", "sightings": 1 }, { "indicator": "http://117.209.15.204:36173/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 23:40:25 UTC", "last_seen": "2026-03-26 23:40:25 UTC", "sightings": 1 }, { "indicator": "https://cl3view.diversityvent.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 23:35:09 UTC", "last_seen": "2026-03-26 23:35:09 UTC", "sightings": 1 }, { "indicator": "http://115.49.30.85:32964/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 23:33:19 UTC", "last_seen": "2026-03-26 23:33:19 UTC", "sightings": 1 }, { "indicator": "http://115.62.24.29:38187/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-26 23:32:16 UTC", "last_seen": "2026-03-26 23:32:16 UTC", "sightings": 1 }, { "indicator": "https://cl2point.diversityvent.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 23:29:09 UTC", "last_seen": "2026-03-26 23:29:09 UTC", "sightings": 1 }, { "indicator": "http://110.37.31.174:50391/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-26 23:27:07 UTC", "last_seen": "2026-03-26 23:27:07 UTC", "sightings": 1 }, { "indicator": "https://cl1proc.diversityvent.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 23:24:07 UTC", "last_seen": "2026-03-26 23:24:07 UTC", "sightings": 1 }, { "indicator": "https://ext4view.usurylocomotive.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 23:19:07 UTC", "last_seen": "2026-03-26 23:19:07 UTC", "sightings": 1 }, { "indicator": "http://36.64.184.26:42099/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-26 23:15:20 UTC", "last_seen": "2026-03-26 23:15:20 UTC", "sightings": 1 }, { "indicator": "http://112.123.45.74:38722/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-26 23:13:25 UTC", "last_seen": "2026-03-26 23:13:25 UTC", "sightings": 1 }, { "indicator": "https://ext3ghost.usurylocomotive.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 23:13:08 UTC", "last_seen": "2026-03-26 23:13:08 UTC", "sightings": 1 }, { "indicator": "http://110.37.66.198:38354/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 23:12:10 UTC", "last_seen": "2026-03-26 23:12:10 UTC", "sightings": 1 }, { "indicator": "http://178.163.34.244:26994/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-26 23:12:04 UTC", "last_seen": "2026-03-26 23:12:04 UTC", "sightings": 1 }, { "indicator": "http://123.14.89.157:53887/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 23:09:17 UTC", "last_seen": "2026-03-26 23:09:17 UTC", "sightings": 1 }, { "indicator": "https://ext2core.usurylocomotive.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 23:07:07 UTC", "last_seen": "2026-03-26 23:07:07 UTC", "sightings": 1 }, { "indicator": "https://ext1proc.usurylocomotive.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 23:02:08 UTC", "last_seen": "2026-03-26 23:02:08 UTC", "sightings": 1 }, { "indicator": "http://78.153.140.16/re.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "kinsing", "sh", "ua-wget" ], "first_seen": "2026-03-26 22:59:15 UTC", "last_seen": "2026-03-26 22:59:15 UTC", "sightings": 1 }, { "indicator": "http://110.37.52.81:48178/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 22:59:15 UTC", "last_seen": "2026-03-26 22:59:15 UTC", "sightings": 1 }, { "indicator": "https://svc4link.secretgeneral.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 22:56:06 UTC", "last_seen": "2026-03-26 22:56:06 UTC", "sightings": 1 }, { "indicator": "http://80.64.16.241/acb.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "kinsing", "sh", "ua-wget" ], "first_seen": "2026-03-26 22:51:20 UTC", "last_seen": "2026-03-26 22:51:20 UTC", "sightings": 1 }, { "indicator": "http://80.64.16.241/mt.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-26 22:51:19 UTC", "last_seen": "2026-03-26 22:51:19 UTC", "sightings": 1 }, { "indicator": "https://svc3user.secretgeneral.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 22:50:13 UTC", "last_seen": "2026-03-26 22:50:13 UTC", "sightings": 1 }, { "indicator": "http://175.146.87.106:50595/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 22:50:10 UTC", "last_seen": "2026-03-26 22:50:10 UTC", "sightings": 1 }, { "indicator": "http://78.153.140.16/libsystem.so", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "kinsing", "ua-wget" ], "first_seen": "2026-03-26 22:50:09 UTC", "last_seen": "2026-03-26 22:50:09 UTC", "sightings": 1 }, { "indicator": "http://78.153.140.16/curl-amd64", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "kinsing", "ua-wget" ], "first_seen": "2026-03-26 22:50:09 UTC", "last_seen": "2026-03-26 22:50:09 UTC", "sightings": 1 }, { "indicator": "http://78.153.140.16/curl-aarch64", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "kinsing", "ua-wget" ], "first_seen": "2026-03-26 22:50:09 UTC", "last_seen": "2026-03-26 22:50:09 UTC", "sightings": 1 }, { "indicator": "http://78.153.140.16/acb.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "kinsing", "sh", "ua-wget" ], "first_seen": "2026-03-26 22:49:14 UTC", "last_seen": "2026-03-26 22:49:14 UTC", "sightings": 1 }, { "indicator": "http://78.153.140.16/mt.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "kinsing", "sh", "ua-wget" ], "first_seen": "2026-03-26 22:49:14 UTC", "last_seen": "2026-03-26 22:49:14 UTC", "sightings": 1 }, { "indicator": "http://78.153.140.16/acb.xml", "indicator_type": "url", "source": "URLhaus", "tags": [ "kinsing", "sh", "ua-wget", "xml" ], "first_seen": "2026-03-26 22:49:13 UTC", "last_seen": "2026-03-26 22:49:13 UTC", "sightings": 1 }, { "indicator": "https://svc2base.secretgeneral.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 22:46:11 UTC", "last_seen": "2026-03-26 22:46:11 UTC", "sightings": 1 }, { "indicator": "https://svc1infra.secretgeneral.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 22:43:11 UTC", "last_seen": "2026-03-26 22:43:11 UTC", "sightings": 1 }, { "indicator": "http://207.231.107.52/x86", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "x86-32" ], "first_seen": "2026-03-26 22:41:20 UTC", "last_seen": "2026-03-26 22:41:20 UTC", "sightings": 1 }, { "indicator": "http://110.37.52.81:48178/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 22:36:08 UTC", "last_seen": "2026-03-26 22:36:08 UTC", "sightings": 1 }, { "indicator": "http://112.123.45.74:38722/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-26 22:35:38 UTC", "last_seen": "2026-03-26 22:35:38 UTC", "sightings": 1 }, { "indicator": "https://dev4work.investonerous.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 22:34:11 UTC", "last_seen": "2026-03-26 22:34:11 UTC", "sightings": 1 }, { "indicator": "https://dev3local.investonerous.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 22:28:06 UTC", "last_seen": "2026-03-26 22:28:06 UTC", "sightings": 1 }, { "indicator": "https://dev2power.investonerous.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 22:22:09 UTC", "last_seen": "2026-03-26 22:22:09 UTC", "sightings": 1 }, { "indicator": "http://117.223.142.28:49820/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-26 22:22:07 UTC", "last_seen": "2026-03-26 22:22:07 UTC", "sightings": 1 }, { "indicator": "http://117.209.114.142:59889/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 22:20:25 UTC", "last_seen": "2026-03-26 22:20:25 UTC", "sightings": 1 }, { "indicator": "http://59.88.52.40:34442/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 22:18:15 UTC", "last_seen": "2026-03-26 22:18:15 UTC", "sightings": 1 }, { "indicator": "https://dev1proc.investonerous.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 22:16:08 UTC", "last_seen": "2026-03-26 22:16:08 UTC", "sightings": 1 }, { "indicator": "https://cl4link.cruciferdiesel.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 22:13:07 UTC", "last_seen": "2026-03-26 22:13:07 UTC", "sightings": 1 }, { "indicator": "https://cl3dev.cruciferdiesel.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 22:10:14 UTC", "last_seen": "2026-03-26 22:10:14 UTC", "sightings": 1 }, { "indicator": "https://cl2remote.cruciferdiesel.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 22:00:09 UTC", "last_seen": "2026-03-26 22:00:09 UTC", "sightings": 1 }, { "indicator": "https://cl1store.cruciferdiesel.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 21:54:08 UTC", "last_seen": "2026-03-26 21:54:08 UTC", "sightings": 1 }, { "indicator": "http://59.88.52.40:34442/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 21:52:20 UTC", "last_seen": "2026-03-26 21:52:20 UTC", "sightings": 1 }, { "indicator": "http://117.223.142.28:49820/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-26 21:52:10 UTC", "last_seen": "2026-03-26 21:52:10 UTC", "sightings": 1 }, { "indicator": "https://ext4sync.angularsilic.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 21:51:09 UTC", "last_seen": "2026-03-26 21:51:09 UTC", "sightings": 1 }, { "indicator": "https://ext3gate.angularsilic.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 21:47:08 UTC", "last_seen": "2026-03-26 21:47:08 UTC", "sightings": 1 }, { "indicator": "https://ext2proc.angularsilic.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 21:38:09 UTC", "last_seen": "2026-03-26 21:38:09 UTC", "sightings": 1 }, { "indicator": "http://46.163.189.194:49143/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-26 21:37:05 UTC", "last_seen": "2026-03-26 21:37:05 UTC", "sightings": 1 }, { "indicator": "http://110.37.18.21:41265/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 21:33:24 UTC", "last_seen": "2026-03-26 21:33:24 UTC", "sightings": 1 }, { "indicator": "https://ext1meta.angularsilic.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 21:32:09 UTC", "last_seen": "2026-03-26 21:32:09 UTC", "sightings": 1 }, { "indicator": "https://svc4static.donkeyemploy.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 21:27:09 UTC", "last_seen": "2026-03-26 21:27:09 UTC", "sightings": 1 }, { "indicator": "http://117.26.226.41:43258/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-26 21:26:22 UTC", "last_seen": "2026-03-26 21:26:22 UTC", "sightings": 1 }, { "indicator": "http://110.37.18.21:41265/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 21:26:20 UTC", "last_seen": "2026-03-26 21:26:20 UTC", "sightings": 1 }, { "indicator": "https://svc3edge.donkeyemploy.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 21:21:07 UTC", "last_seen": "2026-03-26 21:21:07 UTC", "sightings": 1 }, { "indicator": "https://svc2data.donkeyemploy.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 21:16:08 UTC", "last_seen": "2026-03-26 21:16:08 UTC", "sightings": 1 }, { "indicator": "http://120.28.219.64:52993/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-26 21:12:07 UTC", "last_seen": "2026-03-26 21:12:07 UTC", "sightings": 1 }, { "indicator": "http://27.193.157.41:45884/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 21:09:25 UTC", "last_seen": "2026-03-26 21:09:25 UTC", "sightings": 1 }, { "indicator": "http://192.177.26.196/files/5848981546/hRw1yLa.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey", "Smoke Loader" ], "first_seen": "2026-03-26 21:09:09 UTC", "last_seen": "2026-03-26 21:09:09 UTC", "sightings": 1 }, { "indicator": "https://svc1sync.donkeyemploy.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 21:09:08 UTC", "last_seen": "2026-03-26 21:09:08 UTC", "sightings": 1 }, { "indicator": "http://115.55.222.214:54750/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 20:53:17 UTC", "last_seen": "2026-03-26 20:53:17 UTC", "sightings": 1 }, { "indicator": "http://60.20.51.232:42223/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-26 20:43:20 UTC", "last_seen": "2026-03-26 20:43:20 UTC", "sightings": 1 }, { "indicator": "http://120.28.219.64:52993/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-26 20:42:06 UTC", "last_seen": "2026-03-26 20:42:06 UTC", "sightings": 1 }, { "indicator": "https://ext4point.bluepointterminal.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 20:37:09 UTC", "last_seen": "2026-03-26 20:37:09 UTC", "sightings": 1 }, { "indicator": "http://59.88.4.199:58139/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 20:36:17 UTC", "last_seen": "2026-03-26 20:36:17 UTC", "sightings": 1 }, { "indicator": "https://ext3data.bluepointterminal.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 20:32:07 UTC", "last_seen": "2026-03-26 20:32:07 UTC", "sightings": 1 }, { "indicator": "http://27.193.157.41:45884/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 20:31:12 UTC", "last_seen": "2026-03-26 20:31:12 UTC", "sightings": 1 }, { "indicator": "https://ext2proxy.bluepointterminal.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 20:25:09 UTC", "last_seen": "2026-03-26 20:25:09 UTC", "sightings": 1 }, { "indicator": "https://ext1infra.bluepointterminal.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 20:19:13 UTC", "last_seen": "2026-03-26 20:19:13 UTC", "sightings": 1 }, { "indicator": "http://117.209.95.226:54706/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 20:18:15 UTC", "last_seen": "2026-03-26 20:18:15 UTC", "sightings": 1 }, { "indicator": "http://59.88.4.199:58139/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 20:16:10 UTC", "last_seen": "2026-03-26 20:16:10 UTC", "sightings": 1 }, { "indicator": "https://svc4sat.darkcloudgateway.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 20:15:07 UTC", "last_seen": "2026-03-26 20:15:07 UTC", "sightings": 1 }, { "indicator": "https://svc3core.darkcloudgateway.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 20:09:07 UTC", "last_seen": "2026-03-26 20:09:07 UTC", "sightings": 1 }, { "indicator": "https://svc2steel.darkcloudgateway.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 20:03:07 UTC", "last_seen": "2026-03-26 20:03:07 UTC", "sightings": 1 }, { "indicator": "https://svc1proc.darkcloudgateway.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 19:58:07 UTC", "last_seen": "2026-03-26 19:58:07 UTC", "sightings": 1 }, { "indicator": "http://223.151.251.178:37348/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-26 19:56:19 UTC", "last_seen": "2026-03-26 19:56:19 UTC", "sightings": 1 }, { "indicator": "https://dev4space.ironrootprocessor.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 19:53:06 UTC", "last_seen": "2026-03-26 19:53:06 UTC", "sightings": 1 }, { "indicator": "https://dev3field.ironrootprocessor.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 19:47:06 UTC", "last_seen": "2026-03-26 19:47:06 UTC", "sightings": 1 }, { "indicator": "http://110.39.235.153:48085/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 19:44:16 UTC", "last_seen": "2026-03-26 19:44:16 UTC", "sightings": 1 }, { "indicator": "http://110.39.235.153:48085/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 19:41:17 UTC", "last_seen": "2026-03-26 19:41:17 UTC", "sightings": 1 }, { "indicator": "https://dev2outer.ironrootprocessor.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 19:41:10 UTC", "last_seen": "2026-03-26 19:41:10 UTC", "sightings": 1 }, { "indicator": "http://31.57.201.154/arm4", "indicator_type": "url", "source": "URLhaus", "tags": [ "arm", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-26 19:40:26 UTC", "last_seen": "2026-03-26 19:40:26 UTC", "sightings": 1 }, { "indicator": "http://31.57.201.154/mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mips", "mirai", "ua-wget" ], "first_seen": "2026-03-26 19:39:15 UTC", "last_seen": "2026-03-26 19:39:15 UTC", "sightings": 1 }, { "indicator": "http://31.57.201.154/arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "arm", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-26 19:38:17 UTC", "last_seen": "2026-03-26 19:38:17 UTC", "sightings": 1 }, { "indicator": "http://31.57.201.154/mpsl", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mips", "mirai", "ua-wget" ], "first_seen": "2026-03-26 19:38:12 UTC", "last_seen": "2026-03-26 19:38:12 UTC", "sightings": 1 }, { "indicator": "http://31.57.201.154/arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "arm", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-26 19:38:12 UTC", "last_seen": "2026-03-26 19:38:12 UTC", "sightings": 1 }, { "indicator": "http://31.57.201.154/massload", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai", "sh", "ua-wget" ], "first_seen": "2026-03-26 19:38:12 UTC", "last_seen": "2026-03-26 19:38:12 UTC", "sightings": 1 }, { "indicator": "https://dev1proc.ironrootprocessor.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 19:35:10 UTC", "last_seen": "2026-03-26 19:35:10 UTC", "sightings": 1 }, { "indicator": "https://cl4path.wildbranchcluster.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 19:29:06 UTC", "last_seen": "2026-03-26 19:29:06 UTC", "sightings": 1 }, { "indicator": "https://cl3view.wildbranchcluster.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 19:24:07 UTC", "last_seen": "2026-03-26 19:24:07 UTC", "sightings": 1 }, { "indicator": "https://cl2point.wildbranchcluster.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 19:18:11 UTC", "last_seen": "2026-03-26 19:18:11 UTC", "sightings": 1 }, { "indicator": "https://cl1proc.wildbranchcluster.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 19:14:08 UTC", "last_seen": "2026-03-26 19:14:08 UTC", "sightings": 1 }, { "indicator": "http://115.58.170.232:44422/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 19:07:17 UTC", "last_seen": "2026-03-26 19:07:17 UTC", "sightings": 1 }, { "indicator": "https://ext4view.coldstonemetrics.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 19:07:12 UTC", "last_seen": "2026-03-26 19:07:12 UTC", "sightings": 1 }, { "indicator": "http://59.95.91.84:41368/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-26 19:02:07 UTC", "last_seen": "2026-03-26 19:02:07 UTC", "sightings": 1 }, { "indicator": "https://ext3ghost.coldstonemetrics.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 19:02:07 UTC", "last_seen": "2026-03-26 19:02:07 UTC", "sightings": 1 }, { "indicator": "https://ext2core.coldstonemetrics.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 18:56:07 UTC", "last_seen": "2026-03-26 18:56:07 UTC", "sightings": 1 }, { "indicator": "http://115.49.113.83:52121/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-26 18:54:09 UTC", "last_seen": "2026-03-26 18:54:09 UTC", "sightings": 1 }, { "indicator": "https://ext1proc.coldstonemetrics.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 18:50:12 UTC", "last_seen": "2026-03-26 18:50:12 UTC", "sightings": 1 }, { "indicator": "http://27.215.115.228:49246/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-26 18:47:05 UTC", "last_seen": "2026-03-26 18:47:05 UTC", "sightings": 1 }, { "indicator": "http://60.162.220.217:59146/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-26 18:46:14 UTC", "last_seen": "2026-03-26 18:46:14 UTC", "sightings": 1 }, { "indicator": "https://svc4link.whitetideinterface.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 18:46:08 UTC", "last_seen": "2026-03-26 18:46:08 UTC", "sightings": 1 }, { "indicator": "https://svc3user.whitetideinterface.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 18:43:08 UTC", "last_seen": "2026-03-26 18:43:08 UTC", "sightings": 1 }, { "indicator": "http://42.242.128.139:50917/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-26 18:42:19 UTC", "last_seen": "2026-03-26 18:42:19 UTC", "sightings": 1 }, { "indicator": "http://59.95.91.84:41368/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 18:34:10 UTC", "last_seen": "2026-03-26 18:34:10 UTC", "sightings": 1 }, { "indicator": "http://182.46.32.21:50607/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-26 18:34:09 UTC", "last_seen": "2026-03-26 18:34:09 UTC", "sightings": 1 }, { "indicator": "https://svc2base.whitetideinterface.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 18:33:13 UTC", "last_seen": "2026-03-26 18:33:13 UTC", "sightings": 1 }, { "indicator": "http://217.208.164.149:45464/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 18:32:20 UTC", "last_seen": "2026-03-26 18:32:20 UTC", "sightings": 1 }, { "indicator": "http://91.143.172.196:59526/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 18:32:19 UTC", "last_seen": "2026-03-26 18:32:19 UTC", "sightings": 1 }, { "indicator": "https://svc1infra.whitetideinterface.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 18:27:06 UTC", "last_seen": "2026-03-26 18:27:06 UTC", "sightings": 1 }, { "indicator": "http://115.49.113.83:52121/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-26 18:26:11 UTC", "last_seen": "2026-03-26 18:26:11 UTC", "sightings": 1 }, { "indicator": "https://dev4work.blackpeakstorage.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 18:22:09 UTC", "last_seen": "2026-03-26 18:22:09 UTC", "sightings": 1 }, { "indicator": "http://27.215.115.228:49246/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 18:22:07 UTC", "last_seen": "2026-03-26 18:22:07 UTC", "sightings": 1 }, { "indicator": "http://42.5.9.85:56402/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-26 18:22:06 UTC", "last_seen": "2026-03-26 18:22:06 UTC", "sightings": 1 }, { "indicator": "http://60.162.220.217:59146/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-26 18:17:19 UTC", "last_seen": "2026-03-26 18:17:19 UTC", "sightings": 1 }, { "indicator": "https://dev3local.blackpeakstorage.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 18:17:08 UTC", "last_seen": "2026-03-26 18:17:08 UTC", "sightings": 1 }, { "indicator": "http://196.191.231.12:51517/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-26 18:12:05 UTC", "last_seen": "2026-03-26 18:12:05 UTC", "sightings": 1 }, { "indicator": "https://dev2power.blackpeakstorage.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 18:11:08 UTC", "last_seen": "2026-03-26 18:11:08 UTC", "sightings": 1 }, { "indicator": "http://110.36.76.249:38265/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-26 18:07:05 UTC", "last_seen": "2026-03-26 18:07:05 UTC", "sightings": 1 }, { "indicator": "http://182.46.32.21:50607/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-26 18:06:26 UTC", "last_seen": "2026-03-26 18:06:26 UTC", "sightings": 1 }, { "indicator": "https://dev1proc.blackpeakstorage.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 18:05:08 UTC", "last_seen": "2026-03-26 18:05:08 UTC", "sightings": 1 }, { "indicator": "https://cl4link.silverstreambuffer.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 17:59:07 UTC", "last_seen": "2026-03-26 17:59:07 UTC", "sightings": 1 }, { "indicator": "http://114.219.156.119:58417/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-26 17:57:08 UTC", "last_seen": "2026-03-26 17:57:08 UTC", "sightings": 1 }, { "indicator": "http://42.5.9.85:56402/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-26 17:57:06 UTC", "last_seen": "2026-03-26 17:57:06 UTC", "sightings": 1 }, { "indicator": "http://59.182.76.26:41892/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 17:55:09 UTC", "last_seen": "2026-03-26 17:55:09 UTC", "sightings": 1 }, { "indicator": "https://cl3dev.silverstreambuffer.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 17:54:09 UTC", "last_seen": "2026-03-26 17:54:09 UTC", "sightings": 1 }, { "indicator": "https://cl2remote.silverstreambuffer.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 17:49:07 UTC", "last_seen": "2026-03-26 17:49:07 UTC", "sightings": 1 }, { "indicator": "http://61.53.153.6:44853/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 17:47:17 UTC", "last_seen": "2026-03-26 17:47:17 UTC", "sightings": 1 }, { "indicator": "http://110.36.76.249:38265/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-26 17:47:06 UTC", "last_seen": "2026-03-26 17:47:06 UTC", "sightings": 1 }, { "indicator": "http://223.105.50.190:44266/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 17:45:08 UTC", "last_seen": "2026-03-26 17:45:08 UTC", "sightings": 1 }, { "indicator": "https://cl1store.silverstreambuffer.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 17:44:06 UTC", "last_seen": "2026-03-26 17:44:06 UTC", "sightings": 1 }, { "indicator": "http://115.54.165.148:33992/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 17:42:07 UTC", "last_seen": "2026-03-26 17:42:07 UTC", "sightings": 1 }, { "indicator": "http://119.187.137.161:36957/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 17:38:17 UTC", "last_seen": "2026-03-26 17:38:17 UTC", "sightings": 1 }, { "indicator": "https://ext4sync.goldenridgesystem.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 17:38:08 UTC", "last_seen": "2026-03-26 17:38:08 UTC", "sightings": 1 }, { "indicator": "http://91.143.172.196:59526/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 17:35:17 UTC", "last_seen": "2026-03-26 17:35:17 UTC", "sightings": 1 }, { "indicator": "https://ext3gate.goldenridgesystem.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 17:33:08 UTC", "last_seen": "2026-03-26 17:33:08 UTC", "sightings": 1 }, { "indicator": "http://114.219.156.119:58417/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-26 17:30:24 UTC", "last_seen": "2026-03-26 17:30:24 UTC", "sightings": 1 }, { "indicator": "https://ext2proc.goldenridgesystem.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 17:30:09 UTC", "last_seen": "2026-03-26 17:30:09 UTC", "sightings": 1 }, { "indicator": "http://110.37.100.152:43365/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 17:28:18 UTC", "last_seen": "2026-03-26 17:28:18 UTC", "sightings": 1 }, { "indicator": "https://ext1meta.goldenridgesystem.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 17:23:08 UTC", "last_seen": "2026-03-26 17:23:08 UTC", "sightings": 1 }, { "indicator": "http://115.48.238.231:59807/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 17:21:15 UTC", "last_seen": "2026-03-26 17:21:15 UTC", "sightings": 1 }, { "indicator": "https://svc4static.frozenleafnetwork.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 17:19:08 UTC", "last_seen": "2026-03-26 17:19:08 UTC", "sightings": 1 }, { "indicator": "http://42.53.123.47:42748/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 17:18:18 UTC", "last_seen": "2026-03-26 17:18:18 UTC", "sightings": 1 }, { "indicator": "http://182.126.124.4:47100/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 17:17:17 UTC", "last_seen": "2026-03-26 17:17:17 UTC", "sightings": 1 }, { "indicator": "https://svc3edge.frozenleafnetwork.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 17:12:07 UTC", "last_seen": "2026-03-26 17:12:07 UTC", "sightings": 1 }, { "indicator": "https://svc2data.frozenleafnetwork.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 17:08:06 UTC", "last_seen": "2026-03-26 17:08:06 UTC", "sightings": 1 }, { "indicator": "http://115.48.238.231:59807/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 17:06:17 UTC", "last_seen": "2026-03-26 17:06:17 UTC", "sightings": 1 }, { "indicator": "http://59.182.76.26:41892/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-26 17:02:07 UTC", "last_seen": "2026-03-26 17:02:07 UTC", "sightings": 1 }, { "indicator": "http://42.230.47.89:57803/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 17:00:11 UTC", "last_seen": "2026-03-26 17:00:11 UTC", "sightings": 1 }, { "indicator": "http://42.230.47.89:57803/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 16:59:23 UTC", "last_seen": "2026-03-26 16:59:23 UTC", "sightings": 1 }, { "indicator": "https://svc1sync.frozenleafnetwork.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 16:58:08 UTC", "last_seen": "2026-03-26 16:58:08 UTC", "sightings": 1 }, { "indicator": "http://123.7.97.109:39586/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 16:40:18 UTC", "last_seen": "2026-03-26 16:40:18 UTC", "sightings": 1 }, { "indicator": "http://110.36.93.182:50982/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-26 16:37:05 UTC", "last_seen": "2026-03-26 16:37:05 UTC", "sightings": 1 }, { "indicator": "https://gu4r2-field.cl0verbyte.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 16:37:05 UTC", "last_seen": "2026-03-26 16:37:05 UTC", "sightings": 1 }, { "indicator": "https://geo-4mp.cl0verbyte.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 16:26:10 UTC", "last_seen": "2026-03-26 16:26:10 UTC", "sightings": 1 }, { "indicator": "http://222.142.248.205:50447/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 16:25:19 UTC", "last_seen": "2026-03-26 16:25:19 UTC", "sightings": 1 }, { "indicator": "https://tar973lz.cl0verbyte.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 16:22:09 UTC", "last_seen": "2026-03-26 16:22:09 UTC", "sightings": 1 }, { "indicator": "http://200.59.83.48:40804/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 16:19:23 UTC", "last_seen": "2026-03-26 16:19:23 UTC", "sightings": 1 }, { "indicator": "https://fjordhard.cl0verbyte.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 16:19:09 UTC", "last_seen": "2026-03-26 16:19:09 UTC", "sightings": 1 }, { "indicator": "http://144.31.221.96:8080/14882.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "GBR", "geofenced", "sh" ], "first_seen": "2026-03-26 16:18:07 UTC", "last_seen": "2026-03-26 16:18:07 UTC", "sightings": 1 }, { "indicator": "http://115.52.112.201:34830/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-26 16:17:08 UTC", "last_seen": "2026-03-26 16:17:08 UTC", "sightings": 1 }, { "indicator": "http://60.20.51.232:42223/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-26 16:12:08 UTC", "last_seen": "2026-03-26 16:12:08 UTC", "sightings": 1 }, { "indicator": "https://demandnod.cl0verbyte.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 16:09:21 UTC", "last_seen": "2026-03-26 16:09:21 UTC", "sightings": 1 }, { "indicator": "http://110.36.80.166:35860/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 16:07:12 UTC", "last_seen": "2026-03-26 16:07:12 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.80/db0fa4b8db0333367e9bda3ab68b8042.mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-26 16:06:20 UTC", "last_seen": "2026-03-26 16:06:20 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.80/db0fa4b8db0333367e9bda3ab68b8042.spc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-26 16:06:20 UTC", "last_seen": "2026-03-26 16:06:20 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.80/linux_mips64", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-26 16:06:20 UTC", "last_seen": "2026-03-26 16:06:20 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.80/db0fa4b8db0333367e9bda3ab68b8042.arm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-26 16:06:20 UTC", "last_seen": "2026-03-26 16:06:20 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.80/linux_ppc64", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-26 16:06:20 UTC", "last_seen": "2026-03-26 16:06:20 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.80/linux_mipsel_hardfloat", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-26 16:06:20 UTC", "last_seen": "2026-03-26 16:06:20 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.80/linux_mips_hardfloat", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-26 16:06:20 UTC", "last_seen": "2026-03-26 16:06:20 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.80/db0fa4b8db0333367e9bda3ab68b8042.sh4", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-26 16:06:20 UTC", "last_seen": "2026-03-26 16:06:20 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.80/db0fa4b8db0333367e9bda3ab68b8042.mpsl", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-26 16:06:20 UTC", "last_seen": "2026-03-26 16:06:20 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.80/db0fa4b8db0333367e9bda3ab68b8042.m68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-26 16:06:20 UTC", "last_seen": "2026-03-26 16:06:20 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.80/db0fa4b8db0333367e9bda3ab68b8042.arm", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-26 16:06:20 UTC", "last_seen": "2026-03-26 16:06:20 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.80/db0fa4b8db0333367e9bda3ab68b8042.x86", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-26 16:06:20 UTC", "last_seen": "2026-03-26 16:06:20 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.80/db0fa4b8db0333367e9bda3ab68b8042.arc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-26 16:06:20 UTC", "last_seen": "2026-03-26 16:06:20 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.80/linux_mipsel_softfloat", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-26 16:06:20 UTC", "last_seen": "2026-03-26 16:06:20 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.80/db0fa4b8db0333367e9bda3ab68b8042.i686", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-26 16:06:20 UTC", "last_seen": "2026-03-26 16:06:20 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.80/db0fa4b8db0333367e9bda3ab68b8042.x64", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-26 16:06:20 UTC", "last_seen": "2026-03-26 16:06:20 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.80/linux_mips64el", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-26 16:06:20 UTC", "last_seen": "2026-03-26 16:06:20 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.80/db0fa4b8db0333367e9bda3ab68b8042.arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-26 16:06:20 UTC", "last_seen": "2026-03-26 16:06:20 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.80/linux_mips_softfloat", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-26 16:06:20 UTC", "last_seen": "2026-03-26 16:06:20 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.80/db0fa4b8db0333367e9bda3ab68b8042.ppc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-26 16:06:20 UTC", "last_seen": "2026-03-26 16:06:20 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.80/db0fa4b8db0333367e9bda3ab68b8042.arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-26 16:06:20 UTC", "last_seen": "2026-03-26 16:06:20 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.80/linux_ppc64el", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-26 16:06:20 UTC", "last_seen": "2026-03-26 16:06:20 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.80/dd.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "sh", "ua-wget" ], "first_seen": "2026-03-26 16:04:22 UTC", "last_seen": "2026-03-26 16:04:22 UTC", "sightings": 1 }, { "indicator": "https://5p4r2-forge.foxglade.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 16:04:09 UTC", "last_seen": "2026-03-26 16:04:09 UTC", "sightings": 1 }, { "indicator": "https://op3n-bridge.foxglade.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 15:58:07 UTC", "last_seen": "2026-03-26 15:58:07 UTC", "sightings": 1 }, { "indicator": "https://uppxbwm.foxglade.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 15:52:08 UTC", "last_seen": "2026-03-26 15:52:08 UTC", "sightings": 1 }, { "indicator": "http://39.67.93.111:36043/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-26 15:47:19 UTC", "last_seen": "2026-03-26 15:47:19 UTC", "sightings": 1 }, { "indicator": "https://ekdt78.foxglade.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 15:47:09 UTC", "last_seen": "2026-03-26 15:47:09 UTC", "sightings": 1 }, { "indicator": "http://42.224.126.6:46918/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 15:46:16 UTC", "last_seen": "2026-03-26 15:46:16 UTC", "sightings": 1 }, { "indicator": "http://110.36.73.21:58510/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-26 15:43:05 UTC", "last_seen": "2026-03-26 15:43:05 UTC", "sightings": 1 }, { "indicator": "https://0islm.foxglade.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 15:42:07 UTC", "last_seen": "2026-03-26 15:42:07 UTC", "sightings": 1 }, { "indicator": "https://river-fle.bramblepath.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 15:40:09 UTC", "last_seen": "2026-03-26 15:40:09 UTC", "sightings": 1 }, { "indicator": "http://105.187.33.60:47957/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-26 15:39:21 UTC", "last_seen": "2026-03-26 15:39:21 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.15/hiddenbin/boatnet.arm", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-26 15:34:06 UTC", "last_seen": "2026-03-26 15:34:06 UTC", "sightings": 1 }, { "indicator": "http://167.148.183.75:8000/test.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "Sliver" ], "first_seen": "2026-03-26 15:33:38 UTC", "last_seen": "2026-03-26 15:33:38 UTC", "sightings": 1 }, { "indicator": "https://brsrys.com/Bin/ScreenConnect.ClientSetup.msi", "indicator_type": "url", "source": "URLhaus", "tags": [ "connectwise" ], "first_seen": "2026-03-26 15:33:37 UTC", "last_seen": "2026-03-26 15:33:37 UTC", "sightings": 1 }, { "indicator": "https://pub-43852e2f13f44540903efdf59f8a7582.r2.dev/ScreenConnect.ClientSetup.msi", "indicator_type": "url", "source": "URLhaus", "tags": [ "connectwise" ], "first_seen": "2026-03-26 15:33:36 UTC", "last_seen": "2026-03-26 15:33:36 UTC", "sightings": 1 }, { "indicator": "https://server.admirableskreen.top/Bin/ScreenConnect.ClientSetup.msi", "indicator_type": "url", "source": "URLhaus", "tags": [ "connectwise" ], "first_seen": "2026-03-26 15:33:36 UTC", "last_seen": "2026-03-26 15:33:36 UTC", "sightings": 1 }, { "indicator": "http://167.148.183.75:8000/setup.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "Sliver" ], "first_seen": "2026-03-26 15:33:34 UTC", "last_seen": "2026-03-26 15:33:34 UTC", "sightings": 1 }, { "indicator": "http://167.148.183.75:8000/sliver-client_linux-amd64", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-26 15:33:34 UTC", "last_seen": "2026-03-26 15:33:34 UTC", "sightings": 1 }, { "indicator": "https://wesneet.it.com/Bin/ScreenConnect.ClientSetup.msi", "indicator_type": "url", "source": "URLhaus", "tags": [ "connectwise" ], "first_seen": "2026-03-26 15:33:34 UTC", "last_seen": "2026-03-26 15:33:34 UTC", "sightings": 1 }, { "indicator": "https://everycarebd.com/imgedu093.png", "indicator_type": "url", "source": "URLhaus", "tags": [ "PureHVNC" ], "first_seen": "2026-03-26 15:33:34 UTC", "last_seen": "2026-03-26 15:33:34 UTC", "sightings": 1 }, { "indicator": "https://everycarebd.com/image099.png", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-26 15:33:26 UTC", "last_seen": "2026-03-26 15:33:26 UTC", "sightings": 1 }, { "indicator": "https://everycarebd.com/imagecopy777.png", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-26 15:33:25 UTC", "last_seen": "2026-03-26 15:33:25 UTC", "sightings": 1 }, { "indicator": "https://files.codecguide.com/other/infatica1140.exe", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-26 15:33:22 UTC", "last_seen": "2026-03-26 15:33:22 UTC", "sightings": 1 }, { "indicator": "http://84.200.24.238/fuckjewishpeople.x86", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-26 15:33:22 UTC", "last_seen": "2026-03-26 15:33:22 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.15/hiddenbin/boatnet.arc", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-26 15:33:22 UTC", "last_seen": "2026-03-26 15:33:22 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.15/boatnet.mpsl", "indicator_type": "url", "source": "URLhaus", "tags": [ "gafgyt" ], "first_seen": "2026-03-26 15:33:22 UTC", "last_seen": "2026-03-26 15:33:22 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.15/boatnet.sh4", "indicator_type": "url", "source": "URLhaus", "tags": [ "gafgyt" ], "first_seen": "2026-03-26 15:33:22 UTC", "last_seen": "2026-03-26 15:33:22 UTC", "sightings": 1 }, { "indicator": "https://etinsendmail.org/WORDPRESS%202026.zip", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-26 15:33:22 UTC", "last_seen": "2026-03-26 15:33:22 UTC", "sightings": 1 }, { "indicator": "http://84.200.24.238/fuckjewishpeople.mpsl", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-26 15:33:22 UTC", "last_seen": "2026-03-26 15:33:22 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.15/boatnet.mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "gafgyt" ], "first_seen": "2026-03-26 15:33:22 UTC", "last_seen": "2026-03-26 15:33:22 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.15/hiddenbin/boatnet.x86_64", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-26 15:33:21 UTC", "last_seen": "2026-03-26 15:33:21 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.15/hiddenbin/boatnet.mpsl", "indicator_type": "url", "source": "URLhaus", "tags": [ "gafgyt" ], "first_seen": "2026-03-26 15:33:21 UTC", "last_seen": "2026-03-26 15:33:21 UTC", "sightings": 1 }, { "indicator": "http://84.200.24.238/fuckjewishpeople.arm4", "indicator_type": "url", "source": "URLhaus", "tags": [ "gafgyt" ], "first_seen": "2026-03-26 15:33:21 UTC", "last_seen": "2026-03-26 15:33:21 UTC", "sightings": 1 }, { "indicator": "http://84.200.24.238/fuckjewishpeople.mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-26 15:33:21 UTC", "last_seen": "2026-03-26 15:33:21 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.15/hiddenbin/boatnet.mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "gafgyt" ], "first_seen": "2026-03-26 15:33:21 UTC", "last_seen": "2026-03-26 15:33:21 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.15/hiddenbin/boatnet.sh4", "indicator_type": "url", "source": "URLhaus", "tags": [ "gafgyt" ], "first_seen": "2026-03-26 15:33:21 UTC", "last_seen": "2026-03-26 15:33:21 UTC", "sightings": 1 }, { "indicator": "https://athome-srw.s3.us-west-2.amazonaws.com/SRW_8316/ArenaCX_8316.exe", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-26 15:33:21 UTC", "last_seen": "2026-03-26 15:33:21 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.15/boatnet.arc", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-26 15:33:21 UTC", "last_seen": "2026-03-26 15:33:21 UTC", "sightings": 1 }, { "indicator": "https://apesecurity.top/6rcbczLMf2", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-26 15:33:20 UTC", "last_seen": "2026-03-26 15:33:20 UTC", "sightings": 1 }, { "indicator": "http://mnsm.us.com/UserID751178", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-26 15:33:20 UTC", "last_seen": "2026-03-26 15:33:20 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.15/boatnet.x86", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-26 15:33:20 UTC", "last_seen": "2026-03-26 15:33:20 UTC", "sightings": 1 }, { "indicator": "https://redhairsyndrom.top/6rcbczLMf2", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-26 15:33:20 UTC", "last_seen": "2026-03-26 15:33:20 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.15/boatnet.ppc", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-26 15:33:20 UTC", "last_seen": "2026-03-26 15:33:20 UTC", "sightings": 1 }, { "indicator": "https://marketingsuperstar.top/6rcbczLMf2", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-26 15:33:19 UTC", "last_seen": "2026-03-26 15:33:19 UTC", "sightings": 1 }, { "indicator": "http://84.200.24.238/fuckjewishpeople.arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "gafgyt" ], "first_seen": "2026-03-26 15:33:13 UTC", "last_seen": "2026-03-26 15:33:13 UTC", "sightings": 1 }, { "indicator": "https://gerlimeri.net/WORDPRESS%202026.zip", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-26 15:33:13 UTC", "last_seen": "2026-03-26 15:33:13 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.15/boatnet.arm", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-26 15:33:13 UTC", "last_seen": "2026-03-26 15:33:13 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.15/boatnet.x86_64", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-26 15:33:13 UTC", "last_seen": "2026-03-26 15:33:13 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.15/boatnet.arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-26 15:33:13 UTC", "last_seen": "2026-03-26 15:33:13 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.15/boatnet.x86-DEBUG", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-26 15:33:13 UTC", "last_seen": "2026-03-26 15:33:13 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.15/boatnet.arm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-26 15:33:13 UTC", "last_seen": "2026-03-26 15:33:13 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.15/hiddenbin/boatnet.arm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-26 15:33:13 UTC", "last_seen": "2026-03-26 15:33:13 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.15/hiddenbin/boatnet.x86-DEBUG", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-26 15:33:13 UTC", "last_seen": "2026-03-26 15:33:13 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.15/hiddenbin/boatnet.m68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-26 15:33:13 UTC", "last_seen": "2026-03-26 15:33:13 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.15/hiddenbin/boatnet.arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-26 15:33:13 UTC", "last_seen": "2026-03-26 15:33:13 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.15/hiddenbin/boatnet.arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-26 15:33:13 UTC", "last_seen": "2026-03-26 15:33:13 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.15/hiddenbin/boatnet.x86", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-26 15:33:13 UTC", "last_seen": "2026-03-26 15:33:13 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.15/hiddenbin/boatnet.ppc", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-26 15:33:13 UTC", "last_seen": "2026-03-26 15:33:13 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.15/hiddenbin/boatnet.spc", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-26 15:33:13 UTC", "last_seen": "2026-03-26 15:33:13 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.15/boatnet.m68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-26 15:33:13 UTC", "last_seen": "2026-03-26 15:33:13 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.15/boatnet.arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-26 15:33:13 UTC", "last_seen": "2026-03-26 15:33:13 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.15/boatnet.spc", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-26 15:33:13 UTC", "last_seen": "2026-03-26 15:33:13 UTC", "sightings": 1 }, { "indicator": "https://185.143.196.35/Mozi.m", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-26 15:33:12 UTC", "last_seen": "2026-03-26 15:33:12 UTC", "sightings": 1 }, { "indicator": "https://macandcheeseagent.top/6rcbczLMf2", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-26 15:33:12 UTC", "last_seen": "2026-03-26 15:33:12 UTC", "sightings": 1 }, { "indicator": "https://surfandsharksaged.top/6rcbczLMf2", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-26 15:33:12 UTC", "last_seen": "2026-03-26 15:33:12 UTC", "sightings": 1 }, { "indicator": "https://halflifeagency.top/6rcbczLMf2", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-26 15:33:12 UTC", "last_seen": "2026-03-26 15:33:12 UTC", "sightings": 1 }, { "indicator": "https://onlinemoneyagency.top/6rcbczLMf2", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-26 15:33:12 UTC", "last_seen": "2026-03-26 15:33:12 UTC", "sightings": 1 }, { "indicator": "https://crossroadbuild.top/6rcbczLMf2", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-26 15:33:12 UTC", "last_seen": "2026-03-26 15:33:12 UTC", "sightings": 1 }, { "indicator": "https://mariosmanagmentsec.top/6rcbczLMf2", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-26 15:33:12 UTC", "last_seen": "2026-03-26 15:33:12 UTC", "sightings": 1 }, { "indicator": "https://forlifemanagment.top/6rcbczLMf2", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-26 15:33:12 UTC", "last_seen": "2026-03-26 15:33:12 UTC", "sightings": 1 }, { "indicator": "https://onlymediumsteak.top/6rcbczLMf2", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-26 15:33:12 UTC", "last_seen": "2026-03-26 15:33:12 UTC", "sightings": 1 }, { "indicator": "http://84.200.24.238/fuckjewishpeople.arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "gafgyt" ], "first_seen": "2026-03-26 15:33:12 UTC", "last_seen": "2026-03-26 15:33:12 UTC", "sightings": 1 }, { "indicator": "http://84.200.24.238/fuckjewishpeople.sparc", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-26 15:33:12 UTC", "last_seen": "2026-03-26 15:33:12 UTC", "sightings": 1 }, { "indicator": "http://84.200.24.238/fuckjewishpeople.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-26 15:33:12 UTC", "last_seen": "2026-03-26 15:33:12 UTC", "sightings": 1 }, { "indicator": "http://84.200.24.238/fuckjewishpeople.arm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "gafgyt" ], "first_seen": "2026-03-26 15:33:12 UTC", "last_seen": "2026-03-26 15:33:12 UTC", "sightings": 1 }, { "indicator": "http://84.200.24.238/fuckjewishpeople.ppc", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-26 15:33:12 UTC", "last_seen": "2026-03-26 15:33:12 UTC", "sightings": 1 }, { "indicator": "http://209.38.18.1/cbot/tls.exe", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-26 15:32:37 UTC", "last_seen": "2026-03-26 15:32:37 UTC", "sightings": 1 }, { "indicator": "http://188.166.173.36:8090/beacon_for_109.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "Sliver" ], "first_seen": "2026-03-26 15:32:29 UTC", "last_seen": "2026-03-26 15:32:29 UTC", "sightings": 1 }, { "indicator": "http://209.38.18.1/cbot/steal.exe", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-26 15:32:27 UTC", "last_seen": "2026-03-26 15:32:27 UTC", "sightings": 1 }, { "indicator": "http://209.38.18.1/cbot/dnsreslove.exe", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-26 15:32:27 UTC", "last_seen": "2026-03-26 15:32:27 UTC", "sightings": 1 }, { "indicator": "https://minecraft-java-scanner.pages.dev/downloads/Minecraft_Java_Scanner_2.0.exe", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-26 15:32:26 UTC", "last_seen": "2026-03-26 15:32:26 UTC", "sightings": 1 }, { "indicator": "http://209.38.18.1/cbot/Ayhu.exe", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-26 15:32:20 UTC", "last_seen": "2026-03-26 15:32:20 UTC", "sightings": 1 }, { "indicator": "http://110.37.5.60:47662/Mozi.a", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-26 15:32:19 UTC", "last_seen": "2026-03-26 15:32:19 UTC", "sightings": 1 }, { "indicator": "http://59.177.106.78:37243/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-26 15:32:19 UTC", "last_seen": "2026-03-26 15:32:19 UTC", "sightings": 1 }, { "indicator": "http://209.38.18.1/cbot/rvp.exe", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-26 15:32:18 UTC", "last_seen": "2026-03-26 15:32:18 UTC", "sightings": 1 }, { "indicator": "https://web-captcha.cc/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-26 15:32:17 UTC", "last_seen": "2026-03-26 15:32:17 UTC", "sightings": 1 }, { "indicator": "http://188.166.173.36:8090/upx_beacon.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "Sliver" ], "first_seen": "2026-03-26 15:32:17 UTC", "last_seen": "2026-03-26 15:32:17 UTC", "sightings": 1 }, { "indicator": "http://193.47.45.118/webplugin.exe", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-26 15:32:17 UTC", "last_seen": "2026-03-26 15:32:17 UTC", "sightings": 1 }, { "indicator": "https://femilamom.net/WORDPRESS%202026.zip", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-26 15:32:16 UTC", "last_seen": "2026-03-26 15:32:16 UTC", "sightings": 1 }, { "indicator": "http://144.172.105.56/nullnet_bin_dir/nullnet_load.ppc", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-26 15:32:16 UTC", "last_seen": "2026-03-26 15:32:16 UTC", "sightings": 1 }, { "indicator": "http://188.166.173.36:8090/kan744_test_loader.exe", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-26 15:32:16 UTC", "last_seen": "2026-03-26 15:32:16 UTC", "sightings": 1 }, { "indicator": "http://209.38.18.1/cbot/System.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "AsyncRAT" ], "first_seen": "2026-03-26 15:32:16 UTC", "last_seen": "2026-03-26 15:32:16 UTC", "sightings": 1 }, { "indicator": "http://209.38.18.1/cbot/loader.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "BABADEDA" ], "first_seen": "2026-03-26 15:32:16 UTC", "last_seen": "2026-03-26 15:32:16 UTC", "sightings": 1 }, { "indicator": "https://etinsendmail.net/WORDPRESS%202026.zip", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-26 15:32:16 UTC", "last_seen": "2026-03-26 15:32:16 UTC", "sightings": 1 }, { "indicator": "http://144.172.105.56/nullnet_bin_dir/nullnet_load.arm", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-26 15:32:16 UTC", "last_seen": "2026-03-26 15:32:16 UTC", "sightings": 1 }, { "indicator": "http://209.38.18.1/cbot/svchost.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "AsyncRAT" ], "first_seen": "2026-03-26 15:32:16 UTC", "last_seen": "2026-03-26 15:32:16 UTC", "sightings": 1 }, { "indicator": "http://209.38.18.1/cbot/RtkAudUService.exe", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-26 15:32:16 UTC", "last_seen": "2026-03-26 15:32:16 UTC", "sightings": 1 }, { "indicator": "http://144.172.105.56/nullnet_bin_dir/nullnet_load.mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-26 15:32:16 UTC", "last_seen": "2026-03-26 15:32:16 UTC", "sightings": 1 }, { "indicator": "https://gerlimeri.org/WORDPRESS%202026.zip", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-26 15:32:16 UTC", "last_seen": "2026-03-26 15:32:16 UTC", "sightings": 1 }, { "indicator": "http://188.166.173.36:8090/beacon_raw.bin", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-26 15:32:16 UTC", "last_seen": "2026-03-26 15:32:16 UTC", "sightings": 1 }, { "indicator": "http://188.166.173.36:8090/enhanced_beacon_final.exe", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-26 15:32:16 UTC", "last_seen": "2026-03-26 15:32:16 UTC", "sightings": 1 }, { "indicator": "http://209.38.18.1/cbot/licenseservice.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "AsyncRAT" ], "first_seen": "2026-03-26 15:32:16 UTC", "last_seen": "2026-03-26 15:32:16 UTC", "sightings": 1 }, { "indicator": "http://95.217.248.44/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-26 15:32:16 UTC", "last_seen": "2026-03-26 15:32:16 UTC", "sightings": 1 }, { "indicator": "https://eglimermailer.org/WORDPRESS%202026.zip", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-26 15:32:15 UTC", "last_seen": "2026-03-26 15:32:15 UTC", "sightings": 1 }, { "indicator": "http://144.172.105.56/nullnet_bin_dir/nullnet_load.arm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-26 15:32:15 UTC", "last_seen": "2026-03-26 15:32:15 UTC", "sightings": 1 }, { "indicator": "http://144.172.105.56/nullnet_bin_dir/nullnet_load.sh4", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-26 15:32:15 UTC", "last_seen": "2026-03-26 15:32:15 UTC", "sightings": 1 }, { "indicator": "http://144.172.105.56/nullnet_bin_dir/nullnet_load.m68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-26 15:32:15 UTC", "last_seen": "2026-03-26 15:32:15 UTC", "sightings": 1 }, { "indicator": "http://144.172.105.56/nullnet_bin_dir/nullnet_load.arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-26 15:32:15 UTC", "last_seen": "2026-03-26 15:32:15 UTC", "sightings": 1 }, { "indicator": "http://144.172.105.56/nullnet_bin_dir/nullnet_load.x86", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-26 15:32:15 UTC", "last_seen": "2026-03-26 15:32:15 UTC", "sightings": 1 }, { "indicator": "http://144.172.105.56/nullnet_bin_dir/nullnet_load.arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-26 15:32:15 UTC", "last_seen": "2026-03-26 15:32:15 UTC", "sightings": 1 }, { "indicator": "http://144.172.105.56/nullnet_bin_dir/nullnet_load.mpsl", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-26 15:32:15 UTC", "last_seen": "2026-03-26 15:32:15 UTC", "sightings": 1 }, { "indicator": "https://etinsendmail.com/WORDPRESS%202026.zip", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-26 15:32:15 UTC", "last_seen": "2026-03-26 15:32:15 UTC", "sightings": 1 }, { "indicator": "http://144.172.105.56/nullnet_bin_dir/nullnet_load.arc", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-26 15:32:15 UTC", "last_seen": "2026-03-26 15:32:15 UTC", "sightings": 1 }, { "indicator": "http://120.28.216.187:41865/Mozi.a", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-26 15:32:14 UTC", "last_seen": "2026-03-26 15:32:14 UTC", "sightings": 1 }, { "indicator": "http://39.79.68.31:50868/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-26 15:32:14 UTC", "last_seen": "2026-03-26 15:32:14 UTC", "sightings": 1 }, { "indicator": "http://124.6.168.74:33332/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-26 15:32:14 UTC", "last_seen": "2026-03-26 15:32:14 UTC", "sightings": 1 }, { "indicator": "http://124.6.168.74:33332/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-26 15:32:14 UTC", "last_seen": "2026-03-26 15:32:14 UTC", "sightings": 1 }, { "indicator": "https://66.71.242.68/curl", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-26 15:32:13 UTC", "last_seen": "2026-03-26 15:32:13 UTC", "sightings": 1 }, { "indicator": "http://175.165.82.206:39686/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 15:30:22 UTC", "last_seen": "2026-03-26 15:30:22 UTC", "sightings": 1 }, { "indicator": "https://v3ct4-loop.bramblepath.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 15:29:07 UTC", "last_seen": "2026-03-26 15:29:07 UTC", "sightings": 1 }, { "indicator": "https://mertide3on.bramblepath.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 15:24:11 UTC", "last_seen": "2026-03-26 15:24:11 UTC", "sightings": 1 }, { "indicator": "https://inkchec.bramblepath.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 15:19:07 UTC", "last_seen": "2026-03-26 15:19:07 UTC", "sightings": 1 }, { "indicator": "http://110.36.73.21:58510/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-26 15:17:07 UTC", "last_seen": "2026-03-26 15:17:07 UTC", "sightings": 1 }, { "indicator": "http://42.224.126.6:46918/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 15:15:12 UTC", "last_seen": "2026-03-26 15:15:12 UTC", "sightings": 1 }, { "indicator": "https://55wmwoni.bramblepath.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 15:13:08 UTC", "last_seen": "2026-03-26 15:13:08 UTC", "sightings": 1 }, { "indicator": "http://61.52.156.25:59734/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 15:10:23 UTC", "last_seen": "2026-03-26 15:10:23 UTC", "sightings": 1 }, { "indicator": "https://rendfie.fabledock.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 15:10:10 UTC", "last_seen": "2026-03-26 15:10:10 UTC", "sightings": 1 }, { "indicator": "http://59.180.170.172:41374/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 15:06:23 UTC", "last_seen": "2026-03-26 15:06:23 UTC", "sightings": 1 }, { "indicator": "http://110.39.242.156:43541/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 15:06:19 UTC", "last_seen": "2026-03-26 15:06:19 UTC", "sightings": 1 }, { "indicator": "https://kernmetri.fabledock.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 15:06:08 UTC", "last_seen": "2026-03-26 15:06:08 UTC", "sightings": 1 }, { "indicator": "http://175.165.82.206:39686/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 15:04:22 UTC", "last_seen": "2026-03-26 15:04:22 UTC", "sightings": 1 }, { "indicator": "http://39.79.68.31:50868/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-26 15:02:07 UTC", "last_seen": "2026-03-26 15:02:07 UTC", "sightings": 1 }, { "indicator": "https://5sxuqx.fabledock.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 14:57:07 UTC", "last_seen": "2026-03-26 14:57:07 UTC", "sightings": 1 }, { "indicator": "http://61.52.156.25:59734/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 14:53:10 UTC", "last_seen": "2026-03-26 14:53:10 UTC", "sightings": 1 }, { "indicator": "https://ewdgyl.fabledock.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 14:51:07 UTC", "last_seen": "2026-03-26 14:51:07 UTC", "sightings": 1 }, { "indicator": "http://27.21.26.196:52069/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-26 14:50:21 UTC", "last_seen": "2026-03-26 14:50:21 UTC", "sightings": 1 }, { "indicator": "http://42.231.72.98:33067/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 14:49:21 UTC", "last_seen": "2026-03-26 14:49:21 UTC", "sightings": 1 }, { "indicator": "http://59.180.170.172:41374/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 14:45:27 UTC", "last_seen": "2026-03-26 14:45:27 UTC", "sightings": 1 }, { "indicator": "https://ffzt1.fabledock.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 14:45:08 UTC", "last_seen": "2026-03-26 14:45:08 UTC", "sightings": 1 }, { "indicator": "http://222.141.190.247:54005/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-26 14:42:05 UTC", "last_seen": "2026-03-26 14:42:05 UTC", "sightings": 1 }, { "indicator": "http://1.43.5.24:40236/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 14:41:17 UTC", "last_seen": "2026-03-26 14:41:17 UTC", "sightings": 1 }, { "indicator": "https://otter-aut.x7lora.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 14:40:07 UTC", "last_seen": "2026-03-26 14:40:07 UTC", "sightings": 1 }, { "indicator": "http://110.39.242.156:43541/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 14:37:17 UTC", "last_seen": "2026-03-26 14:37:17 UTC", "sightings": 1 }, { "indicator": "https://royalgla.x7lora.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 14:34:10 UTC", "last_seen": "2026-03-26 14:34:10 UTC", "sightings": 1 }, { "indicator": "http://117.222.166.98:49412/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 14:31:09 UTC", "last_seen": "2026-03-26 14:31:09 UTC", "sightings": 1 }, { "indicator": "https://bridgecampa.x7lora.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 14:28:14 UTC", "last_seen": "2026-03-26 14:28:14 UTC", "sightings": 1 }, { "indicator": "http://110.38.198.6:54108/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-26 14:27:07 UTC", "last_seen": "2026-03-26 14:27:07 UTC", "sightings": 1 }, { "indicator": "http://27.21.26.196:52069/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-26 14:24:12 UTC", "last_seen": "2026-03-26 14:24:12 UTC", "sightings": 1 }, { "indicator": "http://61.53.81.61:44362/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 14:23:17 UTC", "last_seen": "2026-03-26 14:23:17 UTC", "sightings": 1 }, { "indicator": "http://42.231.72.98:33067/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 14:23:07 UTC", "last_seen": "2026-03-26 14:23:07 UTC", "sightings": 1 }, { "indicator": "https://unload6-gate.x7lora.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 14:22:08 UTC", "last_seen": "2026-03-26 14:22:08 UTC", "sightings": 1 }, { "indicator": "http://222.141.190.247:54005/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-26 14:17:08 UTC", "last_seen": "2026-03-26 14:17:08 UTC", "sightings": 1 }, { "indicator": "https://tricrest7ar.x7lora.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 14:17:07 UTC", "last_seen": "2026-03-26 14:17:07 UTC", "sightings": 1 }, { "indicator": "http://120.28.139.94:57035/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-26 14:12:09 UTC", "last_seen": "2026-03-26 14:12:09 UTC", "sightings": 1 }, { "indicator": "https://plas2-graph.ra8gera.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 14:12:09 UTC", "last_seen": "2026-03-26 14:12:09 UTC", "sightings": 1 }, { "indicator": "http://42.5.5.56:50936/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 14:06:20 UTC", "last_seen": "2026-03-26 14:06:20 UTC", "sightings": 1 }, { "indicator": "https://nimb3-reach.ra8gera.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 14:06:13 UTC", "last_seen": "2026-03-26 14:06:13 UTC", "sightings": 1 }, { "indicator": "https://tal-markal.ra8gera.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 14:00:10 UTC", "last_seen": "2026-03-26 14:00:10 UTC", "sightings": 1 }, { "indicator": "http://123.12.224.255:47026/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 13:59:10 UTC", "last_seen": "2026-03-26 13:59:10 UTC", "sightings": 1 }, { "indicator": "http://170.83.13.37:3466/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 13:58:12 UTC", "last_seen": "2026-03-26 13:58:12 UTC", "sightings": 1 }, { "indicator": "http://124.235.252.71:47347/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-26 13:56:10 UTC", "last_seen": "2026-03-26 13:56:10 UTC", "sightings": 1 }, { "indicator": "https://5hff.ra8gera.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 13:54:08 UTC", "last_seen": "2026-03-26 13:54:08 UTC", "sightings": 1 }, { "indicator": "https://eastretainer.ra8gera.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 13:49:10 UTC", "last_seen": "2026-03-26 13:49:10 UTC", "sightings": 1 }, { "indicator": "http://117.198.197.88:54654/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-26 13:47:07 UTC", "last_seen": "2026-03-26 13:47:07 UTC", "sightings": 1 }, { "indicator": "http://110.39.225.173:56535/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 13:44:20 UTC", "last_seen": "2026-03-26 13:44:20 UTC", "sightings": 1 }, { "indicator": "https://velcrest4is.z7hire.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 13:43:08 UTC", "last_seen": "2026-03-26 13:43:08 UTC", "sightings": 1 }, { "indicator": "https://r1ch-node.z7hire.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 13:38:11 UTC", "last_seen": "2026-03-26 13:38:11 UTC", "sightings": 1 }, { "indicator": "https://torship.velorune.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 13:32:09 UTC", "last_seen": "2026-03-26 13:32:09 UTC", "sightings": 1 }, { "indicator": "https://sket-stack.velorune.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 13:27:10 UTC", "last_seen": "2026-03-26 13:27:10 UTC", "sightings": 1 }, { "indicator": "http://117.217.27.67:41851/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 13:25:18 UTC", "last_seen": "2026-03-26 13:25:18 UTC", "sightings": 1 }, { "indicator": "https://6u0py.tires8f.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 13:20:08 UTC", "last_seen": "2026-03-26 13:20:08 UTC", "sightings": 1 }, { "indicator": "https://sign-live.tires8f.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 13:15:10 UTC", "last_seen": "2026-03-26 13:15:10 UTC", "sightings": 1 }, { "indicator": "https://fuddj2yd.thornbyte.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 13:09:12 UTC", "last_seen": "2026-03-26 13:09:12 UTC", "sightings": 1 }, { "indicator": "https://fj0r-stream.thornbyte.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 13:04:10 UTC", "last_seen": "2026-03-26 13:04:10 UTC", "sightings": 1 }, { "indicator": "http://124.235.252.71:47347/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-26 13:01:19 UTC", "last_seen": "2026-03-26 13:01:19 UTC", "sightings": 1 }, { "indicator": "https://cedargri.stonemuse.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 12:59:06 UTC", "last_seen": "2026-03-26 12:59:06 UTC", "sightings": 1 }, { "indicator": "http://39.67.93.111:36043/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-26 12:57:21 UTC", "last_seen": "2026-03-26 12:57:21 UTC", "sightings": 1 }, { "indicator": "https://irgss.stonemuse.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 12:53:08 UTC", "last_seen": "2026-03-26 12:53:08 UTC", "sightings": 1 }, { "indicator": "http://110.37.21.178:33661/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-26 12:50:09 UTC", "last_seen": "2026-03-26 12:50:09 UTC", "sightings": 1 }, { "indicator": "http://108.170.136.155:44462/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 12:49:15 UTC", "last_seen": "2026-03-26 12:49:15 UTC", "sightings": 1 }, { "indicator": "https://p0lar-mark.n1ghtridge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 12:48:10 UTC", "last_seen": "2026-03-26 12:48:10 UTC", "sightings": 1 }, { "indicator": "http://61.3.24.65:32775/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-26 12:47:07 UTC", "last_seen": "2026-03-26 12:47:07 UTC", "sightings": 1 }, { "indicator": "https://vel-tideal.n1ghtridge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 12:46:08 UTC", "last_seen": "2026-03-26 12:46:08 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.168/files/1032264266/qvQb5og.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "CoinMiner", "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-26 12:41:07 UTC", "last_seen": "2026-03-26 12:41:07 UTC", "sightings": 1 }, { "indicator": "http://182.113.37.205:47263/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 12:39:20 UTC", "last_seen": "2026-03-26 12:39:20 UTC", "sightings": 1 }, { "indicator": "https://orchestheo.gl1mmeroak.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 12:36:07 UTC", "last_seen": "2026-03-26 12:36:07 UTC", "sightings": 1 }, { "indicator": "https://shelldecode.gl1mmeroak.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 12:31:11 UTC", "last_seen": "2026-03-26 12:31:11 UTC", "sightings": 1 }, { "indicator": "http://110.36.29.40:54458/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 12:29:09 UTC", "last_seen": "2026-03-26 12:29:09 UTC", "sightings": 1 }, { "indicator": "http://110.37.21.178:33661/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-26 12:25:21 UTC", "last_seen": "2026-03-26 12:25:21 UTC", "sightings": 1 }, { "indicator": "https://stocforg.fablegrove.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 12:25:12 UTC", "last_seen": "2026-03-26 12:25:12 UTC", "sightings": 1 }, { "indicator": "http://61.7.184.226:45934/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-26 12:21:12 UTC", "last_seen": "2026-03-26 12:21:12 UTC", "sightings": 1 }, { "indicator": "http://222.160.220.47:54273/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-26 12:20:18 UTC", "last_seen": "2026-03-26 12:20:18 UTC", "sightings": 1 }, { "indicator": "https://xr71purq.fablegrove.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 12:19:09 UTC", "last_seen": "2026-03-26 12:19:09 UTC", "sightings": 1 }, { "indicator": "http://182.113.37.205:47263/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 12:14:17 UTC", "last_seen": "2026-03-26 12:14:17 UTC", "sightings": 1 }, { "indicator": "https://solidmount.f0xharbor.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 12:14:17 UTC", "last_seen": "2026-03-26 12:14:17 UTC", "sightings": 1 }, { "indicator": "http://182.127.70.193:57630/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-26 12:12:07 UTC", "last_seen": "2026-03-26 12:12:07 UTC", "sightings": 1 }, { "indicator": "http://110.36.29.40:54458/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 12:09:11 UTC", "last_seen": "2026-03-26 12:09:11 UTC", "sightings": 1 }, { "indicator": "https://ultrbird.f0xharbor.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 12:09:08 UTC", "last_seen": "2026-03-26 12:09:08 UTC", "sightings": 1 }, { "indicator": "https://ultra-5un.dawnspire.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 12:03:10 UTC", "last_seen": "2026-03-26 12:03:10 UTC", "sightings": 1 }, { "indicator": "https://meta-5udde.dawnspire.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 11:57:07 UTC", "last_seen": "2026-03-26 11:57:07 UTC", "sightings": 1 }, { "indicator": "http://182.127.70.193:57630/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-26 11:52:06 UTC", "last_seen": "2026-03-26 11:52:06 UTC", "sightings": 1 }, { "indicator": "https://zen-valeet.crestfall.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 11:51:08 UTC", "last_seen": "2026-03-26 11:51:08 UTC", "sightings": 1 }, { "indicator": "http://119.186.205.113:49796/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 11:49:17 UTC", "last_seen": "2026-03-26 11:49:17 UTC", "sightings": 1 }, { "indicator": "http://61.7.184.226:45934/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-26 11:47:33 UTC", "last_seen": "2026-03-26 11:47:33 UTC", "sightings": 1 }, { "indicator": "https://plain-ivo.crestfall.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 11:46:07 UTC", "last_seen": "2026-03-26 11:46:07 UTC", "sightings": 1 }, { "indicator": "http://42.232.225.243:37616/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 11:45:26 UTC", "last_seen": "2026-03-26 11:45:26 UTC", "sightings": 1 }, { "indicator": "http://115.54.112.78:40086/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 11:39:16 UTC", "last_seen": "2026-03-26 11:39:16 UTC", "sightings": 1 }, { "indicator": "https://tricorear4.cl0udmere.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 11:39:07 UTC", "last_seen": "2026-03-26 11:39:07 UTC", "sightings": 1 }, { "indicator": "http://110.39.231.36:33506/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 11:37:15 UTC", "last_seen": "2026-03-26 11:37:15 UTC", "sightings": 1 }, { "indicator": "http://42.227.224.82:36691/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 11:35:17 UTC", "last_seen": "2026-03-26 11:35:17 UTC", "sightings": 1 }, { "indicator": "https://proxyspe.cl0udmere.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 11:34:09 UTC", "last_seen": "2026-03-26 11:34:09 UTC", "sightings": 1 }, { "indicator": "https://27tjfer7.cinderpeak.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 11:29:06 UTC", "last_seen": "2026-03-26 11:29:06 UTC", "sightings": 1 }, { "indicator": "http://27.215.127.42:45191/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 11:26:18 UTC", "last_seen": "2026-03-26 11:26:18 UTC", "sightings": 1 }, { "indicator": "http://119.186.205.113:49796/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 11:25:22 UTC", "last_seen": "2026-03-26 11:25:22 UTC", "sightings": 1 }, { "indicator": "https://rnolecu0-drive.cinderpeak.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 11:23:07 UTC", "last_seen": "2026-03-26 11:23:07 UTC", "sightings": 1 }, { "indicator": "http://110.37.102.128:50897/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 11:17:16 UTC", "last_seen": "2026-03-26 11:17:16 UTC", "sightings": 1 }, { "indicator": "http://39.40.148.235:49098/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-26 11:17:08 UTC", "last_seen": "2026-03-26 11:17:08 UTC", "sightings": 1 }, { "indicator": "https://runw-maj.brisklume.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 11:17:07 UTC", "last_seen": "2026-03-26 11:17:07 UTC", "sightings": 1 }, { "indicator": "http://180.190.200.74:48371/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-26 11:12:22 UTC", "last_seen": "2026-03-26 11:12:22 UTC", "sightings": 1 }, { "indicator": "https://scantermin.brisklume.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 11:12:08 UTC", "last_seen": "2026-03-26 11:12:08 UTC", "sightings": 1 }, { "indicator": "http://42.227.224.82:36691/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 11:10:17 UTC", "last_seen": "2026-03-26 11:10:17 UTC", "sightings": 1 }, { "indicator": "http://115.54.112.78:40086/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 11:10:17 UTC", "last_seen": "2026-03-26 11:10:17 UTC", "sightings": 1 }, { "indicator": "http://221.15.1.39:36709/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 11:09:17 UTC", "last_seen": "2026-03-26 11:09:17 UTC", "sightings": 1 }, { "indicator": "http://110.39.231.36:33506/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 11:08:13 UTC", "last_seen": "2026-03-26 11:08:13 UTC", "sightings": 1 }, { "indicator": "https://0sta343.aurorift.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 11:06:09 UTC", "last_seen": "2026-03-26 11:06:09 UTC", "sightings": 1 }, { "indicator": "http://27.215.127.42:45191/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 11:03:14 UTC", "last_seen": "2026-03-26 11:03:14 UTC", "sightings": 1 }, { "indicator": "http://202.107.97.192:32873/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-26 11:02:07 UTC", "last_seen": "2026-03-26 11:02:07 UTC", "sightings": 1 }, { "indicator": "http://202.107.97.192:32873/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-26 11:02:07 UTC", "last_seen": "2026-03-26 11:02:07 UTC", "sightings": 1 }, { "indicator": "https://quanpuls.aurorift.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 11:00:12 UTC", "last_seen": "2026-03-26 11:00:12 UTC", "sightings": 1 }, { "indicator": "https://mer-spireis.amber-drift.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 10:55:09 UTC", "last_seen": "2026-03-26 10:55:09 UTC", "sightings": 1 }, { "indicator": "http://39.40.148.235:49098/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-26 10:52:09 UTC", "last_seen": "2026-03-26 10:52:09 UTC", "sightings": 1 }, { "indicator": "https://crystal-bridge.amber-drift.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 10:50:10 UTC", "last_seen": "2026-03-26 10:50:10 UTC", "sightings": 1 }, { "indicator": "http://180.190.200.74:48371/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-26 10:47:19 UTC", "last_seen": "2026-03-26 10:47:19 UTC", "sightings": 1 }, { "indicator": "http://222.138.150.114:39586/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-26 10:47:07 UTC", "last_seen": "2026-03-26 10:47:07 UTC", "sightings": 1 }, { "indicator": "http://110.37.102.128:50897/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 10:45:19 UTC", "last_seen": "2026-03-26 10:45:19 UTC", "sightings": 1 }, { "indicator": "https://smaton.z7hire.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 10:44:07 UTC", "last_seen": "2026-03-26 10:44:07 UTC", "sightings": 1 }, { "indicator": "http://221.15.1.39:36709/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 10:43:11 UTC", "last_seen": "2026-03-26 10:43:11 UTC", "sightings": 1 }, { "indicator": "http://125.43.10.242:54198/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 10:43:10 UTC", "last_seen": "2026-03-26 10:43:10 UTC", "sightings": 1 }, { "indicator": "http://115.63.32.205:33296/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 10:40:21 UTC", "last_seen": "2026-03-26 10:40:21 UTC", "sightings": 1 }, { "indicator": "https://mermarkal5.velorune.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 10:38:08 UTC", "last_seen": "2026-03-26 10:38:08 UTC", "sightings": 1 }, { "indicator": "http://158.94.209.95/ycl", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2", "d", "dropped-by-GCleaner" ], "first_seen": "2026-03-26 10:38:05 UTC", "last_seen": "2026-03-26 10:38:05 UTC", "sightings": 1 }, { "indicator": "http://ads-storage.biz/update", "indicator_type": "url", "source": "URLhaus", "tags": [ "1", "c2", "dropped-by-GCleaner" ], "first_seen": "2026-03-26 10:37:06 UTC", "last_seen": "2026-03-26 10:37:06 UTC", "sightings": 1 }, { "indicator": "http://158.94.209.95/update", "indicator_type": "url", "source": "URLhaus", "tags": [ "1", "c2", "dropped-by-GCleaner" ], "first_seen": "2026-03-26 10:36:05 UTC", "last_seen": "2026-03-26 10:36:05 UTC", "sightings": 1 }, { "indicator": "http://158.94.209.95/service", "indicator_type": "url", "source": "URLhaus", "tags": [ "a", "c2", "dropped-by-GCleaner" ], "first_seen": "2026-03-26 10:36:05 UTC", "last_seen": "2026-03-26 10:36:05 UTC", "sightings": 1 }, { "indicator": "https://peta-cre.tires8f.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 10:33:11 UTC", "last_seen": "2026-03-26 10:33:11 UTC", "sightings": 1 }, { "indicator": "http://125.43.10.242:54198/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 10:32:15 UTC", "last_seen": "2026-03-26 10:32:15 UTC", "sightings": 1 }, { "indicator": "http://110.37.39.182:39980/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-26 10:31:16 UTC", "last_seen": "2026-03-26 10:31:16 UTC", "sightings": 1 }, { "indicator": "https://buildwar.thornbyte.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 10:28:08 UTC", "last_seen": "2026-03-26 10:28:08 UTC", "sightings": 1 }, { "indicator": "http://110.37.105.169:35949/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-26 10:27:07 UTC", "last_seen": "2026-03-26 10:27:07 UTC", "sightings": 1 }, { "indicator": "http://222.138.150.114:39586/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-26 10:27:07 UTC", "last_seen": "2026-03-26 10:27:07 UTC", "sightings": 1 }, { "indicator": "http://112.237.248.185:47242/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 10:25:19 UTC", "last_seen": "2026-03-26 10:25:19 UTC", "sightings": 1 }, { "indicator": "http://105.187.33.60:47957/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-26 10:23:22 UTC", "last_seen": "2026-03-26 10:23:22 UTC", "sightings": 1 }, { "indicator": "https://s75g160.stonemuse.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 10:22:07 UTC", "last_seen": "2026-03-26 10:22:07 UTC", "sightings": 1 }, { "indicator": "http://115.63.32.205:33296/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 10:18:21 UTC", "last_seen": "2026-03-26 10:18:21 UTC", "sightings": 1 }, { "indicator": "https://clie-zone.n1ghtridge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 10:15:08 UTC", "last_seen": "2026-03-26 10:15:08 UTC", "sightings": 1 }, { "indicator": "http://117.192.36.35:33844/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 10:14:22 UTC", "last_seen": "2026-03-26 10:14:22 UTC", "sightings": 1 }, { "indicator": "http://117.192.36.35:33844/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 10:14:22 UTC", "last_seen": "2026-03-26 10:14:22 UTC", "sightings": 1 }, { "indicator": "http://219.155.202.230:37013/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 10:12:18 UTC", "last_seen": "2026-03-26 10:12:18 UTC", "sightings": 1 }, { "indicator": "http://182.122.234.94:56742/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-26 10:12:06 UTC", "last_seen": "2026-03-26 10:12:06 UTC", "sightings": 1 }, { "indicator": "https://4jv9.gl1mmeroak.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 10:11:07 UTC", "last_seen": "2026-03-26 10:11:07 UTC", "sightings": 1 }, { "indicator": "http://115.55.192.186:52587/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 10:05:21 UTC", "last_seen": "2026-03-26 10:05:21 UTC", "sightings": 1 }, { "indicator": "https://looseoak.fablegrove.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 10:04:09 UTC", "last_seen": "2026-03-26 10:04:09 UTC", "sightings": 1 }, { "indicator": "http://27.194.201.2:33515/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 10:03:08 UTC", "last_seen": "2026-03-26 10:03:08 UTC", "sightings": 1 }, { "indicator": "http://110.37.105.169:35949/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-26 10:02:06 UTC", "last_seen": "2026-03-26 10:02:06 UTC", "sightings": 1 }, { "indicator": "http://61.52.43.57:41729/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-26 10:02:06 UTC", "last_seen": "2026-03-26 10:02:06 UTC", "sightings": 1 }, { "indicator": "http://112.237.248.185:47242/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 10:01:34 UTC", "last_seen": "2026-03-26 10:01:34 UTC", "sightings": 1 }, { "indicator": "http://110.37.39.182:39980/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-26 10:00:21 UTC", "last_seen": "2026-03-26 10:00:21 UTC", "sightings": 1 }, { "indicator": "https://nfqbq5.f0xharbor.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 09:58:07 UTC", "last_seen": "2026-03-26 09:58:07 UTC", "sightings": 1 }, { "indicator": "https://c0rte8-flow.dawnspire.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 09:53:08 UTC", "last_seen": "2026-03-26 09:53:08 UTC", "sightings": 1 }, { "indicator": "http://115.62.183.250:56872/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 09:51:22 UTC", "last_seen": "2026-03-26 09:51:22 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.168/files/1900003348/J3sfClg.msi", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey", "rustystealer" ], "first_seen": "2026-03-26 09:50:10 UTC", "last_seen": "2026-03-26 09:50:10 UTC", "sightings": 1 }, { "indicator": "http://110.39.233.38:59744/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 09:49:22 UTC", "last_seen": "2026-03-26 09:49:22 UTC", "sightings": 1 }, { "indicator": "http://110.39.233.38:59744/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 09:48:30 UTC", "last_seen": "2026-03-26 09:48:30 UTC", "sightings": 1 }, { "indicator": "http://219.155.202.230:37013/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 09:48:29 UTC", "last_seen": "2026-03-26 09:48:29 UTC", "sightings": 1 }, { "indicator": "http://119.179.254.248:55487/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 09:48:28 UTC", "last_seen": "2026-03-26 09:48:28 UTC", "sightings": 1 }, { "indicator": "https://daemon6-logic.crestfall.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 09:47:10 UTC", "last_seen": "2026-03-26 09:47:10 UTC", "sightings": 1 }, { "indicator": "http://182.122.234.94:56742/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-26 09:47:08 UTC", "last_seen": "2026-03-26 09:47:08 UTC", "sightings": 1 }, { "indicator": "http://119.114.167.165:54421/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 09:45:24 UTC", "last_seen": "2026-03-26 09:45:24 UTC", "sightings": 1 }, { "indicator": "http://175.150.41.44:34819/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 09:45:24 UTC", "last_seen": "2026-03-26 09:45:24 UTC", "sightings": 1 }, { "indicator": "http://110.36.30.247:58635/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 09:44:24 UTC", "last_seen": "2026-03-26 09:44:24 UTC", "sightings": 1 }, { "indicator": "http://175.150.41.44:34819/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 09:44:15 UTC", "last_seen": "2026-03-26 09:44:15 UTC", "sightings": 1 }, { "indicator": "https://pten.cl0udmere.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 09:42:09 UTC", "last_seen": "2026-03-26 09:42:09 UTC", "sightings": 1 }, { "indicator": "http://123.12.245.215:54943/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 09:41:20 UTC", "last_seen": "2026-03-26 09:41:20 UTC", "sightings": 1 }, { "indicator": "http://123.12.224.255:47026/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 09:38:22 UTC", "last_seen": "2026-03-26 09:38:22 UTC", "sightings": 1 }, { "indicator": "http://42.231.78.179:36993/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 09:38:21 UTC", "last_seen": "2026-03-26 09:38:21 UTC", "sightings": 1 }, { "indicator": "http://61.52.43.57:41729/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-26 09:37:08 UTC", "last_seen": "2026-03-26 09:37:08 UTC", "sightings": 1 }, { "indicator": "https://glacier3-signal.cinderpeak.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 09:37:08 UTC", "last_seen": "2026-03-26 09:37:08 UTC", "sightings": 1 }, { "indicator": "https://ampsyst.brisklume.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 09:32:06 UTC", "last_seen": "2026-03-26 09:32:06 UTC", "sightings": 1 }, { "indicator": "http://115.62.183.250:56872/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 09:30:21 UTC", "last_seen": "2026-03-26 09:30:21 UTC", "sightings": 1 }, { "indicator": "http://61.53.153.6:44853/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 09:30:21 UTC", "last_seen": "2026-03-26 09:30:21 UTC", "sightings": 1 }, { "indicator": "https://narr9-vector.aurorift.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 09:22:09 UTC", "last_seen": "2026-03-26 09:22:09 UTC", "sightings": 1 }, { "indicator": "http://223.105.50.190:44266/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 09:21:30 UTC", "last_seen": "2026-03-26 09:21:30 UTC", "sightings": 1 }, { "indicator": "http://119.179.254.248:55487/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 09:21:26 UTC", "last_seen": "2026-03-26 09:21:26 UTC", "sightings": 1 }, { "indicator": "https://depdea.amber-drift.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 09:16:08 UTC", "last_seen": "2026-03-26 09:16:08 UTC", "sightings": 1 }, { "indicator": "http://42.231.78.179:36993/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 09:12:18 UTC", "last_seen": "2026-03-26 09:12:18 UTC", "sightings": 1 }, { "indicator": "http://110.37.107.203:55777/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 09:05:17 UTC", "last_seen": "2026-03-26 09:05:17 UTC", "sightings": 1 }, { "indicator": "http://45.177.33.135:33033/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-26 09:02:09 UTC", "last_seen": "2026-03-26 09:02:09 UTC", "sightings": 1 }, { "indicator": "http://42.235.7.17:47408/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 08:59:24 UTC", "last_seen": "2026-03-26 08:59:24 UTC", "sightings": 1 }, { "indicator": "http://117.215.212.61:39180/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 08:58:23 UTC", "last_seen": "2026-03-26 08:58:23 UTC", "sightings": 1 }, { "indicator": "http://117.192.127.247:53544/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 08:53:09 UTC", "last_seen": "2026-03-26 08:53:09 UTC", "sightings": 1 }, { "indicator": "http://61.53.105.142:47091/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-26 08:52:07 UTC", "last_seen": "2026-03-26 08:52:07 UTC", "sightings": 1 }, { "indicator": "http://80.89.224.210/1.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey", "Vidar" ], "first_seen": "2026-03-26 08:51:09 UTC", "last_seen": "2026-03-26 08:51:09 UTC", "sightings": 1 }, { "indicator": "https://hasteb.in/PdFc8qfmIkPEom5", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-26 08:35:08 UTC", "last_seen": "2026-03-26 08:35:08 UTC", "sightings": 1 }, { "indicator": "https://i.postimg.cc/bY1ydJDD/image.png", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-26 08:34:06 UTC", "last_seen": "2026-03-26 08:34:06 UTC", "sightings": 1 }, { "indicator": "https://i.postimg.cc/MZb0H9Mm/image-1.png", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-26 08:30:07 UTC", "last_seen": "2026-03-26 08:30:07 UTC", "sightings": 1 }, { "indicator": "http://117.215.212.61:39180/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 08:29:07 UTC", "last_seen": "2026-03-26 08:29:07 UTC", "sightings": 1 }, { "indicator": "http://110.39.255.247:54187/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-26 08:27:06 UTC", "last_seen": "2026-03-26 08:27:06 UTC", "sightings": 1 }, { "indicator": "http://94.249.228.212/iran.armv6l", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-26 08:19:25 UTC", "last_seen": "2026-03-26 08:19:25 UTC", "sightings": 1 }, { "indicator": "http://94.249.228.212/iran.mipsel", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-26 08:19:25 UTC", "last_seen": "2026-03-26 08:19:25 UTC", "sightings": 1 }, { "indicator": "http://94.249.228.212/iran.i486", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-26 08:19:25 UTC", "last_seen": "2026-03-26 08:19:25 UTC", "sightings": 1 }, { "indicator": "http://94.249.228.212/iran.sparc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-26 08:19:25 UTC", "last_seen": "2026-03-26 08:19:25 UTC", "sightings": 1 }, { "indicator": "http://94.249.228.212/iran.arc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-26 08:19:25 UTC", "last_seen": "2026-03-26 08:19:25 UTC", "sightings": 1 }, { "indicator": "http://94.249.228.212/iran.powerpc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-26 08:19:25 UTC", "last_seen": "2026-03-26 08:19:25 UTC", "sightings": 1 }, { "indicator": "http://94.249.228.212/iran.armv7l", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-26 08:19:25 UTC", "last_seen": "2026-03-26 08:19:25 UTC", "sightings": 1 }, { "indicator": "http://94.249.228.212/iran.armv4l", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-26 08:19:25 UTC", "last_seen": "2026-03-26 08:19:25 UTC", "sightings": 1 }, { "indicator": "http://94.249.228.212/iran.sh4", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-26 08:19:25 UTC", "last_seen": "2026-03-26 08:19:25 UTC", "sightings": 1 }, { "indicator": "http://94.249.228.212/iran.armv5l", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-26 08:19:25 UTC", "last_seen": "2026-03-26 08:19:25 UTC", "sightings": 1 }, { "indicator": "http://110.37.36.254:55687/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 08:19:24 UTC", "last_seen": "2026-03-26 08:19:24 UTC", "sightings": 1 }, { "indicator": "http://94.26.106.197/mpsl", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-26 08:19:23 UTC", "last_seen": "2026-03-26 08:19:23 UTC", "sightings": 1 }, { "indicator": "http://94.26.106.197/arm4", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-26 08:19:22 UTC", "last_seen": "2026-03-26 08:19:22 UTC", "sightings": 1 }, { "indicator": "http://94.26.106.197/i586", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-26 08:19:22 UTC", "last_seen": "2026-03-26 08:19:22 UTC", "sightings": 1 }, { "indicator": "http://94.26.106.197/x32", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-26 08:19:22 UTC", "last_seen": "2026-03-26 08:19:22 UTC", "sightings": 1 }, { "indicator": "http://192.227.183.143/i-5.8-6.ISIS", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-26 08:19:22 UTC", "last_seen": "2026-03-26 08:19:22 UTC", "sightings": 1 }, { "indicator": "http://192.227.183.143/m-6.8-k.ISIS", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-26 08:19:22 UTC", "last_seen": "2026-03-26 08:19:22 UTC", "sightings": 1 }, { "indicator": "http://192.227.183.143/x-3.2-.ISIS", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-26 08:19:22 UTC", "last_seen": "2026-03-26 08:19:22 UTC", "sightings": 1 }, { "indicator": "http://196.188.80.240:55041/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-26 08:18:17 UTC", "last_seen": "2026-03-26 08:18:17 UTC", "sightings": 1 }, { "indicator": "http://61.53.105.142:47091/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-26 08:17:08 UTC", "last_seen": "2026-03-26 08:17:08 UTC", "sightings": 1 }, { "indicator": "https://pastefy.app/vh2La66z/raw", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-26 08:15:07 UTC", "last_seen": "2026-03-26 08:15:07 UTC", "sightings": 1 }, { "indicator": "http://94.154.32.198:8040/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "indicator_type": "url", "source": "URLhaus", "tags": [ "connectwise", "msi", "rmm", "screenconnect" ], "first_seen": "2026-03-26 08:13:12 UTC", "last_seen": "2026-03-26 08:13:12 UTC", "sightings": 1 }, { "indicator": "http://94.154.32.198/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "indicator_type": "url", "source": "URLhaus", "tags": [ "connectwise", "msi", "rmm", "screenconnect" ], "first_seen": "2026-03-26 08:12:05 UTC", "last_seen": "2026-03-26 08:12:05 UTC", "sightings": 1 }, { "indicator": "http://125.43.80.232:49494/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 08:07:18 UTC", "last_seen": "2026-03-26 08:07:18 UTC", "sightings": 1 }, { "indicator": "http://125.43.80.232:49494/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 08:06:17 UTC", "last_seen": "2026-03-26 08:06:17 UTC", "sightings": 1 }, { "indicator": "http://123.9.197.202:54762/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 08:01:16 UTC", "last_seen": "2026-03-26 08:01:16 UTC", "sightings": 1 }, { "indicator": "http://119.187.176.237:43386/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 07:50:31 UTC", "last_seen": "2026-03-26 07:50:31 UTC", "sightings": 1 }, { "indicator": "http://83.217.208.93/files/ss.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "exe" ], "first_seen": "2026-03-26 07:49:09 UTC", "last_seen": "2026-03-26 07:49:09 UTC", "sightings": 1 }, { "indicator": "http://83.217.208.93/files/protect_stl.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "ChromElevator", "exe" ], "first_seen": "2026-03-26 07:49:08 UTC", "last_seen": "2026-03-26 07:49:08 UTC", "sightings": 1 }, { "indicator": "http://83.217.208.93/files/big.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "ChromElevator", "exe" ], "first_seen": "2026-03-26 07:49:08 UTC", "last_seen": "2026-03-26 07:49:08 UTC", "sightings": 1 }, { "indicator": "http://83.217.208.93/files/s.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "exe" ], "first_seen": "2026-03-26 07:49:06 UTC", "last_seen": "2026-03-26 07:49:06 UTC", "sightings": 1 }, { "indicator": "https://tr1g-cache.blugrid.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 07:41:06 UTC", "last_seen": "2026-03-26 07:41:06 UTC", "sightings": 1 }, { "indicator": "https://l0ad-mark.redbyte.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 07:35:09 UTC", "last_seen": "2026-03-26 07:35:09 UTC", "sightings": 1 }, { "indicator": "http://39.81.17.234:48616/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 07:34:19 UTC", "last_seen": "2026-03-26 07:34:19 UTC", "sightings": 1 }, { "indicator": "http://119.116.157.9:47424/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 07:32:37 UTC", "last_seen": "2026-03-26 07:32:37 UTC", "sightings": 1 }, { "indicator": "http://115.99.190.219:47940/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 07:30:17 UTC", "last_seen": "2026-03-26 07:30:17 UTC", "sightings": 1 }, { "indicator": "https://zen-fluxex.oakcore.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 07:26:11 UTC", "last_seen": "2026-03-26 07:26:11 UTC", "sightings": 1 }, { "indicator": "http://123.12.245.215:54943/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 07:22:17 UTC", "last_seen": "2026-03-26 07:22:17 UTC", "sightings": 1 }, { "indicator": "http://115.50.39.17:58208/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 07:22:16 UTC", "last_seen": "2026-03-26 07:22:16 UTC", "sightings": 1 }, { "indicator": "https://sercresta3.sunnode.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 07:19:11 UTC", "last_seen": "2026-03-26 07:19:11 UTC", "sightings": 1 }, { "indicator": "http://196.188.135.20:33751/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-26 07:12:24 UTC", "last_seen": "2026-03-26 07:12:24 UTC", "sightings": 1 }, { "indicator": "http://196.188.135.20:33751/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-26 07:12:24 UTC", "last_seen": "2026-03-26 07:12:24 UTC", "sightings": 1 }, { "indicator": "https://velg.deepoak.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 07:11:13 UTC", "last_seen": "2026-03-26 07:11:13 UTC", "sightings": 1 }, { "indicator": "http://117.215.63.122:41026/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 07:07:26 UTC", "last_seen": "2026-03-26 07:07:26 UTC", "sightings": 1 }, { "indicator": "http://115.99.190.219:47940/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 07:07:22 UTC", "last_seen": "2026-03-26 07:07:22 UTC", "sightings": 1 }, { "indicator": "https://akl1.northoak.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 07:07:16 UTC", "last_seen": "2026-03-26 07:07:16 UTC", "sightings": 1 }, { "indicator": "http://110.38.199.22:40197/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 07:07:16 UTC", "last_seen": "2026-03-26 07:07:16 UTC", "sightings": 1 }, { "indicator": "https://vdyrne1g.westpit.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 07:07:16 UTC", "last_seen": "2026-03-26 07:07:16 UTC", "sightings": 1 }, { "indicator": "https://i.postimg.cc/6p1gSWtz/image.png", "indicator_type": "url", "source": "URLhaus", "tags": [ "stego" ], "first_seen": "2026-03-26 07:07:14 UTC", "last_seen": "2026-03-26 07:07:14 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.67/iran.arc", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-26 07:07:12 UTC", "last_seen": "2026-03-26 07:07:12 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.67/iran.x86_64", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-26 07:07:12 UTC", "last_seen": "2026-03-26 07:07:12 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.67/iran.m68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-26 07:07:12 UTC", "last_seen": "2026-03-26 07:07:12 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.67/iran.armv7l", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-26 07:07:12 UTC", "last_seen": "2026-03-26 07:07:12 UTC", "sightings": 1 }, { "indicator": "http://94.26.106.197/x86", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-26 07:07:12 UTC", "last_seen": "2026-03-26 07:07:12 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.67/iran.mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-26 07:07:12 UTC", "last_seen": "2026-03-26 07:07:12 UTC", "sightings": 1 }, { "indicator": "http://192.227.183.143/a-r.m-4.ISIS", "indicator_type": "url", "source": "URLhaus", "tags": [ "gafgyt" ], "first_seen": "2026-03-26 07:07:12 UTC", "last_seen": "2026-03-26 07:07:12 UTC", "sightings": 1 }, { "indicator": "http://192.227.183.143/m-p.s-l.ISIS", "indicator_type": "url", "source": "URLhaus", "tags": [ "gafgyt" ], "first_seen": "2026-03-26 07:07:12 UTC", "last_seen": "2026-03-26 07:07:12 UTC", "sightings": 1 }, { "indicator": "http://192.227.183.143/s-h.4-.ISIS", "indicator_type": "url", "source": "URLhaus", "tags": [ "gafgyt" ], "first_seen": "2026-03-26 07:07:12 UTC", "last_seen": "2026-03-26 07:07:12 UTC", "sightings": 1 }, { "indicator": "http://192.227.183.143/m-i.p-s.ISIS", "indicator_type": "url", "source": "URLhaus", "tags": [ "gafgyt" ], "first_seen": "2026-03-26 07:07:12 UTC", "last_seen": "2026-03-26 07:07:12 UTC", "sightings": 1 }, { "indicator": "http://192.227.183.143/a-r.m-6.ISIS", "indicator_type": "url", "source": "URLhaus", "tags": [ "gafgyt" ], "first_seen": "2026-03-26 07:07:12 UTC", "last_seen": "2026-03-26 07:07:12 UTC", "sightings": 1 }, { "indicator": "http://94.26.106.197/mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-26 07:07:12 UTC", "last_seen": "2026-03-26 07:07:12 UTC", "sightings": 1 }, { "indicator": "http://192.227.183.143/x-8.6-.ISIS", "indicator_type": "url", "source": "URLhaus", "tags": [ "gafgyt" ], "first_seen": "2026-03-26 07:07:12 UTC", "last_seen": "2026-03-26 07:07:12 UTC", "sightings": 1 }, { "indicator": "http://192.227.183.143/p-p.c-.ISIS", "indicator_type": "url", "source": "URLhaus", "tags": [ "gafgyt" ], "first_seen": "2026-03-26 07:07:12 UTC", "last_seen": "2026-03-26 07:07:12 UTC", "sightings": 1 }, { "indicator": "http://192.227.183.143/a-r.m-7.ISIS", "indicator_type": "url", "source": "URLhaus", "tags": [ "gafgyt" ], "first_seen": "2026-03-26 07:07:12 UTC", "last_seen": "2026-03-26 07:07:12 UTC", "sightings": 1 }, { "indicator": "http://192.227.183.143/a-r.m-5.ISIS", "indicator_type": "url", "source": "URLhaus", "tags": [ "gafgyt" ], "first_seen": "2026-03-26 07:07:12 UTC", "last_seen": "2026-03-26 07:07:12 UTC", "sightings": 1 }, { "indicator": "http://94.26.106.197/arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-26 07:07:11 UTC", "last_seen": "2026-03-26 07:07:11 UTC", "sightings": 1 }, { "indicator": "http://94.26.106.197/m68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-26 07:07:11 UTC", "last_seen": "2026-03-26 07:07:11 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.67/iran.sh4", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-26 07:07:11 UTC", "last_seen": "2026-03-26 07:07:11 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.67/iran.i486", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-26 07:07:11 UTC", "last_seen": "2026-03-26 07:07:11 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.67/iran.sparc", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-26 07:07:11 UTC", "last_seen": "2026-03-26 07:07:11 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.67/iran.armv4l", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-26 07:07:11 UTC", "last_seen": "2026-03-26 07:07:11 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.67/iran.aarch64", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-26 07:07:11 UTC", "last_seen": "2026-03-26 07:07:11 UTC", "sightings": 1 }, { "indicator": "http://94.26.106.197/arm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-26 07:07:11 UTC", "last_seen": "2026-03-26 07:07:11 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.67/iran.armv5l", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-26 07:07:11 UTC", "last_seen": "2026-03-26 07:07:11 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.67/iran.powerpc", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-26 07:07:11 UTC", "last_seen": "2026-03-26 07:07:11 UTC", "sightings": 1 }, { "indicator": "http://94.26.106.197/arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-26 07:07:11 UTC", "last_seen": "2026-03-26 07:07:11 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.67/iran.armv6l", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-26 07:07:11 UTC", "last_seen": "2026-03-26 07:07:11 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.67/iran.mipsel", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-26 07:07:11 UTC", "last_seen": "2026-03-26 07:07:11 UTC", "sightings": 1 }, { "indicator": "http://94.26.106.197/sh4", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-26 07:07:11 UTC", "last_seen": "2026-03-26 07:07:11 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.168/files/7281753217/0WzaxgO.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-03-26 07:07:05 UTC", "last_seen": "2026-03-26 07:07:05 UTC", "sightings": 1 }, { "indicator": "http://94.26.106.197/ppc", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-26 07:07:04 UTC", "last_seen": "2026-03-26 07:07:04 UTC", "sightings": 1 }, { "indicator": "https://move-friendly-international-observed.trycloudflare.com/as.dll", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-26 06:51:10 UTC", "last_seen": "2026-03-26 06:51:10 UTC", "sightings": 1 }, { "indicator": "http://103.160.62.234/lol.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai", "script" ], "first_seen": "2026-03-26 06:51:09 UTC", "last_seen": "2026-03-26 06:51:09 UTC", "sightings": 1 }, { "indicator": "https://move-friendly-international-observed.trycloudflare.com/add_to_startup.bat", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-26 06:51:08 UTC", "last_seen": "2026-03-26 06:51:08 UTC", "sightings": 1 }, { "indicator": "http://202.155.10.112/shr", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-26 06:51:08 UTC", "last_seen": "2026-03-26 06:51:08 UTC", "sightings": 1 }, { "indicator": "https://move-friendly-international-observed.trycloudflare.com/payload.dat", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-26 06:51:08 UTC", "last_seen": "2026-03-26 06:51:08 UTC", "sightings": 1 }, { "indicator": "https://move-friendly-international-observed.trycloudflare.com/final.bat", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-26 06:51:08 UTC", "last_seen": "2026-03-26 06:51:08 UTC", "sightings": 1 }, { "indicator": "https://move-friendly-international-observed.trycloudflare.com/ccv.js", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-26 06:51:08 UTC", "last_seen": "2026-03-26 06:51:08 UTC", "sightings": 1 }, { "indicator": "https://move-friendly-international-observed.trycloudflare.com/oa.wsh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-26 06:51:08 UTC", "last_seen": "2026-03-26 06:51:08 UTC", "sightings": 1 }, { "indicator": "https://move-friendly-international-observed.trycloudflare.com/dokumente/DKM_00KS0095283.PDF.lnk", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-26 06:51:08 UTC", "last_seen": "2026-03-26 06:51:08 UTC", "sightings": 1 }, { "indicator": "https://move-friendly-international-observed.trycloudflare.com/files.zip", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-26 06:51:08 UTC", "last_seen": "2026-03-26 06:51:08 UTC", "sightings": 1 }, { "indicator": "tftp://202.155.10.112:69/shr", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-26 06:51:05 UTC", "last_seen": "2026-03-26 06:51:05 UTC", "sightings": 1 }, { "indicator": "http://185.205.226.250:58124/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 06:50:22 UTC", "last_seen": "2026-03-26 06:50:22 UTC", "sightings": 1 }, { "indicator": "https://suddencul.greenpit.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 06:48:09 UTC", "last_seen": "2026-03-26 06:48:09 UTC", "sightings": 1 }, { "indicator": "http://42.239.189.166:50394/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-26 06:47:06 UTC", "last_seen": "2026-03-26 06:47:06 UTC", "sightings": 1 }, { "indicator": "http://200.59.83.48:40804/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-26 06:47:06 UTC", "last_seen": "2026-03-26 06:47:06 UTC", "sightings": 1 }, { "indicator": "http://112.198.132.215:44000/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-26 06:43:19 UTC", "last_seen": "2026-03-26 06:43:19 UTC", "sightings": 1 }, { "indicator": "https://freightvalley.darkbay.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 06:41:10 UTC", "last_seen": "2026-03-26 06:41:10 UTC", "sightings": 1 }, { "indicator": "http://175.148.23.45:60301/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 06:39:08 UTC", "last_seen": "2026-03-26 06:39:08 UTC", "sightings": 1 }, { "indicator": "https://0rrpdvc.blueoak.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 06:37:09 UTC", "last_seen": "2026-03-26 06:37:09 UTC", "sightings": 1 }, { "indicator": "http://112.248.190.192:36122/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-26 06:27:08 UTC", "last_seen": "2026-03-26 06:27:08 UTC", "sightings": 1 }, { "indicator": "http://117.222.166.126:43230/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 06:26:21 UTC", "last_seen": "2026-03-26 06:26:21 UTC", "sightings": 1 }, { "indicator": "https://directdrive.blugrid.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 06:25:10 UTC", "last_seen": "2026-03-26 06:25:10 UTC", "sightings": 1 }, { "indicator": "http://110.36.80.166:35860/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-26 06:22:07 UTC", "last_seen": "2026-03-26 06:22:07 UTC", "sightings": 1 }, { "indicator": "https://5par-stream.blugrid.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 06:18:07 UTC", "last_seen": "2026-03-26 06:18:07 UTC", "sightings": 1 }, { "indicator": "http://110.37.19.6:41069/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-26 06:13:09 UTC", "last_seen": "2026-03-26 06:13:09 UTC", "sightings": 1 }, { "indicator": "https://woonort.redbyte.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 06:10:09 UTC", "last_seen": "2026-03-26 06:10:09 UTC", "sightings": 1 }, { "indicator": "http://112.239.101.228:35668/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 06:09:08 UTC", "last_seen": "2026-03-26 06:09:08 UTC", "sightings": 1 }, { "indicator": "https://xun7.redbyte.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 06:03:10 UTC", "last_seen": "2026-03-26 06:03:10 UTC", "sightings": 1 }, { "indicator": "http://182.127.80.27:53404/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-26 06:02:07 UTC", "last_seen": "2026-03-26 06:02:07 UTC", "sightings": 1 }, { "indicator": "http://117.222.166.126:43230/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 05:59:14 UTC", "last_seen": "2026-03-26 05:59:14 UTC", "sightings": 1 }, { "indicator": "http://110.39.226.207:56172/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 05:56:21 UTC", "last_seen": "2026-03-26 05:56:21 UTC", "sightings": 1 }, { "indicator": "http://110.37.28.119:60664/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 05:56:20 UTC", "last_seen": "2026-03-26 05:56:20 UTC", "sightings": 1 }, { "indicator": "https://d34l5-well.oakcore.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 05:55:10 UTC", "last_seen": "2026-03-26 05:55:10 UTC", "sightings": 1 }, { "indicator": "http://110.37.19.6:41069/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-26 05:49:07 UTC", "last_seen": "2026-03-26 05:49:07 UTC", "sightings": 1 }, { "indicator": "http://39.81.50.224:54306/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-26 05:47:08 UTC", "last_seen": "2026-03-26 05:47:08 UTC", "sightings": 1 }, { "indicator": "https://rain-wave.oakcore.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 05:47:08 UTC", "last_seen": "2026-03-26 05:47:08 UTC", "sightings": 1 }, { "indicator": "http://182.127.80.27:53404/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-26 05:42:07 UTC", "last_seen": "2026-03-26 05:42:07 UTC", "sightings": 1 }, { "indicator": "https://storapowe.sunnode.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 05:39:08 UTC", "last_seen": "2026-03-26 05:39:08 UTC", "sightings": 1 }, { "indicator": "http://110.39.226.207:56172/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 05:34:15 UTC", "last_seen": "2026-03-26 05:34:15 UTC", "sightings": 1 }, { "indicator": "http://60.23.239.53:47046/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 05:32:13 UTC", "last_seen": "2026-03-26 05:32:13 UTC", "sightings": 1 }, { "indicator": "https://crypt0-vector.sunnode.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 05:32:12 UTC", "last_seen": "2026-03-26 05:32:12 UTC", "sightings": 1 }, { "indicator": "http://110.37.28.119:60664/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 05:31:10 UTC", "last_seen": "2026-03-26 05:31:10 UTC", "sightings": 1 }, { "indicator": "http://125.40.123.244:57829/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 05:28:18 UTC", "last_seen": "2026-03-26 05:28:18 UTC", "sightings": 1 }, { "indicator": "http://117.212.37.185:34524/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 05:28:18 UTC", "last_seen": "2026-03-26 05:28:18 UTC", "sightings": 1 }, { "indicator": "http://39.81.50.224:54306/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-26 05:27:06 UTC", "last_seen": "2026-03-26 05:27:06 UTC", "sightings": 1 }, { "indicator": "http://182.127.165.110:47420/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 05:26:20 UTC", "last_seen": "2026-03-26 05:26:20 UTC", "sightings": 1 }, { "indicator": "https://cav33-phase.deepoak.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 05:25:10 UTC", "last_seen": "2026-03-26 05:25:10 UTC", "sightings": 1 }, { "indicator": "https://railvalidator.deepoak.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 05:19:11 UTC", "last_seen": "2026-03-26 05:19:11 UTC", "sightings": 1 }, { "indicator": "http://60.23.239.53:47046/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 05:12:17 UTC", "last_seen": "2026-03-26 05:12:17 UTC", "sightings": 1 }, { "indicator": "https://ic3-frame.westpit.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 05:12:08 UTC", "last_seen": "2026-03-26 05:12:08 UTC", "sightings": 1 }, { "indicator": "http://125.40.123.244:57829/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 05:09:13 UTC", "last_seen": "2026-03-26 05:09:13 UTC", "sightings": 1 }, { "indicator": "http://175.148.157.5:53194/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 05:09:13 UTC", "last_seen": "2026-03-26 05:09:13 UTC", "sightings": 1 }, { "indicator": "http://222.142.210.224:53627/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 05:07:17 UTC", "last_seen": "2026-03-26 05:07:17 UTC", "sightings": 1 }, { "indicator": "https://trans5-ring.westpit.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 05:05:10 UTC", "last_seen": "2026-03-26 05:05:10 UTC", "sightings": 1 }, { "indicator": "http://42.180.12.36:45414/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 05:02:07 UTC", "last_seen": "2026-03-26 05:02:07 UTC", "sightings": 1 }, { "indicator": "https://quorcresta.northoak.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 04:58:08 UTC", "last_seen": "2026-03-26 04:58:08 UTC", "sightings": 1 }, { "indicator": "http://182.127.165.110:47420/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 04:52:15 UTC", "last_seen": "2026-03-26 04:52:15 UTC", "sightings": 1 }, { "indicator": "https://tritideor3.northoak.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 04:52:07 UTC", "last_seen": "2026-03-26 04:52:07 UTC", "sightings": 1 }, { "indicator": "http://42.235.7.17:47408/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 04:47:17 UTC", "last_seen": "2026-03-26 04:47:17 UTC", "sightings": 1 }, { "indicator": "https://58edm.greenpit.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 04:45:10 UTC", "last_seen": "2026-03-26 04:45:10 UTC", "sightings": 1 }, { "indicator": "https://vaul5-vault.greenpit.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 04:39:07 UTC", "last_seen": "2026-03-26 04:39:07 UTC", "sightings": 1 }, { "indicator": "http://125.41.246.228:38180/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-26 04:37:06 UTC", "last_seen": "2026-03-26 04:37:06 UTC", "sightings": 1 }, { "indicator": "http://42.231.46.195:57833/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 04:36:18 UTC", "last_seen": "2026-03-26 04:36:18 UTC", "sightings": 1 }, { "indicator": "https://pubserv.darkbay.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 04:32:08 UTC", "last_seen": "2026-03-26 04:32:08 UTC", "sightings": 1 }, { "indicator": "http://182.126.118.21:43646/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-26 04:32:06 UTC", "last_seen": "2026-03-26 04:32:06 UTC", "sightings": 1 }, { "indicator": "http://117.212.37.185:34524/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 04:31:21 UTC", "last_seen": "2026-03-26 04:31:21 UTC", "sightings": 1 }, { "indicator": "http://181.103.0.149:32854/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 04:31:18 UTC", "last_seen": "2026-03-26 04:31:18 UTC", "sightings": 1 }, { "indicator": "http://125.41.246.228:38180/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-26 04:27:05 UTC", "last_seen": "2026-03-26 04:27:05 UTC", "sightings": 1 }, { "indicator": "http://110.37.28.65:35704/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-26 04:27:05 UTC", "last_seen": "2026-03-26 04:27:05 UTC", "sightings": 1 }, { "indicator": "https://neuron-graph.darkbay.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 04:25:11 UTC", "last_seen": "2026-03-26 04:25:11 UTC", "sightings": 1 }, { "indicator": "http://222.142.210.224:53627/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 04:20:18 UTC", "last_seen": "2026-03-26 04:20:18 UTC", "sightings": 1 }, { "indicator": "https://w8nzz58.blueoak.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 04:18:09 UTC", "last_seen": "2026-03-26 04:18:09 UTC", "sightings": 1 }, { "indicator": "https://flamemarket.blueoak.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 04:13:09 UTC", "last_seen": "2026-03-26 04:13:09 UTC", "sightings": 1 }, { "indicator": "http://113.238.120.76:58714/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 04:10:31 UTC", "last_seen": "2026-03-26 04:10:31 UTC", "sightings": 1 }, { "indicator": "http://115.50.39.17:58208/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 04:06:24 UTC", "last_seen": "2026-03-26 04:06:24 UTC", "sightings": 1 }, { "indicator": "https://ext4point.blugrid.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 04:05:12 UTC", "last_seen": "2026-03-26 04:05:12 UTC", "sightings": 1 }, { "indicator": "http://110.36.80.162:54193/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 04:02:20 UTC", "last_seen": "2026-03-26 04:02:20 UTC", "sightings": 1 }, { "indicator": "http://182.126.118.21:43646/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-26 04:02:06 UTC", "last_seen": "2026-03-26 04:02:06 UTC", "sightings": 1 }, { "indicator": "https://ext3data.blugrid.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 03:59:08 UTC", "last_seen": "2026-03-26 03:59:08 UTC", "sightings": 1 }, { "indicator": "http://110.37.28.65:35704/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-26 03:57:06 UTC", "last_seen": "2026-03-26 03:57:06 UTC", "sightings": 1 }, { "indicator": "https://ext2proxy.blugrid.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 03:53:08 UTC", "last_seen": "2026-03-26 03:53:08 UTC", "sightings": 1 }, { "indicator": "https://ext1infra.blugrid.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 03:47:13 UTC", "last_seen": "2026-03-26 03:47:13 UTC", "sightings": 1 }, { "indicator": "https://svc4sat.redbyte.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 03:44:09 UTC", "last_seen": "2026-03-26 03:44:09 UTC", "sightings": 1 }, { "indicator": "http://110.36.80.162:54193/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 03:33:17 UTC", "last_seen": "2026-03-26 03:33:17 UTC", "sightings": 1 }, { "indicator": "https://svc3core.redbyte.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 03:33:12 UTC", "last_seen": "2026-03-26 03:33:12 UTC", "sightings": 1 }, { "indicator": "http://94.244.36.34:60780/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-26 03:29:16 UTC", "last_seen": "2026-03-26 03:29:16 UTC", "sightings": 1 }, { "indicator": "https://svc2steel.redbyte.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 03:27:10 UTC", "last_seen": "2026-03-26 03:27:10 UTC", "sightings": 1 }, { "indicator": "http://117.242.238.240:49616/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-26 03:27:08 UTC", "last_seen": "2026-03-26 03:27:08 UTC", "sightings": 1 }, { "indicator": "http://94.244.36.34:60780/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-26 03:22:29 UTC", "last_seen": "2026-03-26 03:22:29 UTC", "sightings": 1 }, { "indicator": "https://svc1proc.redbyte.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 03:19:09 UTC", "last_seen": "2026-03-26 03:19:09 UTC", "sightings": 1 }, { "indicator": "http://125.40.225.181:38187/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-26 03:15:25 UTC", "last_seen": "2026-03-26 03:15:25 UTC", "sightings": 1 }, { "indicator": "http://115.55.192.186:52587/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 03:14:27 UTC", "last_seen": "2026-03-26 03:14:27 UTC", "sightings": 1 }, { "indicator": "https://dev4space.oakcore.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 03:12:07 UTC", "last_seen": "2026-03-26 03:12:07 UTC", "sightings": 1 }, { "indicator": "https://dev3field.oakcore.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 03:05:10 UTC", "last_seen": "2026-03-26 03:05:10 UTC", "sightings": 1 }, { "indicator": "https://dev2outer.oakcore.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 02:58:09 UTC", "last_seen": "2026-03-26 02:58:09 UTC", "sightings": 1 }, { "indicator": "http://219.157.154.32:56737/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 02:57:24 UTC", "last_seen": "2026-03-26 02:57:24 UTC", "sightings": 1 }, { "indicator": "http://175.165.82.231:48291/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 02:52:28 UTC", "last_seen": "2026-03-26 02:52:28 UTC", "sightings": 1 }, { "indicator": "http://59.97.181.87:41282/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 02:52:15 UTC", "last_seen": "2026-03-26 02:52:15 UTC", "sightings": 1 }, { "indicator": "https://dev1proc.oakcore.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 02:51:08 UTC", "last_seen": "2026-03-26 02:51:08 UTC", "sightings": 1 }, { "indicator": "https://cl4path.sunnode.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 02:44:07 UTC", "last_seen": "2026-03-26 02:44:07 UTC", "sightings": 1 }, { "indicator": "http://219.157.154.32:56737/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 02:39:17 UTC", "last_seen": "2026-03-26 02:39:17 UTC", "sightings": 1 }, { "indicator": "http://27.37.85.76:40650/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 02:38:16 UTC", "last_seen": "2026-03-26 02:38:16 UTC", "sightings": 1 }, { "indicator": "https://cl3view.sunnode.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 02:38:08 UTC", "last_seen": "2026-03-26 02:38:08 UTC", "sightings": 1 }, { "indicator": "http://110.39.233.226:55799/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 02:35:13 UTC", "last_seen": "2026-03-26 02:35:13 UTC", "sightings": 1 }, { "indicator": "http://115.56.159.66:59743/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 02:35:13 UTC", "last_seen": "2026-03-26 02:35:13 UTC", "sightings": 1 }, { "indicator": "http://59.98.82.57:58311/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 02:33:07 UTC", "last_seen": "2026-03-26 02:33:07 UTC", "sightings": 1 }, { "indicator": "https://cl2point.sunnode.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 02:31:12 UTC", "last_seen": "2026-03-26 02:31:12 UTC", "sightings": 1 }, { "indicator": "http://117.204.167.10:36589/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 02:29:21 UTC", "last_seen": "2026-03-26 02:29:21 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.168/files/7281753217/vArWrE8.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543", "rustystealer" ], "first_seen": "2026-03-26 02:29:07 UTC", "last_seen": "2026-03-26 02:29:07 UTC", "sightings": 1 }, { "indicator": "http://110.39.235.67:56108/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 02:26:11 UTC", "last_seen": "2026-03-26 02:26:11 UTC", "sightings": 1 }, { "indicator": "https://cl1proc.sunnode.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 02:25:10 UTC", "last_seen": "2026-03-26 02:25:10 UTC", "sightings": 1 }, { "indicator": "http://175.165.82.231:48291/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 02:24:25 UTC", "last_seen": "2026-03-26 02:24:25 UTC", "sightings": 1 }, { "indicator": "http://61.53.98.138:51040/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 02:22:12 UTC", "last_seen": "2026-03-26 02:22:12 UTC", "sightings": 1 }, { "indicator": "http://59.97.181.87:41282/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 02:21:18 UTC", "last_seen": "2026-03-26 02:21:18 UTC", "sightings": 1 }, { "indicator": "https://ext4view.deepoak.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 02:17:07 UTC", "last_seen": "2026-03-26 02:17:07 UTC", "sightings": 1 }, { "indicator": "http://110.39.233.226:55799/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 02:13:12 UTC", "last_seen": "2026-03-26 02:13:12 UTC", "sightings": 1 }, { "indicator": "https://ext3ghost.deepoak.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 02:10:11 UTC", "last_seen": "2026-03-26 02:10:11 UTC", "sightings": 1 }, { "indicator": "https://ext2core.deepoak.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 02:04:07 UTC", "last_seen": "2026-03-26 02:04:07 UTC", "sightings": 1 }, { "indicator": "http://110.39.235.67:56108/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 02:03:19 UTC", "last_seen": "2026-03-26 02:03:19 UTC", "sightings": 1 }, { "indicator": "http://117.247.208.62:41974/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-26 02:02:09 UTC", "last_seen": "2026-03-26 02:02:09 UTC", "sightings": 1 }, { "indicator": "http://110.39.238.29:45941/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-26 02:02:07 UTC", "last_seen": "2026-03-26 02:02:07 UTC", "sightings": 1 }, { "indicator": "http://185.205.226.250:58124/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-26 02:02:06 UTC", "last_seen": "2026-03-26 02:02:06 UTC", "sightings": 1 }, { "indicator": "https://ext1proc.deepoak.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 01:58:12 UTC", "last_seen": "2026-03-26 01:58:12 UTC", "sightings": 1 }, { "indicator": "http://117.209.12.203:36412/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 01:56:13 UTC", "last_seen": "2026-03-26 01:56:13 UTC", "sightings": 1 }, { "indicator": "http://61.53.98.138:51040/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 01:55:19 UTC", "last_seen": "2026-03-26 01:55:19 UTC", "sightings": 1 }, { "indicator": "https://svc4link.westpit.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 01:51:07 UTC", "last_seen": "2026-03-26 01:51:07 UTC", "sightings": 1 }, { "indicator": "https://svc3user.westpit.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 01:44:08 UTC", "last_seen": "2026-03-26 01:44:08 UTC", "sightings": 1 }, { "indicator": "http://117.209.12.239:57242/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 01:42:22 UTC", "last_seen": "2026-03-26 01:42:22 UTC", "sightings": 1 }, { "indicator": "http://110.39.238.29:45941/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-26 01:42:06 UTC", "last_seen": "2026-03-26 01:42:06 UTC", "sightings": 1 }, { "indicator": "https://svc2base.westpit.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 01:38:09 UTC", "last_seen": "2026-03-26 01:38:09 UTC", "sightings": 1 }, { "indicator": "http://59.96.141.15:40993/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 01:33:14 UTC", "last_seen": "2026-03-26 01:33:14 UTC", "sightings": 1 }, { "indicator": "https://svc1infra.westpit.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 01:32:08 UTC", "last_seen": "2026-03-26 01:32:08 UTC", "sightings": 1 }, { "indicator": "https://dev4work.northoak.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 01:25:09 UTC", "last_seen": "2026-03-26 01:25:09 UTC", "sightings": 1 }, { "indicator": "http://110.39.235.170:52862/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 01:19:07 UTC", "last_seen": "2026-03-26 01:19:07 UTC", "sightings": 1 }, { "indicator": "https://dev3local.northoak.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 01:18:10 UTC", "last_seen": "2026-03-26 01:18:10 UTC", "sightings": 1 }, { "indicator": "http://59.96.141.15:40993/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 01:17:20 UTC", "last_seen": "2026-03-26 01:17:20 UTC", "sightings": 1 }, { "indicator": "http://59.97.177.122:35785/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-26 01:17:07 UTC", "last_seen": "2026-03-26 01:17:07 UTC", "sightings": 1 }, { "indicator": "https://dev2power.northoak.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 01:13:09 UTC", "last_seen": "2026-03-26 01:13:09 UTC", "sightings": 1 }, { "indicator": "https://dev1proc.northoak.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 01:05:11 UTC", "last_seen": "2026-03-26 01:05:11 UTC", "sightings": 1 }, { "indicator": "http://27.197.137.199:42811/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-26 01:02:18 UTC", "last_seen": "2026-03-26 01:02:18 UTC", "sightings": 1 }, { "indicator": "http://117.247.208.62:41974/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-26 01:02:13 UTC", "last_seen": "2026-03-26 01:02:13 UTC", "sightings": 1 }, { "indicator": "https://cl4link.greenpit.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 00:59:09 UTC", "last_seen": "2026-03-26 00:59:09 UTC", "sightings": 1 }, { "indicator": "http://144.48.123.149:58295/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 00:58:14 UTC", "last_seen": "2026-03-26 00:58:14 UTC", "sightings": 1 }, { "indicator": "http://201.131.163.246:40215/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-26 00:57:06 UTC", "last_seen": "2026-03-26 00:57:06 UTC", "sightings": 1 }, { "indicator": "http://175.11.89.31:45962/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-26 00:52:17 UTC", "last_seen": "2026-03-26 00:52:17 UTC", "sightings": 1 }, { "indicator": "https://cl3dev.greenpit.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 00:52:10 UTC", "last_seen": "2026-03-26 00:52:10 UTC", "sightings": 1 }, { "indicator": "http://144.48.123.149:58295/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 00:50:18 UTC", "last_seen": "2026-03-26 00:50:18 UTC", "sightings": 1 }, { "indicator": "http://42.229.217.213:49085/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 00:50:17 UTC", "last_seen": "2026-03-26 00:50:17 UTC", "sightings": 1 }, { "indicator": "http://110.37.115.21:39633/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 00:47:11 UTC", "last_seen": "2026-03-26 00:47:11 UTC", "sightings": 1 }, { "indicator": "http://175.11.89.31:45962/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-26 00:46:16 UTC", "last_seen": "2026-03-26 00:46:16 UTC", "sightings": 1 }, { "indicator": "https://cl2remote.greenpit.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 00:44:08 UTC", "last_seen": "2026-03-26 00:44:08 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.168/files/5876083921/nP8xgws.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-03-26 00:42:10 UTC", "last_seen": "2026-03-26 00:42:10 UTC", "sightings": 1 }, { "indicator": "http://201.131.163.246:40215/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-26 00:42:07 UTC", "last_seen": "2026-03-26 00:42:07 UTC", "sightings": 1 }, { "indicator": "http://117.211.32.142:42792/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 00:39:17 UTC", "last_seen": "2026-03-26 00:39:17 UTC", "sightings": 1 }, { "indicator": "http://27.197.137.199:42811/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-26 00:39:16 UTC", "last_seen": "2026-03-26 00:39:16 UTC", "sightings": 1 }, { "indicator": "https://cl1store.greenpit.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 00:39:08 UTC", "last_seen": "2026-03-26 00:39:08 UTC", "sightings": 1 }, { "indicator": "http://42.233.144.126:42886/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 00:36:13 UTC", "last_seen": "2026-03-26 00:36:13 UTC", "sightings": 1 }, { "indicator": "https://ext4sync.darkbay.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 00:31:07 UTC", "last_seen": "2026-03-26 00:31:07 UTC", "sightings": 1 }, { "indicator": "http://27.202.39.59:53139/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 00:27:16 UTC", "last_seen": "2026-03-26 00:27:16 UTC", "sightings": 1 }, { "indicator": "https://ext3gate.darkbay.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 00:25:09 UTC", "last_seen": "2026-03-26 00:25:09 UTC", "sightings": 1 }, { "indicator": "http://115.55.230.152:43935/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 00:21:15 UTC", "last_seen": "2026-03-26 00:21:15 UTC", "sightings": 1 }, { "indicator": "https://ext2proc.darkbay.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 00:18:09 UTC", "last_seen": "2026-03-26 00:18:09 UTC", "sightings": 1 }, { "indicator": "http://42.229.217.213:49085/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 00:16:09 UTC", "last_seen": "2026-03-26 00:16:09 UTC", "sightings": 1 }, { "indicator": "https://ext1meta.darkbay.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 00:12:09 UTC", "last_seen": "2026-03-26 00:12:09 UTC", "sightings": 1 }, { "indicator": "http://42.233.144.126:42886/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 00:10:20 UTC", "last_seen": "2026-03-26 00:10:20 UTC", "sightings": 1 }, { "indicator": "http://60.22.85.240:50281/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-26 00:10:19 UTC", "last_seen": "2026-03-26 00:10:19 UTC", "sightings": 1 }, { "indicator": "http://110.39.246.84:54212/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-26 00:07:07 UTC", "last_seen": "2026-03-26 00:07:07 UTC", "sightings": 1 }, { "indicator": "https://svc4static.blueoak.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-26 00:05:09 UTC", "last_seen": "2026-03-26 00:05:09 UTC", "sightings": 1 }, { "indicator": "https://svc3edge.blueoak.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 23:59:08 UTC", "last_seen": "2026-03-25 23:59:08 UTC", "sightings": 1 }, { "indicator": "http://115.55.230.152:43935/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 23:58:22 UTC", "last_seen": "2026-03-25 23:58:22 UTC", "sightings": 1 }, { "indicator": "https://56lr0t2n.moondev.digital/?=check&&actmn=qQksAcwGAGKJjjPe", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-25 23:57:08 UTC", "last_seen": "2026-03-25 23:57:08 UTC", "sightings": 1 }, { "indicator": "http://27.202.39.59:53139/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 23:52:29 UTC", "last_seen": "2026-03-25 23:52:29 UTC", "sightings": 1 }, { "indicator": "https://svc2data.blueoak.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 23:52:08 UTC", "last_seen": "2026-03-25 23:52:08 UTC", "sightings": 1 }, { "indicator": "http://117.243.161.53:52677/Mozi.m", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mips", "Mozi", "ua-wget" ], "first_seen": "2026-03-25 23:48:20 UTC", "last_seen": "2026-03-25 23:48:20 UTC", "sightings": 1 }, { "indicator": "http://117.208.160.63:53581/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 23:46:17 UTC", "last_seen": "2026-03-25 23:46:17 UTC", "sightings": 1 }, { "indicator": "https://svc1sync.blueoak.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 23:45:11 UTC", "last_seen": "2026-03-25 23:45:11 UTC", "sightings": 1 }, { "indicator": "http://125.42.42.78:52632/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-25 23:42:08 UTC", "last_seen": "2026-03-25 23:42:08 UTC", "sightings": 1 }, { "indicator": "http://60.22.85.240:50281/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 23:40:16 UTC", "last_seen": "2026-03-25 23:40:16 UTC", "sightings": 1 }, { "indicator": "https://xo5q.dawnspire.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 23:39:07 UTC", "last_seen": "2026-03-25 23:39:07 UTC", "sightings": 1 }, { "indicator": "https://zkgvelgx.amber-drift.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 23:32:07 UTC", "last_seen": "2026-03-25 23:32:07 UTC", "sightings": 1 }, { "indicator": "https://gustorganize.gl1mmeroak.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 23:26:07 UTC", "last_seen": "2026-03-25 23:26:07 UTC", "sightings": 1 }, { "indicator": "http://125.44.191.34:52363/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 23:21:16 UTC", "last_seen": "2026-03-25 23:21:16 UTC", "sightings": 1 }, { "indicator": "https://g8uxn2.crestfall.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 23:18:08 UTC", "last_seen": "2026-03-25 23:18:08 UTC", "sightings": 1 }, { "indicator": "http://123.14.234.125:53887/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 23:13:16 UTC", "last_seen": "2026-03-25 23:13:16 UTC", "sightings": 1 }, { "indicator": "https://ultra-s1ow.velorune.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 23:12:10 UTC", "last_seen": "2026-03-25 23:12:10 UTC", "sightings": 1 }, { "indicator": "http://123.5.145.245:40661/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 23:11:07 UTC", "last_seen": "2026-03-25 23:11:07 UTC", "sightings": 1 }, { "indicator": "http://219.155.200.51:44249/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 23:07:21 UTC", "last_seen": "2026-03-25 23:07:21 UTC", "sightings": 1 }, { "indicator": "http://221.0.209.98:36551/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 23:05:17 UTC", "last_seen": "2026-03-25 23:05:17 UTC", "sightings": 1 }, { "indicator": "https://ducond.brisklume.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 23:05:08 UTC", "last_seen": "2026-03-25 23:05:08 UTC", "sightings": 1 }, { "indicator": "https://export-array.f0xharbor.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 22:59:09 UTC", "last_seen": "2026-03-25 22:59:09 UTC", "sightings": 1 }, { "indicator": "http://117.209.90.211:48463/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 22:56:20 UTC", "last_seen": "2026-03-25 22:56:20 UTC", "sightings": 1 }, { "indicator": "http://117.26.226.41:43258/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-25 22:55:22 UTC", "last_seen": "2026-03-25 22:55:22 UTC", "sightings": 1 }, { "indicator": "https://nor-crestum.cinderpeak.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 22:53:08 UTC", "last_seen": "2026-03-25 22:53:08 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.168/files/8042875554/QxknRPs.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey", "QuasarRAT" ], "first_seen": "2026-03-25 22:52:06 UTC", "last_seen": "2026-03-25 22:52:06 UTC", "sightings": 1 }, { "indicator": "http://123.5.145.245:40661/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 22:48:11 UTC", "last_seen": "2026-03-25 22:48:11 UTC", "sightings": 1 }, { "indicator": "http://115.55.222.214:54750/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 22:46:20 UTC", "last_seen": "2026-03-25 22:46:20 UTC", "sightings": 1 }, { "indicator": "https://scan-trans.aurorift.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 22:46:08 UTC", "last_seen": "2026-03-25 22:46:08 UTC", "sightings": 1 }, { "indicator": "http://59.89.17.166:40106/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 22:44:14 UTC", "last_seen": "2026-03-25 22:44:14 UTC", "sightings": 1 }, { "indicator": "https://rout34-point.stonemuse.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 22:38:08 UTC", "last_seen": "2026-03-25 22:38:08 UTC", "sightings": 1 }, { "indicator": "http://117.209.90.211:48463/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 22:33:14 UTC", "last_seen": "2026-03-25 22:33:14 UTC", "sightings": 1 }, { "indicator": "http://112.248.190.192:36122/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 22:33:12 UTC", "last_seen": "2026-03-25 22:33:12 UTC", "sightings": 1 }, { "indicator": "http://117.209.91.46:38256/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-25 22:32:08 UTC", "last_seen": "2026-03-25 22:32:08 UTC", "sightings": 1 }, { "indicator": "https://hyper-tr4c.n1ghtridge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 22:32:08 UTC", "last_seen": "2026-03-25 22:32:08 UTC", "sightings": 1 }, { "indicator": "http://119.167.1.100:37877/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-25 22:27:08 UTC", "last_seen": "2026-03-25 22:27:08 UTC", "sightings": 1 }, { "indicator": "https://dr4w9-drive.cl0udmere.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 22:26:08 UTC", "last_seen": "2026-03-25 22:26:08 UTC", "sightings": 1 }, { "indicator": "https://dynlithar4.thornbyte.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 22:20:10 UTC", "last_seen": "2026-03-25 22:20:10 UTC", "sightings": 1 }, { "indicator": "http://5.175.192.186/arm", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-25 22:17:20 UTC", "last_seen": "2026-03-25 22:17:20 UTC", "sightings": 1 }, { "indicator": "http://5.175.192.186/arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-25 22:17:20 UTC", "last_seen": "2026-03-25 22:17:20 UTC", "sightings": 1 }, { "indicator": "http://5.175.192.186/amd64", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-25 22:17:20 UTC", "last_seen": "2026-03-25 22:17:20 UTC", "sightings": 1 }, { "indicator": "http://5.175.192.186/arm64", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-25 22:17:20 UTC", "last_seen": "2026-03-25 22:17:20 UTC", "sightings": 1 }, { "indicator": "http://5.175.192.186/x86", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-25 22:17:20 UTC", "last_seen": "2026-03-25 22:17:20 UTC", "sightings": 1 }, { "indicator": "http://5.175.192.186/arm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-25 22:17:09 UTC", "last_seen": "2026-03-25 22:17:09 UTC", "sightings": 1 }, { "indicator": "http://5.175.192.186/i386", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-25 22:17:09 UTC", "last_seen": "2026-03-25 22:17:09 UTC", "sightings": 1 }, { "indicator": "http://5.175.192.186/android_arm64", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-25 22:17:09 UTC", "last_seen": "2026-03-25 22:17:09 UTC", "sightings": 1 }, { "indicator": "http://5.175.192.186/armv7l", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-25 22:17:09 UTC", "last_seen": "2026-03-25 22:17:09 UTC", "sightings": 1 }, { "indicator": "http://5.175.192.186/bot.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "ua-wget" ], "first_seen": "2026-03-25 22:17:05 UTC", "last_seen": "2026-03-25 22:17:05 UTC", "sightings": 1 }, { "indicator": "http://123.183.196.100:57863/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-25 22:15:19 UTC", "last_seen": "2026-03-25 22:15:19 UTC", "sightings": 1 }, { "indicator": "https://9yc1.fablegrove.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 22:13:07 UTC", "last_seen": "2026-03-25 22:13:07 UTC", "sightings": 1 }, { "indicator": "http://117.208.160.63:53581/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 22:12:11 UTC", "last_seen": "2026-03-25 22:12:11 UTC", "sightings": 1 }, { "indicator": "http://117.248.27.2:48733/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 22:10:18 UTC", "last_seen": "2026-03-25 22:10:18 UTC", "sightings": 1 }, { "indicator": "https://hyp3-track.z7hire.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 22:07:11 UTC", "last_seen": "2026-03-25 22:07:11 UTC", "sightings": 1 }, { "indicator": "http://36.70.224.218:38771/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-25 22:07:07 UTC", "last_seen": "2026-03-25 22:07:07 UTC", "sightings": 1 }, { "indicator": "http://117.245.214.144:35306/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 22:05:19 UTC", "last_seen": "2026-03-25 22:05:19 UTC", "sightings": 1 }, { "indicator": "http://123.10.233.185:42302/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 22:03:20 UTC", "last_seen": "2026-03-25 22:03:20 UTC", "sightings": 1 }, { "indicator": "http://42.227.128.138:49372/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 22:02:22 UTC", "last_seen": "2026-03-25 22:02:22 UTC", "sightings": 1 }, { "indicator": "http://119.167.1.100:37877/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-25 22:02:07 UTC", "last_seen": "2026-03-25 22:02:07 UTC", "sightings": 1 }, { "indicator": "https://soldra1ar.tires8f.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 21:59:07 UTC", "last_seen": "2026-03-25 21:59:07 UTC", "sightings": 1 }, { "indicator": "http://117.209.5.176:58337/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 21:55:22 UTC", "last_seen": "2026-03-25 21:55:22 UTC", "sightings": 1 }, { "indicator": "https://modernbranc.cl0udmere.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 21:52:08 UTC", "last_seen": "2026-03-25 21:52:08 UTC", "sightings": 1 }, { "indicator": "http://196.189.98.77:58068/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-25 21:50:23 UTC", "last_seen": "2026-03-25 21:50:23 UTC", "sightings": 1 }, { "indicator": "http://182.117.70.154:56787/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 21:49:21 UTC", "last_seen": "2026-03-25 21:49:21 UTC", "sightings": 1 }, { "indicator": "http://111.173.158.227:37648/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-25 21:47:07 UTC", "last_seen": "2026-03-25 21:47:07 UTC", "sightings": 1 }, { "indicator": "http://123.183.196.100:57863/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-25 21:46:23 UTC", "last_seen": "2026-03-25 21:46:23 UTC", "sightings": 1 }, { "indicator": "https://dyntideet6.cl0udmere.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 21:46:09 UTC", "last_seen": "2026-03-25 21:46:09 UTC", "sightings": 1 }, { "indicator": "http://117.245.214.144:35306/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 21:43:20 UTC", "last_seen": "2026-03-25 21:43:20 UTC", "sightings": 1 }, { "indicator": "http://117.248.27.2:48733/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 21:42:18 UTC", "last_seen": "2026-03-25 21:42:18 UTC", "sightings": 1 }, { "indicator": "http://42.53.123.47:42748/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 21:42:17 UTC", "last_seen": "2026-03-25 21:42:17 UTC", "sightings": 1 }, { "indicator": "http://36.70.224.218:38771/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-25 21:42:10 UTC", "last_seen": "2026-03-25 21:42:10 UTC", "sightings": 1 }, { "indicator": "http://218.60.176.173:51705/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-25 21:42:07 UTC", "last_seen": "2026-03-25 21:42:07 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.168/files/8317177049/7tdJ9Hz.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543", "gcleaner" ], "first_seen": "2026-03-25 21:41:06 UTC", "last_seen": "2026-03-25 21:41:06 UTC", "sightings": 1 }, { "indicator": "https://geo-tr4c.cl0udmere.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 21:39:08 UTC", "last_seen": "2026-03-25 21:39:08 UTC", "sightings": 1 }, { "indicator": "https://talmark9et.cl0udmere.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 21:32:10 UTC", "last_seen": "2026-03-25 21:32:10 UTC", "sightings": 1 }, { "indicator": "http://115.50.64.138:35216/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-25 21:32:07 UTC", "last_seen": "2026-03-25 21:32:07 UTC", "sightings": 1 }, { "indicator": "http://196.189.98.77:58068/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-25 21:31:19 UTC", "last_seen": "2026-03-25 21:31:19 UTC", "sightings": 1 }, { "indicator": "https://delta-span.cl0udmere.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 21:27:07 UTC", "last_seen": "2026-03-25 21:27:07 UTC", "sightings": 1 }, { "indicator": "http://111.173.158.227:37648/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-25 21:22:08 UTC", "last_seen": "2026-03-25 21:22:08 UTC", "sightings": 1 }, { "indicator": "http://117.209.5.176:58337/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 21:21:25 UTC", "last_seen": "2026-03-25 21:21:25 UTC", "sightings": 1 }, { "indicator": "https://kzta8dl.thornbyte.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 21:19:11 UTC", "last_seen": "2026-03-25 21:19:11 UTC", "sightings": 1 }, { "indicator": "http://182.117.70.154:56787/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 21:17:21 UTC", "last_seen": "2026-03-25 21:17:21 UTC", "sightings": 1 }, { "indicator": "https://cr4ft-vector.thornbyte.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 21:13:08 UTC", "last_seen": "2026-03-25 21:13:08 UTC", "sightings": 1 }, { "indicator": "http://115.50.64.138:35216/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-25 21:07:07 UTC", "last_seen": "2026-03-25 21:07:07 UTC", "sightings": 1 }, { "indicator": "https://stit6-sync.thornbyte.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 21:06:10 UTC", "last_seen": "2026-03-25 21:06:10 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.168/files/7776573655/mf5GGNF.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543", "gcleaner" ], "first_seen": "2026-03-25 21:03:05 UTC", "last_seen": "2026-03-25 21:03:05 UTC", "sightings": 1 }, { "indicator": "https://rolzq.thornbyte.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 20:59:09 UTC", "last_seen": "2026-03-25 20:59:09 UTC", "sightings": 1 }, { "indicator": "https://sendit.sh/mVBmJ/dsfdsfdsf.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai", "sh", "ua-wget" ], "first_seen": "2026-03-25 20:55:23 UTC", "last_seen": "2026-03-25 20:55:23 UTC", "sightings": 1 }, { "indicator": "https://proto-d0ck.thornbyte.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 20:52:09 UTC", "last_seen": "2026-03-25 20:52:09 UTC", "sightings": 1 }, { "indicator": "http://110.39.235.153:35792/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 20:51:25 UTC", "last_seen": "2026-03-25 20:51:25 UTC", "sightings": 1 }, { "indicator": "https://4dau.fablegrove.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 20:47:08 UTC", "last_seen": "2026-03-25 20:47:08 UTC", "sightings": 1 }, { "indicator": "http://115.48.147.84:44518/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-25 20:42:20 UTC", "last_seen": "2026-03-25 20:42:20 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.168/files/7180287117/Gb7grdV.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey", "OffLoader" ], "first_seen": "2026-03-25 20:41:12 UTC", "last_seen": "2026-03-25 20:41:12 UTC", "sightings": 1 }, { "indicator": "https://colotone.fablegrove.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 20:40:09 UTC", "last_seen": "2026-03-25 20:40:09 UTC", "sightings": 1 }, { "indicator": "http://219.154.144.30:44859/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 20:33:15 UTC", "last_seen": "2026-03-25 20:33:15 UTC", "sightings": 1 }, { "indicator": "https://dyn-coreen.fablegrove.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 20:33:07 UTC", "last_seen": "2026-03-25 20:33:07 UTC", "sightings": 1 }, { "indicator": "http://110.37.100.152:35090/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 20:32:11 UTC", "last_seen": "2026-03-25 20:32:11 UTC", "sightings": 1 }, { "indicator": "http://110.39.235.153:35792/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 20:29:11 UTC", "last_seen": "2026-03-25 20:29:11 UTC", "sightings": 1 }, { "indicator": "https://wolfreel.fablegrove.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 20:27:10 UTC", "last_seen": "2026-03-25 20:27:10 UTC", "sightings": 1 }, { "indicator": "http://112.198.178.139:40566/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-25 20:26:13 UTC", "last_seen": "2026-03-25 20:26:13 UTC", "sightings": 1 }, { "indicator": "http://196.189.101.82:45484/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-25 20:23:10 UTC", "last_seen": "2026-03-25 20:23:10 UTC", "sightings": 1 }, { "indicator": "https://qu4r-bridge.fablegrove.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 20:19:09 UTC", "last_seen": "2026-03-25 20:19:09 UTC", "sightings": 1 }, { "indicator": "http://115.48.147.84:44518/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-25 20:17:06 UTC", "last_seen": "2026-03-25 20:17:06 UTC", "sightings": 1 }, { "indicator": "http://219.154.144.30:44859/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 20:15:21 UTC", "last_seen": "2026-03-25 20:15:21 UTC", "sightings": 1 }, { "indicator": "https://ion0-frame.z7hire.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 20:14:09 UTC", "last_seen": "2026-03-25 20:14:09 UTC", "sightings": 1 }, { "indicator": "http://110.36.30.247:58635/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 20:13:10 UTC", "last_seen": "2026-03-25 20:13:10 UTC", "sightings": 1 }, { "indicator": "https://balanciphe.z7hire.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 20:11:07 UTC", "last_seen": "2026-03-25 20:11:07 UTC", "sightings": 1 }, { "indicator": "http://110.37.100.152:35090/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 20:08:17 UTC", "last_seen": "2026-03-25 20:08:17 UTC", "sightings": 1 }, { "indicator": "http://112.198.178.139:40566/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-25 20:08:17 UTC", "last_seen": "2026-03-25 20:08:17 UTC", "sightings": 1 }, { "indicator": "http://196.189.101.82:45484/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-25 20:06:08 UTC", "last_seen": "2026-03-25 20:06:08 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.168/files/7281753217/CxF0lwD.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543", "rustystealer" ], "first_seen": "2026-03-25 20:06:08 UTC", "last_seen": "2026-03-25 20:06:08 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.168/files/6099399783/FyZhvph.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-03-25 20:00:09 UTC", "last_seen": "2026-03-25 20:00:09 UTC", "sightings": 1 }, { "indicator": "https://rl90o.z7hire.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 20:00:09 UTC", "last_seen": "2026-03-25 20:00:09 UTC", "sightings": 1 }, { "indicator": "http://222.134.173.187:35885/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 19:56:09 UTC", "last_seen": "2026-03-25 19:56:09 UTC", "sightings": 1 }, { "indicator": "http://119.179.239.206:35221/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 19:54:17 UTC", "last_seen": "2026-03-25 19:54:17 UTC", "sightings": 1 }, { "indicator": "https://zennexis3.z7hire.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 19:53:09 UTC", "last_seen": "2026-03-25 19:53:09 UTC", "sightings": 1 }, { "indicator": "http://27.215.126.100:55666/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 19:52:17 UTC", "last_seen": "2026-03-25 19:52:17 UTC", "sightings": 1 }, { "indicator": "https://t0rr3-phase.z7hire.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 19:47:10 UTC", "last_seen": "2026-03-25 19:47:10 UTC", "sightings": 1 }, { "indicator": "https://5wgvh3.tires8f.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 19:41:12 UTC", "last_seen": "2026-03-25 19:41:12 UTC", "sightings": 1 }, { "indicator": "http://222.134.173.187:35885/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 19:34:10 UTC", "last_seen": "2026-03-25 19:34:10 UTC", "sightings": 1 }, { "indicator": "https://sub-c0ve.tires8f.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 19:34:07 UTC", "last_seen": "2026-03-25 19:34:07 UTC", "sightings": 1 }, { "indicator": "http://27.221.244.100:51019/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-25 19:32:06 UTC", "last_seen": "2026-03-25 19:32:06 UTC", "sightings": 1 }, { "indicator": "https://castfox.tires8f.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 19:27:06 UTC", "last_seen": "2026-03-25 19:27:06 UTC", "sightings": 1 }, { "indicator": "http://59.96.136.232:33748/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 19:25:15 UTC", "last_seen": "2026-03-25 19:25:15 UTC", "sightings": 1 }, { "indicator": "http://27.215.126.100:55666/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 19:22:18 UTC", "last_seen": "2026-03-25 19:22:18 UTC", "sightings": 1 }, { "indicator": "http://117.209.23.169:33360/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-25 19:22:15 UTC", "last_seen": "2026-03-25 19:22:15 UTC", "sightings": 1 }, { "indicator": "https://jhculxyr.tires8f.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 19:20:12 UTC", "last_seen": "2026-03-25 19:20:12 UTC", "sightings": 1 }, { "indicator": "https://arklithum.tires8f.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 19:13:12 UTC", "last_seen": "2026-03-25 19:13:12 UTC", "sightings": 1 }, { "indicator": "http://59.96.136.232:33748/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 19:10:16 UTC", "last_seen": "2026-03-25 19:10:16 UTC", "sightings": 1 }, { "indicator": "http://110.36.1.168:41315/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 19:10:15 UTC", "last_seen": "2026-03-25 19:10:15 UTC", "sightings": 1 }, { "indicator": "https://bran-crest.f0xharbor.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 19:07:09 UTC", "last_seen": "2026-03-25 19:07:09 UTC", "sightings": 1 }, { "indicator": "https://arraybirc.f0xharbor.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 19:05:09 UTC", "last_seen": "2026-03-25 19:05:09 UTC", "sightings": 1 }, { "indicator": "http://27.221.244.100:51019/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-25 19:02:06 UTC", "last_seen": "2026-03-25 19:02:06 UTC", "sightings": 1 }, { "indicator": "https://harvestsmart.f0xharbor.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 18:54:08 UTC", "last_seen": "2026-03-25 18:54:08 UTC", "sightings": 1 }, { "indicator": "https://velmarken4.cinderpeak.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 18:48:07 UTC", "last_seen": "2026-03-25 18:48:07 UTC", "sightings": 1 }, { "indicator": "http://110.36.1.168:41315/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 18:41:16 UTC", "last_seen": "2026-03-25 18:41:16 UTC", "sightings": 1 }, { "indicator": "https://r3bate-frame.cinderpeak.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 18:41:11 UTC", "last_seen": "2026-03-25 18:41:11 UTC", "sightings": 1 }, { "indicator": "https://asse7-panel.cinderpeak.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 18:36:07 UTC", "last_seen": "2026-03-25 18:36:07 UTC", "sightings": 1 }, { "indicator": "http://120.28.196.74:47128/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-25 18:33:12 UTC", "last_seen": "2026-03-25 18:33:12 UTC", "sightings": 1 }, { "indicator": "https://arkdraa4.aurorift.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 18:32:07 UTC", "last_seen": "2026-03-25 18:32:07 UTC", "sightings": 1 }, { "indicator": "http://59.96.142.243:48540/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 18:27:17 UTC", "last_seen": "2026-03-25 18:27:17 UTC", "sightings": 1 }, { "indicator": "https://lwlal3.aurorift.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 18:21:06 UTC", "last_seen": "2026-03-25 18:21:06 UTC", "sightings": 1 }, { "indicator": "http://112.252.161.22:45010/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 18:20:07 UTC", "last_seen": "2026-03-25 18:20:07 UTC", "sightings": 1 }, { "indicator": "http://219.155.209.70:33229/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 18:18:19 UTC", "last_seen": "2026-03-25 18:18:19 UTC", "sightings": 1 }, { "indicator": "https://norvenix8.aurorift.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 18:14:07 UTC", "last_seen": "2026-03-25 18:14:07 UTC", "sightings": 1 }, { "indicator": "http://119.189.236.58:48489/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 18:10:13 UTC", "last_seen": "2026-03-25 18:10:13 UTC", "sightings": 1 }, { "indicator": "http://190.103.67.101:34359/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-25 18:07:57 UTC", "last_seen": "2026-03-25 18:07:57 UTC", "sightings": 1 }, { "indicator": "http://120.28.196.74:47128/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-25 18:07:17 UTC", "last_seen": "2026-03-25 18:07:17 UTC", "sightings": 1 }, { "indicator": "https://sub-r3ef.stonemuse.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 18:07:10 UTC", "last_seen": "2026-03-25 18:07:10 UTC", "sightings": 1 }, { "indicator": "http://112.252.161.22:45010/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 18:04:30 UTC", "last_seen": "2026-03-25 18:04:30 UTC", "sightings": 1 }, { "indicator": "http://59.96.142.243:48540/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 18:04:12 UTC", "last_seen": "2026-03-25 18:04:12 UTC", "sightings": 1 }, { "indicator": "http://61.176.24.57:46811/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 18:02:10 UTC", "last_seen": "2026-03-25 18:02:10 UTC", "sightings": 1 }, { "indicator": "https://ddhvaj4.stonemuse.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 18:01:07 UTC", "last_seen": "2026-03-25 18:01:07 UTC", "sightings": 1 }, { "indicator": "https://vp6copu.stonemuse.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 17:55:10 UTC", "last_seen": "2026-03-25 17:55:10 UTC", "sightings": 1 }, { "indicator": "https://zenline5or.n1ghtridge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 17:48:07 UTC", "last_seen": "2026-03-25 17:48:07 UTC", "sightings": 1 }, { "indicator": "http://119.189.236.58:48489/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 17:47:11 UTC", "last_seen": "2026-03-25 17:47:11 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.168/files/2038862353/UbL56O6.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "AsyncRAT", "c2-monitor-auto", "DarkTortilla", "dropped-by-amadey" ], "first_seen": "2026-03-25 17:47:05 UTC", "last_seen": "2026-03-25 17:47:05 UTC", "sightings": 1 }, { "indicator": "http://123.11.240.141:40686/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 17:42:18 UTC", "last_seen": "2026-03-25 17:42:18 UTC", "sightings": 1 }, { "indicator": "https://nirnb6-sheet.n1ghtridge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 17:42:09 UTC", "last_seen": "2026-03-25 17:42:09 UTC", "sightings": 1 }, { "indicator": "http://113.239.197.119:60452/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 17:39:22 UTC", "last_seen": "2026-03-25 17:39:22 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.168/files/rdx/random.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543", "Vidar" ], "first_seen": "2026-03-25 17:39:06 UTC", "last_seen": "2026-03-25 17:39:06 UTC", "sightings": 1 }, { "indicator": "http://123.11.240.141:40686/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 17:37:12 UTC", "last_seen": "2026-03-25 17:37:12 UTC", "sightings": 1 }, { "indicator": "https://protereb.n1ghtridge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 17:35:09 UTC", "last_seen": "2026-03-25 17:35:09 UTC", "sightings": 1 }, { "indicator": "http://115.55.55.186:45532/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-25 17:32:06 UTC", "last_seen": "2026-03-25 17:32:06 UTC", "sightings": 1 }, { "indicator": "http://61.176.24.57:46811/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 17:30:18 UTC", "last_seen": "2026-03-25 17:30:18 UTC", "sightings": 1 }, { "indicator": "https://suddensales.brisklume.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 17:28:07 UTC", "last_seen": "2026-03-25 17:28:07 UTC", "sightings": 1 }, { "indicator": "http://108.170.136.155:44462/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-25 17:27:07 UTC", "last_seen": "2026-03-25 17:27:07 UTC", "sightings": 1 }, { "indicator": "https://crypto-daem.brisklume.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 17:22:08 UTC", "last_seen": "2026-03-25 17:22:08 UTC", "sightings": 1 }, { "indicator": "https://s10w-pulse.brisklume.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 17:14:09 UTC", "last_seen": "2026-03-25 17:14:09 UTC", "sightings": 1 }, { "indicator": "http://113.239.197.119:60452/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 17:14:09 UTC", "last_seen": "2026-03-25 17:14:09 UTC", "sightings": 1 }, { "indicator": "https://2350.velorune.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 17:08:07 UTC", "last_seen": "2026-03-25 17:08:07 UTC", "sightings": 1 }, { "indicator": "http://222.140.156.153:49998/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 17:07:19 UTC", "last_seen": "2026-03-25 17:07:19 UTC", "sightings": 1 }, { "indicator": "http://115.48.238.197:37617/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-25 17:07:07 UTC", "last_seen": "2026-03-25 17:07:07 UTC", "sightings": 1 }, { "indicator": "http://61.53.140.57:53493/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 17:04:18 UTC", "last_seen": "2026-03-25 17:04:18 UTC", "sightings": 1 }, { "indicator": "https://veri-hidd.velorune.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 17:02:07 UTC", "last_seen": "2026-03-25 17:02:07 UTC", "sightings": 1 }, { "indicator": "http://2.249.142.93:45821/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-25 16:57:05 UTC", "last_seen": "2026-03-25 16:57:05 UTC", "sightings": 1 }, { "indicator": "http://103.245.195.38:53707/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 16:56:18 UTC", "last_seen": "2026-03-25 16:56:18 UTC", "sightings": 1 }, { "indicator": "https://nhko.velorune.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 16:55:08 UTC", "last_seen": "2026-03-25 16:55:08 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.168/files/7281753217/CE1auOG.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-25 16:53:07 UTC", "last_seen": "2026-03-25 16:53:07 UTC", "sightings": 1 }, { "indicator": "http://196.189.198.173:55544/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-25 16:52:13 UTC", "last_seen": "2026-03-25 16:52:13 UTC", "sightings": 1 }, { "indicator": "https://cinemagarden.crestfall.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 16:49:07 UTC", "last_seen": "2026-03-25 16:49:07 UTC", "sightings": 1 }, { "indicator": "http://110.37.53.25:56836/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-25 16:47:06 UTC", "last_seen": "2026-03-25 16:47:06 UTC", "sightings": 1 }, { "indicator": "https://geo-cornpr.crestfall.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 16:41:07 UTC", "last_seen": "2026-03-25 16:41:07 UTC", "sightings": 1 }, { "indicator": "http://103.245.195.38:53707/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 16:35:22 UTC", "last_seen": "2026-03-25 16:35:22 UTC", "sightings": 1 }, { "indicator": "https://pxcnax.crestfall.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 16:34:09 UTC", "last_seen": "2026-03-25 16:34:09 UTC", "sightings": 1 }, { "indicator": "http://59.94.127.56:37675/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-25 16:32:08 UTC", "last_seen": "2026-03-25 16:32:08 UTC", "sightings": 1 }, { "indicator": "https://rurswitch.gl1mmeroak.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 16:29:07 UTC", "last_seen": "2026-03-25 16:29:07 UTC", "sightings": 1 }, { "indicator": "http://59.94.127.56:37675/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-25 16:27:08 UTC", "last_seen": "2026-03-25 16:27:08 UTC", "sightings": 1 }, { "indicator": "http://222.140.156.153:49998/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 16:22:20 UTC", "last_seen": "2026-03-25 16:22:20 UTC", "sightings": 1 }, { "indicator": "https://disp-vector.gl1mmeroak.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 16:22:08 UTC", "last_seen": "2026-03-25 16:22:08 UTC", "sightings": 1 }, { "indicator": "http://196.189.198.173:55544/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-25 16:21:18 UTC", "last_seen": "2026-03-25 16:21:18 UTC", "sightings": 1 }, { "indicator": "http://123.9.83.27:37002/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-25 16:17:06 UTC", "last_seen": "2026-03-25 16:17:06 UTC", "sightings": 1 }, { "indicator": "https://o4sis4-signal.gl1mmeroak.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 16:15:09 UTC", "last_seen": "2026-03-25 16:15:09 UTC", "sightings": 1 }, { "indicator": "https://silverhost.vg/", "indicator_type": "url", "source": "URLhaus", "tags": [ "CountLoader", "ua-mshta" ], "first_seen": "2026-03-25 16:14:08 UTC", "last_seen": "2026-03-25 16:14:08 UTC", "sightings": 1 }, { "indicator": "http://123.9.83.27:37002/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-25 16:12:07 UTC", "last_seen": "2026-03-25 16:12:07 UTC", "sightings": 1 }, { "indicator": "http://96.44.154.195/186/img_220135.png", "indicator_type": "url", "source": "URLhaus", "tags": [ "rat", "RemcosRAT" ], "first_seen": "2026-03-25 16:11:09 UTC", "last_seen": "2026-03-25 16:11:09 UTC", "sightings": 1 }, { "indicator": "https://one-graup.com/LUE.hta", "indicator_type": "url", "source": "URLhaus", "tags": [ "ascii", "hta", "xworm" ], "first_seen": "2026-03-25 16:11:07 UTC", "last_seen": "2026-03-25 16:11:07 UTC", "sightings": 1 }, { "indicator": "http://110.37.37.232:46323/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 16:10:18 UTC", "last_seen": "2026-03-25 16:10:18 UTC", "sightings": 1 }, { "indicator": "https://pub-3bc1de741f8149f49bdbafa703067f24.r2.dev/ly2.png", "indicator_type": "url", "source": "URLhaus", "tags": [ "xworm" ], "first_seen": "2026-03-25 16:10:08 UTC", "last_seen": "2026-03-25 16:10:08 UTC", "sightings": 1 }, { "indicator": "https://hyper-r3agent.amber-drift.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 16:08:08 UTC", "last_seen": "2026-03-25 16:08:08 UTC", "sightings": 1 }, { "indicator": "http://175.165.85.67:56357/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 16:07:23 UTC", "last_seen": "2026-03-25 16:07:23 UTC", "sightings": 1 }, { "indicator": "http://110.37.53.25:56836/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-25 16:02:08 UTC", "last_seen": "2026-03-25 16:02:08 UTC", "sightings": 1 }, { "indicator": "https://quorlith5um.amber-drift.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 16:01:08 UTC", "last_seen": "2026-03-25 16:01:08 UTC", "sightings": 1 }, { "indicator": "http://110.37.37.232:46323/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 16:00:18 UTC", "last_seen": "2026-03-25 16:00:18 UTC", "sightings": 1 }, { "indicator": "http://222.140.160.74:44309/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 16:00:18 UTC", "last_seen": "2026-03-25 16:00:18 UTC", "sightings": 1 }, { "indicator": "http://123.10.233.185:42302/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 15:57:28 UTC", "last_seen": "2026-03-25 15:57:28 UTC", "sightings": 1 }, { "indicator": "http://59.184.245.34:36439/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 15:56:21 UTC", "last_seen": "2026-03-25 15:56:21 UTC", "sightings": 1 }, { "indicator": "https://vordraar8.amber-drift.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 15:55:10 UTC", "last_seen": "2026-03-25 15:55:10 UTC", "sightings": 1 }, { "indicator": "http://110.36.30.37:43891/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 15:54:22 UTC", "last_seen": "2026-03-25 15:54:22 UTC", "sightings": 1 }, { "indicator": "https://wwc02c.dawnspire.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 15:48:08 UTC", "last_seen": "2026-03-25 15:48:08 UTC", "sightings": 1 }, { "indicator": "http://222.140.160.74:44309/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 15:43:22 UTC", "last_seen": "2026-03-25 15:43:22 UTC", "sightings": 1 }, { "indicator": "http://61.52.77.197:37488/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 15:42:20 UTC", "last_seen": "2026-03-25 15:42:20 UTC", "sightings": 1 }, { "indicator": "https://agentscript.dawnspire.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 15:41:07 UTC", "last_seen": "2026-03-25 15:41:07 UTC", "sightings": 1 }, { "indicator": "http://95.78.237.167:57373/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 15:39:21 UTC", "last_seen": "2026-03-25 15:39:21 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.168/files/8514679081/V4iMvZE.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-25 15:38:27 UTC", "last_seen": "2026-03-25 15:38:27 UTC", "sightings": 1 }, { "indicator": "https://oexe.dawnspire.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 15:35:10 UTC", "last_seen": "2026-03-25 15:35:10 UTC", "sightings": 1 }, { "indicator": "http://59.184.245.34:36439/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 15:32:29 UTC", "last_seen": "2026-03-25 15:32:29 UTC", "sightings": 1 }, { "indicator": "https://sap3-route.f0xharbor.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 15:28:08 UTC", "last_seen": "2026-03-25 15:28:08 UTC", "sightings": 1 }, { "indicator": "http://117.198.206.96:44105/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 15:25:20 UTC", "last_seen": "2026-03-25 15:25:20 UTC", "sightings": 1 }, { "indicator": "https://stagesandbo.f0xharbor.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 15:23:09 UTC", "last_seen": "2026-03-25 15:23:09 UTC", "sightings": 1 }, { "indicator": "https://4ggo.f0xharbor.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 15:19:12 UTC", "last_seen": "2026-03-25 15:19:12 UTC", "sightings": 1 }, { "indicator": "http://115.58.14.107:46509/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-25 15:17:07 UTC", "last_seen": "2026-03-25 15:17:07 UTC", "sightings": 1 }, { "indicator": "https://d8.tfdl.net/public/2026-03-25/4c08a097-0c18-4ced-a7cb-ae468f709454/Release.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-03-25 15:16:25 UTC", "last_seen": "2026-03-25 15:16:25 UTC", "sightings": 1 }, { "indicator": "http://27.37.110.107:37090/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 15:14:14 UTC", "last_seen": "2026-03-25 15:14:14 UTC", "sightings": 1 }, { "indicator": "https://wcslrl.f0xharbor.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 15:08:10 UTC", "last_seen": "2026-03-25 15:08:10 UTC", "sightings": 1 }, { "indicator": "https://drive.google.com/uc?export=download&id=1fTO6piWETT3AhaaKkeZ6u7X-XwN2lQ2g", "indicator_type": "url", "source": "URLhaus", "tags": [ "ascii", "Encoded", "GuLoader", "rat", "RemcosRAT" ], "first_seen": "2026-03-25 15:03:09 UTC", "last_seen": "2026-03-25 15:03:09 UTC", "sightings": 1 }, { "indicator": "https://drive.google.com/uc?export=download&id=1IhjOJh6GMnYt9ri5tNZCeJ65GbOUFUCL", "indicator_type": "url", "source": "URLhaus", "tags": [ "encrypted", "GuLoader", "rat", "RemcosRAT" ], "first_seen": "2026-03-25 15:03:07 UTC", "last_seen": "2026-03-25 15:03:07 UTC", "sightings": 1 }, { "indicator": "https://rn0dul-grid.f0xharbor.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 15:02:12 UTC", "last_seen": "2026-03-25 15:02:12 UTC", "sightings": 1 }, { "indicator": "https://tiger.kesug.com/img_053646.png", "indicator_type": "url", "source": "URLhaus", "tags": [ "Xpertrat" ], "first_seen": "2026-03-25 15:01:06 UTC", "last_seen": "2026-03-25 15:01:06 UTC", "sightings": 1 }, { "indicator": "https://pub-6d532b12105b49bd96b29361979b87a1.r2.dev/tIcUpcByNeyfYctCqpeWBhnfxWDUta/ScreenConnect.ClientSetup.msi", "indicator_type": "url", "source": "URLhaus", "tags": [ "connectwise", "msi", "rmm", "screenconnect" ], "first_seen": "2026-03-25 14:56:10 UTC", "last_seen": "2026-03-25 14:56:10 UTC", "sightings": 1 }, { "indicator": "https://globalgri.cinderpeak.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 14:55:10 UTC", "last_seen": "2026-03-25 14:55:10 UTC", "sightings": 1 }, { "indicator": "https://sgv.app.br/downloads/optimized_MSI.png", "indicator_type": "url", "source": "URLhaus", "tags": [ "xworm" ], "first_seen": "2026-03-25 14:53:20 UTC", "last_seen": "2026-03-25 14:53:20 UTC", "sightings": 1 }, { "indicator": "https://sgv.app.br/downloads/madeinchina.png", "indicator_type": "url", "source": "URLhaus", "tags": [ "xworm" ], "first_seen": "2026-03-25 14:53:19 UTC", "last_seen": "2026-03-25 14:53:19 UTC", "sightings": 1 }, { "indicator": "http://121.226.176.33:40473/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-25 14:52:06 UTC", "last_seen": "2026-03-25 14:52:06 UTC", "sightings": 1 }, { "indicator": "http://176.226.183.136:34697/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-25 14:52:05 UTC", "last_seen": "2026-03-25 14:52:05 UTC", "sightings": 1 }, { "indicator": "http://96.44.159.218/470/wegivebestthingsforme.hta", "indicator_type": "url", "source": "URLhaus", "tags": [ "hta", "rat", "RemcosRAT" ], "first_seen": "2026-03-25 14:52:05 UTC", "last_seen": "2026-03-25 14:52:05 UTC", "sightings": 1 }, { "indicator": "https://5fzltr.cinderpeak.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 14:48:08 UTC", "last_seen": "2026-03-25 14:48:08 UTC", "sightings": 1 }, { "indicator": "https://sales-oas.cinderpeak.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 14:42:10 UTC", "last_seen": "2026-03-25 14:42:10 UTC", "sightings": 1 }, { "indicator": "https://thic-bridge.cinderpeak.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 14:35:11 UTC", "last_seen": "2026-03-25 14:35:11 UTC", "sightings": 1 }, { "indicator": "https://jfkwjd.cinderpeak.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 14:29:08 UTC", "last_seen": "2026-03-25 14:29:08 UTC", "sightings": 1 }, { "indicator": "http://87.121.79.23/zato.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai", "script" ], "first_seen": "2026-03-25 14:27:06 UTC", "last_seen": "2026-03-25 14:27:06 UTC", "sightings": 1 }, { "indicator": "http://tuxbins.duckdns.org/bins/tux.arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-25 14:26:34 UTC", "last_seen": "2026-03-25 14:26:34 UTC", "sightings": 1 }, { "indicator": "http://tuxbins.duckdns.org/bins/tux.mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-25 14:26:28 UTC", "last_seen": "2026-03-25 14:26:28 UTC", "sightings": 1 }, { "indicator": "http://tuxbins.duckdns.org/bins/tux.mpsl", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-25 14:26:28 UTC", "last_seen": "2026-03-25 14:26:28 UTC", "sightings": 1 }, { "indicator": "http://tuxbins.duckdns.org/bins/tux.arc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-25 14:26:26 UTC", "last_seen": "2026-03-25 14:26:26 UTC", "sightings": 1 }, { "indicator": "http://tuxbins.duckdns.org/bins/tux.arm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-25 14:26:23 UTC", "last_seen": "2026-03-25 14:26:23 UTC", "sightings": 1 }, { "indicator": "http://tuxbins.duckdns.org/bins/tux.m68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-25 14:26:23 UTC", "last_seen": "2026-03-25 14:26:23 UTC", "sightings": 1 }, { "indicator": "http://tuxbins.duckdns.org/bins/tux.sh4", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-25 14:26:23 UTC", "last_seen": "2026-03-25 14:26:23 UTC", "sightings": 1 }, { "indicator": "http://tuxbins.duckdns.org/bins/tux.arm4", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-25 14:26:22 UTC", "last_seen": "2026-03-25 14:26:22 UTC", "sightings": 1 }, { "indicator": "http://tuxbins.duckdns.org/bins/tux.arm", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-25 14:26:20 UTC", "last_seen": "2026-03-25 14:26:20 UTC", "sightings": 1 }, { "indicator": "http://tuxbins.duckdns.org/bins/tux.arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-25 14:26:18 UTC", "last_seen": "2026-03-25 14:26:18 UTC", "sightings": 1 }, { "indicator": "http://tuxbins.duckdns.org/bins/tux.ppc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-25 14:26:18 UTC", "last_seen": "2026-03-25 14:26:18 UTC", "sightings": 1 }, { "indicator": "http://tuxbins.duckdns.org/bins/tux.x86", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-25 14:26:16 UTC", "last_seen": "2026-03-25 14:26:16 UTC", "sightings": 1 }, { "indicator": "http://121.226.176.33:40473/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-25 14:26:12 UTC", "last_seen": "2026-03-25 14:26:12 UTC", "sightings": 1 }, { "indicator": "http://165.245.189.236/hiddenbin/Space.mpsl", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-25 14:26:11 UTC", "last_seen": "2026-03-25 14:26:11 UTC", "sightings": 1 }, { "indicator": "http://165.245.189.236/hiddenbin/Space.x86_64", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-25 14:26:11 UTC", "last_seen": "2026-03-25 14:26:11 UTC", "sightings": 1 }, { "indicator": "http://87.121.79.23/3892/3ato.mpsl", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-25 14:26:11 UTC", "last_seen": "2026-03-25 14:26:11 UTC", "sightings": 1 }, { "indicator": "http://91.92.241.94/mipsel", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-25 14:26:11 UTC", "last_seen": "2026-03-25 14:26:11 UTC", "sightings": 1 }, { "indicator": "http://165.245.189.236/hiddenbin/Space.i686", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-25 14:26:10 UTC", "last_seen": "2026-03-25 14:26:10 UTC", "sightings": 1 }, { "indicator": "http://165.245.189.236/hiddenbin/Space.ppc", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-25 14:26:10 UTC", "last_seen": "2026-03-25 14:26:10 UTC", "sightings": 1 }, { "indicator": "http://165.245.189.236/hiddenbin/Space.sh4", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-25 14:26:10 UTC", "last_seen": "2026-03-25 14:26:10 UTC", "sightings": 1 }, { "indicator": "http://165.245.189.236/hiddenbin/Space.arc", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-25 14:26:10 UTC", "last_seen": "2026-03-25 14:26:10 UTC", "sightings": 1 }, { "indicator": "http://165.245.189.236/hiddenbin/Space.arm", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-25 14:26:10 UTC", "last_seen": "2026-03-25 14:26:10 UTC", "sightings": 1 }, { "indicator": "http://87.121.79.23/3892/3ato.x86", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-25 14:26:10 UTC", "last_seen": "2026-03-25 14:26:10 UTC", "sightings": 1 }, { "indicator": "http://165.245.189.236/hiddenbin/Space.arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-25 14:26:10 UTC", "last_seen": "2026-03-25 14:26:10 UTC", "sightings": 1 }, { "indicator": "http://87.121.79.23/3892/3ato.sh4", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-25 14:26:10 UTC", "last_seen": "2026-03-25 14:26:10 UTC", "sightings": 1 }, { "indicator": "http://87.121.79.23/3892/3ato.m68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-25 14:26:10 UTC", "last_seen": "2026-03-25 14:26:10 UTC", "sightings": 1 }, { "indicator": "http://87.121.79.23/3892/3ato.ppc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-25 14:26:10 UTC", "last_seen": "2026-03-25 14:26:10 UTC", "sightings": 1 }, { "indicator": "http://87.121.79.23/3892/3ato.spc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-25 14:26:10 UTC", "last_seen": "2026-03-25 14:26:10 UTC", "sightings": 1 }, { "indicator": "https://sdhscndnssl.beer/api/7z.exe", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-25 14:26:10 UTC", "last_seen": "2026-03-25 14:26:10 UTC", "sightings": 1 }, { "indicator": "http://165.245.189.236/hiddenbin/Space.sparc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-25 14:26:10 UTC", "last_seen": "2026-03-25 14:26:10 UTC", "sightings": 1 }, { "indicator": "http://165.245.189.236/hiddenbin/Space.mips64", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-25 14:26:10 UTC", "last_seen": "2026-03-25 14:26:10 UTC", "sightings": 1 }, { "indicator": "https://solar-sanat.net/imagetxt0074751.png", "indicator_type": "url", "source": "URLhaus", "tags": [ "VenomRAT" ], "first_seen": "2026-03-25 14:26:10 UTC", "last_seen": "2026-03-25 14:26:10 UTC", "sightings": 1 }, { "indicator": "http://87.121.79.23/3892/3ato.mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-25 14:26:09 UTC", "last_seen": "2026-03-25 14:26:09 UTC", "sightings": 1 }, { "indicator": "http://87.121.79.23/3892/3ato.arm", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-25 14:26:09 UTC", "last_seen": "2026-03-25 14:26:09 UTC", "sightings": 1 }, { "indicator": "http://87.121.79.23/3892/3ato.arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-25 14:26:09 UTC", "last_seen": "2026-03-25 14:26:09 UTC", "sightings": 1 }, { "indicator": "http://87.121.79.23/3892/3ato.arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-25 14:26:09 UTC", "last_seen": "2026-03-25 14:26:09 UTC", "sightings": 1 }, { "indicator": "http://87.121.79.23/3892/3ato.arm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-25 14:26:09 UTC", "last_seen": "2026-03-25 14:26:09 UTC", "sightings": 1 }, { "indicator": "http://165.245.189.236/hiddenbin/Space.arm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-25 14:26:09 UTC", "last_seen": "2026-03-25 14:26:09 UTC", "sightings": 1 }, { "indicator": "http://165.245.189.236/1.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-25 14:26:09 UTC", "last_seen": "2026-03-25 14:26:09 UTC", "sightings": 1 }, { "indicator": "http://165.245.189.236/hiddenbin/Space.x86", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-25 14:26:09 UTC", "last_seen": "2026-03-25 14:26:09 UTC", "sightings": 1 }, { "indicator": "http://165.245.189.236/hiddenbin/Space.arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-25 14:26:09 UTC", "last_seen": "2026-03-25 14:26:09 UTC", "sightings": 1 }, { "indicator": "http://165.245.189.236/hiddenbin/Space.m68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-25 14:26:09 UTC", "last_seen": "2026-03-25 14:26:09 UTC", "sightings": 1 }, { "indicator": "http://165.245.189.236/hiddenbin/Space.mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-25 14:26:09 UTC", "last_seen": "2026-03-25 14:26:09 UTC", "sightings": 1 }, { "indicator": "http://176.226.183.136:34697/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-25 14:26:08 UTC", "last_seen": "2026-03-25 14:26:08 UTC", "sightings": 1 }, { "indicator": "http://178.16.54.73/Wx2V7HtN.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-25 14:26:05 UTC", "last_seen": "2026-03-25 14:26:05 UTC", "sightings": 1 }, { "indicator": "http://178.16.54.73/DNop67.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-25 14:26:05 UTC", "last_seen": "2026-03-25 14:26:05 UTC", "sightings": 1 }, { "indicator": "http://178.16.54.73/50FnXug.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-25 14:26:05 UTC", "last_seen": "2026-03-25 14:26:05 UTC", "sightings": 1 }, { "indicator": "http://178.16.54.73/L5ZhKCR.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-25 14:26:05 UTC", "last_seen": "2026-03-25 14:26:05 UTC", "sightings": 1 }, { "indicator": "http://178.16.54.73/rf0TaL9.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-25 14:26:04 UTC", "last_seen": "2026-03-25 14:26:04 UTC", "sightings": 1 }, { "indicator": "http://178.16.54.73/xDLGfu.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-25 14:26:04 UTC", "last_seen": "2026-03-25 14:26:04 UTC", "sightings": 1 }, { "indicator": "http://95.46.98.121:59080/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 14:22:14 UTC", "last_seen": "2026-03-25 14:22:14 UTC", "sightings": 1 }, { "indicator": "https://ark-lineor.aurorift.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 14:22:07 UTC", "last_seen": "2026-03-25 14:22:07 UTC", "sightings": 1 }, { "indicator": "http://110.37.80.62:36706/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 14:17:18 UTC", "last_seen": "2026-03-25 14:17:18 UTC", "sightings": 1 }, { "indicator": "http://175.148.157.251:50736/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-25 14:17:11 UTC", "last_seen": "2026-03-25 14:17:11 UTC", "sightings": 1 }, { "indicator": "https://traglyph.aurorift.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 14:15:09 UTC", "last_seen": "2026-03-25 14:15:09 UTC", "sightings": 1 }, { "indicator": "http://117.209.95.78:53409/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 14:12:17 UTC", "last_seen": "2026-03-25 14:12:17 UTC", "sightings": 1 }, { "indicator": "https://moduleneedle.aurorift.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 14:08:08 UTC", "last_seen": "2026-03-25 14:08:08 UTC", "sightings": 1 }, { "indicator": "http://182.116.23.107:52660/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 14:04:11 UTC", "last_seen": "2026-03-25 14:04:11 UTC", "sightings": 1 }, { "indicator": "https://meta-1ivel.aurorift.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 14:03:08 UTC", "last_seen": "2026-03-25 14:03:08 UTC", "sightings": 1 }, { "indicator": "http://175.148.157.251:50736/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-25 14:02:10 UTC", "last_seen": "2026-03-25 14:02:10 UTC", "sightings": 1 }, { "indicator": "https://ink-mar.aurorift.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 13:56:08 UTC", "last_seen": "2026-03-25 13:56:08 UTC", "sightings": 1 }, { "indicator": "http://95.46.98.121:59080/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 13:50:14 UTC", "last_seen": "2026-03-25 13:50:14 UTC", "sightings": 1 }, { "indicator": "https://6l3ri.stonemuse.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 13:50:13 UTC", "last_seen": "2026-03-25 13:50:13 UTC", "sightings": 1 }, { "indicator": "http://112.239.101.228:35668/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 13:45:20 UTC", "last_seen": "2026-03-25 13:45:20 UTC", "sightings": 1 }, { "indicator": "http://1.43.5.24:40236/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 13:45:20 UTC", "last_seen": "2026-03-25 13:45:20 UTC", "sightings": 1 }, { "indicator": "https://0xr5c.stonemuse.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 13:43:11 UTC", "last_seen": "2026-03-25 13:43:11 UTC", "sightings": 1 }, { "indicator": "https://zenlithum5.stonemuse.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 13:40:09 UTC", "last_seen": "2026-03-25 13:40:09 UTC", "sightings": 1 }, { "indicator": "http://117.209.95.78:53409/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 13:38:22 UTC", "last_seen": "2026-03-25 13:38:22 UTC", "sightings": 1 }, { "indicator": "http://182.116.23.107:52660/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 13:38:12 UTC", "last_seen": "2026-03-25 13:38:12 UTC", "sightings": 1 }, { "indicator": "https://reagengate.stonemuse.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 13:30:08 UTC", "last_seen": "2026-03-25 13:30:08 UTC", "sightings": 1 }, { "indicator": "http://206.0.172.171:49412/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-25 13:27:07 UTC", "last_seen": "2026-03-25 13:27:07 UTC", "sightings": 1 }, { "indicator": "http://182.127.168.185:49739/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-25 13:27:07 UTC", "last_seen": "2026-03-25 13:27:07 UTC", "sightings": 1 }, { "indicator": "http://177.39.122.214:46553/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-25 13:27:07 UTC", "last_seen": "2026-03-25 13:27:07 UTC", "sightings": 1 }, { "indicator": "http://206.0.172.171:49412/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-25 13:22:08 UTC", "last_seen": "2026-03-25 13:22:08 UTC", "sightings": 1 }, { "indicator": "https://029g1.stonemuse.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 13:22:08 UTC", "last_seen": "2026-03-25 13:22:08 UTC", "sightings": 1 }, { "indicator": "https://tritidear7.n1ghtridge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 13:17:08 UTC", "last_seen": "2026-03-25 13:17:08 UTC", "sightings": 1 }, { "indicator": "https://sprofrost.n1ghtridge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 13:14:08 UTC", "last_seen": "2026-03-25 13:14:08 UTC", "sightings": 1 }, { "indicator": "http://175.148.23.45:60301/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 13:06:17 UTC", "last_seen": "2026-03-25 13:06:17 UTC", "sightings": 1 }, { "indicator": "http://42.177.234.121:38987/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 13:03:11 UTC", "last_seen": "2026-03-25 13:03:11 UTC", "sightings": 1 }, { "indicator": "https://edzgpr.n1ghtridge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 13:03:08 UTC", "last_seen": "2026-03-25 13:03:08 UTC", "sightings": 1 }, { "indicator": "http://107.175.30.181/systemcl/arc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai" ], "first_seen": "2026-03-25 13:02:19 UTC", "last_seen": "2026-03-25 13:02:19 UTC", "sightings": 1 }, { "indicator": "http://107.175.30.181/systemcl/mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai" ], "first_seen": "2026-03-25 13:02:12 UTC", "last_seen": "2026-03-25 13:02:12 UTC", "sightings": 1 }, { "indicator": "http://107.175.30.181/systemcl/x86_32", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai" ], "first_seen": "2026-03-25 13:02:12 UTC", "last_seen": "2026-03-25 13:02:12 UTC", "sightings": 1 }, { "indicator": "http://107.175.30.181/systemcl/arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai" ], "first_seen": "2026-03-25 13:02:12 UTC", "last_seen": "2026-03-25 13:02:12 UTC", "sightings": 1 }, { "indicator": "http://107.175.30.181/systemcl/mpsl", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai" ], "first_seen": "2026-03-25 13:02:12 UTC", "last_seen": "2026-03-25 13:02:12 UTC", "sightings": 1 }, { "indicator": "http://107.175.30.181/systemcl/x86", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai" ], "first_seen": "2026-03-25 13:02:12 UTC", "last_seen": "2026-03-25 13:02:12 UTC", "sightings": 1 }, { "indicator": "http://107.175.30.181/systemcl/sh4", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai" ], "first_seen": "2026-03-25 13:02:12 UTC", "last_seen": "2026-03-25 13:02:12 UTC", "sightings": 1 }, { "indicator": "http://107.175.30.181/systemcl/arm", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai" ], "first_seen": "2026-03-25 13:02:12 UTC", "last_seen": "2026-03-25 13:02:12 UTC", "sightings": 1 }, { "indicator": "http://107.175.30.181/systemcl/arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai" ], "first_seen": "2026-03-25 13:02:12 UTC", "last_seen": "2026-03-25 13:02:12 UTC", "sightings": 1 }, { "indicator": "http://107.175.30.181/systemcl/x86_64", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai" ], "first_seen": "2026-03-25 13:02:12 UTC", "last_seen": "2026-03-25 13:02:12 UTC", "sightings": 1 }, { "indicator": "http://107.175.30.181/systemcl/spc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai" ], "first_seen": "2026-03-25 13:02:12 UTC", "last_seen": "2026-03-25 13:02:12 UTC", "sightings": 1 }, { "indicator": "http://107.175.30.181/systemcl/m68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai" ], "first_seen": "2026-03-25 13:02:12 UTC", "last_seen": "2026-03-25 13:02:12 UTC", "sightings": 1 }, { "indicator": "http://107.175.30.181/systemcl/arm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai" ], "first_seen": "2026-03-25 13:02:12 UTC", "last_seen": "2026-03-25 13:02:12 UTC", "sightings": 1 }, { "indicator": "http://107.175.30.181/systemcl/ppc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai" ], "first_seen": "2026-03-25 13:02:11 UTC", "last_seen": "2026-03-25 13:02:11 UTC", "sightings": 1 }, { "indicator": "http://182.116.93.187:38474/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 13:01:10 UTC", "last_seen": "2026-03-25 13:01:10 UTC", "sightings": 1 }, { "indicator": "https://ser-tideos.n1ghtridge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 13:01:09 UTC", "last_seen": "2026-03-25 13:01:09 UTC", "sightings": 1 }, { "indicator": "http://110.39.235.164:40976/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-25 12:57:06 UTC", "last_seen": "2026-03-25 12:57:06 UTC", "sightings": 1 }, { "indicator": "http://110.38.221.108:37733/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 12:46:14 UTC", "last_seen": "2026-03-25 12:46:14 UTC", "sightings": 1 }, { "indicator": "http://110.36.70.238:47397/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 12:45:14 UTC", "last_seen": "2026-03-25 12:45:14 UTC", "sightings": 1 }, { "indicator": "http://42.177.234.121:38987/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 12:31:11 UTC", "last_seen": "2026-03-25 12:31:11 UTC", "sightings": 1 }, { "indicator": "http://110.36.28.45:54815/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 12:27:17 UTC", "last_seen": "2026-03-25 12:27:17 UTC", "sightings": 1 }, { "indicator": "http://163.142.78.220:36113/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 12:27:17 UTC", "last_seen": "2026-03-25 12:27:17 UTC", "sightings": 1 }, { "indicator": "http://117.82.134.9:38840/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-25 12:26:09 UTC", "last_seen": "2026-03-25 12:26:09 UTC", "sightings": 1 }, { "indicator": "http://115.55.142.141:53069/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-25 12:26:08 UTC", "last_seen": "2026-03-25 12:26:08 UTC", "sightings": 1 }, { "indicator": "http://110.36.30.37:43891/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-25 12:26:07 UTC", "last_seen": "2026-03-25 12:26:07 UTC", "sightings": 1 }, { "indicator": "http://182.112.0.113:33212/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-25 12:26:07 UTC", "last_seen": "2026-03-25 12:26:07 UTC", "sightings": 1 }, { "indicator": "http://106.56.113.164:36235/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-25 12:25:21 UTC", "last_seen": "2026-03-25 12:25:21 UTC", "sightings": 1 }, { "indicator": "http://106.56.113.164:36235/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-25 12:25:19 UTC", "last_seen": "2026-03-25 12:25:19 UTC", "sightings": 1 }, { "indicator": "http://182.112.0.113:33212/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-25 12:25:12 UTC", "last_seen": "2026-03-25 12:25:12 UTC", "sightings": 1 }, { "indicator": "http://123.5.18.125:53759/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-25 12:25:12 UTC", "last_seen": "2026-03-25 12:25:12 UTC", "sightings": 1 }, { "indicator": "http://175.146.53.138:46804/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-25 12:25:12 UTC", "last_seen": "2026-03-25 12:25:12 UTC", "sightings": 1 }, { "indicator": "http://115.63.150.236:46918/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-25 12:25:12 UTC", "last_seen": "2026-03-25 12:25:12 UTC", "sightings": 1 }, { "indicator": "http://110.37.38.88:53286/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-25 12:25:11 UTC", "last_seen": "2026-03-25 12:25:11 UTC", "sightings": 1 }, { "indicator": "http://111.76.225.148:37151/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-25 12:25:11 UTC", "last_seen": "2026-03-25 12:25:11 UTC", "sightings": 1 }, { "indicator": "http://61.53.84.107:43646/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf" ], "first_seen": "2026-03-25 12:24:18 UTC", "last_seen": "2026-03-25 12:24:18 UTC", "sightings": 1 }, { "indicator": "http://113.229.185.91:49936/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-25 12:24:08 UTC", "last_seen": "2026-03-25 12:24:08 UTC", "sightings": 1 }, { "indicator": "http://125.40.225.181:38187/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-25 12:24:08 UTC", "last_seen": "2026-03-25 12:24:08 UTC", "sightings": 1 }, { "indicator": "http://123.11.73.85:60585/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-25 12:24:07 UTC", "last_seen": "2026-03-25 12:24:07 UTC", "sightings": 1 }, { "indicator": "http://163.142.93.220:53783/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-25 12:24:07 UTC", "last_seen": "2026-03-25 12:24:07 UTC", "sightings": 1 }, { "indicator": "http://221.15.23.178:38807/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-25 12:24:07 UTC", "last_seen": "2026-03-25 12:24:07 UTC", "sightings": 1 }, { "indicator": "http://124.135.33.173:41720/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-25 12:23:09 UTC", "last_seen": "2026-03-25 12:23:09 UTC", "sightings": 1 }, { "indicator": "http://27.11.158.74:52919/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-25 12:23:09 UTC", "last_seen": "2026-03-25 12:23:09 UTC", "sightings": 1 }, { "indicator": "http://221.15.23.178:38807/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-25 12:23:09 UTC", "last_seen": "2026-03-25 12:23:09 UTC", "sightings": 1 }, { "indicator": "http://61.52.96.210:35684/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-25 12:23:08 UTC", "last_seen": "2026-03-25 12:23:08 UTC", "sightings": 1 }, { "indicator": "http://163.142.93.220:53783/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-25 12:23:08 UTC", "last_seen": "2026-03-25 12:23:08 UTC", "sightings": 1 }, { "indicator": "http://27.37.89.137:44175/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-25 12:23:08 UTC", "last_seen": "2026-03-25 12:23:08 UTC", "sightings": 1 }, { "indicator": "http://123.9.198.108:35918/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-25 12:22:08 UTC", "last_seen": "2026-03-25 12:22:08 UTC", "sightings": 1 }, { "indicator": "http://27.37.89.137:44175/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 12:21:11 UTC", "last_seen": "2026-03-25 12:21:11 UTC", "sightings": 1 }, { "indicator": "http://110.36.70.238:47397/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 12:21:11 UTC", "last_seen": "2026-03-25 12:21:11 UTC", "sightings": 1 }, { "indicator": "http://110.38.221.108:37733/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 12:19:17 UTC", "last_seen": "2026-03-25 12:19:17 UTC", "sightings": 1 }, { "indicator": "http://61.53.84.107:43646/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf" ], "first_seen": "2026-03-25 12:18:17 UTC", "last_seen": "2026-03-25 12:18:17 UTC", "sightings": 1 }, { "indicator": "http://117.253.87.155:39642/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-25 12:07:08 UTC", "last_seen": "2026-03-25 12:07:08 UTC", "sightings": 1 }, { "indicator": "http://120.28.215.50:37995/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-25 12:02:18 UTC", "last_seen": "2026-03-25 12:02:18 UTC", "sightings": 1 }, { "indicator": "http://110.36.28.45:54815/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 12:01:16 UTC", "last_seen": "2026-03-25 12:01:16 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.168/files/7776573655/jabCn4r.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543", "gcleaner" ], "first_seen": "2026-03-25 11:53:06 UTC", "last_seen": "2026-03-25 11:53:06 UTC", "sightings": 1 }, { "indicator": "https://velmarka.velorune.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 11:52:08 UTC", "last_seen": "2026-03-25 11:52:08 UTC", "sightings": 1 }, { "indicator": "http://59.97.177.204:58253/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 11:51:18 UTC", "last_seen": "2026-03-25 11:51:18 UTC", "sightings": 1 }, { "indicator": "http://112.248.255.166:49310/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 11:43:17 UTC", "last_seen": "2026-03-25 11:43:17 UTC", "sightings": 1 }, { "indicator": "https://timbe-well.velorune.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 11:43:08 UTC", "last_seen": "2026-03-25 11:43:08 UTC", "sightings": 1 }, { "indicator": "http://79.50.155.57:55911/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-25 11:42:07 UTC", "last_seen": "2026-03-25 11:42:07 UTC", "sightings": 1 }, { "indicator": "http://201.159.91.2:56534/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-25 11:42:07 UTC", "last_seen": "2026-03-25 11:42:07 UTC", "sightings": 1 }, { "indicator": "http://125.42.238.86:57257/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-25 11:42:06 UTC", "last_seen": "2026-03-25 11:42:06 UTC", "sightings": 1 }, { "indicator": "http://117.213.113.235:51350/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-25 11:37:10 UTC", "last_seen": "2026-03-25 11:37:10 UTC", "sightings": 1 }, { "indicator": "http://95.165.187.102:56551/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-25 11:37:06 UTC", "last_seen": "2026-03-25 11:37:06 UTC", "sightings": 1 }, { "indicator": "http://201.159.91.2:56534/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-25 11:37:06 UTC", "last_seen": "2026-03-25 11:37:06 UTC", "sightings": 1 }, { "indicator": "https://payloadcinema.crestfall.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 11:36:08 UTC", "last_seen": "2026-03-25 11:36:08 UTC", "sightings": 1 }, { "indicator": "http://182.117.94.253:47655/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-25 11:31:16 UTC", "last_seen": "2026-03-25 11:31:16 UTC", "sightings": 1 }, { "indicator": "http://120.28.215.50:37995/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-25 11:31:14 UTC", "last_seen": "2026-03-25 11:31:14 UTC", "sightings": 1 }, { "indicator": "https://patte-span.crestfall.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 11:30:10 UTC", "last_seen": "2026-03-25 11:30:10 UTC", "sightings": 1 }, { "indicator": "http://112.248.255.166:49310/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 11:26:25 UTC", "last_seen": "2026-03-25 11:26:25 UTC", "sightings": 1 }, { "indicator": "https://solarpri.crestfall.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 11:24:10 UTC", "last_seen": "2026-03-25 11:24:10 UTC", "sightings": 1 }, { "indicator": "http://117.24.142.65:47976/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-25 11:23:21 UTC", "last_seen": "2026-03-25 11:23:21 UTC", "sightings": 1 }, { "indicator": "https://transdea.crestfall.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 11:17:08 UTC", "last_seen": "2026-03-25 11:17:08 UTC", "sightings": 1 }, { "indicator": "http://125.40.129.126:33129/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-25 11:12:04 UTC", "last_seen": "2026-03-25 11:12:04 UTC", "sightings": 1 }, { "indicator": "https://vtto2izc.starapi.digital/?=check&&actmn=NafgLGhLykCEpWrf", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-25 11:11:07 UTC", "last_seen": "2026-03-25 11:11:07 UTC", "sightings": 1 }, { "indicator": "http://59.97.177.204:58253/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 11:10:21 UTC", "last_seen": "2026-03-25 11:10:21 UTC", "sightings": 1 }, { "indicator": "https://neo-5un.crestfall.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 11:10:12 UTC", "last_seen": "2026-03-25 11:10:12 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.168/files/1032264266/OG0pxz6.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "CoinMiner", "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-25 11:06:06 UTC", "last_seen": "2026-03-25 11:06:06 UTC", "sightings": 1 }, { "indicator": "https://arkfluxos9.gl1mmeroak.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 11:03:09 UTC", "last_seen": "2026-03-25 11:03:09 UTC", "sightings": 1 }, { "indicator": "http://125.42.238.86:57257/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-25 11:02:07 UTC", "last_seen": "2026-03-25 11:02:07 UTC", "sightings": 1 }, { "indicator": "http://110.37.92.149:38047/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-25 10:58:06 UTC", "last_seen": "2026-03-25 10:58:06 UTC", "sightings": 1 }, { "indicator": "http://110.37.92.149:38047/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-25 10:57:06 UTC", "last_seen": "2026-03-25 10:57:06 UTC", "sightings": 1 }, { "indicator": "https://vorfluxet.gl1mmeroak.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 10:56:08 UTC", "last_seen": "2026-03-25 10:56:08 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.168/files/6608710704/ltjL6cP.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543", "Vidar" ], "first_seen": "2026-03-25 10:56:06 UTC", "last_seen": "2026-03-25 10:56:06 UTC", "sightings": 1 }, { "indicator": "http://110.37.54.31:48074/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 10:54:18 UTC", "last_seen": "2026-03-25 10:54:18 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.168/files/1781548144/amako6X.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543", "xworm" ], "first_seen": "2026-03-25 10:52:07 UTC", "last_seen": "2026-03-25 10:52:07 UTC", "sightings": 1 }, { "indicator": "http://222.140.135.232:58649/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-25 10:52:07 UTC", "last_seen": "2026-03-25 10:52:07 UTC", "sightings": 1 }, { "indicator": "https://qfvn0y.gl1mmeroak.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 10:49:08 UTC", "last_seen": "2026-03-25 10:49:08 UTC", "sightings": 1 }, { "indicator": "https://glyph-panel.gl1mmeroak.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 10:43:08 UTC", "last_seen": "2026-03-25 10:43:08 UTC", "sightings": 1 }, { "indicator": "https://designtrigger.gl1mmeroak.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 10:36:10 UTC", "last_seen": "2026-03-25 10:36:10 UTC", "sightings": 1 }, { "indicator": "http://110.37.111.110:48924/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 10:34:18 UTC", "last_seen": "2026-03-25 10:34:18 UTC", "sightings": 1 }, { "indicator": "https://3urg2biz.amber-drift.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 10:29:09 UTC", "last_seen": "2026-03-25 10:29:09 UTC", "sightings": 1 }, { "indicator": "http://110.37.54.31:48074/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 10:27:19 UTC", "last_seen": "2026-03-25 10:27:19 UTC", "sightings": 1 }, { "indicator": "http://222.140.135.232:58649/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-25 10:27:08 UTC", "last_seen": "2026-03-25 10:27:08 UTC", "sightings": 1 }, { "indicator": "http://188.137.249.159/1.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543", "Vidar" ], "first_seen": "2026-03-25 10:26:11 UTC", "last_seen": "2026-03-25 10:26:11 UTC", "sightings": 1 }, { "indicator": "https://d3ep-cast.amber-drift.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 10:23:13 UTC", "last_seen": "2026-03-25 10:23:13 UTC", "sightings": 1 }, { "indicator": "https://wwklydao.amber-drift.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 10:16:12 UTC", "last_seen": "2026-03-25 10:16:12 UTC", "sightings": 1 }, { "indicator": "http://123.8.25.196:46066/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-25 10:12:07 UTC", "last_seen": "2026-03-25 10:12:07 UTC", "sightings": 1 }, { "indicator": "http://182.121.114.210:52677/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 10:10:17 UTC", "last_seen": "2026-03-25 10:10:17 UTC", "sightings": 1 }, { "indicator": "http://125.43.82.238:42914/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 10:09:13 UTC", "last_seen": "2026-03-25 10:09:13 UTC", "sightings": 1 }, { "indicator": "https://quot-isle.amber-drift.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 10:09:10 UTC", "last_seen": "2026-03-25 10:09:10 UTC", "sightings": 1 }, { "indicator": "http://125.43.82.238:42914/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 10:08:27 UTC", "last_seen": "2026-03-25 10:08:27 UTC", "sightings": 1 }, { "indicator": "https://nabfk.amber-drift.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 10:03:09 UTC", "last_seen": "2026-03-25 10:03:09 UTC", "sightings": 1 }, { "indicator": "http://117.24.142.65:47976/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-25 10:01:21 UTC", "last_seen": "2026-03-25 10:01:21 UTC", "sightings": 1 }, { "indicator": "https://m0nit7-layer.dawnspire.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 09:57:09 UTC", "last_seen": "2026-03-25 09:57:09 UTC", "sightings": 1 }, { "indicator": "http://42.226.222.212:55138/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "mirai" ], "first_seen": "2026-03-25 09:56:22 UTC", "last_seen": "2026-03-25 09:56:22 UTC", "sightings": 1 }, { "indicator": "http://123.8.25.196:46066/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-25 09:52:07 UTC", "last_seen": "2026-03-25 09:52:07 UTC", "sightings": 1 }, { "indicator": "https://vorvenen2.dawnspire.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 09:51:09 UTC", "last_seen": "2026-03-25 09:51:09 UTC", "sightings": 1 }, { "indicator": "http://42.235.86.167:50394/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-25 09:47:06 UTC", "last_seen": "2026-03-25 09:47:06 UTC", "sightings": 1 }, { "indicator": "http://110.37.111.110:48924/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 09:45:20 UTC", "last_seen": "2026-03-25 09:45:20 UTC", "sightings": 1 }, { "indicator": "https://survebroa.dawnspire.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 09:44:09 UTC", "last_seen": "2026-03-25 09:44:09 UTC", "sightings": 1 }, { "indicator": "https://lidx4.dawnspire.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 09:37:10 UTC", "last_seen": "2026-03-25 09:37:10 UTC", "sightings": 1 }, { "indicator": "https://qiauhat.dawnspire.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 09:30:10 UTC", "last_seen": "2026-03-25 09:30:10 UTC", "sightings": 1 }, { "indicator": "http://182.116.93.187:38474/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 09:27:26 UTC", "last_seen": "2026-03-25 09:27:26 UTC", "sightings": 1 }, { "indicator": "http://42.226.222.212:55138/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "mirai" ], "first_seen": "2026-03-25 09:27:26 UTC", "last_seen": "2026-03-25 09:27:26 UTC", "sightings": 1 }, { "indicator": "https://29rtrlv.cl0verrun.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 09:23:11 UTC", "last_seen": "2026-03-25 09:23:11 UTC", "sightings": 1 }, { "indicator": "https://ashtes.cl0verrun.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 09:17:08 UTC", "last_seen": "2026-03-25 09:17:08 UTC", "sightings": 1 }, { "indicator": "http://42.7.241.63:33672/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 09:15:33 UTC", "last_seen": "2026-03-25 09:15:33 UTC", "sightings": 1 }, { "indicator": "https://oqtxen.stone-blink.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 09:10:12 UTC", "last_seen": "2026-03-25 09:10:12 UTC", "sightings": 1 }, { "indicator": "http://110.39.249.140:57635/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 09:08:21 UTC", "last_seen": "2026-03-25 09:08:21 UTC", "sightings": 1 }, { "indicator": "https://offvisual.stone-blink.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 09:03:12 UTC", "last_seen": "2026-03-25 09:03:12 UTC", "sightings": 1 }, { "indicator": "http://117.211.35.139:32999/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 08:59:17 UTC", "last_seen": "2026-03-25 08:59:17 UTC", "sightings": 1 }, { "indicator": "https://6slp.thistlecore.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 08:57:10 UTC", "last_seen": "2026-03-25 08:57:10 UTC", "sightings": 1 }, { "indicator": "http://27.207.204.7:49884/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 08:53:17 UTC", "last_seen": "2026-03-25 08:53:17 UTC", "sightings": 1 }, { "indicator": "http://59.97.183.97:36055/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 08:53:17 UTC", "last_seen": "2026-03-25 08:53:17 UTC", "sightings": 1 }, { "indicator": "https://quorcoreix1.thistlecore.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 08:51:08 UTC", "last_seen": "2026-03-25 08:51:08 UTC", "sightings": 1 }, { "indicator": "http://113.221.58.86:60014/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-25 08:49:25 UTC", "last_seen": "2026-03-25 08:49:25 UTC", "sightings": 1 }, { "indicator": "http://61.52.5.43:39334/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 08:47:09 UTC", "last_seen": "2026-03-25 08:47:09 UTC", "sightings": 1 }, { "indicator": "http://110.39.249.140:57635/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 08:45:18 UTC", "last_seen": "2026-03-25 08:45:18 UTC", "sightings": 1 }, { "indicator": "https://f1xegu.q7ravo.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 08:45:14 UTC", "last_seen": "2026-03-25 08:45:14 UTC", "sightings": 1 }, { "indicator": "http://175.150.179.108:35044/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 08:42:25 UTC", "last_seen": "2026-03-25 08:42:25 UTC", "sightings": 1 }, { "indicator": "https://talven8ex.q7ravo.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 08:39:09 UTC", "last_seen": "2026-03-25 08:39:09 UTC", "sightings": 1 }, { "indicator": "http://61.52.118.171:33119/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 08:38:17 UTC", "last_seen": "2026-03-25 08:38:17 UTC", "sightings": 1 }, { "indicator": "http://123.11.73.85:60585/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-25 08:37:08 UTC", "last_seen": "2026-03-25 08:37:08 UTC", "sightings": 1 }, { "indicator": "http://87.255.10.22:35737/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-25 08:37:05 UTC", "last_seen": "2026-03-25 08:37:05 UTC", "sightings": 1 }, { "indicator": "https://1502u.frost-echo.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 08:35:13 UTC", "last_seen": "2026-03-25 08:35:13 UTC", "sightings": 1 }, { "indicator": "https://www.pastebin.cz/raw/r5A1oiy", "indicator_type": "url", "source": "URLhaus", "tags": [ "ascii", "rat", "RemcosRAT", "rev-base64-loader" ], "first_seen": "2026-03-25 08:35:13 UTC", "last_seen": "2026-03-25 08:35:13 UTC", "sightings": 1 }, { "indicator": "https://hasteb.in/4Fg4NqK5AqJFG1V", "indicator_type": "url", "source": "URLhaus", "tags": [ "rat", "RemcosRAT" ], "first_seen": "2026-03-25 08:35:08 UTC", "last_seen": "2026-03-25 08:35:08 UTC", "sightings": 1 }, { "indicator": "https://chinasite.com.br/MSI_180922.png", "indicator_type": "url", "source": "URLhaus", "tags": [ "xworm" ], "first_seen": "2026-03-25 08:34:08 UTC", "last_seen": "2026-03-25 08:34:08 UTC", "sightings": 1 }, { "indicator": "http://61.52.5.43:39334/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 08:34:08 UTC", "last_seen": "2026-03-25 08:34:08 UTC", "sightings": 1 }, { "indicator": "https://zonawood.org/download/fetch/list8/25319/view/b923fa53-d44a-4f36-be14-b6f8e7d145f6", "indicator_type": "url", "source": "URLhaus", "tags": [ "exe" ], "first_seen": "2026-03-25 08:29:08 UTC", "last_seen": "2026-03-25 08:29:08 UTC", "sightings": 1 }, { "indicator": "https://zonawood.org/download/fetch/list9/13621/view/630bc2a7-8ca6-40be-b927-086185fb490a", "indicator_type": "url", "source": "URLhaus", "tags": [ "exe" ], "first_seen": "2026-03-25 08:29:07 UTC", "last_seen": "2026-03-25 08:29:07 UTC", "sightings": 1 }, { "indicator": "https://zonawood.org/download/fetch/list7/22587/view/425f5ffd-be0e-485d-9be4-f4aaae07dfef", "indicator_type": "url", "source": "URLhaus", "tags": [ "exe" ], "first_seen": "2026-03-25 08:29:07 UTC", "last_seen": "2026-03-25 08:29:07 UTC", "sightings": 1 }, { "indicator": "https://zonawood.org/download/fetch/list5/22095/view/c8da6b51-77e2-49c7-8c5d-138e14902851", "indicator_type": "url", "source": "URLhaus", "tags": [ "exe" ], "first_seen": "2026-03-25 08:28:07 UTC", "last_seen": "2026-03-25 08:28:07 UTC", "sightings": 1 }, { "indicator": "https://zonawood.org/download/fetch/list6/27126/view/f03a548c-96e2-478d-95c0-d3c47ce605b2", "indicator_type": "url", "source": "URLhaus", "tags": [ "ascii", "Encoded" ], "first_seen": "2026-03-25 08:28:07 UTC", "last_seen": "2026-03-25 08:28:07 UTC", "sightings": 1 }, { "indicator": "http://59.97.183.97:36055/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 08:25:14 UTC", "last_seen": "2026-03-25 08:25:14 UTC", "sightings": 1 }, { "indicator": "https://gu8xe.frost-echo.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 08:24:11 UTC", "last_seen": "2026-03-25 08:24:11 UTC", "sightings": 1 }, { "indicator": "http://27.207.204.7:49884/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 08:24:11 UTC", "last_seen": "2026-03-25 08:24:11 UTC", "sightings": 1 }, { "indicator": "http://42.7.241.63:33672/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 08:20:19 UTC", "last_seen": "2026-03-25 08:20:19 UTC", "sightings": 1 }, { "indicator": "https://shape-mesh.graincrest.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 08:18:08 UTC", "last_seen": "2026-03-25 08:18:08 UTC", "sightings": 1 }, { "indicator": "http://118.251.115.61:49582/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-25 08:17:09 UTC", "last_seen": "2026-03-25 08:17:09 UTC", "sightings": 1 }, { "indicator": "http://123.14.221.79:50777/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-25 08:17:06 UTC", "last_seen": "2026-03-25 08:17:06 UTC", "sightings": 1 }, { "indicator": "http://87.255.10.22:35737/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-25 08:17:06 UTC", "last_seen": "2026-03-25 08:17:06 UTC", "sightings": 1 }, { "indicator": "http://94.154.32.49/NTECKPSRUuMsaoKQNPby67.bin", "indicator_type": "url", "source": "URLhaus", "tags": [ "encrypted", "GuLoader", "rat", "RemcosRAT" ], "first_seen": "2026-03-25 08:15:08 UTC", "last_seen": "2026-03-25 08:15:08 UTC", "sightings": 1 }, { "indicator": "http://61.52.118.171:33119/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 08:14:11 UTC", "last_seen": "2026-03-25 08:14:11 UTC", "sightings": 1 }, { "indicator": "https://quantbin.graincrest.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 08:11:08 UTC", "last_seen": "2026-03-25 08:11:08 UTC", "sightings": 1 }, { "indicator": "https://2ubum.skyl0om.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 08:05:10 UTC", "last_seen": "2026-03-25 08:05:10 UTC", "sightings": 1 }, { "indicator": "https://rout3-glow.skyl0om.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 07:58:07 UTC", "last_seen": "2026-03-25 07:58:07 UTC", "sightings": 1 }, { "indicator": "https://e3t525.flare-path.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 07:51:08 UTC", "last_seen": "2026-03-25 07:51:08 UTC", "sightings": 1 }, { "indicator": "http://118.251.115.61:49582/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-25 07:50:13 UTC", "last_seen": "2026-03-25 07:50:13 UTC", "sightings": 1 }, { "indicator": "http://110.37.89.197:33597/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-25 07:50:12 UTC", "last_seen": "2026-03-25 07:50:12 UTC", "sightings": 1 }, { "indicator": "http://123.14.221.79:50777/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-25 07:47:08 UTC", "last_seen": "2026-03-25 07:47:08 UTC", "sightings": 1 }, { "indicator": "https://extractwho.flare-path.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 07:45:10 UTC", "last_seen": "2026-03-25 07:45:10 UTC", "sightings": 1 }, { "indicator": "http://175.150.179.108:35044/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 07:39:31 UTC", "last_seen": "2026-03-25 07:39:31 UTC", "sightings": 1 }, { "indicator": "https://rende6-trace.rivermint.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 07:37:10 UTC", "last_seen": "2026-03-25 07:37:10 UTC", "sightings": 1 }, { "indicator": "https://mer-nexal.rivermint.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 07:30:08 UTC", "last_seen": "2026-03-25 07:30:08 UTC", "sightings": 1 }, { "indicator": "http://222.142.209.234:56514/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 07:27:11 UTC", "last_seen": "2026-03-25 07:27:11 UTC", "sightings": 1 }, { "indicator": "https://pxmghr.duskforge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 07:25:09 UTC", "last_seen": "2026-03-25 07:25:09 UTC", "sightings": 1 }, { "indicator": "http://115.52.31.193:59224/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 07:19:17 UTC", "last_seen": "2026-03-25 07:19:17 UTC", "sightings": 1 }, { "indicator": "https://f4ith-chain.duskforge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 07:19:09 UTC", "last_seen": "2026-03-25 07:19:09 UTC", "sightings": 1 }, { "indicator": "https://7lluqhl.hollow-spark.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 07:15:10 UTC", "last_seen": "2026-03-25 07:15:10 UTC", "sightings": 1 }, { "indicator": "http://77.236.74.65:35180/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 07:11:17 UTC", "last_seen": "2026-03-25 07:11:17 UTC", "sightings": 1 }, { "indicator": "http://110.37.89.197:33597/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-25 07:08:16 UTC", "last_seen": "2026-03-25 07:08:16 UTC", "sightings": 1 }, { "indicator": "https://50qfdh.hollow-spark.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 07:07:08 UTC", "last_seen": "2026-03-25 07:07:08 UTC", "sightings": 1 }, { "indicator": "http://120.28.160.164:34954/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-25 07:03:16 UTC", "last_seen": "2026-03-25 07:03:16 UTC", "sightings": 1 }, { "indicator": "https://sub-vv1ld.n1mbleoak.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 06:59:07 UTC", "last_seen": "2026-03-25 06:59:07 UTC", "sightings": 1 }, { "indicator": "http://115.52.31.193:59224/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 06:53:16 UTC", "last_seen": "2026-03-25 06:53:16 UTC", "sightings": 1 }, { "indicator": "https://f1er6-lab.n1mbleoak.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 06:52:08 UTC", "last_seen": "2026-03-25 06:52:08 UTC", "sightings": 1 }, { "indicator": "http://42.238.211.197:53188/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 06:50:11 UTC", "last_seen": "2026-03-25 06:50:11 UTC", "sightings": 1 }, { "indicator": "https://sermark0um.brimvale.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 06:45:12 UTC", "last_seen": "2026-03-25 06:45:12 UTC", "sightings": 1 }, { "indicator": "https://oxfordmobilexray.com/oxfordmobilexray.zip", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-25 06:42:09 UTC", "last_seen": "2026-03-25 06:42:09 UTC", "sightings": 1 }, { "indicator": "http://42.238.211.197:53188/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 06:41:16 UTC", "last_seen": "2026-03-25 06:41:16 UTC", "sightings": 1 }, { "indicator": "http://120.28.160.164:34954/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-25 06:38:20 UTC", "last_seen": "2026-03-25 06:38:20 UTC", "sightings": 1 }, { "indicator": "https://the0-drive.brimvale.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 06:38:14 UTC", "last_seen": "2026-03-25 06:38:14 UTC", "sightings": 1 }, { "indicator": "http://222.142.252.191:45873/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-25 06:37:06 UTC", "last_seen": "2026-03-25 06:37:06 UTC", "sightings": 1 }, { "indicator": "http://222.142.252.191:45873/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-25 06:32:07 UTC", "last_seen": "2026-03-25 06:32:07 UTC", "sightings": 1 }, { "indicator": "https://neuralclip.larkspin.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 06:31:09 UTC", "last_seen": "2026-03-25 06:31:09 UTC", "sightings": 1 }, { "indicator": "http://140.237.44.4:56557/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-25 06:26:12 UTC", "last_seen": "2026-03-25 06:26:12 UTC", "sightings": 1 }, { "indicator": "https://qclju.larkspin.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 06:24:09 UTC", "last_seen": "2026-03-25 06:24:09 UTC", "sightings": 1 }, { "indicator": "http://61.52.62.111:50655/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 06:23:06 UTC", "last_seen": "2026-03-25 06:23:06 UTC", "sightings": 1 }, { "indicator": "http://120.61.158.252:47382/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 06:18:09 UTC", "last_seen": "2026-03-25 06:18:09 UTC", "sightings": 1 }, { "indicator": "https://brandpackage.cobalt-ridge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 06:18:09 UTC", "last_seen": "2026-03-25 06:18:09 UTC", "sightings": 1 }, { "indicator": "http://61.52.62.111:50655/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 06:17:15 UTC", "last_seen": "2026-03-25 06:17:15 UTC", "sightings": 1 }, { "indicator": "http://77.236.74.65:35180/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 06:16:08 UTC", "last_seen": "2026-03-25 06:16:08 UTC", "sightings": 1 }, { "indicator": "https://5pectra-plate.cobalt-ridge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 06:12:08 UTC", "last_seen": "2026-03-25 06:12:08 UTC", "sightings": 1 }, { "indicator": "http://182.127.102.125:39653/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 06:11:10 UTC", "last_seen": "2026-03-25 06:11:10 UTC", "sightings": 1 }, { "indicator": "http://118.34.109.121:57516/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-25 06:07:08 UTC", "last_seen": "2026-03-25 06:07:08 UTC", "sightings": 1 }, { "indicator": "https://neo-cany0n.mirthbay.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 06:05:12 UTC", "last_seen": "2026-03-25 06:05:12 UTC", "sightings": 1 }, { "indicator": "http://140.237.44.4:56557/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-25 05:59:17 UTC", "last_seen": "2026-03-25 05:59:17 UTC", "sightings": 1 }, { "indicator": "https://ooj9q4.mirthbay.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 05:58:09 UTC", "last_seen": "2026-03-25 05:58:09 UTC", "sightings": 1 }, { "indicator": "http://110.37.80.62:36706/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 05:56:09 UTC", "last_seen": "2026-03-25 05:56:09 UTC", "sightings": 1 }, { "indicator": "http://59.88.10.109:54668/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 05:52:15 UTC", "last_seen": "2026-03-25 05:52:15 UTC", "sightings": 1 }, { "indicator": "https://ph0to3-stack.tr4cefox.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 05:51:07 UTC", "last_seen": "2026-03-25 05:51:07 UTC", "sightings": 1 }, { "indicator": "http://115.48.146.54:59878/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 05:50:26 UTC", "last_seen": "2026-03-25 05:50:26 UTC", "sightings": 1 }, { "indicator": "http://110.37.97.32:57413/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 05:50:12 UTC", "last_seen": "2026-03-25 05:50:12 UTC", "sightings": 1 }, { "indicator": "https://c1ea7-hinge.tr4cefox.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 05:45:08 UTC", "last_seen": "2026-03-25 05:45:08 UTC", "sightings": 1 }, { "indicator": "http://182.127.102.125:39653/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 05:44:14 UTC", "last_seen": "2026-03-25 05:44:14 UTC", "sightings": 1 }, { "indicator": "http://163.142.78.220:36113/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 05:40:15 UTC", "last_seen": "2026-03-25 05:40:15 UTC", "sightings": 1 }, { "indicator": "https://ficjog.velvet-dune.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 05:39:09 UTC", "last_seen": "2026-03-25 05:39:09 UTC", "sightings": 1 }, { "indicator": "http://196.189.3.1:48115/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-25 05:35:19 UTC", "last_seen": "2026-03-25 05:35:19 UTC", "sightings": 1 }, { "indicator": "https://mermeshor.velvet-dune.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 05:32:11 UTC", "last_seen": "2026-03-25 05:32:11 UTC", "sightings": 1 }, { "indicator": "http://110.37.97.32:57413/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 05:31:13 UTC", "last_seen": "2026-03-25 05:31:13 UTC", "sightings": 1 }, { "indicator": "http://59.88.10.109:54668/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 05:28:11 UTC", "last_seen": "2026-03-25 05:28:11 UTC", "sightings": 1 }, { "indicator": "http://103.102.25.50:35778/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 05:26:08 UTC", "last_seen": "2026-03-25 05:26:08 UTC", "sightings": 1 }, { "indicator": "https://ext4point.stratagraphic.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 05:25:11 UTC", "last_seen": "2026-03-25 05:25:11 UTC", "sightings": 1 }, { "indicator": "http://117.199.164.58:43401/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 05:23:23 UTC", "last_seen": "2026-03-25 05:23:23 UTC", "sightings": 1 }, { "indicator": "http://117.26.226.221:52208/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-25 05:19:11 UTC", "last_seen": "2026-03-25 05:19:11 UTC", "sightings": 1 }, { "indicator": "https://ext3data.stratagraphic.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 05:19:08 UTC", "last_seen": "2026-03-25 05:19:08 UTC", "sightings": 1 }, { "indicator": "https://ext2proxy.stratagraphic.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 05:15:09 UTC", "last_seen": "2026-03-25 05:15:09 UTC", "sightings": 1 }, { "indicator": "http://117.210.192.97:54462/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-25 05:12:10 UTC", "last_seen": "2026-03-25 05:12:10 UTC", "sightings": 1 }, { "indicator": "http://117.26.226.221:52208/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-25 05:09:12 UTC", "last_seen": "2026-03-25 05:09:12 UTC", "sightings": 1 }, { "indicator": "http://59.184.57.31:48088/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 05:09:11 UTC", "last_seen": "2026-03-25 05:09:11 UTC", "sightings": 1 }, { "indicator": "http://103.102.25.50:35778/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 05:08:08 UTC", "last_seen": "2026-03-25 05:08:08 UTC", "sightings": 1 }, { "indicator": "https://ext1infra.stratagraphic.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 05:07:08 UTC", "last_seen": "2026-03-25 05:07:08 UTC", "sightings": 1 }, { "indicator": "http://120.61.11.105:53571/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 04:56:30 UTC", "last_seen": "2026-03-25 04:56:30 UTC", "sightings": 1 }, { "indicator": "https://svc4sat.rhyolitenodehub.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 04:56:10 UTC", "last_seen": "2026-03-25 04:56:10 UTC", "sightings": 1 }, { "indicator": "https://svc3core.rhyolitenodehub.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 04:50:11 UTC", "last_seen": "2026-03-25 04:50:11 UTC", "sightings": 1 }, { "indicator": "http://222.127.73.23:59664/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-25 04:47:07 UTC", "last_seen": "2026-03-25 04:47:07 UTC", "sightings": 1 }, { "indicator": "http://59.184.57.31:48088/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 04:45:16 UTC", "last_seen": "2026-03-25 04:45:16 UTC", "sightings": 1 }, { "indicator": "http://45.139.104.122/arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-25 04:43:15 UTC", "last_seen": "2026-03-25 04:43:15 UTC", "sightings": 1 }, { "indicator": "http://45.139.104.122/x86", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-25 04:43:15 UTC", "last_seen": "2026-03-25 04:43:15 UTC", "sightings": 1 }, { "indicator": "http://45.139.104.122/mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-25 04:43:15 UTC", "last_seen": "2026-03-25 04:43:15 UTC", "sightings": 1 }, { "indicator": "http://45.139.104.122/m68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-25 04:43:15 UTC", "last_seen": "2026-03-25 04:43:15 UTC", "sightings": 1 }, { "indicator": "https://svc2steel.rhyolitenodehub.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 04:43:08 UTC", "last_seen": "2026-03-25 04:43:08 UTC", "sightings": 1 }, { "indicator": "http://45.139.104.122/arm", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-25 04:42:15 UTC", "last_seen": "2026-03-25 04:42:15 UTC", "sightings": 1 }, { "indicator": "http://45.139.104.122/spc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-25 04:42:14 UTC", "last_seen": "2026-03-25 04:42:14 UTC", "sightings": 1 }, { "indicator": "http://45.139.104.122/sh4", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-25 04:42:14 UTC", "last_seen": "2026-03-25 04:42:14 UTC", "sightings": 1 }, { "indicator": "http://45.139.104.122/x86_64", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-25 04:42:14 UTC", "last_seen": "2026-03-25 04:42:14 UTC", "sightings": 1 }, { "indicator": "http://45.139.104.122/arm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-25 04:42:14 UTC", "last_seen": "2026-03-25 04:42:14 UTC", "sightings": 1 }, { "indicator": "http://45.139.104.122/ppc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-25 04:42:14 UTC", "last_seen": "2026-03-25 04:42:14 UTC", "sightings": 1 }, { "indicator": "http://45.139.104.122/arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-25 04:42:14 UTC", "last_seen": "2026-03-25 04:42:14 UTC", "sightings": 1 }, { "indicator": "http://45.139.104.122/debug.dbg", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-25 04:42:14 UTC", "last_seen": "2026-03-25 04:42:14 UTC", "sightings": 1 }, { "indicator": "http://45.139.104.122/mpsl", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-25 04:42:14 UTC", "last_seen": "2026-03-25 04:42:14 UTC", "sightings": 1 }, { "indicator": "https://svc1proc.rhyolitenodehub.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 04:37:10 UTC", "last_seen": "2026-03-25 04:37:10 UTC", "sightings": 1 }, { "indicator": "https://dev4space.pyroxenetrace.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 04:33:11 UTC", "last_seen": "2026-03-25 04:33:11 UTC", "sightings": 1 }, { "indicator": "http://27.37.113.232:37596/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 04:25:13 UTC", "last_seen": "2026-03-25 04:25:13 UTC", "sightings": 1 }, { "indicator": "http://123.4.249.207:48315/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "mirai" ], "first_seen": "2026-03-25 04:25:13 UTC", "last_seen": "2026-03-25 04:25:13 UTC", "sightings": 1 }, { "indicator": "http://222.127.73.23:59664/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-25 04:21:14 UTC", "last_seen": "2026-03-25 04:21:14 UTC", "sightings": 1 }, { "indicator": "https://dev2outer.pyroxenetrace.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 04:17:08 UTC", "last_seen": "2026-03-25 04:17:08 UTC", "sightings": 1 }, { "indicator": "http://37.28.176.153:41839/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-25 04:17:07 UTC", "last_seen": "2026-03-25 04:17:07 UTC", "sightings": 1 }, { "indicator": "http://61.52.59.8:50449/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-25 04:12:10 UTC", "last_seen": "2026-03-25 04:12:10 UTC", "sightings": 1 }, { "indicator": "http://37.28.176.153:41839/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-25 04:12:06 UTC", "last_seen": "2026-03-25 04:12:06 UTC", "sightings": 1 }, { "indicator": "https://dev1proc.pyroxenetrace.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 04:10:09 UTC", "last_seen": "2026-03-25 04:10:09 UTC", "sightings": 1 }, { "indicator": "http://59.88.249.95:53022/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-25 04:07:09 UTC", "last_seen": "2026-03-25 04:07:09 UTC", "sightings": 1 }, { "indicator": "https://cl4path.obsidianmatrix.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 04:04:08 UTC", "last_seen": "2026-03-25 04:04:08 UTC", "sightings": 1 }, { "indicator": "http://124.72.183.249:52751/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-25 04:02:08 UTC", "last_seen": "2026-03-25 04:02:08 UTC", "sightings": 1 }, { "indicator": "http://42.234.143.41:56872/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 03:59:07 UTC", "last_seen": "2026-03-25 03:59:07 UTC", "sightings": 1 }, { "indicator": "https://cl3view.obsidianmatrix.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 03:57:08 UTC", "last_seen": "2026-03-25 03:57:08 UTC", "sightings": 1 }, { "indicator": "http://27.11.158.74:52919/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-25 03:56:15 UTC", "last_seen": "2026-03-25 03:56:15 UTC", "sightings": 1 }, { "indicator": "http://196.189.3.1:48115/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-25 03:55:14 UTC", "last_seen": "2026-03-25 03:55:14 UTC", "sightings": 1 }, { "indicator": "http://123.4.249.207:48315/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "mirai" ], "first_seen": "2026-03-25 03:54:08 UTC", "last_seen": "2026-03-25 03:54:08 UTC", "sightings": 1 }, { "indicator": "http://91.92.241.94/ftpget.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "sh", "ua-wget" ], "first_seen": "2026-03-25 03:54:06 UTC", "last_seen": "2026-03-25 03:54:06 UTC", "sightings": 1 }, { "indicator": "http://91.92.241.94/dvr.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai", "sh", "ua-wget" ], "first_seen": "2026-03-25 03:54:06 UTC", "last_seen": "2026-03-25 03:54:06 UTC", "sightings": 1 }, { "indicator": "http://202.111.130.32:55074/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 03:53:09 UTC", "last_seen": "2026-03-25 03:53:09 UTC", "sightings": 1 }, { "indicator": "http://91.92.241.94/tftp.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "sh", "ua-wget" ], "first_seen": "2026-03-25 03:52:07 UTC", "last_seen": "2026-03-25 03:52:07 UTC", "sightings": 1 }, { "indicator": "http://91.92.241.94/tplink.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai", "sh", "ua-wget" ], "first_seen": "2026-03-25 03:52:07 UTC", "last_seen": "2026-03-25 03:52:07 UTC", "sightings": 1 }, { "indicator": "http://27.37.113.232:37596/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 03:51:06 UTC", "last_seen": "2026-03-25 03:51:06 UTC", "sightings": 1 }, { "indicator": "http://182.114.252.40:51800/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 03:51:05 UTC", "last_seen": "2026-03-25 03:51:05 UTC", "sightings": 1 }, { "indicator": "https://cl2point.obsidianmatrix.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 03:50:09 UTC", "last_seen": "2026-03-25 03:50:09 UTC", "sightings": 1 }, { "indicator": "http://61.52.59.8:50449/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-25 03:47:08 UTC", "last_seen": "2026-03-25 03:47:08 UTC", "sightings": 1 }, { "indicator": "http://91.92.241.94/wget.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai", "sh", "ua-wget" ], "first_seen": "2026-03-25 03:45:11 UTC", "last_seen": "2026-03-25 03:45:11 UTC", "sightings": 1 }, { "indicator": "http://42.234.100.151:46774/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 03:43:21 UTC", "last_seen": "2026-03-25 03:43:21 UTC", "sightings": 1 }, { "indicator": "https://cl1proc.obsidianmatrix.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 03:43:08 UTC", "last_seen": "2026-03-25 03:43:08 UTC", "sightings": 1 }, { "indicator": "https://ext4view.feldspargateway.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 03:37:10 UTC", "last_seen": "2026-03-25 03:37:10 UTC", "sightings": 1 }, { "indicator": "http://42.178.112.150:44248/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 03:36:08 UTC", "last_seen": "2026-03-25 03:36:08 UTC", "sightings": 1 }, { "indicator": "http://42.178.112.150:44248/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 03:35:14 UTC", "last_seen": "2026-03-25 03:35:14 UTC", "sightings": 1 }, { "indicator": "https://ext3ghost.feldspargateway.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 03:30:12 UTC", "last_seen": "2026-03-25 03:30:12 UTC", "sightings": 1 }, { "indicator": "http://42.234.143.41:56872/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 03:29:18 UTC", "last_seen": "2026-03-25 03:29:18 UTC", "sightings": 1 }, { "indicator": "http://91.92.241.94/curl.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai", "sh" ], "first_seen": "2026-03-25 03:28:14 UTC", "last_seen": "2026-03-25 03:28:14 UTC", "sightings": 1 }, { "indicator": "http://162.248.102.107/n2/armv5l", "indicator_type": "url", "source": "URLhaus", "tags": [ "arm", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-25 03:27:17 UTC", "last_seen": "2026-03-25 03:27:17 UTC", "sightings": 1 }, { "indicator": "http://162.248.102.107/n2/tbk", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai", "sh", "ua-wget" ], "first_seen": "2026-03-25 03:27:16 UTC", "last_seen": "2026-03-25 03:27:16 UTC", "sightings": 1 }, { "indicator": "http://162.248.102.107/n2/mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mips", "mirai", "ua-wget" ], "first_seen": "2026-03-25 03:27:16 UTC", "last_seen": "2026-03-25 03:27:16 UTC", "sightings": 1 }, { "indicator": "http://162.248.102.107/n2/x86", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget", "x86" ], "first_seen": "2026-03-25 03:27:16 UTC", "last_seen": "2026-03-25 03:27:16 UTC", "sightings": 1 }, { "indicator": "http://162.248.102.107/n2/mpsl", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mips", "mirai", "ua-wget" ], "first_seen": "2026-03-25 03:27:16 UTC", "last_seen": "2026-03-25 03:27:16 UTC", "sightings": 1 }, { "indicator": "http://117.242.76.137:50959/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 03:26:16 UTC", "last_seen": "2026-03-25 03:26:16 UTC", "sightings": 1 }, { "indicator": "http://182.114.252.40:51800/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 03:24:18 UTC", "last_seen": "2026-03-25 03:24:18 UTC", "sightings": 1 }, { "indicator": "http://175.167.3.64:58849/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 03:24:17 UTC", "last_seen": "2026-03-25 03:24:17 UTC", "sightings": 1 }, { "indicator": "https://ext2core.feldspargateway.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 03:24:11 UTC", "last_seen": "2026-03-25 03:24:11 UTC", "sightings": 1 }, { "indicator": "https://ext1proc.feldspargateway.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 03:18:08 UTC", "last_seen": "2026-03-25 03:18:08 UTC", "sightings": 1 }, { "indicator": "http://124.131.94.120:55132/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 03:15:10 UTC", "last_seen": "2026-03-25 03:15:10 UTC", "sightings": 1 }, { "indicator": "https://svc4link.magmaticbuffer.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 03:11:08 UTC", "last_seen": "2026-03-25 03:11:08 UTC", "sightings": 1 }, { "indicator": "http://196.189.98.77:52781/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-25 03:09:15 UTC", "last_seen": "2026-03-25 03:09:15 UTC", "sightings": 1 }, { "indicator": "http://117.242.76.137:50959/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 03:07:12 UTC", "last_seen": "2026-03-25 03:07:12 UTC", "sightings": 1 }, { "indicator": "https://svc3user.magmaticbuffer.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 03:05:09 UTC", "last_seen": "2026-03-25 03:05:09 UTC", "sightings": 1 }, { "indicator": "http://42.234.100.151:46774/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 03:03:08 UTC", "last_seen": "2026-03-25 03:03:08 UTC", "sightings": 1 }, { "indicator": "https://svc2base.magmaticbuffer.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 03:02:11 UTC", "last_seen": "2026-03-25 03:02:11 UTC", "sightings": 1 }, { "indicator": "https://svc1infra.magmaticbuffer.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 02:51:09 UTC", "last_seen": "2026-03-25 02:51:09 UTC", "sightings": 1 }, { "indicator": "http://124.131.94.120:55132/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 02:47:14 UTC", "last_seen": "2026-03-25 02:47:14 UTC", "sightings": 1 }, { "indicator": "http://112.198.140.250:48066/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-25 02:45:15 UTC", "last_seen": "2026-03-25 02:45:15 UTC", "sightings": 1 }, { "indicator": "https://dev4work.tectonicstream.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 02:44:10 UTC", "last_seen": "2026-03-25 02:44:10 UTC", "sightings": 1 }, { "indicator": "https://dev3local.tectonicstream.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 02:42:08 UTC", "last_seen": "2026-03-25 02:42:08 UTC", "sightings": 1 }, { "indicator": "http://125.44.54.187:33821/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 02:35:12 UTC", "last_seen": "2026-03-25 02:35:12 UTC", "sightings": 1 }, { "indicator": "http://116.138.244.143:39987/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 02:31:15 UTC", "last_seen": "2026-03-25 02:31:15 UTC", "sightings": 1 }, { "indicator": "https://dev2power.tectonicstream.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 02:31:08 UTC", "last_seen": "2026-03-25 02:31:08 UTC", "sightings": 1 }, { "indicator": "http://110.37.122.34:55000/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 02:28:13 UTC", "last_seen": "2026-03-25 02:28:13 UTC", "sightings": 1 }, { "indicator": "https://dev1proc.tectonicstream.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 02:25:10 UTC", "last_seen": "2026-03-25 02:25:10 UTC", "sightings": 1 }, { "indicator": "http://116.138.244.143:39987/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 02:20:19 UTC", "last_seen": "2026-03-25 02:20:19 UTC", "sightings": 1 }, { "indicator": "https://cl4link.sedimentmetrics.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 02:17:09 UTC", "last_seen": "2026-03-25 02:17:09 UTC", "sightings": 1 }, { "indicator": "https://cl3dev.sedimentmetrics.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 02:11:08 UTC", "last_seen": "2026-03-25 02:11:08 UTC", "sightings": 1 }, { "indicator": "http://125.40.159.87:46256/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 02:07:17 UTC", "last_seen": "2026-03-25 02:07:17 UTC", "sightings": 1 }, { "indicator": "http://182.148.85.228:56473/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-25 02:07:06 UTC", "last_seen": "2026-03-25 02:07:06 UTC", "sightings": 1 }, { "indicator": "https://cl2remote.sedimentmetrics.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 02:05:10 UTC", "last_seen": "2026-03-25 02:05:10 UTC", "sightings": 1 }, { "indicator": "http://125.40.159.87:46256/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 02:03:08 UTC", "last_seen": "2026-03-25 02:03:08 UTC", "sightings": 1 }, { "indicator": "http://110.39.247.164:39645/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-25 02:02:06 UTC", "last_seen": "2026-03-25 02:02:06 UTC", "sightings": 1 }, { "indicator": "https://cl1store.sedimentmetrics.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 01:58:09 UTC", "last_seen": "2026-03-25 01:58:09 UTC", "sightings": 1 }, { "indicator": "http://175.148.156.117:35125/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 01:55:21 UTC", "last_seen": "2026-03-25 01:55:21 UTC", "sightings": 1 }, { "indicator": "http://110.39.249.30:45324/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 01:54:14 UTC", "last_seen": "2026-03-25 01:54:14 UTC", "sightings": 1 }, { "indicator": "https://ext4sync.lithosphereduct.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 01:51:08 UTC", "last_seen": "2026-03-25 01:51:08 UTC", "sightings": 1 }, { "indicator": "http://42.224.122.228:54708/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-25 01:47:08 UTC", "last_seen": "2026-03-25 01:47:08 UTC", "sightings": 1 }, { "indicator": "http://42.224.122.228:54708/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-25 01:47:08 UTC", "last_seen": "2026-03-25 01:47:08 UTC", "sightings": 1 }, { "indicator": "https://ext3gate.lithosphereduct.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 01:44:08 UTC", "last_seen": "2026-03-25 01:44:08 UTC", "sightings": 1 }, { "indicator": "http://110.37.95.41:35733/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 01:39:11 UTC", "last_seen": "2026-03-25 01:39:11 UTC", "sightings": 1 }, { "indicator": "https://ext2proc.lithosphereduct.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 01:38:07 UTC", "last_seen": "2026-03-25 01:38:07 UTC", "sightings": 1 }, { "indicator": "http://182.148.85.228:56473/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-25 01:37:08 UTC", "last_seen": "2026-03-25 01:37:08 UTC", "sightings": 1 }, { "indicator": "http://110.37.48.94:42185/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-25 01:32:06 UTC", "last_seen": "2026-03-25 01:32:06 UTC", "sightings": 1 }, { "indicator": "http://110.39.247.164:39645/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-25 01:32:06 UTC", "last_seen": "2026-03-25 01:32:06 UTC", "sightings": 1 }, { "indicator": "https://ext1meta.lithosphereduct.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 01:31:07 UTC", "last_seen": "2026-03-25 01:31:07 UTC", "sightings": 1 }, { "indicator": "https://svc4static.petrographyflow.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 01:25:11 UTC", "last_seen": "2026-03-25 01:25:11 UTC", "sightings": 1 }, { "indicator": "https://svc3edge.petrographyflow.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 01:18:09 UTC", "last_seen": "2026-03-25 01:18:09 UTC", "sightings": 1 }, { "indicator": "http://110.38.199.22:40197/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-25 01:17:06 UTC", "last_seen": "2026-03-25 01:17:06 UTC", "sightings": 1 }, { "indicator": "http://119.116.38.246:59819/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 01:12:16 UTC", "last_seen": "2026-03-25 01:12:16 UTC", "sightings": 1 }, { "indicator": "https://svc2data.petrographyflow.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 01:12:08 UTC", "last_seen": "2026-03-25 01:12:08 UTC", "sightings": 1 }, { "indicator": "https://svc1sync.petrographyflow.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 01:06:07 UTC", "last_seen": "2026-03-25 01:06:07 UTC", "sightings": 1 }, { "indicator": "http://110.37.95.41:35733/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 01:05:15 UTC", "last_seen": "2026-03-25 01:05:15 UTC", "sightings": 1 }, { "indicator": "https://ext4point.chordatamatrix.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 01:00:11 UTC", "last_seen": "2026-03-25 01:00:11 UTC", "sightings": 1 }, { "indicator": "http://42.231.89.224:59016/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-25 00:52:07 UTC", "last_seen": "2026-03-25 00:52:07 UTC", "sightings": 1 }, { "indicator": "https://ext3data.chordatamatrix.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 00:50:08 UTC", "last_seen": "2026-03-25 00:50:08 UTC", "sightings": 1 }, { "indicator": "http://182.112.42.193:32770/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 00:49:12 UTC", "last_seen": "2026-03-25 00:49:12 UTC", "sightings": 1 }, { "indicator": "http://61.52.88.154:59902/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 00:48:12 UTC", "last_seen": "2026-03-25 00:48:12 UTC", "sightings": 1 }, { "indicator": "https://ext2proxy.chordatamatrix.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 00:38:06 UTC", "last_seen": "2026-03-25 00:38:06 UTC", "sightings": 1 }, { "indicator": "http://182.121.41.102:51238/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-25 00:37:05 UTC", "last_seen": "2026-03-25 00:37:05 UTC", "sightings": 1 }, { "indicator": "https://ext1infra.chordatamatrix.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 00:33:08 UTC", "last_seen": "2026-03-25 00:33:08 UTC", "sightings": 1 }, { "indicator": "http://182.112.42.193:32770/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 00:28:08 UTC", "last_seen": "2026-03-25 00:28:08 UTC", "sightings": 1 }, { "indicator": "https://svc4sat.nematodastream.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 00:27:06 UTC", "last_seen": "2026-03-25 00:27:06 UTC", "sightings": 1 }, { "indicator": "https://svc3core.nematodastream.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 00:23:08 UTC", "last_seen": "2026-03-25 00:23:08 UTC", "sightings": 1 }, { "indicator": "http://116.248.121.149:58539/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-25 00:22:14 UTC", "last_seen": "2026-03-25 00:22:14 UTC", "sightings": 1 }, { "indicator": "http://110.37.87.13:53307/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 00:21:08 UTC", "last_seen": "2026-03-25 00:21:08 UTC", "sightings": 1 }, { "indicator": "https://svc2steel.nematodastream.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 00:17:08 UTC", "last_seen": "2026-03-25 00:17:08 UTC", "sightings": 1 }, { "indicator": "http://115.55.242.68:55978/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-25 00:17:05 UTC", "last_seen": "2026-03-25 00:17:05 UTC", "sightings": 1 }, { "indicator": "http://115.54.165.148:33992/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-25 00:10:16 UTC", "last_seen": "2026-03-25 00:10:16 UTC", "sightings": 1 }, { "indicator": "https://svc1proc.nematodastream.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 00:10:08 UTC", "last_seen": "2026-03-25 00:10:08 UTC", "sightings": 1 }, { "indicator": "http://110.39.239.111:38935/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-25 00:07:06 UTC", "last_seen": "2026-03-25 00:07:06 UTC", "sightings": 1 }, { "indicator": "https://dev4space.platyhelminth.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 00:05:08 UTC", "last_seen": "2026-03-25 00:05:08 UTC", "sightings": 1 }, { "indicator": "https://dev3field.platyhelminth.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-25 00:00:10 UTC", "last_seen": "2026-03-25 00:00:10 UTC", "sightings": 1 }, { "indicator": "http://110.37.66.90:58120/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 23:58:13 UTC", "last_seen": "2026-03-24 23:58:13 UTC", "sightings": 1 }, { "indicator": "http://105.225.164.254:60781/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-24 23:58:13 UTC", "last_seen": "2026-03-24 23:58:13 UTC", "sightings": 1 }, { "indicator": "http://116.248.121.149:58539/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-24 23:56:20 UTC", "last_seen": "2026-03-24 23:56:20 UTC", "sightings": 1 }, { "indicator": "http://110.37.87.13:53307/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 23:55:07 UTC", "last_seen": "2026-03-24 23:55:07 UTC", "sightings": 1 }, { "indicator": "https://dev2outer.platyhelminth.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 23:53:07 UTC", "last_seen": "2026-03-24 23:53:07 UTC", "sightings": 1 }, { "indicator": "https://dev1proc.platyhelminth.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 23:50:10 UTC", "last_seen": "2026-03-24 23:50:10 UTC", "sightings": 1 }, { "indicator": "https://cl4path.bryozoametrics.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 23:47:08 UTC", "last_seen": "2026-03-24 23:47:08 UTC", "sightings": 1 }, { "indicator": "http://110.36.20.111:45225/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-24 23:42:06 UTC", "last_seen": "2026-03-24 23:42:06 UTC", "sightings": 1 }, { "indicator": "https://cl3view.bryozoametrics.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 23:37:08 UTC", "last_seen": "2026-03-24 23:37:08 UTC", "sightings": 1 }, { "indicator": "http://110.39.239.111:38935/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-24 23:37:05 UTC", "last_seen": "2026-03-24 23:37:05 UTC", "sightings": 1 }, { "indicator": "https://cl2point.bryozoametrics.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 23:33:07 UTC", "last_seen": "2026-03-24 23:33:07 UTC", "sightings": 1 }, { "indicator": "http://117.213.112.43:40819/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-24 23:32:07 UTC", "last_seen": "2026-03-24 23:32:07 UTC", "sightings": 1 }, { "indicator": "https://cl1proc.bryozoametrics.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 23:31:09 UTC", "last_seen": "2026-03-24 23:31:09 UTC", "sightings": 1 }, { "indicator": "http://105.225.164.254:60781/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-24 23:27:13 UTC", "last_seen": "2026-03-24 23:27:13 UTC", "sightings": 1 }, { "indicator": "https://ext4view.poriferabuffer.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 23:20:09 UTC", "last_seen": "2026-03-24 23:20:09 UTC", "sightings": 1 }, { "indicator": "http://110.37.66.90:58120/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 23:18:06 UTC", "last_seen": "2026-03-24 23:18:06 UTC", "sightings": 1 }, { "indicator": "https://ext3ghost.poriferabuffer.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 23:15:10 UTC", "last_seen": "2026-03-24 23:15:10 UTC", "sightings": 1 }, { "indicator": "http://117.213.112.43:40819/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-24 23:12:06 UTC", "last_seen": "2026-03-24 23:12:06 UTC", "sightings": 1 }, { "indicator": "https://ext2core.poriferabuffer.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 23:08:06 UTC", "last_seen": "2026-03-24 23:08:06 UTC", "sightings": 1 }, { "indicator": "http://61.52.88.154:59902/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 23:05:17 UTC", "last_seen": "2026-03-24 23:05:17 UTC", "sightings": 1 }, { "indicator": "https://ext1proc.poriferabuffer.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 23:04:07 UTC", "last_seen": "2026-03-24 23:04:07 UTC", "sightings": 1 }, { "indicator": "https://svc4link.arthropodameta.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 22:58:06 UTC", "last_seen": "2026-03-24 22:58:06 UTC", "sightings": 1 }, { "indicator": "https://svc3user.arthropodameta.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 22:55:10 UTC", "last_seen": "2026-03-24 22:55:10 UTC", "sightings": 1 }, { "indicator": "http://59.180.191.119:52915/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-24 22:47:08 UTC", "last_seen": "2026-03-24 22:47:08 UTC", "sightings": 1 }, { "indicator": "http://182.121.41.102:51238/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-24 22:47:06 UTC", "last_seen": "2026-03-24 22:47:06 UTC", "sightings": 1 }, { "indicator": "http://175.160.127.168:50205/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-24 22:44:13 UTC", "last_seen": "2026-03-24 22:44:13 UTC", "sightings": 1 }, { "indicator": "https://svc2base.arthropodameta.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 22:44:05 UTC", "last_seen": "2026-03-24 22:44:05 UTC", "sightings": 1 }, { "indicator": "https://svc1infra.arthropodameta.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 22:39:08 UTC", "last_seen": "2026-03-24 22:39:08 UTC", "sightings": 1 }, { "indicator": "http://175.160.127.168:50205/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-24 22:39:08 UTC", "last_seen": "2026-03-24 22:39:08 UTC", "sightings": 1 }, { "indicator": "https://dev4work.annelidatrace.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 22:33:10 UTC", "last_seen": "2026-03-24 22:33:10 UTC", "sightings": 1 }, { "indicator": "https://dev3local.annelidatrace.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 22:28:09 UTC", "last_seen": "2026-03-24 22:28:09 UTC", "sightings": 1 }, { "indicator": "http://125.40.86.36:44066/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-24 22:27:06 UTC", "last_seen": "2026-03-24 22:27:06 UTC", "sightings": 1 }, { "indicator": "https://dev2power.annelidatrace.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 22:24:07 UTC", "last_seen": "2026-03-24 22:24:07 UTC", "sightings": 1 }, { "indicator": "http://42.224.30.21:39607/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 22:23:16 UTC", "last_seen": "2026-03-24 22:23:16 UTC", "sightings": 1 }, { "indicator": "https://dev1proc.annelidatrace.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 22:21:09 UTC", "last_seen": "2026-03-24 22:21:09 UTC", "sightings": 1 }, { "indicator": "http://123.189.149.14:40270/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 22:17:18 UTC", "last_seen": "2026-03-24 22:17:18 UTC", "sightings": 1 }, { "indicator": "http://59.93.187.141:53899/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 22:15:14 UTC", "last_seen": "2026-03-24 22:15:14 UTC", "sightings": 1 }, { "indicator": "https://cl4link.echinodermgate.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 22:11:08 UTC", "last_seen": "2026-03-24 22:11:08 UTC", "sightings": 1 }, { "indicator": "https://cl3dev.echinodermgate.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 22:08:07 UTC", "last_seen": "2026-03-24 22:08:07 UTC", "sightings": 1 }, { "indicator": "http://112.239.101.73:33959/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 22:06:29 UTC", "last_seen": "2026-03-24 22:06:29 UTC", "sightings": 1 }, { "indicator": "http://42.227.196.225:43830/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 22:04:09 UTC", "last_seen": "2026-03-24 22:04:09 UTC", "sightings": 1 }, { "indicator": "https://cl2remote.echinodermgate.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 22:04:08 UTC", "last_seen": "2026-03-24 22:04:08 UTC", "sightings": 1 }, { "indicator": "http://59.93.187.141:53899/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 22:03:17 UTC", "last_seen": "2026-03-24 22:03:17 UTC", "sightings": 1 }, { "indicator": "http://219.155.209.70:33229/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-24 22:02:06 UTC", "last_seen": "2026-03-24 22:02:06 UTC", "sightings": 1 }, { "indicator": "http://115.59.25.80:39758/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 21:56:13 UTC", "last_seen": "2026-03-24 21:56:13 UTC", "sightings": 1 }, { "indicator": "http://110.39.242.135:42025/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 21:55:10 UTC", "last_seen": "2026-03-24 21:55:10 UTC", "sightings": 1 }, { "indicator": "https://cl1store.echinodermgate.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 21:55:07 UTC", "last_seen": "2026-03-24 21:55:07 UTC", "sightings": 1 }, { "indicator": "https://ext4sync.molluskflowlink.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 21:48:06 UTC", "last_seen": "2026-03-24 21:48:06 UTC", "sightings": 1 }, { "indicator": "http://59.97.255.53:46783/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 21:45:08 UTC", "last_seen": "2026-03-24 21:45:08 UTC", "sightings": 1 }, { "indicator": "https://ext3gate.molluskflowlink.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 21:44:05 UTC", "last_seen": "2026-03-24 21:44:05 UTC", "sightings": 1 }, { "indicator": "http://115.59.25.80:39758/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 21:41:13 UTC", "last_seen": "2026-03-24 21:41:13 UTC", "sightings": 1 }, { "indicator": "https://ext2proc.molluskflowlink.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 21:37:06 UTC", "last_seen": "2026-03-24 21:37:06 UTC", "sightings": 1 }, { "indicator": "http://119.117.74.214:34669/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 21:34:28 UTC", "last_seen": "2026-03-24 21:34:28 UTC", "sightings": 1 }, { "indicator": "http://59.97.255.53:46783/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 21:34:14 UTC", "last_seen": "2026-03-24 21:34:14 UTC", "sightings": 1 }, { "indicator": "http://119.166.206.245:41126/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 21:32:16 UTC", "last_seen": "2026-03-24 21:32:16 UTC", "sightings": 1 }, { "indicator": "https://ext1meta.molluskflowlink.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 21:32:07 UTC", "last_seen": "2026-03-24 21:32:07 UTC", "sightings": 1 }, { "indicator": "http://222.134.175.5:43529/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 21:28:17 UTC", "last_seen": "2026-03-24 21:28:17 UTC", "sightings": 1 }, { "indicator": "https://svc4static.crustaceanode.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 21:26:07 UTC", "last_seen": "2026-03-24 21:26:07 UTC", "sightings": 1 }, { "indicator": "http://103.160.130.109:49808/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 21:24:12 UTC", "last_seen": "2026-03-24 21:24:12 UTC", "sightings": 1 }, { "indicator": "http://110.36.19.51:57980/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 21:22:18 UTC", "last_seen": "2026-03-24 21:22:18 UTC", "sightings": 1 }, { "indicator": "http://42.224.30.21:39607/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 21:22:18 UTC", "last_seen": "2026-03-24 21:22:18 UTC", "sightings": 1 }, { "indicator": "https://svc3edge.crustaceanode.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 21:21:08 UTC", "last_seen": "2026-03-24 21:21:08 UTC", "sightings": 1 }, { "indicator": "https://svc2data.crustaceanode.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 21:14:06 UTC", "last_seen": "2026-03-24 21:14:06 UTC", "sightings": 1 }, { "indicator": "http://61.52.96.210:35684/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 21:12:14 UTC", "last_seen": "2026-03-24 21:12:14 UTC", "sightings": 1 }, { "indicator": "https://svc1sync.crustaceanode.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 21:10:09 UTC", "last_seen": "2026-03-24 21:10:09 UTC", "sightings": 1 }, { "indicator": "https://grid-mesh.thistlecore.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 21:05:07 UTC", "last_seen": "2026-03-24 21:05:07 UTC", "sightings": 1 }, { "indicator": "https://coralmotif.graincrest.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 21:00:09 UTC", "last_seen": "2026-03-24 21:00:09 UTC", "sightings": 1 }, { "indicator": "http://59.97.252.2:46768/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 20:58:13 UTC", "last_seen": "2026-03-24 20:58:13 UTC", "sightings": 1 }, { "indicator": "http://110.36.19.51:57980/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 20:57:07 UTC", "last_seen": "2026-03-24 20:57:07 UTC", "sightings": 1 }, { "indicator": "https://4qaxpshj.flare-path.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 20:56:10 UTC", "last_seen": "2026-03-24 20:56:10 UTC", "sightings": 1 }, { "indicator": "http://110.37.38.88:53286/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-24 20:54:15 UTC", "last_seen": "2026-03-24 20:54:15 UTC", "sightings": 1 }, { "indicator": "http://221.15.91.18:49869/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 20:51:19 UTC", "last_seen": "2026-03-24 20:51:19 UTC", "sightings": 1 }, { "indicator": "https://j3b873.duskforge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 20:47:08 UTC", "last_seen": "2026-03-24 20:47:08 UTC", "sightings": 1 }, { "indicator": "https://lmwfj4.brimvale.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 20:35:10 UTC", "last_seen": "2026-03-24 20:35:10 UTC", "sightings": 1 }, { "indicator": "http://59.97.252.2:46768/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 20:32:12 UTC", "last_seen": "2026-03-24 20:32:12 UTC", "sightings": 1 }, { "indicator": "https://ovdtt.larkspin.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 20:32:08 UTC", "last_seen": "2026-03-24 20:32:08 UTC", "sightings": 1 }, { "indicator": "http://123.9.25.183:34406/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 20:29:13 UTC", "last_seen": "2026-03-24 20:29:13 UTC", "sightings": 1 }, { "indicator": "https://tensorout.cobalt-ridge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 20:26:06 UTC", "last_seen": "2026-03-24 20:26:06 UTC", "sightings": 1 }, { "indicator": "http://125.42.76.55:54474/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 20:22:11 UTC", "last_seen": "2026-03-24 20:22:11 UTC", "sightings": 1 }, { "indicator": "https://lypl54.mirthbay.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 20:21:06 UTC", "last_seen": "2026-03-24 20:21:06 UTC", "sightings": 1 }, { "indicator": "http://93.117.148.118:38816/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 20:16:24 UTC", "last_seen": "2026-03-24 20:16:24 UTC", "sightings": 1 }, { "indicator": "http://61.53.123.251:39577/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 20:15:15 UTC", "last_seen": "2026-03-24 20:15:15 UTC", "sightings": 1 }, { "indicator": "https://fyuu.tr4cefox.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 20:14:12 UTC", "last_seen": "2026-03-24 20:14:12 UTC", "sightings": 1 }, { "indicator": "https://arkforge8os.velvet-dune.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 20:10:08 UTC", "last_seen": "2026-03-24 20:10:08 UTC", "sightings": 1 }, { "indicator": "http://120.28.215.248:51659/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-24 20:05:16 UTC", "last_seen": "2026-03-24 20:05:16 UTC", "sightings": 1 }, { "indicator": "http://123.9.25.183:34406/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 20:05:16 UTC", "last_seen": "2026-03-24 20:05:16 UTC", "sightings": 1 }, { "indicator": "http://42.235.146.241:52917/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 20:04:14 UTC", "last_seen": "2026-03-24 20:04:14 UTC", "sightings": 1 }, { "indicator": "https://51ogg4fa.cl0verrun.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 20:04:07 UTC", "last_seen": "2026-03-24 20:04:07 UTC", "sightings": 1 }, { "indicator": "http://27.37.62.174:38495/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-24 20:02:06 UTC", "last_seen": "2026-03-24 20:02:06 UTC", "sightings": 1 }, { "indicator": "https://ser-draos.cl0verrun.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 19:59:06 UTC", "last_seen": "2026-03-24 19:59:06 UTC", "sightings": 1 }, { "indicator": "http://163.142.77.164:43810/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 19:53:08 UTC", "last_seen": "2026-03-24 19:53:08 UTC", "sightings": 1 }, { "indicator": "http://222.139.41.227:55381/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-24 19:52:11 UTC", "last_seen": "2026-03-24 19:52:11 UTC", "sightings": 1 }, { "indicator": "https://1vyf96o.cl0verrun.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 19:50:09 UTC", "last_seen": "2026-03-24 19:50:09 UTC", "sightings": 1 }, { "indicator": "http://110.37.31.174:53011/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 19:48:07 UTC", "last_seen": "2026-03-24 19:48:07 UTC", "sightings": 1 }, { "indicator": "http://117.217.81.219:35431/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 19:47:13 UTC", "last_seen": "2026-03-24 19:47:13 UTC", "sightings": 1 }, { "indicator": "http://42.235.146.241:52917/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 19:42:14 UTC", "last_seen": "2026-03-24 19:42:14 UTC", "sightings": 1 }, { "indicator": "https://traceglo.cl0verrun.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 19:42:09 UTC", "last_seen": "2026-03-24 19:42:09 UTC", "sightings": 1 }, { "indicator": "http://115.63.55.137:44166/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-24 19:42:07 UTC", "last_seen": "2026-03-24 19:42:07 UTC", "sightings": 1 }, { "indicator": "http://39.80.107.114:42547/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-24 19:42:07 UTC", "last_seen": "2026-03-24 19:42:07 UTC", "sightings": 1 }, { "indicator": "https://vinetrade.cl0verrun.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 19:40:10 UTC", "last_seen": "2026-03-24 19:40:10 UTC", "sightings": 1 }, { "indicator": "http://110.37.31.174:53011/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 19:35:12 UTC", "last_seen": "2026-03-24 19:35:12 UTC", "sightings": 1 }, { "indicator": "http://117.217.81.219:35431/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 19:28:22 UTC", "last_seen": "2026-03-24 19:28:22 UTC", "sightings": 1 }, { "indicator": "https://fwnc6xm.stone-blink.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 19:28:06 UTC", "last_seen": "2026-03-24 19:28:06 UTC", "sightings": 1 }, { "indicator": "http://120.28.215.248:51659/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-24 19:27:14 UTC", "last_seen": "2026-03-24 19:27:14 UTC", "sightings": 1 }, { "indicator": "http://120.28.81.136:47825/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-24 19:26:07 UTC", "last_seen": "2026-03-24 19:26:07 UTC", "sightings": 1 }, { "indicator": "http://220.188.220.233:50567/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-24 19:24:12 UTC", "last_seen": "2026-03-24 19:24:12 UTC", "sightings": 1 }, { "indicator": "http://61.53.123.251:39577/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 19:22:15 UTC", "last_seen": "2026-03-24 19:22:15 UTC", "sightings": 1 }, { "indicator": "http://123.10.142.38:48068/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-24 19:22:06 UTC", "last_seen": "2026-03-24 19:22:06 UTC", "sightings": 1 }, { "indicator": "https://mercrest3on.stone-blink.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 19:20:08 UTC", "last_seen": "2026-03-24 19:20:08 UTC", "sightings": 1 }, { "indicator": "http://93.117.148.118:38816/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 19:17:15 UTC", "last_seen": "2026-03-24 19:17:15 UTC", "sightings": 1 }, { "indicator": "http://117.209.9.166:59063/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-24 19:12:07 UTC", "last_seen": "2026-03-24 19:12:07 UTC", "sightings": 1 }, { "indicator": "https://podcastridg.stone-blink.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 19:11:08 UTC", "last_seen": "2026-03-24 19:11:08 UTC", "sightings": 1 }, { "indicator": "http://219.155.106.45:49744/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 19:05:16 UTC", "last_seen": "2026-03-24 19:05:16 UTC", "sightings": 1 }, { "indicator": "https://5cript-branch.stone-blink.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 19:05:08 UTC", "last_seen": "2026-03-24 19:05:08 UTC", "sightings": 1 }, { "indicator": "http://115.63.148.252:38126/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 19:03:06 UTC", "last_seen": "2026-03-24 19:03:06 UTC", "sightings": 1 }, { "indicator": "http://115.63.55.137:44166/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-24 19:02:07 UTC", "last_seen": "2026-03-24 19:02:07 UTC", "sightings": 1 }, { "indicator": "http://219.155.106.45:49744/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 19:00:15 UTC", "last_seen": "2026-03-24 19:00:15 UTC", "sightings": 1 }, { "indicator": "http://117.209.9.166:59063/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-24 18:57:11 UTC", "last_seen": "2026-03-24 18:57:11 UTC", "sightings": 1 }, { "indicator": "https://knjecym.stone-blink.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 18:57:06 UTC", "last_seen": "2026-03-24 18:57:06 UTC", "sightings": 1 }, { "indicator": "http://220.188.220.233:50567/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-24 18:56:08 UTC", "last_seen": "2026-03-24 18:56:08 UTC", "sightings": 1 }, { "indicator": "http://113.221.96.62:45706/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-24 18:55:08 UTC", "last_seen": "2026-03-24 18:55:08 UTC", "sightings": 1 }, { "indicator": "http://111.76.225.148:37151/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-24 18:54:16 UTC", "last_seen": "2026-03-24 18:54:16 UTC", "sightings": 1 }, { "indicator": "http://115.63.148.252:38126/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 18:50:15 UTC", "last_seen": "2026-03-24 18:50:15 UTC", "sightings": 1 }, { "indicator": "http://125.42.76.55:54474/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 18:50:14 UTC", "last_seen": "2026-03-24 18:50:14 UTC", "sightings": 1 }, { "indicator": "https://gmabpncp.thistlecore.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 18:49:06 UTC", "last_seen": "2026-03-24 18:49:06 UTC", "sightings": 1 }, { "indicator": "https://75rlme.thistlecore.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 18:41:07 UTC", "last_seen": "2026-03-24 18:41:07 UTC", "sightings": 1 }, { "indicator": "http://115.50.222.96:41145/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-24 18:37:06 UTC", "last_seen": "2026-03-24 18:37:06 UTC", "sightings": 1 }, { "indicator": "http://110.37.115.167:35070/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 18:36:12 UTC", "last_seen": "2026-03-24 18:36:12 UTC", "sightings": 1 }, { "indicator": "http://221.15.91.18:49869/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 18:35:10 UTC", "last_seen": "2026-03-24 18:35:10 UTC", "sightings": 1 }, { "indicator": "https://neur0n-forge.thistlecore.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 18:34:07 UTC", "last_seen": "2026-03-24 18:34:07 UTC", "sightings": 1 }, { "indicator": "http://60.22.160.178:48438/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-24 18:27:08 UTC", "last_seen": "2026-03-24 18:27:08 UTC", "sightings": 1 }, { "indicator": "https://nordraum7.thistlecore.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 18:27:06 UTC", "last_seen": "2026-03-24 18:27:06 UTC", "sightings": 1 }, { "indicator": "https://hvxpnc.thistlecore.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 18:21:07 UTC", "last_seen": "2026-03-24 18:21:07 UTC", "sightings": 1 }, { "indicator": "http://59.95.85.88:55774/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 18:19:14 UTC", "last_seen": "2026-03-24 18:19:14 UTC", "sightings": 1 }, { "indicator": "http://110.36.88.208:43916/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 18:19:13 UTC", "last_seen": "2026-03-24 18:19:13 UTC", "sightings": 1 }, { "indicator": "http://42.5.8.102:46207/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 18:18:11 UTC", "last_seen": "2026-03-24 18:18:11 UTC", "sightings": 1 }, { "indicator": "http://115.62.159.171:48752/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-24 18:12:20 UTC", "last_seen": "2026-03-24 18:12:20 UTC", "sightings": 1 }, { "indicator": "http://110.37.115.167:35070/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 18:11:14 UTC", "last_seen": "2026-03-24 18:11:14 UTC", "sightings": 1 }, { "indicator": "http://115.50.65.234:35183/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 18:09:08 UTC", "last_seen": "2026-03-24 18:09:08 UTC", "sightings": 1 }, { "indicator": "https://pricehub.q7ravo.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 18:08:08 UTC", "last_seen": "2026-03-24 18:08:08 UTC", "sightings": 1 }, { "indicator": "http://110.36.88.208:43916/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 18:05:12 UTC", "last_seen": "2026-03-24 18:05:12 UTC", "sightings": 1 }, { "indicator": "http://59.95.85.88:55774/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 18:03:16 UTC", "last_seen": "2026-03-24 18:03:16 UTC", "sightings": 1 }, { "indicator": "http://60.22.160.178:48438/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-24 18:02:25 UTC", "last_seen": "2026-03-24 18:02:25 UTC", "sightings": 1 }, { "indicator": "https://merlineon6.q7ravo.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 18:02:05 UTC", "last_seen": "2026-03-24 18:02:05 UTC", "sightings": 1 }, { "indicator": "http://42.5.8.102:46207/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 17:53:14 UTC", "last_seen": "2026-03-24 17:53:14 UTC", "sightings": 1 }, { "indicator": "https://rjl2hgy.q7ravo.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 17:53:06 UTC", "last_seen": "2026-03-24 17:53:06 UTC", "sightings": 1 }, { "indicator": "http://42.235.73.156:57819/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-24 17:52:06 UTC", "last_seen": "2026-03-24 17:52:06 UTC", "sightings": 1 }, { "indicator": "http://115.62.159.171:48752/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-24 17:47:07 UTC", "last_seen": "2026-03-24 17:47:07 UTC", "sightings": 1 }, { "indicator": "https://steri-node.q7ravo.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 17:46:07 UTC", "last_seen": "2026-03-24 17:46:07 UTC", "sightings": 1 }, { "indicator": "http://115.50.65.234:35183/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 17:44:13 UTC", "last_seen": "2026-03-24 17:44:13 UTC", "sightings": 1 }, { "indicator": "https://winterpipeline.q7ravo.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 17:38:07 UTC", "last_seen": "2026-03-24 17:38:07 UTC", "sightings": 1 }, { "indicator": "http://39.81.216.3:57411/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 17:34:08 UTC", "last_seen": "2026-03-24 17:34:08 UTC", "sightings": 1 }, { "indicator": "http://42.227.129.10:55478/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-24 17:32:06 UTC", "last_seen": "2026-03-24 17:32:06 UTC", "sightings": 1 }, { "indicator": "https://vel-lineix.frost-echo.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 17:31:08 UTC", "last_seen": "2026-03-24 17:31:08 UTC", "sightings": 1 }, { "indicator": "http://42.54.155.70:58375/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 17:23:07 UTC", "last_seen": "2026-03-24 17:23:07 UTC", "sightings": 1 }, { "indicator": "https://5jiyuz.frost-echo.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 17:22:06 UTC", "last_seen": "2026-03-24 17:22:06 UTC", "sightings": 1 }, { "indicator": "http://113.221.96.62:45706/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-24 17:20:08 UTC", "last_seen": "2026-03-24 17:20:08 UTC", "sightings": 1 }, { "indicator": "http://27.215.212.254:38856/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 17:18:12 UTC", "last_seen": "2026-03-24 17:18:12 UTC", "sightings": 1 }, { "indicator": "http://61.53.132.159:50904/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-24 17:17:07 UTC", "last_seen": "2026-03-24 17:17:07 UTC", "sightings": 1 }, { "indicator": "https://solcrestor8.frost-echo.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 17:15:09 UTC", "last_seen": "2026-03-24 17:15:09 UTC", "sightings": 1 }, { "indicator": "http://42.227.129.10:55478/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-24 17:12:11 UTC", "last_seen": "2026-03-24 17:12:11 UTC", "sightings": 1 }, { "indicator": "http://42.54.155.70:58375/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 17:08:13 UTC", "last_seen": "2026-03-24 17:08:13 UTC", "sightings": 1 }, { "indicator": "https://light1-scope.frost-echo.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 17:08:10 UTC", "last_seen": "2026-03-24 17:08:10 UTC", "sightings": 1 }, { "indicator": "http://110.37.35.89:37434/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-24 17:07:06 UTC", "last_seen": "2026-03-24 17:07:06 UTC", "sightings": 1 }, { "indicator": "http://59.177.107.240:46573/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-24 17:02:09 UTC", "last_seen": "2026-03-24 17:02:09 UTC", "sightings": 1 }, { "indicator": "http://117.213.91.122:34173/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-24 17:02:07 UTC", "last_seen": "2026-03-24 17:02:07 UTC", "sightings": 1 }, { "indicator": "https://1ce2-port.frost-echo.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 17:00:12 UTC", "last_seen": "2026-03-24 17:00:12 UTC", "sightings": 1 }, { "indicator": "http://110.36.77.35:54765/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 16:55:08 UTC", "last_seen": "2026-03-24 16:55:08 UTC", "sightings": 1 }, { "indicator": "https://node-track.graincrest.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 16:53:05 UTC", "last_seen": "2026-03-24 16:53:05 UTC", "sightings": 1 }, { "indicator": "http://175.165.81.41:45080/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 16:50:16 UTC", "last_seen": "2026-03-24 16:50:16 UTC", "sightings": 1 }, { "indicator": "http://110.37.35.89:37434/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-24 16:47:07 UTC", "last_seen": "2026-03-24 16:47:07 UTC", "sightings": 1 }, { "indicator": "https://ehqkl.graincrest.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 16:44:07 UTC", "last_seen": "2026-03-24 16:44:07 UTC", "sightings": 1 }, { "indicator": "http://117.254.100.53:34213/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 16:43:12 UTC", "last_seen": "2026-03-24 16:43:12 UTC", "sightings": 1 }, { "indicator": "http://110.39.246.147:40646/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 16:40:13 UTC", "last_seen": "2026-03-24 16:40:13 UTC", "sightings": 1 }, { "indicator": "http://117.213.91.122:34173/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-24 16:37:16 UTC", "last_seen": "2026-03-24 16:37:16 UTC", "sightings": 1 }, { "indicator": "https://r0ut-route.graincrest.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 16:36:06 UTC", "last_seen": "2026-03-24 16:36:06 UTC", "sightings": 1 }, { "indicator": "http://110.39.251.209:46455/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 16:32:07 UTC", "last_seen": "2026-03-24 16:32:07 UTC", "sightings": 1 }, { "indicator": "https://sol-nexex.graincrest.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 16:29:07 UTC", "last_seen": "2026-03-24 16:29:07 UTC", "sightings": 1 }, { "indicator": "http://175.165.81.41:45080/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 16:28:14 UTC", "last_seen": "2026-03-24 16:28:14 UTC", "sightings": 1 }, { "indicator": "https://firebasestorage.googleapis.com/v0/b/rodriakd-8413d.appspot.com/o/Pe%2Fperoda.txt?alt=media&token=19f18e11-cd02-4a4c-baca-8d4fc54ac6a8", "indicator_type": "url", "source": "URLhaus", "tags": [ "ascii", "rev-base64-loader" ], "first_seen": "2026-03-24 16:27:09 UTC", "last_seen": "2026-03-24 16:27:09 UTC", "sightings": 1 }, { "indicator": "https://firebasestorage.googleapis.com/v0/b/rodriakd-8413d.appspot.com/o/dll%2Fcaca.txt?alt=media&token=08d47962-34f1-4c6c-833e-ffaee91128c2", "indicator_type": "url", "source": "URLhaus", "tags": [ "base64-loader" ], "first_seen": "2026-03-24 16:26:08 UTC", "last_seen": "2026-03-24 16:26:08 UTC", "sightings": 1 }, { "indicator": "https://kzreic.graincrest.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 16:22:07 UTC", "last_seen": "2026-03-24 16:22:07 UTC", "sightings": 1 }, { "indicator": "https://aetherixcore.cc/php/get-download.php", "indicator_type": "url", "source": "URLhaus", "tags": [ "pw-Aetherix" ], "first_seen": "2026-03-24 16:20:07 UTC", "last_seen": "2026-03-24 16:20:07 UTC", "sightings": 1 }, { "indicator": "http://115.55.55.186:45532/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 16:19:08 UTC", "last_seen": "2026-03-24 16:19:08 UTC", "sightings": 1 }, { "indicator": "https://vendorshadow.skyl0om.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 16:14:07 UTC", "last_seen": "2026-03-24 16:14:07 UTC", "sightings": 1 }, { "indicator": "http://123.5.112.26:36691/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 16:12:13 UTC", "last_seen": "2026-03-24 16:12:13 UTC", "sightings": 1 }, { "indicator": "http://117.254.100.53:34213/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 16:09:11 UTC", "last_seen": "2026-03-24 16:09:11 UTC", "sightings": 1 }, { "indicator": "http://123.5.112.26:36691/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 16:08:16 UTC", "last_seen": "2026-03-24 16:08:16 UTC", "sightings": 1 }, { "indicator": "https://jjgeingz.skyl0om.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 16:06:06 UTC", "last_seen": "2026-03-24 16:06:06 UTC", "sightings": 1 }, { "indicator": "http://27.215.212.254:38856/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-24 16:02:07 UTC", "last_seen": "2026-03-24 16:02:07 UTC", "sightings": 1 }, { "indicator": "https://norven5ar.skyl0om.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 15:59:07 UTC", "last_seen": "2026-03-24 15:59:07 UTC", "sightings": 1 }, { "indicator": "https://ste4dy0-graph.skyl0om.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 15:54:06 UTC", "last_seen": "2026-03-24 15:54:06 UTC", "sightings": 1 }, { "indicator": "http://196.189.35.226:36227/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-24 15:49:08 UTC", "last_seen": "2026-03-24 15:49:08 UTC", "sightings": 1 }, { "indicator": "http://42.87.139.108:34258/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 15:41:09 UTC", "last_seen": "2026-03-24 15:41:09 UTC", "sightings": 1 }, { "indicator": "http://115.55.242.68:55978/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-24 15:37:06 UTC", "last_seen": "2026-03-24 15:37:06 UTC", "sightings": 1 }, { "indicator": "http://193.32.162.53/x86_64", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-24 15:36:17 UTC", "last_seen": "2026-03-24 15:36:17 UTC", "sightings": 1 }, { "indicator": "http://193.32.162.53/arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-24 15:36:14 UTC", "last_seen": "2026-03-24 15:36:14 UTC", "sightings": 1 }, { "indicator": "http://45.138.180.205/hiddenbin/boatnet.x86", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-24 15:35:14 UTC", "last_seen": "2026-03-24 15:35:14 UTC", "sightings": 1 }, { "indicator": "http://45.138.180.205/hiddenbin/boatnet.arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-24 15:35:14 UTC", "last_seen": "2026-03-24 15:35:14 UTC", "sightings": 1 }, { "indicator": "http://45.138.180.205/hiddenbin/boatnet.m68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-24 15:35:14 UTC", "last_seen": "2026-03-24 15:35:14 UTC", "sightings": 1 }, { "indicator": "http://45.138.180.205/hiddenbin/boatnet.spc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-24 15:35:14 UTC", "last_seen": "2026-03-24 15:35:14 UTC", "sightings": 1 }, { "indicator": "http://45.138.180.205/hiddenbin/boatnet.mpsl", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-24 15:35:14 UTC", "last_seen": "2026-03-24 15:35:14 UTC", "sightings": 1 }, { "indicator": "http://45.138.180.205/hiddenbin/boatnet.mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-24 15:35:14 UTC", "last_seen": "2026-03-24 15:35:14 UTC", "sightings": 1 }, { "indicator": "http://45.138.180.205/hiddenbin/boatnet.sh4", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-24 15:35:14 UTC", "last_seen": "2026-03-24 15:35:14 UTC", "sightings": 1 }, { "indicator": "http://45.138.180.205/hiddenbin/boatnet.ppc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-24 15:35:14 UTC", "last_seen": "2026-03-24 15:35:14 UTC", "sightings": 1 }, { "indicator": "http://45.138.180.205/hiddenbin/boatnet.arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-24 15:35:14 UTC", "last_seen": "2026-03-24 15:35:14 UTC", "sightings": 1 }, { "indicator": "http://45.138.180.205/hiddenbin/boatnet.arm", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-24 15:35:14 UTC", "last_seen": "2026-03-24 15:35:14 UTC", "sightings": 1 }, { "indicator": "http://45.138.180.205/hiddenbin/boatnet.arm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-24 15:35:14 UTC", "last_seen": "2026-03-24 15:35:14 UTC", "sightings": 1 }, { "indicator": "http://193.32.162.53/arm", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-24 15:34:10 UTC", "last_seen": "2026-03-24 15:34:10 UTC", "sightings": 1 }, { "indicator": "http://45.138.180.205/hiddenbin/boatnet.arc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-24 15:34:09 UTC", "last_seen": "2026-03-24 15:34:09 UTC", "sightings": 1 }, { "indicator": "http://193.32.162.53/arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-24 15:34:09 UTC", "last_seen": "2026-03-24 15:34:09 UTC", "sightings": 1 }, { "indicator": "http://193.32.162.53/mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-24 15:34:08 UTC", "last_seen": "2026-03-24 15:34:08 UTC", "sightings": 1 }, { "indicator": "http://193.32.162.53/mipsel", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "gafgyt", "ua-wget" ], "first_seen": "2026-03-24 15:34:08 UTC", "last_seen": "2026-03-24 15:34:08 UTC", "sightings": 1 }, { "indicator": "http://110.39.251.209:46455/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 15:34:08 UTC", "last_seen": "2026-03-24 15:34:08 UTC", "sightings": 1 }, { "indicator": "http://45.135.194.27/x86", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-24 15:34:07 UTC", "last_seen": "2026-03-24 15:34:07 UTC", "sightings": 1 }, { "indicator": "http://171.112.172.102:40379/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-24 15:32:09 UTC", "last_seen": "2026-03-24 15:32:09 UTC", "sightings": 1 }, { "indicator": "http://196.189.35.226:36227/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-24 15:27:14 UTC", "last_seen": "2026-03-24 15:27:14 UTC", "sightings": 1 }, { "indicator": "http://27.207.38.159:38875/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 15:23:10 UTC", "last_seen": "2026-03-24 15:23:10 UTC", "sightings": 1 }, { "indicator": "http://110.38.206.49:57746/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 15:20:11 UTC", "last_seen": "2026-03-24 15:20:11 UTC", "sightings": 1 }, { "indicator": "https://shore-dee.flare-path.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 15:20:07 UTC", "last_seen": "2026-03-24 15:20:07 UTC", "sightings": 1 }, { "indicator": "https://o3hpy.flare-path.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 15:13:09 UTC", "last_seen": "2026-03-24 15:13:09 UTC", "sightings": 1 }, { "indicator": "http://58.209.181.97:34049/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-24 15:11:17 UTC", "last_seen": "2026-03-24 15:11:17 UTC", "sightings": 1 }, { "indicator": "http://42.227.176.4:38866/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-24 15:07:07 UTC", "last_seen": "2026-03-24 15:07:07 UTC", "sightings": 1 }, { "indicator": "https://convoyprofit.flare-path.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 15:05:11 UTC", "last_seen": "2026-03-24 15:05:11 UTC", "sightings": 1 }, { "indicator": "https://parcloud.rivermint.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 14:58:07 UTC", "last_seen": "2026-03-24 14:58:07 UTC", "sightings": 1 }, { "indicator": "http://27.207.38.159:38875/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 14:58:07 UTC", "last_seen": "2026-03-24 14:58:07 UTC", "sightings": 1 }, { "indicator": "http://221.200.120.62:45779/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-24 14:57:10 UTC", "last_seen": "2026-03-24 14:57:10 UTC", "sightings": 1 }, { "indicator": "https://iatw.rivermint.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 14:50:07 UTC", "last_seen": "2026-03-24 14:50:07 UTC", "sightings": 1 }, { "indicator": "http://112.240.231.212:60620/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 14:47:27 UTC", "last_seen": "2026-03-24 14:47:27 UTC", "sightings": 1 }, { "indicator": "http://42.227.176.4:38866/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-24 14:47:10 UTC", "last_seen": "2026-03-24 14:47:10 UTC", "sightings": 1 }, { "indicator": "https://qn5igmm.rivermint.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 14:44:09 UTC", "last_seen": "2026-03-24 14:44:09 UTC", "sightings": 1 }, { "indicator": "http://112.242.61.73:42901/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 14:44:07 UTC", "last_seen": "2026-03-24 14:44:07 UTC", "sightings": 1 }, { "indicator": "http://110.39.226.207:40075/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-24 14:42:06 UTC", "last_seen": "2026-03-24 14:42:06 UTC", "sightings": 1 }, { "indicator": "http://222.140.156.123:57493/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 14:35:14 UTC", "last_seen": "2026-03-24 14:35:14 UTC", "sightings": 1 }, { "indicator": "https://activetermin.rivermint.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 14:35:12 UTC", "last_seen": "2026-03-24 14:35:12 UTC", "sightings": 1 }, { "indicator": "http://110.38.206.49:57746/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 14:33:06 UTC", "last_seen": "2026-03-24 14:33:06 UTC", "sightings": 1 }, { "indicator": "http://42.224.126.68:51595/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-24 14:32:06 UTC", "last_seen": "2026-03-24 14:32:06 UTC", "sightings": 1 }, { "indicator": "http://196.189.101.82:35693/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-24 14:30:16 UTC", "last_seen": "2026-03-24 14:30:16 UTC", "sightings": 1 }, { "indicator": "https://pitc-mesh.rivermint.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 14:27:08 UTC", "last_seen": "2026-03-24 14:27:08 UTC", "sightings": 1 }, { "indicator": "http://221.200.120.62:45779/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-24 14:27:07 UTC", "last_seen": "2026-03-24 14:27:07 UTC", "sightings": 1 }, { "indicator": "https://offerleaf.duskforge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 14:20:07 UTC", "last_seen": "2026-03-24 14:20:07 UTC", "sightings": 1 }, { "indicator": "http://222.140.156.123:57493/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 14:17:15 UTC", "last_seen": "2026-03-24 14:17:15 UTC", "sightings": 1 }, { "indicator": "http://60.211.4.226:45510/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-24 14:17:06 UTC", "last_seen": "2026-03-24 14:17:06 UTC", "sightings": 1 }, { "indicator": "https://ikqeopdh.duskforge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 14:15:08 UTC", "last_seen": "2026-03-24 14:15:08 UTC", "sightings": 1 }, { "indicator": "http://110.39.242.135:42025/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 14:12:17 UTC", "last_seen": "2026-03-24 14:12:17 UTC", "sightings": 1 }, { "indicator": "http://60.211.4.226:45510/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-24 14:12:08 UTC", "last_seen": "2026-03-24 14:12:08 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.168/files/8514679081/DRTjyu7.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543", "MillenuimRAT" ], "first_seen": "2026-03-24 14:12:08 UTC", "last_seen": "2026-03-24 14:12:08 UTC", "sightings": 1 }, { "indicator": "http://107.172.135.4/60/godwithuskobogreat.hta", "indicator_type": "url", "source": "URLhaus", "tags": [ "ascii", "hta", "rat", "RemcosRAT" ], "first_seen": "2026-03-24 14:11:05 UTC", "last_seen": "2026-03-24 14:11:05 UTC", "sightings": 1 }, { "indicator": "http://112.242.61.73:42901/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 14:08:29 UTC", "last_seen": "2026-03-24 14:08:29 UTC", "sightings": 1 }, { "indicator": "http://110.37.39.146:49870/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-24 14:08:08 UTC", "last_seen": "2026-03-24 14:08:08 UTC", "sightings": 1 }, { "indicator": "http://176.226.129.38:36484/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-24 14:07:06 UTC", "last_seen": "2026-03-24 14:07:06 UTC", "sightings": 1 }, { "indicator": "http://42.224.126.68:51595/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-24 14:07:06 UTC", "last_seen": "2026-03-24 14:07:06 UTC", "sightings": 1 }, { "indicator": "http://59.94.71.163:34765/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 14:05:17 UTC", "last_seen": "2026-03-24 14:05:17 UTC", "sightings": 1 }, { "indicator": "https://5un-line.duskforge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 14:02:07 UTC", "last_seen": "2026-03-24 14:02:07 UTC", "sightings": 1 }, { "indicator": "http://42.58.167.27:42912/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 13:59:15 UTC", "last_seen": "2026-03-24 13:59:15 UTC", "sightings": 1 }, { "indicator": "http://117.200.123.60:33228/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-24 13:57:06 UTC", "last_seen": "2026-03-24 13:57:06 UTC", "sightings": 1 }, { "indicator": "http://196.189.101.82:35693/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-24 13:55:15 UTC", "last_seen": "2026-03-24 13:55:15 UTC", "sightings": 1 }, { "indicator": "https://rnedia-field.duskforge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 13:54:07 UTC", "last_seen": "2026-03-24 13:54:07 UTC", "sightings": 1 }, { "indicator": "http://42.58.167.27:42912/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 13:51:16 UTC", "last_seen": "2026-03-24 13:51:16 UTC", "sightings": 1 }, { "indicator": "http://113.221.59.174:52552/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-24 13:48:08 UTC", "last_seen": "2026-03-24 13:48:08 UTC", "sightings": 1 }, { "indicator": "https://nr7808j.duskforge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 13:47:11 UTC", "last_seen": "2026-03-24 13:47:11 UTC", "sightings": 1 }, { "indicator": "http://188.124.133.173:46565/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-24 13:45:15 UTC", "last_seen": "2026-03-24 13:45:15 UTC", "sightings": 1 }, { "indicator": "http://59.94.71.163:34765/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 13:44:15 UTC", "last_seen": "2026-03-24 13:44:15 UTC", "sightings": 1 }, { "indicator": "https://majorpeak.hollow-spark.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 13:39:07 UTC", "last_seen": "2026-03-24 13:39:07 UTC", "sightings": 1 }, { "indicator": "http://112.248.186.109:60195/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-24 13:37:06 UTC", "last_seen": "2026-03-24 13:37:06 UTC", "sightings": 1 }, { "indicator": "http://112.240.231.212:60620/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 13:33:30 UTC", "last_seen": "2026-03-24 13:33:30 UTC", "sightings": 1 }, { "indicator": "https://vor-lithum.hollow-spark.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 13:31:07 UTC", "last_seen": "2026-03-24 13:31:07 UTC", "sightings": 1 }, { "indicator": "http://42.224.64.66:36628/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 13:29:07 UTC", "last_seen": "2026-03-24 13:29:07 UTC", "sightings": 1 }, { "indicator": "https://rich-stabi.hollow-spark.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 13:24:10 UTC", "last_seen": "2026-03-24 13:24:10 UTC", "sightings": 1 }, { "indicator": "http://117.200.123.60:33228/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-24 13:22:08 UTC", "last_seen": "2026-03-24 13:22:08 UTC", "sightings": 1 }, { "indicator": "http://115.63.189.198:55962/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 13:18:14 UTC", "last_seen": "2026-03-24 13:18:14 UTC", "sightings": 1 }, { "indicator": "http://188.124.133.173:46565/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-24 13:16:12 UTC", "last_seen": "2026-03-24 13:16:12 UTC", "sightings": 1 }, { "indicator": "https://mosssou.hollow-spark.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 13:16:06 UTC", "last_seen": "2026-03-24 13:16:06 UTC", "sightings": 1 }, { "indicator": "https://saifjord.hollow-spark.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 13:10:09 UTC", "last_seen": "2026-03-24 13:10:09 UTC", "sightings": 1 }, { "indicator": "http://115.63.189.198:55962/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 13:05:09 UTC", "last_seen": "2026-03-24 13:05:09 UTC", "sightings": 1 }, { "indicator": "http://110.37.45.161:48922/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-24 13:03:14 UTC", "last_seen": "2026-03-24 13:03:14 UTC", "sightings": 1 }, { "indicator": "http://117.131.92.150:37133/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-24 13:02:14 UTC", "last_seen": "2026-03-24 13:02:14 UTC", "sightings": 1 }, { "indicator": "https://tri-coreon.n1mbleoak.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 13:01:08 UTC", "last_seen": "2026-03-24 13:01:08 UTC", "sightings": 1 }, { "indicator": "http://115.56.159.66:59743/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-24 12:57:06 UTC", "last_seen": "2026-03-24 12:57:06 UTC", "sightings": 1 }, { "indicator": "http://42.239.169.132:59914/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-24 12:57:06 UTC", "last_seen": "2026-03-24 12:57:06 UTC", "sightings": 1 }, { "indicator": "http://222.140.132.167:56437/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 12:55:14 UTC", "last_seen": "2026-03-24 12:55:14 UTC", "sightings": 1 }, { "indicator": "https://freig-vault.n1mbleoak.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 12:54:08 UTC", "last_seen": "2026-03-24 12:54:08 UTC", "sightings": 1 }, { "indicator": "http://175.44.158.108:52426/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-24 12:49:14 UTC", "last_seen": "2026-03-24 12:49:14 UTC", "sightings": 1 }, { "indicator": "https://urb4n-frame.n1mbleoak.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 12:47:09 UTC", "last_seen": "2026-03-24 12:47:09 UTC", "sightings": 1 }, { "indicator": "http://222.140.132.167:56437/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 12:45:14 UTC", "last_seen": "2026-03-24 12:45:14 UTC", "sightings": 1 }, { "indicator": "http://115.48.4.119:58747/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 12:45:14 UTC", "last_seen": "2026-03-24 12:45:14 UTC", "sightings": 1 }, { "indicator": "http://110.37.45.161:48922/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-24 12:44:14 UTC", "last_seen": "2026-03-24 12:44:14 UTC", "sightings": 1 }, { "indicator": "http://110.39.246.147:40646/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 12:43:14 UTC", "last_seen": "2026-03-24 12:43:14 UTC", "sightings": 1 }, { "indicator": "https://alt-ech0.n1mbleoak.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 12:38:07 UTC", "last_seen": "2026-03-24 12:38:07 UTC", "sightings": 1 }, { "indicator": "https://catalogsca.n1mbleoak.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 12:32:10 UTC", "last_seen": "2026-03-24 12:32:10 UTC", "sightings": 1 }, { "indicator": "http://175.44.158.108:52426/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-24 12:25:18 UTC", "last_seen": "2026-03-24 12:25:18 UTC", "sightings": 1 }, { "indicator": "http://115.48.4.119:58747/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 12:25:17 UTC", "last_seen": "2026-03-24 12:25:17 UTC", "sightings": 1 }, { "indicator": "https://messteady.brimvale.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 12:24:10 UTC", "last_seen": "2026-03-24 12:24:10 UTC", "sightings": 1 }, { "indicator": "http://117.131.92.150:37133/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-24 12:22:17 UTC", "last_seen": "2026-03-24 12:22:17 UTC", "sightings": 1 }, { "indicator": "http://110.37.85.16:57038/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 12:21:17 UTC", "last_seen": "2026-03-24 12:21:17 UTC", "sightings": 1 }, { "indicator": "http://115.48.134.138:40798/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 12:18:14 UTC", "last_seen": "2026-03-24 12:18:14 UTC", "sightings": 1 }, { "indicator": "https://w346.brimvale.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 12:16:06 UTC", "last_seen": "2026-03-24 12:16:06 UTC", "sightings": 1 }, { "indicator": "https://neo-th0rn.brimvale.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 12:08:07 UTC", "last_seen": "2026-03-24 12:08:07 UTC", "sightings": 1 }, { "indicator": "https://kotg.brimvale.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 12:01:10 UTC", "last_seen": "2026-03-24 12:01:10 UTC", "sightings": 1 }, { "indicator": "http://115.48.134.138:40798/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 11:54:14 UTC", "last_seen": "2026-03-24 11:54:14 UTC", "sightings": 1 }, { "indicator": "https://n0tif-beam.brimvale.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 11:53:08 UTC", "last_seen": "2026-03-24 11:53:08 UTC", "sightings": 1 }, { "indicator": "http://123.14.76.236:54948/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 11:52:11 UTC", "last_seen": "2026-03-24 11:52:11 UTC", "sightings": 1 }, { "indicator": "http://123.5.8.207:44960/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-24 11:47:06 UTC", "last_seen": "2026-03-24 11:47:06 UTC", "sightings": 1 }, { "indicator": "https://shoremerge.larkspin.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 11:45:08 UTC", "last_seen": "2026-03-24 11:45:08 UTC", "sightings": 1 }, { "indicator": "https://roufor.larkspin.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 11:42:06 UTC", "last_seen": "2026-03-24 11:42:06 UTC", "sightings": 1 }, { "indicator": "http://42.52.24.83:46589/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 11:37:16 UTC", "last_seen": "2026-03-24 11:37:16 UTC", "sightings": 1 }, { "indicator": "http://180.245.60.169:42940/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-24 11:31:13 UTC", "last_seen": "2026-03-24 11:31:13 UTC", "sightings": 1 }, { "indicator": "https://yci9.larkspin.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 11:30:08 UTC", "last_seen": "2026-03-24 11:30:08 UTC", "sightings": 1 }, { "indicator": "https://tarcanv.larkspin.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 11:22:07 UTC", "last_seen": "2026-03-24 11:22:07 UTC", "sightings": 1 }, { "indicator": "http://115.49.1.54:58121/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-24 11:22:07 UTC", "last_seen": "2026-03-24 11:22:07 UTC", "sightings": 1 }, { "indicator": "https://zennexen.larkspin.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 11:15:08 UTC", "last_seen": "2026-03-24 11:15:08 UTC", "sightings": 1 }, { "indicator": "http://115.50.222.96:41145/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 11:10:13 UTC", "last_seen": "2026-03-24 11:10:13 UTC", "sightings": 1 }, { "indicator": "https://iumdbd.cobalt-ridge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 11:08:06 UTC", "last_seen": "2026-03-24 11:08:06 UTC", "sightings": 1 }, { "indicator": "http://180.245.60.169:42940/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-24 11:00:16 UTC", "last_seen": "2026-03-24 11:00:16 UTC", "sightings": 1 }, { "indicator": "https://a5say-spool.cobalt-ridge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 10:59:06 UTC", "last_seen": "2026-03-24 10:59:06 UTC", "sightings": 1 }, { "indicator": "http://222.127.68.197:48648/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-24 10:58:11 UTC", "last_seen": "2026-03-24 10:58:11 UTC", "sightings": 1 }, { "indicator": "http://222.137.22.30:41781/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 10:52:15 UTC", "last_seen": "2026-03-24 10:52:15 UTC", "sightings": 1 }, { "indicator": "https://t0k3n0-drive.cobalt-ridge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 10:52:07 UTC", "last_seen": "2026-03-24 10:52:07 UTC", "sightings": 1 }, { "indicator": "http://115.49.1.54:58121/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-24 10:52:07 UTC", "last_seen": "2026-03-24 10:52:07 UTC", "sightings": 1 }, { "indicator": "https://qu4nt-point.cobalt-ridge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 10:45:10 UTC", "last_seen": "2026-03-24 10:45:10 UTC", "sightings": 1 }, { "indicator": "http://117.216.67.21:46926/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips" ], "first_seen": "2026-03-24 10:39:20 UTC", "last_seen": "2026-03-24 10:39:20 UTC", "sightings": 1 }, { "indicator": "http://113.239.251.138:32772/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 10:38:13 UTC", "last_seen": "2026-03-24 10:38:13 UTC", "sightings": 1 }, { "indicator": "https://72i62f.cobalt-ridge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 10:37:09 UTC", "last_seen": "2026-03-24 10:37:09 UTC", "sightings": 1 }, { "indicator": "http://182.127.102.58:43846/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 10:29:10 UTC", "last_seen": "2026-03-24 10:29:10 UTC", "sightings": 1 }, { "indicator": "https://phopatt.mirthbay.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 10:29:07 UTC", "last_seen": "2026-03-24 10:29:07 UTC", "sightings": 1 }, { "indicator": "http://61.52.4.151:54372/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 10:28:14 UTC", "last_seen": "2026-03-24 10:28:14 UTC", "sightings": 1 }, { "indicator": "https://77gfk.mirthbay.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 10:21:07 UTC", "last_seen": "2026-03-24 10:21:07 UTC", "sightings": 1 }, { "indicator": "http://112.248.186.109:60195/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 10:18:31 UTC", "last_seen": "2026-03-24 10:18:31 UTC", "sightings": 1 }, { "indicator": "http://42.235.73.156:57819/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 10:18:12 UTC", "last_seen": "2026-03-24 10:18:12 UTC", "sightings": 1 }, { "indicator": "http://59.88.141.200:49905/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 10:16:07 UTC", "last_seen": "2026-03-24 10:16:07 UTC", "sightings": 1 }, { "indicator": "https://sub-t3rnpo.mirthbay.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 10:13:07 UTC", "last_seen": "2026-03-24 10:13:07 UTC", "sightings": 1 }, { "indicator": "https://ultrdra.mirthbay.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 10:07:07 UTC", "last_seen": "2026-03-24 10:07:07 UTC", "sightings": 1 }, { "indicator": "http://113.239.251.138:32772/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 10:04:11 UTC", "last_seen": "2026-03-24 10:04:11 UTC", "sightings": 1 }, { "indicator": "http://191.37.19.74:55036/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-24 10:03:07 UTC", "last_seen": "2026-03-24 10:03:07 UTC", "sightings": 1 }, { "indicator": "https://watchletter.mirthbay.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 09:59:07 UTC", "last_seen": "2026-03-24 09:59:07 UTC", "sightings": 1 }, { "indicator": "http://61.52.4.151:54372/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 09:58:13 UTC", "last_seen": "2026-03-24 09:58:13 UTC", "sightings": 1 }, { "indicator": "http://125.40.139.118:47111/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-24 09:56:07 UTC", "last_seen": "2026-03-24 09:56:07 UTC", "sightings": 1 }, { "indicator": "http://221.0.209.98:36551/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 09:53:15 UTC", "last_seen": "2026-03-24 09:53:15 UTC", "sightings": 1 }, { "indicator": "http://182.127.102.58:43846/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 09:52:16 UTC", "last_seen": "2026-03-24 09:52:16 UTC", "sightings": 1 }, { "indicator": "http://125.41.247.115:43021/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 09:51:14 UTC", "last_seen": "2026-03-24 09:51:14 UTC", "sightings": 1 }, { "indicator": "https://vqdph.tr4cefox.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 09:51:06 UTC", "last_seen": "2026-03-24 09:51:06 UTC", "sightings": 1 }, { "indicator": "http://59.88.141.200:49905/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 09:49:11 UTC", "last_seen": "2026-03-24 09:49:11 UTC", "sightings": 1 }, { "indicator": "http://115.58.173.61:44422/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 09:46:15 UTC", "last_seen": "2026-03-24 09:46:15 UTC", "sightings": 1 }, { "indicator": "https://s1ovv-cast.tr4cefox.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 09:43:09 UTC", "last_seen": "2026-03-24 09:43:09 UTC", "sightings": 1 }, { "indicator": "http://91.92.241.94/x86", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "gafgyt", "mirai", "x86-32" ], "first_seen": "2026-03-24 09:41:16 UTC", "last_seen": "2026-03-24 09:41:16 UTC", "sightings": 1 }, { "indicator": "https://ruoqyu9r.tr4cefox.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 09:36:06 UTC", "last_seen": "2026-03-24 09:36:06 UTC", "sightings": 1 }, { "indicator": "http://119.179.237.164:33682/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 09:34:18 UTC", "last_seen": "2026-03-24 09:34:18 UTC", "sightings": 1 }, { "indicator": "http://192.210.186.220/311/ajsdfmxi.JS", "indicator_type": "url", "source": "URLhaus", "tags": [ "opendir" ], "first_seen": "2026-03-24 09:34:06 UTC", "last_seen": "2026-03-24 09:34:06 UTC", "sightings": 1 }, { "indicator": "https://myjezworld.kesug.com/boi/DECRYPT.Ps1", "indicator_type": "url", "source": "URLhaus", "tags": [ "ascii", "powershell", "ps1" ], "first_seen": "2026-03-24 09:34:05 UTC", "last_seen": "2026-03-24 09:34:05 UTC", "sightings": 1 }, { "indicator": "https://i.postimg.cc/jjHFxjz6/image.png", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-24 09:33:10 UTC", "last_seen": "2026-03-24 09:33:10 UTC", "sightings": 1 }, { "indicator": "http://192.210.186.220/311/oak1.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "exe", "opendir" ], "first_seen": "2026-03-24 09:33:09 UTC", "last_seen": "2026-03-24 09:33:09 UTC", "sightings": 1 }, { "indicator": "https://pastee.dev/r/cZSbJHaC/0", "indicator_type": "url", "source": "URLhaus", "tags": [ "ascii", "bat" ], "first_seen": "2026-03-24 09:33:09 UTC", "last_seen": "2026-03-24 09:33:09 UTC", "sightings": 1 }, { "indicator": "http://117.215.48.36:41026/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 09:33:08 UTC", "last_seen": "2026-03-24 09:33:08 UTC", "sightings": 1 }, { "indicator": "https://mobshah.com/dd/pp.sam", "indicator_type": "url", "source": "URLhaus", "tags": [ "ascii", "Encoded", "GuLoader" ], "first_seen": "2026-03-24 09:33:08 UTC", "last_seen": "2026-03-24 09:33:08 UTC", "sightings": 1 }, { "indicator": "http://192.210.186.220/311/k2.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "exe", "opendir" ], "first_seen": "2026-03-24 09:33:08 UTC", "last_seen": "2026-03-24 09:33:08 UTC", "sightings": 1 }, { "indicator": "https://allsydevs.com/image0321.png", "indicator_type": "url", "source": "URLhaus", "tags": [ "PureHVNC" ], "first_seen": "2026-03-24 09:32:08 UTC", "last_seen": "2026-03-24 09:32:08 UTC", "sightings": 1 }, { "indicator": "http://123.5.151.31:39202/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-24 09:32:07 UTC", "last_seen": "2026-03-24 09:32:07 UTC", "sightings": 1 }, { "indicator": "https://i.postimg.cc/bvqBSX0V/image-2.png", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-24 09:32:07 UTC", "last_seen": "2026-03-24 09:32:07 UTC", "sightings": 1 }, { "indicator": "https://files.catbox.moe/kx05ot.js", "indicator_type": "url", "source": "URLhaus", "tags": [ "ascii", "js", "wshrat" ], "first_seen": "2026-03-24 09:31:08 UTC", "last_seen": "2026-03-24 09:31:08 UTC", "sightings": 1 }, { "indicator": "https://gateway.lighthouse.storage/ipfs/bafybeicr7ypdxpw6pp72on2obzzppf5reelwbrjhgdnppkhlfyqxvdoagq", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-24 09:31:06 UTC", "last_seen": "2026-03-24 09:31:06 UTC", "sightings": 1 }, { "indicator": "https://qaur150.tr4cefox.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 09:29:06 UTC", "last_seen": "2026-03-24 09:29:06 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.168/files/8316621590/2kz0yA3.bat", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-24 09:28:05 UTC", "last_seen": "2026-03-24 09:28:05 UTC", "sightings": 1 }, { "indicator": "http://196.189.198.193:44526/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-24 09:27:05 UTC", "last_seen": "2026-03-24 09:27:05 UTC", "sightings": 1 }, { "indicator": "https://5h1f-grid.tr4cefox.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 09:20:11 UTC", "last_seen": "2026-03-24 09:20:11 UTC", "sightings": 1 }, { "indicator": "http://115.58.173.61:44422/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 09:20:08 UTC", "last_seen": "2026-03-24 09:20:08 UTC", "sightings": 1 }, { "indicator": "http://42.85.74.201:54764/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 09:20:07 UTC", "last_seen": "2026-03-24 09:20:07 UTC", "sightings": 1 }, { "indicator": "http://182.112.29.88:34758/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 09:18:15 UTC", "last_seen": "2026-03-24 09:18:15 UTC", "sightings": 1 }, { "indicator": "http://45.156.87.230/img_095026.png", "indicator_type": "url", "source": "URLhaus", "tags": [ "MassLogger" ], "first_seen": "2026-03-24 09:18:07 UTC", "last_seen": "2026-03-24 09:18:07 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.168/files/8316621590/IQkTf1l.bat", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-24 09:18:05 UTC", "last_seen": "2026-03-24 09:18:05 UTC", "sightings": 1 }, { "indicator": "https://dcq3oaq.velvet-dune.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 09:13:12 UTC", "last_seen": "2026-03-24 09:13:12 UTC", "sightings": 1 }, { "indicator": "http://222.140.156.194:49998/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-24 09:12:07 UTC", "last_seen": "2026-03-24 09:12:07 UTC", "sightings": 1 }, { "indicator": "http://198.23.177.216/vbwgjPfywCM166.bin", "indicator_type": "url", "source": "URLhaus", "tags": [ "GuLoader" ], "first_seen": "2026-03-24 09:08:07 UTC", "last_seen": "2026-03-24 09:08:07 UTC", "sightings": 1 }, { "indicator": "http://198.23.177.216/fLfOXQlvlFlyi168.bin", "indicator_type": "url", "source": "URLhaus", "tags": [ "GuLoader" ], "first_seen": "2026-03-24 09:08:07 UTC", "last_seen": "2026-03-24 09:08:07 UTC", "sightings": 1 }, { "indicator": "http://198.23.177.216/Contru154.jpb", "indicator_type": "url", "source": "URLhaus", "tags": [ "GuLoader" ], "first_seen": "2026-03-24 09:08:07 UTC", "last_seen": "2026-03-24 09:08:07 UTC", "sightings": 1 }, { "indicator": "http://198.23.177.216/Lumin59.mix", "indicator_type": "url", "source": "URLhaus", "tags": [ "GuLoader" ], "first_seen": "2026-03-24 09:08:07 UTC", "last_seen": "2026-03-24 09:08:07 UTC", "sightings": 1 }, { "indicator": "http://198.23.177.216/zbLErzBTDQQB188.bin", "indicator_type": "url", "source": "URLhaus", "tags": [ "GuLoader" ], "first_seen": "2026-03-24 09:08:07 UTC", "last_seen": "2026-03-24 09:08:07 UTC", "sightings": 1 }, { "indicator": "http://117.215.48.36:41026/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 09:06:18 UTC", "last_seen": "2026-03-24 09:06:18 UTC", "sightings": 1 }, { "indicator": "https://refaccionesalma.com.mx/cor/remc/news/ENCRYPTED.ps1", "indicator_type": "url", "source": "URLhaus", "tags": [ "ascii", "powershell", "ps1" ], "first_seen": "2026-03-24 09:06:10 UTC", "last_seen": "2026-03-24 09:06:10 UTC", "sightings": 1 }, { "indicator": "http://110.37.65.205:53110/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-24 09:05:11 UTC", "last_seen": "2026-03-24 09:05:11 UTC", "sightings": 1 }, { "indicator": "https://voiceamp.velvet-dune.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 09:05:08 UTC", "last_seen": "2026-03-24 09:05:08 UTC", "sightings": 1 }, { "indicator": "http://119.179.237.164:33682/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 09:03:13 UTC", "last_seen": "2026-03-24 09:03:13 UTC", "sightings": 1 }, { "indicator": "http://123.5.151.31:39202/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-24 09:02:07 UTC", "last_seen": "2026-03-24 09:02:07 UTC", "sightings": 1 }, { "indicator": "http://110.39.225.163:55855/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 09:01:18 UTC", "last_seen": "2026-03-24 09:01:18 UTC", "sightings": 1 }, { "indicator": "http://42.85.74.201:54764/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 08:59:15 UTC", "last_seen": "2026-03-24 08:59:15 UTC", "sightings": 1 }, { "indicator": "https://e5754.velvet-dune.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 08:58:07 UTC", "last_seen": "2026-03-24 08:58:07 UTC", "sightings": 1 }, { "indicator": "http://125.41.247.115:43021/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 08:57:15 UTC", "last_seen": "2026-03-24 08:57:15 UTC", "sightings": 1 }, { "indicator": "http://123.14.17.138:60250/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 08:55:12 UTC", "last_seen": "2026-03-24 08:55:12 UTC", "sightings": 1 }, { "indicator": "http://45.225.135.61/GdaWJLSiOjz162.bin", "indicator_type": "url", "source": "URLhaus", "tags": [ "encrypted", "GuLoader", "rat", "RemcosRAT" ], "first_seen": "2026-03-24 08:52:08 UTC", "last_seen": "2026-03-24 08:52:08 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.168/files/8316621590/Cas8EyX.bat", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-24 08:52:06 UTC", "last_seen": "2026-03-24 08:52:06 UTC", "sightings": 1 }, { "indicator": "https://golde-loose.velvet-dune.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 08:49:07 UTC", "last_seen": "2026-03-24 08:49:07 UTC", "sightings": 1 }, { "indicator": "http://196.189.198.193:44526/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-24 08:47:07 UTC", "last_seen": "2026-03-24 08:47:07 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.168/files/8316621590/i3JJRAl.bat", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-24 08:46:06 UTC", "last_seen": "2026-03-24 08:46:06 UTC", "sightings": 1 }, { "indicator": "http://103.160.130.109:49808/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 08:43:12 UTC", "last_seen": "2026-03-24 08:43:12 UTC", "sightings": 1 }, { "indicator": "https://kerneldelive.velvet-dune.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 08:42:08 UTC", "last_seen": "2026-03-24 08:42:08 UTC", "sightings": 1 }, { "indicator": "http://110.37.65.205:53110/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-24 08:39:13 UTC", "last_seen": "2026-03-24 08:39:13 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.168/files/8316621590/39U8PKV.bat", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-24 08:37:05 UTC", "last_seen": "2026-03-24 08:37:05 UTC", "sightings": 1 }, { "indicator": "http://123.14.17.138:60250/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 08:35:07 UTC", "last_seen": "2026-03-24 08:35:07 UTC", "sightings": 1 }, { "indicator": "https://svc4sat.exuviaestreamnet.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 08:34:10 UTC", "last_seen": "2026-03-24 08:34:10 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.168/files/8316621590/VHFgfjr.bat", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-03-24 08:33:05 UTC", "last_seen": "2026-03-24 08:33:05 UTC", "sightings": 1 }, { "indicator": "http://175.168.18.80:43226/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 08:32:24 UTC", "last_seen": "2026-03-24 08:32:24 UTC", "sightings": 1 }, { "indicator": "http://191.37.19.74:55036/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-24 08:29:07 UTC", "last_seen": "2026-03-24 08:29:07 UTC", "sightings": 1 }, { "indicator": "http://110.36.29.40:32813/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 08:28:06 UTC", "last_seen": "2026-03-24 08:28:06 UTC", "sightings": 1 }, { "indicator": "https://svc3core.exuviaestreamnet.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 08:27:07 UTC", "last_seen": "2026-03-24 08:27:07 UTC", "sightings": 1 }, { "indicator": "https://www.mediafire.com/file_premium/bdb6pss68wq58uu/stabber/file", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-24 08:25:13 UTC", "last_seen": "2026-03-24 08:25:13 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.168/files/8316621590/HlGNNfp.bat", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-24 08:25:05 UTC", "last_seen": "2026-03-24 08:25:05 UTC", "sightings": 1 }, { "indicator": "https://enotbanknoti.co/stabber", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ascii" ], "first_seen": "2026-03-24 08:24:06 UTC", "last_seen": "2026-03-24 08:24:06 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.168/files/8316621590/PKhCkYB.bat", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-03-24 08:21:05 UTC", "last_seen": "2026-03-24 08:21:05 UTC", "sightings": 1 }, { "indicator": "https://svc2steel.exuviaestreamnet.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 08:20:09 UTC", "last_seen": "2026-03-24 08:20:09 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.168/files/8316621590/4dJolrm.bat", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-24 08:13:04 UTC", "last_seen": "2026-03-24 08:13:04 UTC", "sightings": 1 }, { "indicator": "https://svc1proc.exuviaestreamnet.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 08:12:06 UTC", "last_seen": "2026-03-24 08:12:06 UTC", "sightings": 1 }, { "indicator": "http://114.239.99.7:52348/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 08:09:10 UTC", "last_seen": "2026-03-24 08:09:10 UTC", "sightings": 1 }, { "indicator": "http://123.10.142.38:48068/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-24 08:07:06 UTC", "last_seen": "2026-03-24 08:07:06 UTC", "sightings": 1 }, { "indicator": "https://dev4space.ovipositortrace.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 08:05:08 UTC", "last_seen": "2026-03-24 08:05:08 UTC", "sightings": 1 }, { "indicator": "http://175.168.18.80:43226/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 08:04:14 UTC", "last_seen": "2026-03-24 08:04:14 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.168/files/8316621590/NO0fr1p.bat", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-24 08:00:06 UTC", "last_seen": "2026-03-24 08:00:06 UTC", "sightings": 1 }, { "indicator": "https://dev3field.ovipositortrace.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 07:56:07 UTC", "last_seen": "2026-03-24 07:56:07 UTC", "sightings": 1 }, { "indicator": "http://123.14.234.125:53887/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 07:53:08 UTC", "last_seen": "2026-03-24 07:53:08 UTC", "sightings": 1 }, { "indicator": "http://110.36.29.195:40384/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 07:53:07 UTC", "last_seen": "2026-03-24 07:53:07 UTC", "sightings": 1 }, { "indicator": "https://dev2outer.ovipositortrace.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 07:53:07 UTC", "last_seen": "2026-03-24 07:53:07 UTC", "sightings": 1 }, { "indicator": "http://110.37.19.6:45252/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-24 07:53:07 UTC", "last_seen": "2026-03-24 07:53:07 UTC", "sightings": 1 }, { "indicator": "http://110.37.123.210:56548/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 07:53:07 UTC", "last_seen": "2026-03-24 07:53:07 UTC", "sightings": 1 }, { "indicator": "http://175.146.153.178:36361/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 07:53:07 UTC", "last_seen": "2026-03-24 07:53:07 UTC", "sightings": 1 }, { "indicator": "https://dev1proc.ovipositortrace.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 07:53:06 UTC", "last_seen": "2026-03-24 07:53:06 UTC", "sightings": 1 }, { "indicator": "https://adderall.rocks/pPnmS.png", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-24 07:53:06 UTC", "last_seen": "2026-03-24 07:53:06 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/HaucaVN/BibGuard/refs/heads/main/src/fetchers/Guard-Bib-bhoy.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 07:53:05 UTC", "last_seen": "2026-03-24 07:53:05 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.168/files/8316621590/4V7XKoC.bat", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-24 07:53:04 UTC", "last_seen": "2026-03-24 07:53:04 UTC", "sightings": 1 }, { "indicator": "https://github.com/Anderh2718/Sentinel-C/raw/refs/heads/main/src/C_Sentinel_v3.9.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 07:37:12 UTC", "last_seen": "2026-03-24 07:37:12 UTC", "sightings": 1 }, { "indicator": "https://github.com/rehmanbranded/aegis/raw/refs/heads/main/packages/core/test/Software-2.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 07:37:12 UTC", "last_seen": "2026-03-24 07:37:12 UTC", "sightings": 1 }, { "indicator": "https://github.com/MAHENDRASINGHRAJPUROHIT/mahendrasinghrajpurohit.github.io/raw/refs/heads/main/pettyfog/io-mahendrasinghrajpurohit-github-v1.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 07:37:09 UTC", "last_seen": "2026-03-24 07:37:09 UTC", "sightings": 1 }, { "indicator": "https://github.com/MAHENDRASINGHRAJPUROHIT/OnlyGuardian/raw/refs/heads/tools/apps/dashboard/src/Guardian-Only-1.7-alpha.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 07:37:09 UTC", "last_seen": "2026-03-24 07:37:09 UTC", "sightings": 1 }, { "indicator": "https://github.com/krisp000/howdy-patcher/raw/refs/heads/main/iniquitable/patcher_howdy_1.7.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 07:37:09 UTC", "last_seen": "2026-03-24 07:37:09 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/MAHENDRASINGHRAJPUROHIT/mahendrasinghrajpurohit.github.io/refs/heads/main/pettyfog/io-mahendrasinghrajpurohit-github-v1.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 07:37:09 UTC", "last_seen": "2026-03-24 07:37:09 UTC", "sightings": 1 }, { "indicator": "https://github.com/Anderh2718/anderh2718.github.io/raw/refs/heads/main/ambushment/io-github-anderh-1.0-beta.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 07:37:08 UTC", "last_seen": "2026-03-24 07:37:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/HaucaVN/haucavn.github.io/refs/heads/main/purist/haucavn_github_io_v1.0.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 07:37:08 UTC", "last_seen": "2026-03-24 07:37:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/HaucaVN/BibGuard/raw/refs/heads/main/src/fetchers/Guard-Bib-bhoy.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 07:37:08 UTC", "last_seen": "2026-03-24 07:37:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Anderh2718/anderh2718.github.io/refs/heads/main/ambushment/io-github-anderh-1.0-beta.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 07:37:08 UTC", "last_seen": "2026-03-24 07:37:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/MAHENDRASINGHRAJPUROHIT/OnlyGuardian/refs/heads/tools/apps/dashboard/src/Guardian-Only-1.7-alpha.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 07:37:08 UTC", "last_seen": "2026-03-24 07:37:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/krisp000/howdy-patcher/refs/heads/main/iniquitable/patcher_howdy_1.7.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 07:37:08 UTC", "last_seen": "2026-03-24 07:37:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/HaucaVN/haucavn.github.io/raw/refs/heads/main/purist/haucavn_github_io_v1.0.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 07:37:08 UTC", "last_seen": "2026-03-24 07:37:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Anderh2718/Sentinel-C/refs/heads/main/src/C_Sentinel_v3.9.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 07:37:08 UTC", "last_seen": "2026-03-24 07:37:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/rehmanbranded/aegis/refs/heads/main/packages/core/test/Software-2.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 07:37:08 UTC", "last_seen": "2026-03-24 07:37:08 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.168/files/8316621590/8m5apzl.bat", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-03-24 07:35:06 UTC", "last_seen": "2026-03-24 07:35:06 UTC", "sightings": 1 }, { "indicator": "https://cl4path.tarsusdatagate.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 07:33:11 UTC", "last_seen": "2026-03-24 07:33:11 UTC", "sightings": 1 }, { "indicator": "http://192.109.200.199/iran.arc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-24 07:31:28 UTC", "last_seen": "2026-03-24 07:31:28 UTC", "sightings": 1 }, { "indicator": "http://192.109.200.199/iran.armv4l", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-24 07:31:23 UTC", "last_seen": "2026-03-24 07:31:23 UTC", "sightings": 1 }, { "indicator": "http://192.109.200.199/iran.powerpc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-24 07:31:23 UTC", "last_seen": "2026-03-24 07:31:23 UTC", "sightings": 1 }, { "indicator": "http://192.109.200.199/iran.armv5l", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-24 07:31:23 UTC", "last_seen": "2026-03-24 07:31:23 UTC", "sightings": 1 }, { "indicator": "http://192.109.200.199/iran.sh4", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-24 07:31:23 UTC", "last_seen": "2026-03-24 07:31:23 UTC", "sightings": 1 }, { "indicator": "http://192.109.200.199/iran.armv6l", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-24 07:31:23 UTC", "last_seen": "2026-03-24 07:31:23 UTC", "sightings": 1 }, { "indicator": "http://192.109.200.199/iran.x86_64", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-24 07:31:23 UTC", "last_seen": "2026-03-24 07:31:23 UTC", "sightings": 1 }, { "indicator": "http://192.109.200.199/iran.aarch64", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-24 07:31:22 UTC", "last_seen": "2026-03-24 07:31:22 UTC", "sightings": 1 }, { "indicator": "http://192.109.200.199/iran.m68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-24 07:31:22 UTC", "last_seen": "2026-03-24 07:31:22 UTC", "sightings": 1 }, { "indicator": "http://192.109.200.199/iran.i486", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-24 07:31:22 UTC", "last_seen": "2026-03-24 07:31:22 UTC", "sightings": 1 }, { "indicator": "http://192.109.200.199/iran.mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-24 07:31:22 UTC", "last_seen": "2026-03-24 07:31:22 UTC", "sightings": 1 }, { "indicator": "http://192.109.200.199/iran.sparc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-24 07:31:22 UTC", "last_seen": "2026-03-24 07:31:22 UTC", "sightings": 1 }, { "indicator": "http://192.109.200.199/iran.armv7l", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-24 07:31:22 UTC", "last_seen": "2026-03-24 07:31:22 UTC", "sightings": 1 }, { "indicator": "http://192.109.200.199/iran.mipsel", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-24 07:31:21 UTC", "last_seen": "2026-03-24 07:31:21 UTC", "sightings": 1 }, { "indicator": "http://123.9.198.108:35918/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 07:31:16 UTC", "last_seen": "2026-03-24 07:31:16 UTC", "sightings": 1 }, { "indicator": "https://github.com/mtysedke/mtysedke.github.io/raw/refs/heads/main/Calvinistic/github-mtysedke-io-1.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 07:31:12 UTC", "last_seen": "2026-03-24 07:31:12 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/ItsIndeSkv/Weighted-Fusion-Disaster-Prediction-Mechanism/refs/heads/main/dashboard/Disaster-Mechanism-Prediction-Fusion-Weighted-3.0-beta.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 07:31:11 UTC", "last_seen": "2026-03-24 07:31:11 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/tililouche/tililouche.github.io/refs/heads/main/Ophion/io_tililouche_github_2.9-alpha.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 07:31:11 UTC", "last_seen": "2026-03-24 07:31:11 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/belydan/belydan.github.io/refs/heads/main/corporally/belydan_github_io_v3.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 07:31:11 UTC", "last_seen": "2026-03-24 07:31:11 UTC", "sightings": 1 }, { "indicator": "https://github.com/mtysedke/security-incident-artifact-analyzer/raw/refs/heads/main/security-incident-artifact-analyzer/core/artifact-incident-security-analyzer-v2.7.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 07:31:11 UTC", "last_seen": "2026-03-24 07:31:11 UTC", "sightings": 1 }, { "indicator": "https://github.com/enesssyasarr/netGuard-AI-scanner/raw/refs/heads/main/logs/net_scanner_Guard_A_v2.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 07:31:11 UTC", "last_seen": "2026-03-24 07:31:11 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/mtysedke/security-incident-artifact-analyzer/refs/heads/main/security-incident-artifact-analyzer/core/artifact-incident-security-analyzer-v2.7.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 07:31:11 UTC", "last_seen": "2026-03-24 07:31:11 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/nothi533/nothi533.github.io/refs/heads/main/aristocrat/io_github_nothi_2.5-beta.4.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 07:31:11 UTC", "last_seen": "2026-03-24 07:31:11 UTC", "sightings": 1 }, { "indicator": "https://github.com/nothi533/nothi533.github.io/raw/refs/heads/main/aristocrat/io_github_nothi_2.5-beta.4.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 07:31:11 UTC", "last_seen": "2026-03-24 07:31:11 UTC", "sightings": 1 }, { "indicator": "https://github.com/enesssyasarr/enesssyasarr.github.io/raw/refs/heads/main/Wisigothic/github-io-enesssyasarr-v3.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 07:31:11 UTC", "last_seen": "2026-03-24 07:31:11 UTC", "sightings": 1 }, { "indicator": "https://github.com/tililouche/corvina-sigil-standard/raw/refs/heads/main/paper/sigil_standard_corvina_2.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 07:31:11 UTC", "last_seen": "2026-03-24 07:31:11 UTC", "sightings": 1 }, { "indicator": "https://github.com/tililouche/tililouche.github.io/raw/refs/heads/main/Ophion/io_tililouche_github_2.9-alpha.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 07:31:11 UTC", "last_seen": "2026-03-24 07:31:11 UTC", "sightings": 1 }, { "indicator": "https://github.com/ItsIndeSkv/Weighted-Fusion-Disaster-Prediction-Mechanism/raw/refs/heads/main/dashboard/Disaster-Mechanism-Prediction-Fusion-Weighted-3.0-beta.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 07:31:11 UTC", "last_seen": "2026-03-24 07:31:11 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/mtysedke/mtysedke.github.io/refs/heads/main/Calvinistic/github-mtysedke-io-1.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 07:31:11 UTC", "last_seen": "2026-03-24 07:31:11 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/ItsIndeSkv/AndroidTutorials/refs/heads/master/RecyclerViewTutorial/app/src/androidTest/java/com/androidtut/Tutorials-Android-2.0.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 07:31:10 UTC", "last_seen": "2026-03-24 07:31:10 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/belydan/AH170-Framework/refs/heads/master/.idea/commandlinetools/A-Framework-2.0.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 07:31:10 UTC", "last_seen": "2026-03-24 07:31:10 UTC", "sightings": 1 }, { "indicator": "https://github.com/belydan/belydan.github.io/raw/refs/heads/main/corporally/belydan_github_io_v3.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 07:31:10 UTC", "last_seen": "2026-03-24 07:31:10 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/nothi533/Sentry/refs/heads/main/.dagger/Software_v2.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 07:31:10 UTC", "last_seen": "2026-03-24 07:31:10 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/enesssyasarr/netGuard-AI-scanner/refs/heads/main/logs/net_scanner_Guard_A_v2.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 07:31:10 UTC", "last_seen": "2026-03-24 07:31:10 UTC", "sightings": 1 }, { "indicator": "https://github.com/belydan/AH170-Framework/raw/refs/heads/master/.idea/commandlinetools/A-Framework-2.0.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 07:31:10 UTC", "last_seen": "2026-03-24 07:31:10 UTC", "sightings": 1 }, { "indicator": "https://github.com/ItsIndeSkv/AndroidTutorials/raw/refs/heads/master/RecyclerViewTutorial/app/src/androidTest/java/com/androidtut/Tutorials-Android-2.0.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 07:31:10 UTC", "last_seen": "2026-03-24 07:31:10 UTC", "sightings": 1 }, { "indicator": "https://github.com/nothi533/Sentry/raw/refs/heads/main/.dagger/Software_v2.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 07:31:10 UTC", "last_seen": "2026-03-24 07:31:10 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/enesssyasarr/enesssyasarr.github.io/refs/heads/main/Wisigothic/github-io-enesssyasarr-v3.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 07:31:10 UTC", "last_seen": "2026-03-24 07:31:10 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/tililouche/corvina-sigil-standard/refs/heads/main/paper/sigil_standard_corvina_2.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 07:31:10 UTC", "last_seen": "2026-03-24 07:31:10 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.168/files/8316621590/CfThNZ0.bat", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-24 07:31:04 UTC", "last_seen": "2026-03-24 07:31:04 UTC", "sightings": 1 }, { "indicator": "https://cl3view.tarsusdatagate.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 07:30:12 UTC", "last_seen": "2026-03-24 07:30:12 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.168/files/8316621590/kXJtUWs.bat", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-24 07:29:04 UTC", "last_seen": "2026-03-24 07:29:04 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.168/files/8316621590/qRJ3dXP.bat", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-24 07:27:05 UTC", "last_seen": "2026-03-24 07:27:05 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/govabhai/govabhai.github.io/refs/heads/main/bromocyanide/io-govabhai-github-v3.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 07:25:09 UTC", "last_seen": "2026-03-24 07:25:09 UTC", "sightings": 1 }, { "indicator": "https://github.com/govabhai/ClassShield-V2/raw/refs/heads/main/templates/Class-Shield-v2.7.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 07:25:09 UTC", "last_seen": "2026-03-24 07:25:09 UTC", "sightings": 1 }, { "indicator": "https://github.com/govabhai/govabhai.github.io/raw/refs/heads/main/bromocyanide/io-govabhai-github-v3.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 07:25:09 UTC", "last_seen": "2026-03-24 07:25:09 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/govabhai/ClassShield-V2/refs/heads/main/templates/Class-Shield-v2.7.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 07:25:08 UTC", "last_seen": "2026-03-24 07:25:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/neyokay1/neyokay1.github.io/refs/heads/main/tragicness/github-io-neyokay-v3.8-beta.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 07:24:07 UTC", "last_seen": "2026-03-24 07:24:07 UTC", "sightings": 1 }, { "indicator": "https://github.com/neyokay1/neyokay1.github.io/raw/refs/heads/main/tragicness/github-io-neyokay-v3.8-beta.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 07:24:07 UTC", "last_seen": "2026-03-24 07:24:07 UTC", "sightings": 1 }, { "indicator": "https://github.com/neyokay1/Beast-Scanner/raw/refs/heads/main/tropocaine/Beast-Scanner-1.3-alpha.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 07:24:07 UTC", "last_seen": "2026-03-24 07:24:07 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/neyokay1/Beast-Scanner/refs/heads/main/tropocaine/Beast-Scanner-1.3-alpha.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 07:24:07 UTC", "last_seen": "2026-03-24 07:24:07 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.168/files/8316621590/9zrv74X.bat", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-03-24 07:24:05 UTC", "last_seen": "2026-03-24 07:24:05 UTC", "sightings": 1 }, { "indicator": "http://110.38.217.97:39189/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 07:22:15 UTC", "last_seen": "2026-03-24 07:22:15 UTC", "sightings": 1 }, { "indicator": "http://42.53.249.57:32858/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-24 07:21:13 UTC", "last_seen": "2026-03-24 07:21:13 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.168/files/8316621590/3wPo9Zb.bat", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-24 07:20:05 UTC", "last_seen": "2026-03-24 07:20:05 UTC", "sightings": 1 }, { "indicator": "https://cl2point.tarsusdatagate.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 07:19:09 UTC", "last_seen": "2026-03-24 07:19:09 UTC", "sightings": 1 }, { "indicator": "http://42.53.249.57:32858/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-24 07:15:17 UTC", "last_seen": "2026-03-24 07:15:17 UTC", "sightings": 1 }, { "indicator": "http://45.61.149.150/www/img_215657.png", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-24 07:11:34 UTC", "last_seen": "2026-03-24 07:11:34 UTC", "sightings": 1 }, { "indicator": "http://45.61.149.150/www/img_150413.png", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-24 07:11:31 UTC", "last_seen": "2026-03-24 07:11:31 UTC", "sightings": 1 }, { "indicator": "http://45.61.149.150/www/img_150752.png", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-24 07:11:29 UTC", "last_seen": "2026-03-24 07:11:29 UTC", "sightings": 1 }, { "indicator": "http://45.61.149.150/www/img_150627.png", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-24 07:11:24 UTC", "last_seen": "2026-03-24 07:11:24 UTC", "sightings": 1 }, { "indicator": "http://45.61.149.150/43/withbestprojectaroundtheworldformebestthings.js", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-24 07:11:22 UTC", "last_seen": "2026-03-24 07:11:22 UTC", "sightings": 1 }, { "indicator": "http://45.61.149.150/www/img_200744.png", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-24 07:11:20 UTC", "last_seen": "2026-03-24 07:11:20 UTC", "sightings": 1 }, { "indicator": "http://144.172.101.85/web/ehkkoad.txt", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-24 07:11:20 UTC", "last_seen": "2026-03-24 07:11:20 UTC", "sightings": 1 }, { "indicator": "http://45.61.149.150/www/mSckckf.txt", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-24 07:11:12 UTC", "last_seen": "2026-03-24 07:11:12 UTC", "sightings": 1 }, { "indicator": "https://pastes.io/raw/5K9OAroT", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-24 07:11:10 UTC", "last_seen": "2026-03-24 07:11:10 UTC", "sightings": 1 }, { "indicator": "http://45.61.149.150/www/img_145800.png", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-24 07:11:08 UTC", "last_seen": "2026-03-24 07:11:08 UTC", "sightings": 1 }, { "indicator": "https://cl1proc.tarsusdatagate.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 07:11:07 UTC", "last_seen": "2026-03-24 07:11:07 UTC", "sightings": 1 }, { "indicator": "http://45.61.149.150/44/wcc/weneedbestpeoplesaroundonfromthegreat.hta", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-24 07:11:07 UTC", "last_seen": "2026-03-24 07:11:07 UTC", "sightings": 1 }, { "indicator": "https://www.shrtx.pro/PWZOvm?&%D0%9D", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-24 07:11:06 UTC", "last_seen": "2026-03-24 07:11:06 UTC", "sightings": 1 }, { "indicator": "https://www.shrtx.pro/PWZOvm?&?%20?%20?%20?%20?%20?%20?%20?%20?%20?%20?%20?", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-24 07:11:06 UTC", "last_seen": "2026-03-24 07:11:06 UTC", "sightings": 1 }, { "indicator": "https://www.shrtx.pro/PWZOvm?&%E8%A2%A7%20%E8%A2%A7%20%E8%A2%A7%20%E8%A2%A7%20%E8%A2%A7%20%E8%A2%A7%20%E8%A2%A7%20%E8%A2%A7%20%E8%A2%A7%20%E8%A2%A7%20%E8%A2%A7%20%E8%A2%A7", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-24 07:11:05 UTC", "last_seen": "2026-03-24 07:11:05 UTC", "sightings": 1 }, { "indicator": "http://45.61.149.150/226/goodhabitsbettertogivebesthabitfo.js", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-24 07:11:05 UTC", "last_seen": "2026-03-24 07:11:05 UTC", "sightings": 1 }, { "indicator": "http://45.61.149.150/www/irFSrde.txt", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-24 07:11:05 UTC", "last_seen": "2026-03-24 07:11:05 UTC", "sightings": 1 }, { "indicator": "http://144.172.98.149/we/knapbij.txt", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-24 07:11:05 UTC", "last_seen": "2026-03-24 07:11:05 UTC", "sightings": 1 }, { "indicator": "https://chinasite.com.br/MSI_135401.png", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-24 07:10:11 UTC", "last_seen": "2026-03-24 07:10:11 UTC", "sightings": 1 }, { "indicator": "https://gateway.lighthouse.storage/ipfs/bafybeihpcmwx36nxntrrnwvkb2fdmukrpqtn3qmlxh3ggy2asnfn7xcbrm", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-24 07:10:08 UTC", "last_seen": "2026-03-24 07:10:08 UTC", "sightings": 1 }, { "indicator": "http://110.36.86.83:47830/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 07:07:14 UTC", "last_seen": "2026-03-24 07:07:14 UTC", "sightings": 1 }, { "indicator": "http://117.196.49.245:47719/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-24 07:07:08 UTC", "last_seen": "2026-03-24 07:07:08 UTC", "sightings": 1 }, { "indicator": "https://ext4view.spiraclelinkhub.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 07:06:11 UTC", "last_seen": "2026-03-24 07:06:11 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.168/files/8316621590/jbkTj1S.bat", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-03-24 07:04:04 UTC", "last_seen": "2026-03-24 07:04:04 UTC", "sightings": 1 }, { "indicator": "http://110.37.19.6:45252/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-24 07:02:07 UTC", "last_seen": "2026-03-24 07:02:07 UTC", "sightings": 1 }, { "indicator": "http://182.127.220.207:56490/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-24 07:02:07 UTC", "last_seen": "2026-03-24 07:02:07 UTC", "sightings": 1 }, { "indicator": "http://110.39.230.1:42783/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 07:01:14 UTC", "last_seen": "2026-03-24 07:01:14 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.168/files/8316621590/eDmSwBe.bat", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-24 07:00:06 UTC", "last_seen": "2026-03-24 07:00:06 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.168/files/8316621590/u2dGgIR.bat", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-24 06:56:05 UTC", "last_seen": "2026-03-24 06:56:05 UTC", "sightings": 1 }, { "indicator": "https://ext2core.spiraclelinkhub.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 06:50:07 UTC", "last_seen": "2026-03-24 06:50:07 UTC", "sightings": 1 }, { "indicator": "https://svc4link.scutellummatrix.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 06:32:07 UTC", "last_seen": "2026-03-24 06:32:07 UTC", "sightings": 1 }, { "indicator": "http://182.114.49.66:33615/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 06:30:17 UTC", "last_seen": "2026-03-24 06:30:17 UTC", "sightings": 1 }, { "indicator": "https://svc3user.scutellummatrix.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 06:25:07 UTC", "last_seen": "2026-03-24 06:25:07 UTC", "sightings": 1 }, { "indicator": "http://123.11.77.120:59043/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 06:22:15 UTC", "last_seen": "2026-03-24 06:22:15 UTC", "sightings": 1 }, { "indicator": "https://svc2base.scutellummatrix.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 06:18:06 UTC", "last_seen": "2026-03-24 06:18:06 UTC", "sightings": 1 }, { "indicator": "https://svc1infra.scutellummatrix.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 06:15:09 UTC", "last_seen": "2026-03-24 06:15:09 UTC", "sightings": 1 }, { "indicator": "https://github.com/JulesJujuu/wpaudit/raw/refs/heads/main/config/Software-2.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 06:11:08 UTC", "last_seen": "2026-03-24 06:11:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/ombarde12/IX-GhostProtocol/raw/refs/heads/main/core/identity/Protocol_Ghost_I_v2.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 06:11:07 UTC", "last_seen": "2026-03-24 06:11:07 UTC", "sightings": 1 }, { "indicator": "https://github.com/Armaan29-09-2005/AI-OSINT-Security-Analyzer/raw/refs/heads/main/.streamlit/Security_A_OSIN_Analyzer_3.9.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 06:11:07 UTC", "last_seen": "2026-03-24 06:11:07 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/JulesJujuu/wpaudit/refs/heads/main/config/Software-2.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 06:11:07 UTC", "last_seen": "2026-03-24 06:11:07 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/ombarde12/OmAESpareparts.github.io/refs/heads/main/uncasked/github-Om-Spareparts-io-AE-v2.0-alpha.4.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 06:11:07 UTC", "last_seen": "2026-03-24 06:11:07 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Rianna113/BlackVault/refs/heads/main/src/core/encryption_engine/Black_Vault_v3.4-alpha.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 06:11:07 UTC", "last_seen": "2026-03-24 06:11:07 UTC", "sightings": 1 }, { "indicator": "https://github.com/Rianna113/BlackVault/raw/refs/heads/main/src/core/encryption_engine/Black_Vault_v3.4-alpha.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 06:11:07 UTC", "last_seen": "2026-03-24 06:11:07 UTC", "sightings": 1 }, { "indicator": "https://github.com/ombarde12/OmAESpareparts.github.io/raw/refs/heads/main/uncasked/github-Om-Spareparts-io-AE-v2.0-alpha.4.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 06:11:07 UTC", "last_seen": "2026-03-24 06:11:07 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Armaan29-09-2005/AI-OSINT-Security-Analyzer/refs/heads/main/.streamlit/Security_A_OSIN_Analyzer_3.9.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 06:11:06 UTC", "last_seen": "2026-03-24 06:11:06 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/ombarde12/IX-GhostProtocol/refs/heads/main/core/identity/Protocol_Ghost_I_v2.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 06:11:06 UTC", "last_seen": "2026-03-24 06:11:06 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.168/files/8316621590/Mwd2F1d.bat", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-24 06:11:04 UTC", "last_seen": "2026-03-24 06:11:04 UTC", "sightings": 1 }, { "indicator": "http://182.114.49.66:33615/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 06:08:19 UTC", "last_seen": "2026-03-24 06:08:19 UTC", "sightings": 1 }, { "indicator": "http://110.36.86.83:47830/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 06:07:14 UTC", "last_seen": "2026-03-24 06:07:14 UTC", "sightings": 1 }, { "indicator": "http://182.127.220.207:56490/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-24 06:02:08 UTC", "last_seen": "2026-03-24 06:02:08 UTC", "sightings": 1 }, { "indicator": "http://219.157.179.185:58634/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-24 06:02:07 UTC", "last_seen": "2026-03-24 06:02:07 UTC", "sightings": 1 }, { "indicator": "https://dev4work.elytrapointnode.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 06:01:06 UTC", "last_seen": "2026-03-24 06:01:06 UTC", "sightings": 1 }, { "indicator": "http://59.88.241.63:53022/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 05:59:14 UTC", "last_seen": "2026-03-24 05:59:14 UTC", "sightings": 1 }, { "indicator": "http://105.224.75.40:57867/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-24 05:59:14 UTC", "last_seen": "2026-03-24 05:59:14 UTC", "sightings": 1 }, { "indicator": "https://dev3local.elytrapointnode.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 05:58:07 UTC", "last_seen": "2026-03-24 05:58:07 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/ModyD/kaggle-AI-agents-google-capstone/refs/heads/master/backend/agents/capstone_A_google_agents_kaggle_3.9-alpha.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 05:58:07 UTC", "last_seen": "2026-03-24 05:58:07 UTC", "sightings": 1 }, { "indicator": "https://github.com/ModyD/kaggle-AI-agents-google-capstone/raw/refs/heads/master/backend/agents/capstone_A_google_agents_kaggle_3.9-alpha.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 05:58:07 UTC", "last_seen": "2026-03-24 05:58:07 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.168/files/8316621590/APWtDgU.bat", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-24 05:56:06 UTC", "last_seen": "2026-03-24 05:56:06 UTC", "sightings": 1 }, { "indicator": "http://115.56.153.145:51082/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 05:53:06 UTC", "last_seen": "2026-03-24 05:53:06 UTC", "sightings": 1 }, { "indicator": "http://110.37.39.234:40958/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-24 05:52:14 UTC", "last_seen": "2026-03-24 05:52:14 UTC", "sightings": 1 }, { "indicator": "http://123.5.8.207:44960/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-24 05:52:07 UTC", "last_seen": "2026-03-24 05:52:07 UTC", "sightings": 1 }, { "indicator": "https://dev2power.elytrapointnode.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 05:49:08 UTC", "last_seen": "2026-03-24 05:49:08 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.168/files/8316621590/Ctjb2rQ.bat", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-24 05:47:04 UTC", "last_seen": "2026-03-24 05:47:04 UTC", "sightings": 1 }, { "indicator": "https://dev1proc.elytrapointnode.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 05:45:10 UTC", "last_seen": "2026-03-24 05:45:10 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.168/files/8316621590/N7aTtDV.bat", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-24 05:44:04 UTC", "last_seen": "2026-03-24 05:44:04 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.168/files/8316621590/Bd1tciM.bat", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-24 05:39:04 UTC", "last_seen": "2026-03-24 05:39:04 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.168/files/8316621590/kA0qIbf.bat", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-24 05:37:05 UTC", "last_seen": "2026-03-24 05:37:05 UTC", "sightings": 1 }, { "indicator": "http://182.112.29.88:34758/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 05:36:15 UTC", "last_seen": "2026-03-24 05:36:15 UTC", "sightings": 1 }, { "indicator": "http://219.157.179.185:58634/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-24 05:32:07 UTC", "last_seen": "2026-03-24 05:32:07 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.168/files/8316621590/kO1dv37.bat", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-24 05:31:04 UTC", "last_seen": "2026-03-24 05:31:04 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.168/files/8316621590/n7wmUuF.bat", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-24 05:29:04 UTC", "last_seen": "2026-03-24 05:29:04 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.168/files/8316621590/dRf4qKq.bat", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-03-24 05:26:05 UTC", "last_seen": "2026-03-24 05:26:05 UTC", "sightings": 1 }, { "indicator": "http://110.37.44.250:53103/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-24 05:25:15 UTC", "last_seen": "2026-03-24 05:25:15 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.168/files/8316621590/v3R9oxk.bat", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-24 05:23:04 UTC", "last_seen": "2026-03-24 05:23:04 UTC", "sightings": 1 }, { "indicator": "http://42.56.160.67:39640/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 05:22:10 UTC", "last_seen": "2026-03-24 05:22:10 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.168/files/8316621590/BINMSN9.bat", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-24 05:21:05 UTC", "last_seen": "2026-03-24 05:21:05 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.168/files/8316621590/YbJ7y1k.bat", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-24 05:15:06 UTC", "last_seen": "2026-03-24 05:15:06 UTC", "sightings": 1 }, { "indicator": "http://117.200.237.26:44881/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 05:13:15 UTC", "last_seen": "2026-03-24 05:13:15 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.168/files/8316621590/UpFZk06.bat", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-24 05:13:05 UTC", "last_seen": "2026-03-24 05:13:05 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.168/files/8316621590/Cvrbg1F.bat", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-03-24 05:11:05 UTC", "last_seen": "2026-03-24 05:11:05 UTC", "sightings": 1 }, { "indicator": "http://59.88.241.63:53022/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 05:08:14 UTC", "last_seen": "2026-03-24 05:08:14 UTC", "sightings": 1 }, { "indicator": "http://115.55.239.229:35781/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 05:06:13 UTC", "last_seen": "2026-03-24 05:06:13 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.168/files/8316621590/5XvnGZz.bat", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-24 05:06:03 UTC", "last_seen": "2026-03-24 05:06:03 UTC", "sightings": 1 }, { "indicator": "http://59.95.92.82:34497/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 05:04:13 UTC", "last_seen": "2026-03-24 05:04:13 UTC", "sightings": 1 }, { "indicator": "http://42.56.160.67:39640/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 05:00:09 UTC", "last_seen": "2026-03-24 05:00:09 UTC", "sightings": 1 }, { "indicator": "http://123.11.77.120:59043/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 04:59:15 UTC", "last_seen": "2026-03-24 04:59:15 UTC", "sightings": 1 }, { "indicator": "http://59.95.92.82:34497/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 04:57:14 UTC", "last_seen": "2026-03-24 04:57:14 UTC", "sightings": 1 }, { "indicator": "https://cl3dev.chrysalisbuffer.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 04:55:07 UTC", "last_seen": "2026-03-24 04:55:07 UTC", "sightings": 1 }, { "indicator": "http://115.55.239.229:35781/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 04:55:07 UTC", "last_seen": "2026-03-24 04:55:07 UTC", "sightings": 1 }, { "indicator": "http://110.37.82.79:36778/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 04:51:09 UTC", "last_seen": "2026-03-24 04:51:09 UTC", "sightings": 1 }, { "indicator": "http://117.200.237.26:44881/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 04:49:14 UTC", "last_seen": "2026-03-24 04:49:14 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/CaidonW/CaidonW/refs/heads/main/thermojunction/W-Caidon-v3.4.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 04:48:05 UTC", "last_seen": "2026-03-24 04:48:05 UTC", "sightings": 1 }, { "indicator": "http://117.254.103.135:44583/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 04:47:17 UTC", "last_seen": "2026-03-24 04:47:17 UTC", "sightings": 1 }, { "indicator": "http://117.254.103.135:44583/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 04:47:17 UTC", "last_seen": "2026-03-24 04:47:17 UTC", "sightings": 1 }, { "indicator": "https://github.com/ZukoChris/Ebyte-amsi-patchless-vehhwbp/raw/refs/heads/main/HWBP-AmsiBypass/vehhwbp-Ebyte-patchless-amsi-3.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 04:47:08 UTC", "last_seen": "2026-03-24 04:47:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/tiagoalfaro2006/AutoPentestX/refs/heads/main/modules/X-Auto-Pentest-3.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 04:47:08 UTC", "last_seen": "2026-03-24 04:47:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Munem-1/File-Integrity-Checker-Cybersecurity-Tool/refs/heads/main/assets/Integrity_Tool_Cybersecurity_Checker_File_3.7-alpha.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 04:47:08 UTC", "last_seen": "2026-03-24 04:47:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/ayushcsh/advent-of-hacks/refs/heads/main/straightforwardness/advent-hacks-of-1.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 04:47:08 UTC", "last_seen": "2026-03-24 04:47:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/ZukoChris/Ebyte-amsi-patchless-vehhwbp/refs/heads/main/HWBP-AmsiBypass/vehhwbp-Ebyte-patchless-amsi-3.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 04:47:08 UTC", "last_seen": "2026-03-24 04:47:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/OviFrn/llmverify-npm/refs/heads/main/src/security/npm_llmverify_3.3-beta.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 04:47:08 UTC", "last_seen": "2026-03-24 04:47:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/CaidonW/Electrum-Wallet-Multi-Crypto-Secure-Gui-Multi-Coin-Storage-Web-Browser/refs/heads/main/Electrum-Wallet/Properties/lib/Secure-Browser-Storage-Coin-Wallet-Web-Gui-Electrum-Crypto-Multi-1.7.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 04:46:09 UTC", "last_seen": "2026-03-24 04:46:09 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/elmamlaka/shopify-traffic-filter-block-bots/refs/heads/main/chernozem/bots_block_shopify_filter_traffic_v2.7.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 04:46:09 UTC", "last_seen": "2026-03-24 04:46:09 UTC", "sightings": 1 }, { "indicator": "https://github.com/tiagoalfaro2006/AutoPentestX/raw/refs/heads/main/modules/X-Auto-Pentest-3.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 04:46:09 UTC", "last_seen": "2026-03-24 04:46:09 UTC", "sightings": 1 }, { "indicator": "https://github.com/OviFrn/llmverify-npm/raw/refs/heads/main/src/security/npm_llmverify_3.3-beta.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 04:46:09 UTC", "last_seen": "2026-03-24 04:46:09 UTC", "sightings": 1 }, { "indicator": "https://github.com/CaidonW/Electrum-Wallet-Multi-Crypto-Secure-Gui-Multi-Coin-Storage-Web-Browser/raw/refs/heads/main/Electrum-Wallet/Properties/lib/Secure-Browser-Storage-Coin-Wallet-Web-Gui-Electrum-Crypto-Multi-1.7.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 04:46:09 UTC", "last_seen": "2026-03-24 04:46:09 UTC", "sightings": 1 }, { "indicator": "https://github.com/elmamlaka/shopify-traffic-filter-block-bots/raw/refs/heads/main/chernozem/bots_block_shopify_filter_traffic_v2.7.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 04:46:09 UTC", "last_seen": "2026-03-24 04:46:09 UTC", "sightings": 1 }, { "indicator": "https://github.com/ayushcsh/advent-of-hacks/raw/refs/heads/main/straightforwardness/advent-hacks-of-1.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 04:46:09 UTC", "last_seen": "2026-03-24 04:46:09 UTC", "sightings": 1 }, { "indicator": "https://github.com/CaidonW/CaidonW/raw/refs/heads/main/thermojunction/W-Caidon-v3.4.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 04:46:09 UTC", "last_seen": "2026-03-24 04:46:09 UTC", "sightings": 1 }, { "indicator": "https://github.com/Munem-1/File-Integrity-Checker-Cybersecurity-Tool/raw/refs/heads/main/assets/Integrity_Tool_Cybersecurity_Checker_File_3.7-alpha.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 04:46:09 UTC", "last_seen": "2026-03-24 04:46:09 UTC", "sightings": 1 }, { "indicator": "http://61.1.193.44:44753/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 04:38:13 UTC", "last_seen": "2026-03-24 04:38:13 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.168/files/8316621590/qp9GNBx.bat", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-24 04:36:05 UTC", "last_seen": "2026-03-24 04:36:05 UTC", "sightings": 1 }, { "indicator": "http://27.207.201.157:41801/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 04:35:10 UTC", "last_seen": "2026-03-24 04:35:10 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.168/files/8316621590/qp9GNBx.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-03-24 04:34:06 UTC", "last_seen": "2026-03-24 04:34:06 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.168/files/8316621590/qVP2lG5.bat", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-24 04:33:05 UTC", "last_seen": "2026-03-24 04:33:05 UTC", "sightings": 1 }, { "indicator": "http://115.48.147.26:34872/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 04:27:12 UTC", "last_seen": "2026-03-24 04:27:12 UTC", "sightings": 1 }, { "indicator": "http://59.96.141.99:46900/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-24 04:22:06 UTC", "last_seen": "2026-03-24 04:22:06 UTC", "sightings": 1 }, { "indicator": "http://58.209.181.97:34049/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-24 04:21:26 UTC", "last_seen": "2026-03-24 04:21:26 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/varun4gv/pumpfun-risk-analyzer/refs/heads/main/backend/services/analyzer_pumpfun_risk_1.7.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 04:17:06 UTC", "last_seen": "2026-03-24 04:17:06 UTC", "sightings": 1 }, { "indicator": "https://github.com/varun4gv/pumpfun-risk-analyzer/raw/refs/heads/main/backend/services/analyzer_pumpfun_risk_1.7.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 04:17:06 UTC", "last_seen": "2026-03-24 04:17:06 UTC", "sightings": 1 }, { "indicator": "https://github.com/Stanayo/s3tk/raw/refs/heads/main/spinnable/s_tk_3.7.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 04:17:06 UTC", "last_seen": "2026-03-24 04:17:06 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Stanayo/s3tk/refs/heads/main/spinnable/s_tk_3.7.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 04:17:06 UTC", "last_seen": "2026-03-24 04:17:06 UTC", "sightings": 1 }, { "indicator": "http://123.11.14.211:38197/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 04:13:06 UTC", "last_seen": "2026-03-24 04:13:06 UTC", "sightings": 1 }, { "indicator": "http://59.96.141.99:46900/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-24 04:12:07 UTC", "last_seen": "2026-03-24 04:12:07 UTC", "sightings": 1 }, { "indicator": "http://78.29.50.238:42106/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-24 04:12:06 UTC", "last_seen": "2026-03-24 04:12:06 UTC", "sightings": 1 }, { "indicator": "http://115.48.147.26:34872/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 04:11:16 UTC", "last_seen": "2026-03-24 04:11:16 UTC", "sightings": 1 }, { "indicator": "http://124.135.33.173:41720/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 04:11:16 UTC", "last_seen": "2026-03-24 04:11:16 UTC", "sightings": 1 }, { "indicator": "http://27.207.201.157:41801/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 04:11:15 UTC", "last_seen": "2026-03-24 04:11:15 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Feros0/commentcrusader-burp/refs/heads/main/media/commentcrusader_burp_cessor.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 04:11:11 UTC", "last_seen": "2026-03-24 04:11:11 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/VorexCotusar/revguard-nlp/refs/heads/main/hogling/revguard_nlp_mailguard.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 04:11:11 UTC", "last_seen": "2026-03-24 04:11:11 UTC", "sightings": 1 }, { "indicator": "https://github.com/Siyahkan0637/safehold/raw/refs/heads/main/.vscode/Software_3.8-alpha.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 04:11:11 UTC", "last_seen": "2026-03-24 04:11:11 UTC", "sightings": 1 }, { "indicator": "https://github.com/Feros0/commentcrusader-burp/raw/refs/heads/main/media/commentcrusader_burp_cessor.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 04:11:11 UTC", "last_seen": "2026-03-24 04:11:11 UTC", "sightings": 1 }, { "indicator": "https://github.com/Fayku57/Aar-Act/raw/refs/heads/main/automation/Aar_Act_2.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 04:11:11 UTC", "last_seen": "2026-03-24 04:11:11 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Siyahkan0637/safehold/refs/heads/main/.vscode/Software_3.8-alpha.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 04:11:11 UTC", "last_seen": "2026-03-24 04:11:11 UTC", "sightings": 1 }, { "indicator": "https://github.com/Loczek223/fraud-detection-modelling-and-reporting/raw/refs/heads/main/orthotolidin/and_modelling_fraud_detection_reporting_2.6-alpha.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 04:11:11 UTC", "last_seen": "2026-03-24 04:11:11 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Raiz-ui/obex/refs/heads/main/ruby/Software_trickment.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 04:11:11 UTC", "last_seen": "2026-03-24 04:11:11 UTC", "sightings": 1 }, { "indicator": "https://github.com/Raiz-ui/obex/raw/refs/heads/main/ruby/Software_trickment.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 04:11:11 UTC", "last_seen": "2026-03-24 04:11:11 UTC", "sightings": 1 }, { "indicator": "https://github.com/VorexCotusar/revguard-nlp/raw/refs/heads/main/hogling/revguard_nlp_mailguard.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 04:11:11 UTC", "last_seen": "2026-03-24 04:11:11 UTC", "sightings": 1 }, { "indicator": "https://github.com/Karthik-reddy6/aegistrace-threat-intelligence/raw/refs/heads/main/docs/intelligence-threat-aegistrace-2.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 04:11:11 UTC", "last_seen": "2026-03-24 04:11:11 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Karthik-reddy6/aegistrace-threat-intelligence/refs/heads/main/docs/intelligence-threat-aegistrace-2.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 04:11:11 UTC", "last_seen": "2026-03-24 04:11:11 UTC", "sightings": 1 }, { "indicator": "http://59.88.238.116:37285/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-24 04:11:10 UTC", "last_seen": "2026-03-24 04:11:10 UTC", "sightings": 1 }, { "indicator": "https://github.com/tsntizka/23/raw/refs/heads/main/in/23.txt", "indicator_type": "url", "source": "URLhaus", "tags": [ "lua", "SmartLoader" ], "first_seen": "2026-03-24 04:11:10 UTC", "last_seen": "2026-03-24 04:11:10 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/wangyanjun7954/CyberDefenseX_demo/refs/heads/main/Agent/demo-Defense-Cyber-1.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 04:11:10 UTC", "last_seen": "2026-03-24 04:11:10 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/juwad65/npm-malware-scanner/refs/heads/main/messmate/malware-scanner-npm-1.9.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 04:11:10 UTC", "last_seen": "2026-03-24 04:11:10 UTC", "sightings": 1 }, { "indicator": "https://github.com/juwad65/npm-malware-scanner/raw/refs/heads/main/messmate/malware-scanner-npm-1.9.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 04:11:10 UTC", "last_seen": "2026-03-24 04:11:10 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Loczek223/ExileModForge/refs/heads/main/occupative/Forge-Mod-Exile-1.6.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 04:11:10 UTC", "last_seen": "2026-03-24 04:11:10 UTC", "sightings": 1 }, { "indicator": "https://github.com/B0zrx/b0zrx.github.io/raw/refs/heads/main/bandstand/zrx_io_github_b_v2.6.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 04:11:10 UTC", "last_seen": "2026-03-24 04:11:10 UTC", "sightings": 1 }, { "indicator": "https://github.com/wangyanjun7954/CyberDefenseX_demo/raw/refs/heads/main/Agent/demo-Defense-Cyber-1.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 04:11:10 UTC", "last_seen": "2026-03-24 04:11:10 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Loczek223/fraud-detection-modelling-and-reporting/refs/heads/main/orthotolidin/and_modelling_fraud_detection_reporting_2.6-alpha.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 04:11:10 UTC", "last_seen": "2026-03-24 04:11:10 UTC", "sightings": 1 }, { "indicator": "https://github.com/Loczek223/ExileModForge/raw/refs/heads/main/occupative/Forge-Mod-Exile-1.6.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 04:11:10 UTC", "last_seen": "2026-03-24 04:11:10 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/tsntizka/23/refs/heads/main/in/23.txt", "indicator_type": "url", "source": "URLhaus", "tags": [ "lua", "SmartLoader" ], "first_seen": "2026-03-24 04:11:09 UTC", "last_seen": "2026-03-24 04:11:09 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Fayku57/Aar-Act/refs/heads/main/automation/Aar_Act_2.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 03:56:13 UTC", "last_seen": "2026-03-24 03:56:13 UTC", "sightings": 1 }, { "indicator": "https://github.com/lowwkezer/shannon/raw/refs/heads/main/xben-benchmark-results/XBEN-079-24/audit-logs/prompts/Software-3.9.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 03:56:13 UTC", "last_seen": "2026-03-24 03:56:13 UTC", "sightings": 1 }, { "indicator": "https://github.com/ShulpeXTechnology/CalcBookBackend/raw/refs/heads/main/models/Calc_Backend_Book_3.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 03:56:13 UTC", "last_seen": "2026-03-24 03:56:13 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/lowwkezer/shannon/refs/heads/main/xben-benchmark-results/XBEN-079-24/audit-logs/prompts/Software-3.9.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 03:56:13 UTC", "last_seen": "2026-03-24 03:56:13 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/nonamebatbai/INS_Sandstorm/refs/heads/master/Insurgency/Config/Server/Sandstorm_IN_v2.0.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 03:56:13 UTC", "last_seen": "2026-03-24 03:56:13 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/lowwkezer/bunny/refs/heads/main/src/lib/utils/Software-3.6.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 03:56:13 UTC", "last_seen": "2026-03-24 03:56:13 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/cyrustmods/github.io/refs/heads/master/assets/mobirise/github_io_1.4.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 03:56:13 UTC", "last_seen": "2026-03-24 03:56:13 UTC", "sightings": 1 }, { "indicator": "https://github.com/ShulpeXTechnology/CalcBook/raw/refs/heads/main/public/images/logo/Calc_Book_2.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 03:56:13 UTC", "last_seen": "2026-03-24 03:56:13 UTC", "sightings": 1 }, { "indicator": "https://github.com/lowwkezer/bunnytweak/raw/refs/heads/main/.github/Software_v1.4-alpha.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 03:56:13 UTC", "last_seen": "2026-03-24 03:56:13 UTC", "sightings": 1 }, { "indicator": "https://github.com/sabinakhatun14588-ctrl/moltbook-agent-guard/raw/refs/heads/main/integrations/guard_moltbook_agent_1.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 03:56:13 UTC", "last_seen": "2026-03-24 03:56:13 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/ShulpeXTechnology/CalcBook/refs/heads/main/public/images/logo/Calc_Book_2.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 03:56:13 UTC", "last_seen": "2026-03-24 03:56:13 UTC", "sightings": 1 }, { "indicator": "https://github.com/cyrustmods/github.io/raw/refs/heads/master/assets/mobirise/github_io_1.4.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 03:56:13 UTC", "last_seen": "2026-03-24 03:56:13 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/ShulpeXTechnology/totp-otp-auth/refs/heads/main/src/auth-otp-totp-v3.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 03:56:13 UTC", "last_seen": "2026-03-24 03:56:13 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/IFearNoHost/exo/refs/heads/main/src/middleware/Software-v3.0-beta.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 03:56:13 UTC", "last_seen": "2026-03-24 03:56:13 UTC", "sightings": 1 }, { "indicator": "https://github.com/nonamebatbai/Anti_Phishing_Email_Detector_gui/raw/refs/heads/main/anti_phishing_email_detector/data/gui-Anti-Phishing-Email-Detector-v3.9.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 03:56:13 UTC", "last_seen": "2026-03-24 03:56:13 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/IFearNoHost/ifearnohost.github.io/refs/heads/main/speciousness/github_ifearnohost_io_1.9-alpha.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 03:56:13 UTC", "last_seen": "2026-03-24 03:56:13 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/cyrustmods/OPENCLAW-SKILL-SAFE/refs/heads/master/grandame/SKIL-SAFE-OPENCLA-v3.4.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 03:56:13 UTC", "last_seen": "2026-03-24 03:56:13 UTC", "sightings": 1 }, { "indicator": "https://github.com/nonamebatbai/INS_Sandstorm/raw/refs/heads/master/Insurgency/Config/Server/Sandstorm_IN_v2.0.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 03:56:13 UTC", "last_seen": "2026-03-24 03:56:13 UTC", "sightings": 1 }, { "indicator": "https://github.com/lowwkezer/bunny/raw/refs/heads/main/src/lib/utils/Software-3.6.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 03:56:13 UTC", "last_seen": "2026-03-24 03:56:13 UTC", "sightings": 1 }, { "indicator": "https://github.com/IFearNoHost/ifearnohost.github.io/raw/refs/heads/main/speciousness/github_ifearnohost_io_1.9-alpha.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 03:56:13 UTC", "last_seen": "2026-03-24 03:56:13 UTC", "sightings": 1 }, { "indicator": "https://github.com/ShulpeXTechnology/totp-otp-auth/raw/refs/heads/main/src/auth-otp-totp-v3.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 03:56:13 UTC", "last_seen": "2026-03-24 03:56:13 UTC", "sightings": 1 }, { "indicator": "https://github.com/cyrustmods/OPENCLAW-SKILL-SAFE/raw/refs/heads/master/grandame/SKIL-SAFE-OPENCLA-v3.4.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 03:56:13 UTC", "last_seen": "2026-03-24 03:56:13 UTC", "sightings": 1 }, { "indicator": "https://github.com/B0zrx/RationTrack/raw/refs/heads/main/docs/docs/docs/Ration-Track-2.6-beta.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 03:56:13 UTC", "last_seen": "2026-03-24 03:56:13 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/B0zrx/RationTrack/refs/heads/main/docs/docs/docs/Ration-Track-2.6-beta.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 03:56:13 UTC", "last_seen": "2026-03-24 03:56:13 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/B0zrx/b0zrx.github.io/refs/heads/main/bandstand/zrx_io_github_b_v2.6.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 03:56:12 UTC", "last_seen": "2026-03-24 03:56:12 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/orangeok77/chrysalis-ioc-triage/refs/heads/master/docs/triage-chrysalis-ioc-1.6.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 03:56:12 UTC", "last_seen": "2026-03-24 03:56:12 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Fayku57/EeveeSpotifyReborn/refs/heads/swift/.github/Spotify-Eevee-Reborn-3.6.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 03:56:12 UTC", "last_seen": "2026-03-24 03:56:12 UTC", "sightings": 1 }, { "indicator": "https://github.com/orangeok77/chrysalis-ioc-triage/raw/refs/heads/master/docs/triage-chrysalis-ioc-1.6.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 03:56:12 UTC", "last_seen": "2026-03-24 03:56:12 UTC", "sightings": 1 }, { "indicator": "https://github.com/IFearNoHost/exo/raw/refs/heads/main/src/middleware/Software-v3.0-beta.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 03:56:12 UTC", "last_seen": "2026-03-24 03:56:12 UTC", "sightings": 1 }, { "indicator": "https://github.com/sabinakhatun14588-ctrl/sabinakhatun14588-ctrl.github.io/raw/refs/heads/main/Aigialosaurus/github-sabinakhatun-ctrl-io-v3.0.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 03:56:12 UTC", "last_seen": "2026-03-24 03:56:12 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/sabinakhatun14588-ctrl/sabinakhatun14588-ctrl.github.io/refs/heads/main/Aigialosaurus/github-sabinakhatun-ctrl-io-v3.0.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 03:56:12 UTC", "last_seen": "2026-03-24 03:56:12 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/sabinakhatun14588-ctrl/moltbook-agent-guard/refs/heads/main/integrations/guard_moltbook_agent_1.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 03:56:12 UTC", "last_seen": "2026-03-24 03:56:12 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/nonamebatbai/Anti_Phishing_Email_Detector_gui/refs/heads/main/anti_phishing_email_detector/data/gui-Anti-Phishing-Email-Detector-v3.9.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 03:56:12 UTC", "last_seen": "2026-03-24 03:56:12 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/ShulpeXTechnology/CalcBookBackend/refs/heads/main/models/Calc_Backend_Book_3.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 03:56:12 UTC", "last_seen": "2026-03-24 03:56:12 UTC", "sightings": 1 }, { "indicator": "https://github.com/Fayku57/EeveeSpotifyReborn/raw/refs/heads/swift/.github/Spotify-Eevee-Reborn-3.6.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 03:56:12 UTC", "last_seen": "2026-03-24 03:56:12 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/lowwkezer/bunnytweak/refs/heads/main/.github/Software_v1.4-alpha.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 03:56:12 UTC", "last_seen": "2026-03-24 03:56:12 UTC", "sightings": 1 }, { "indicator": "http://123.11.14.211:38197/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 03:49:16 UTC", "last_seen": "2026-03-24 03:49:16 UTC", "sightings": 1 }, { "indicator": "http://117.209.84.58:39958/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 03:47:11 UTC", "last_seen": "2026-03-24 03:47:11 UTC", "sightings": 1 }, { "indicator": "http://59.88.238.116:37285/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-24 03:47:09 UTC", "last_seen": "2026-03-24 03:47:09 UTC", "sightings": 1 }, { "indicator": "http://110.39.233.197:55857/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-24 03:47:07 UTC", "last_seen": "2026-03-24 03:47:07 UTC", "sightings": 1 }, { "indicator": "http://42.239.151.4:51493/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 03:46:19 UTC", "last_seen": "2026-03-24 03:46:19 UTC", "sightings": 1 }, { "indicator": "http://42.239.151.4:51493/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 03:46:19 UTC", "last_seen": "2026-03-24 03:46:19 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/eldenisek/syro-Theme/refs/heads/main/images/syro_Theme_v3.7.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 03:44:12 UTC", "last_seen": "2026-03-24 03:44:12 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/nerfyjubay/Phitto-phishing/refs/heads/main/lib/src/Phitto-phishing-1.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 03:44:12 UTC", "last_seen": "2026-03-24 03:44:12 UTC", "sightings": 1 }, { "indicator": "https://github.com/KANKERTJE2/Anti-Shannon/raw/refs/heads/main/src/wukong/Anti_Shannon_v2.9.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 03:44:12 UTC", "last_seen": "2026-03-24 03:44:12 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/eldenisek/Anti-AFK/refs/heads/main/anticrisis/Anti-AFK-v1.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 03:44:12 UTC", "last_seen": "2026-03-24 03:44:12 UTC", "sightings": 1 }, { "indicator": "https://github.com/eldenisek/Anti-AFK/raw/refs/heads/main/anticrisis/Anti-AFK-v1.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 03:44:12 UTC", "last_seen": "2026-03-24 03:44:12 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/forgestudi0s/wagmiwars/refs/heads/main/backend/app/Software-2.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 03:44:12 UTC", "last_seen": "2026-03-24 03:44:12 UTC", "sightings": 1 }, { "indicator": "https://github.com/eldenisek/syro-Theme/raw/refs/heads/main/images/syro_Theme_v3.7.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 03:44:12 UTC", "last_seen": "2026-03-24 03:44:12 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/krypton2355/rust-linuxgsm-watchdog/refs/heads/main/indogen/rust-watchdog-linuxgsm-bahut.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 03:44:12 UTC", "last_seen": "2026-03-24 03:44:12 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/WileViking10/aws-security-scout/refs/heads/main/aws_scout/core/security_aws_scout_flightily.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 03:44:12 UTC", "last_seen": "2026-03-24 03:44:12 UTC", "sightings": 1 }, { "indicator": "https://github.com/57karakalkan/face-injector-v2-1/raw/refs/heads/main/face_injector_v2/v_face_injector_Bubastite.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 03:44:12 UTC", "last_seen": "2026-03-24 03:44:12 UTC", "sightings": 1 }, { "indicator": "https://github.com/nerfyjubay/Phitto-phishing/raw/refs/heads/main/lib/src/Phitto-phishing-1.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 03:44:12 UTC", "last_seen": "2026-03-24 03:44:12 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/saeeed123/1af-StarWars-TheOldRepublicff/refs/heads/main/residentially/af_Star_The_Wars_Old_Republicff_2.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 03:44:12 UTC", "last_seen": "2026-03-24 03:44:12 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/ShaggyT0701/prompt-shield/refs/heads/main/examples/prompt-shield-v1.3-alpha.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 03:44:12 UTC", "last_seen": "2026-03-24 03:44:12 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/57karakalkan/face-injector-v2-1/refs/heads/main/face_injector_v2/v_face_injector_Bubastite.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 03:44:12 UTC", "last_seen": "2026-03-24 03:44:12 UTC", "sightings": 1 }, { "indicator": "https://github.com/Zidane109/cloud-honeypot-auto-block/raw/refs/heads/main/infra/terraform/auto-cloud-honeypot-block-3.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 03:44:12 UTC", "last_seen": "2026-03-24 03:44:12 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Zidane109/cloud-honeypot-auto-block/refs/heads/main/infra/terraform/auto-cloud-honeypot-block-3.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 03:44:12 UTC", "last_seen": "2026-03-24 03:44:12 UTC", "sightings": 1 }, { "indicator": "https://github.com/ShaggyT0701/prompt-shield/raw/refs/heads/main/examples/prompt-shield-v1.3-alpha.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 03:44:12 UTC", "last_seen": "2026-03-24 03:44:12 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/forgestudi0s/clawshield/refs/heads/main/internal/hardener/Software-v2.5-beta.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 03:44:11 UTC", "last_seen": "2026-03-24 03:44:11 UTC", "sightings": 1 }, { "indicator": "https://github.com/saeeed123/1af-StarWars-TheOldRepublicff/raw/refs/heads/main/residentially/af_Star_The_Wars_Old_Republicff_2.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 03:44:11 UTC", "last_seen": "2026-03-24 03:44:11 UTC", "sightings": 1 }, { "indicator": "https://github.com/WileViking10/aws-security-scout/raw/refs/heads/main/aws_scout/core/security_aws_scout_flightily.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 03:44:11 UTC", "last_seen": "2026-03-24 03:44:11 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/KANKERTJE2/Anti-Shannon/refs/heads/main/src/wukong/Anti_Shannon_v2.9.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 03:44:11 UTC", "last_seen": "2026-03-24 03:44:11 UTC", "sightings": 1 }, { "indicator": "https://github.com/forgestudi0s/clawshield/raw/refs/heads/main/internal/hardener/Software-v2.5-beta.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 03:44:11 UTC", "last_seen": "2026-03-24 03:44:11 UTC", "sightings": 1 }, { "indicator": "https://github.com/krypton2355/rust-linuxgsm-watchdog/raw/refs/heads/main/indogen/rust-watchdog-linuxgsm-bahut.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 03:44:11 UTC", "last_seen": "2026-03-24 03:44:11 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/57karakalkan/MetaSafe-Guardian-/refs/heads/main/hydramnion/Meta_Guardian_Safe_v3.0.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 03:44:10 UTC", "last_seen": "2026-03-24 03:44:10 UTC", "sightings": 1 }, { "indicator": "https://github.com/57karakalkan/MetaSafe-Guardian-/raw/refs/heads/main/hydramnion/Meta_Guardian_Safe_v3.0.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 03:44:10 UTC", "last_seen": "2026-03-24 03:44:10 UTC", "sightings": 1 }, { "indicator": "https://github.com/forgestudi0s/wagmiwars/raw/refs/heads/main/backend/app/Software-2.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 03:44:09 UTC", "last_seen": "2026-03-24 03:44:09 UTC", "sightings": 1 }, { "indicator": "http://119.117.74.203:59055/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 03:43:16 UTC", "last_seen": "2026-03-24 03:43:16 UTC", "sightings": 1 }, { "indicator": "http://78.29.50.238:42106/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-24 03:42:06 UTC", "last_seen": "2026-03-24 03:42:06 UTC", "sightings": 1 }, { "indicator": "http://117.215.57.249:59488/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 03:38:15 UTC", "last_seen": "2026-03-24 03:38:15 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.168/files/6334661508/lzyfkOs.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "AsyncRAT", "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-24 03:34:07 UTC", "last_seen": "2026-03-24 03:34:07 UTC", "sightings": 1 }, { "indicator": "http://117.209.84.58:39958/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 03:30:18 UTC", "last_seen": "2026-03-24 03:30:18 UTC", "sightings": 1 }, { "indicator": "http://110.39.233.197:55857/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-24 03:22:06 UTC", "last_seen": "2026-03-24 03:22:06 UTC", "sightings": 1 }, { "indicator": "http://119.117.74.203:59055/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 03:20:18 UTC", "last_seen": "2026-03-24 03:20:18 UTC", "sightings": 1 }, { "indicator": "https://github.com/lukhanteanini21-glitch/Ushd/raw/refs/heads/main/citharist/Software-v3.9.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 03:18:10 UTC", "last_seen": "2026-03-24 03:18:10 UTC", "sightings": 1 }, { "indicator": "https://github.com/lukhanteanini21-glitch/code-audit/raw/refs/heads/main/references/frameworks/audit-code-v1.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 03:18:10 UTC", "last_seen": "2026-03-24 03:18:10 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/lukhanteanini21-glitch/Jeje/refs/heads/main/foreloper/Software_2.7.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 03:18:09 UTC", "last_seen": "2026-03-24 03:18:09 UTC", "sightings": 1 }, { "indicator": "https://github.com/1nashiw2/nioh3-trainer-2026/raw/refs/heads/main/src/trainer-nioh-v1.9.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 03:18:09 UTC", "last_seen": "2026-03-24 03:18:09 UTC", "sightings": 1 }, { "indicator": "https://github.com/lukhanteanini21-glitch/Script-/raw/refs/heads/main/platinize/Script-1.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 03:18:08 UTC", "last_seen": "2026-03-24 03:18:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/apgmightking/Security-Audit-Framework-Shell/refs/heads/main/AuditReports/Security_Audit_Shell_Framework_3.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 03:18:08 UTC", "last_seen": "2026-03-24 03:18:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/lukhanteanini21-glitch/Script-/refs/heads/main/platinize/Script-1.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 03:18:08 UTC", "last_seen": "2026-03-24 03:18:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/lukhanteanini21-glitch/Ushd/refs/heads/main/citharist/Software-v3.9.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 03:18:08 UTC", "last_seen": "2026-03-24 03:18:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/apgmightking/Security-Audit-Framework-Shell/raw/refs/heads/main/AuditReports/Security_Audit_Shell_Framework_3.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 03:18:08 UTC", "last_seen": "2026-03-24 03:18:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/lukhanteanini21-glitch/Lilx/refs/heads/main/sexannulate/Software_v2.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 03:18:08 UTC", "last_seen": "2026-03-24 03:18:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/lukhanteanini21-glitch/code-audit/refs/heads/main/references/frameworks/audit-code-v1.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 03:18:08 UTC", "last_seen": "2026-03-24 03:18:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/1nashiw2/nioh3-trainer-2026/refs/heads/main/src/trainer-nioh-v1.9.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 03:18:08 UTC", "last_seen": "2026-03-24 03:18:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/lukhanteanini21-glitch/Lilx/raw/refs/heads/main/sexannulate/Software_v2.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 03:18:08 UTC", "last_seen": "2026-03-24 03:18:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/lukhanteanini21-glitch/Jeje/raw/refs/heads/main/foreloper/Software_2.7.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 03:18:08 UTC", "last_seen": "2026-03-24 03:18:08 UTC", "sightings": 1 }, { "indicator": "http://42.87.182.166:35901/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-24 03:17:05 UTC", "last_seen": "2026-03-24 03:17:05 UTC", "sightings": 1 }, { "indicator": "https://github.com/hfuhuu/nvidiaCapture/raw/refs/heads/main/embind/nvidia_Capture_1.8-alpha.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 03:13:06 UTC", "last_seen": "2026-03-24 03:13:06 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/hfuhuu/nvidiaCapture/refs/heads/main/embind/nvidia_Capture_1.8-alpha.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-24 03:13:06 UTC", "last_seen": "2026-03-24 03:13:06 UTC", "sightings": 1 }, { "indicator": "http://117.215.57.249:59488/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 03:08:19 UTC", "last_seen": "2026-03-24 03:08:19 UTC", "sightings": 1 }, { "indicator": "http://175.146.153.178:36361/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 03:07:16 UTC", "last_seen": "2026-03-24 03:07:16 UTC", "sightings": 1 }, { "indicator": "http://182.121.13.0:57090/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 02:58:17 UTC", "last_seen": "2026-03-24 02:58:17 UTC", "sightings": 1 }, { "indicator": "http://219.155.24.248:47451/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 02:54:19 UTC", "last_seen": "2026-03-24 02:54:19 UTC", "sightings": 1 }, { "indicator": "http://117.208.165.146:42232/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-24 02:47:10 UTC", "last_seen": "2026-03-24 02:47:10 UTC", "sightings": 1 }, { "indicator": "http://42.87.182.166:35901/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-24 02:47:08 UTC", "last_seen": "2026-03-24 02:47:08 UTC", "sightings": 1 }, { "indicator": "http://105.224.75.40:57867/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-24 02:41:13 UTC", "last_seen": "2026-03-24 02:41:13 UTC", "sightings": 1 }, { "indicator": "http://219.155.24.248:47451/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 02:27:15 UTC", "last_seen": "2026-03-24 02:27:15 UTC", "sightings": 1 }, { "indicator": "http://110.39.231.61:43412/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-24 02:27:07 UTC", "last_seen": "2026-03-24 02:27:07 UTC", "sightings": 1 }, { "indicator": "https://cl2remote.chrysalisbuffer.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 02:26:06 UTC", "last_seen": "2026-03-24 02:26:06 UTC", "sightings": 1 }, { "indicator": "http://196.188.80.240:55375/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-24 02:23:05 UTC", "last_seen": "2026-03-24 02:23:05 UTC", "sightings": 1 }, { "indicator": "https://cl1store.chrysalisbuffer.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 02:22:06 UTC", "last_seen": "2026-03-24 02:22:06 UTC", "sightings": 1 }, { "indicator": "http://182.116.89.54:47420/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 02:16:12 UTC", "last_seen": "2026-03-24 02:16:12 UTC", "sightings": 1 }, { "indicator": "https://ext4sync.mandibulateflow.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 02:15:08 UTC", "last_seen": "2026-03-24 02:15:08 UTC", "sightings": 1 }, { "indicator": "https://ext3gate.mandibulateflow.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 02:10:07 UTC", "last_seen": "2026-03-24 02:10:07 UTC", "sightings": 1 }, { "indicator": "http://110.136.50.56:59812/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-24 02:04:13 UTC", "last_seen": "2026-03-24 02:04:13 UTC", "sightings": 1 }, { "indicator": "https://ext2proc.mandibulateflow.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 02:04:05 UTC", "last_seen": "2026-03-24 02:04:05 UTC", "sightings": 1 }, { "indicator": "http://115.51.146.128:34865/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-24 01:59:28 UTC", "last_seen": "2026-03-24 01:59:28 UTC", "sightings": 1 }, { "indicator": "https://ext1meta.mandibulateflow.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 01:58:07 UTC", "last_seen": "2026-03-24 01:58:07 UTC", "sightings": 1 }, { "indicator": "http://110.39.246.84:51730/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-24 01:57:06 UTC", "last_seen": "2026-03-24 01:57:06 UTC", "sightings": 1 }, { "indicator": "https://svc4static.formicidavortex.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 01:53:06 UTC", "last_seen": "2026-03-24 01:53:06 UTC", "sightings": 1 }, { "indicator": "https://svc3edge.formicidavortex.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 01:46:07 UTC", "last_seen": "2026-03-24 01:46:07 UTC", "sightings": 1 }, { "indicator": "http://178.141.132.131:51769/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 01:42:13 UTC", "last_seen": "2026-03-24 01:42:13 UTC", "sightings": 1 }, { "indicator": "https://svc2data.formicidavortex.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 01:42:06 UTC", "last_seen": "2026-03-24 01:42:06 UTC", "sightings": 1 }, { "indicator": "http://110.136.50.56:59812/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-24 01:40:18 UTC", "last_seen": "2026-03-24 01:40:18 UTC", "sightings": 1 }, { "indicator": "http://115.51.146.128:34865/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-24 01:40:15 UTC", "last_seen": "2026-03-24 01:40:15 UTC", "sightings": 1 }, { "indicator": "https://svc1sync.formicidavortex.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 01:35:08 UTC", "last_seen": "2026-03-24 01:35:08 UTC", "sightings": 1 }, { "indicator": "https://cl4static.inertialstreamhub.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 01:31:09 UTC", "last_seen": "2026-03-24 01:31:09 UTC", "sightings": 1 }, { "indicator": "http://115.55.58.114:44204/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 01:27:11 UTC", "last_seen": "2026-03-24 01:27:11 UTC", "sightings": 1 }, { "indicator": "http://125.41.81.141:47511/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-24 01:27:07 UTC", "last_seen": "2026-03-24 01:27:07 UTC", "sightings": 1 }, { "indicator": "https://cl3edge.inertialstreamhub.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 01:26:07 UTC", "last_seen": "2026-03-24 01:26:07 UTC", "sightings": 1 }, { "indicator": "http://110.39.230.2:39702/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 01:23:10 UTC", "last_seen": "2026-03-24 01:23:10 UTC", "sightings": 1 }, { "indicator": "http://115.55.56.11:55815/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 01:21:07 UTC", "last_seen": "2026-03-24 01:21:07 UTC", "sightings": 1 }, { "indicator": "https://cl2data.inertialstreamhub.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 01:20:09 UTC", "last_seen": "2026-03-24 01:20:09 UTC", "sightings": 1 }, { "indicator": "http://115.55.56.11:55815/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 01:19:13 UTC", "last_seen": "2026-03-24 01:19:13 UTC", "sightings": 1 }, { "indicator": "http://182.235.62.104:49242/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-24 01:17:06 UTC", "last_seen": "2026-03-24 01:17:06 UTC", "sightings": 1 }, { "indicator": "https://avk93cqg.ironhub.digital/?=check&&actmn=kQmNUYzNmHznuFCK", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-24 01:17:05 UTC", "last_seen": "2026-03-24 01:17:05 UTC", "sightings": 1 }, { "indicator": "http://182.126.115.234:40375/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 01:14:13 UTC", "last_seen": "2026-03-24 01:14:13 UTC", "sightings": 1 }, { "indicator": "https://cl1sync.inertialstreamhub.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 01:14:08 UTC", "last_seen": "2026-03-24 01:14:08 UTC", "sightings": 1 }, { "indicator": "http://115.55.58.114:44204/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 01:13:07 UTC", "last_seen": "2026-03-24 01:13:07 UTC", "sightings": 1 }, { "indicator": "https://ext4point.fractalrelaypoint.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 01:08:06 UTC", "last_seen": "2026-03-24 01:08:06 UTC", "sightings": 1 }, { "indicator": "http://110.39.232.190:42832/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 01:07:12 UTC", "last_seen": "2026-03-24 01:07:12 UTC", "sightings": 1 }, { "indicator": "http://182.235.62.104:49242/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-24 01:07:12 UTC", "last_seen": "2026-03-24 01:07:12 UTC", "sightings": 1 }, { "indicator": "https://ext3data.fractalrelaypoint.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 01:02:06 UTC", "last_seen": "2026-03-24 01:02:06 UTC", "sightings": 1 }, { "indicator": "http://125.41.81.141:47511/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-24 00:57:07 UTC", "last_seen": "2026-03-24 00:57:07 UTC", "sightings": 1 }, { "indicator": "https://ext2proxy.fractalrelaypoint.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 00:56:06 UTC", "last_seen": "2026-03-24 00:56:06 UTC", "sightings": 1 }, { "indicator": "http://110.39.230.2:39702/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 00:54:15 UTC", "last_seen": "2026-03-24 00:54:15 UTC", "sightings": 1 }, { "indicator": "https://ext1infra.fractalrelaypoint.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 00:51:11 UTC", "last_seen": "2026-03-24 00:51:11 UTC", "sightings": 1 }, { "indicator": "http://182.126.115.234:40375/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 00:50:18 UTC", "last_seen": "2026-03-24 00:50:18 UTC", "sightings": 1 }, { "indicator": "http://221.15.8.92:33925/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 00:49:06 UTC", "last_seen": "2026-03-24 00:49:06 UTC", "sightings": 1 }, { "indicator": "https://svc4sat.viscositydataloop.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 00:46:15 UTC", "last_seen": "2026-03-24 00:46:15 UTC", "sightings": 1 }, { "indicator": "http://59.180.166.194:33650/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 00:44:16 UTC", "last_seen": "2026-03-24 00:44:16 UTC", "sightings": 1 }, { "indicator": "http://219.155.26.235:57250/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 00:44:12 UTC", "last_seen": "2026-03-24 00:44:12 UTC", "sightings": 1 }, { "indicator": "https://svc3core.viscositydataloop.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 00:39:06 UTC", "last_seen": "2026-03-24 00:39:06 UTC", "sightings": 1 }, { "indicator": "http://110.39.232.190:42832/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 00:36:11 UTC", "last_seen": "2026-03-24 00:36:11 UTC", "sightings": 1 }, { "indicator": "https://svc2steel.viscositydataloop.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 00:34:08 UTC", "last_seen": "2026-03-24 00:34:08 UTC", "sightings": 1 }, { "indicator": "http://117.204.167.197:44711/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-24 00:32:09 UTC", "last_seen": "2026-03-24 00:32:09 UTC", "sightings": 1 }, { "indicator": "http://123.14.76.236:54948/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-24 00:32:06 UTC", "last_seen": "2026-03-24 00:32:06 UTC", "sightings": 1 }, { "indicator": "https://svc1proc.viscositydataloop.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 00:28:08 UTC", "last_seen": "2026-03-24 00:28:08 UTC", "sightings": 1 }, { "indicator": "http://117.206.67.92:45245/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 00:27:12 UTC", "last_seen": "2026-03-24 00:27:12 UTC", "sightings": 1 }, { "indicator": "https://dev4space.atomiclogichub.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 00:23:06 UTC", "last_seen": "2026-03-24 00:23:06 UTC", "sightings": 1 }, { "indicator": "https://dev3field.atomiclogichub.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 00:17:11 UTC", "last_seen": "2026-03-24 00:17:11 UTC", "sightings": 1 }, { "indicator": "http://221.15.8.92:33925/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 00:17:07 UTC", "last_seen": "2026-03-24 00:17:07 UTC", "sightings": 1 }, { "indicator": "http://124.6.169.46:57035/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-24 00:12:07 UTC", "last_seen": "2026-03-24 00:12:07 UTC", "sightings": 1 }, { "indicator": "https://dev2outer.atomiclogichub.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 00:12:06 UTC", "last_seen": "2026-03-24 00:12:06 UTC", "sightings": 1 }, { "indicator": "http://116.140.9.139:54180/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-24 00:09:11 UTC", "last_seen": "2026-03-24 00:09:11 UTC", "sightings": 1 }, { "indicator": "https://dev1proc.atomiclogichub.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 00:06:08 UTC", "last_seen": "2026-03-24 00:06:08 UTC", "sightings": 1 }, { "indicator": "http://110.186.229.129:57656/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-24 00:05:16 UTC", "last_seen": "2026-03-24 00:05:16 UTC", "sightings": 1 }, { "indicator": "http://113.237.228.50:54154/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-24 00:02:07 UTC", "last_seen": "2026-03-24 00:02:07 UTC", "sightings": 1 }, { "indicator": "https://cl4path.kineticmatrixduct.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-24 00:00:14 UTC", "last_seen": "2026-03-24 00:00:14 UTC", "sightings": 1 }, { "indicator": "https://cl3view.kineticmatrixduct.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-23 23:55:08 UTC", "last_seen": "2026-03-23 23:55:08 UTC", "sightings": 1 }, { "indicator": "http://42.225.200.140:53601/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 23:54:18 UTC", "last_seen": "2026-03-23 23:54:18 UTC", "sightings": 1 }, { "indicator": "https://cl2point.kineticmatrixduct.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-23 23:50:07 UTC", "last_seen": "2026-03-23 23:50:07 UTC", "sightings": 1 }, { "indicator": "https://cl1proc.kineticmatrixduct.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-23 23:44:08 UTC", "last_seen": "2026-03-23 23:44:08 UTC", "sightings": 1 }, { "indicator": "https://ext4view.nebularpointtrace.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-23 23:38:06 UTC", "last_seen": "2026-03-23 23:38:06 UTC", "sightings": 1 }, { "indicator": "http://110.186.229.129:57656/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-23 23:35:15 UTC", "last_seen": "2026-03-23 23:35:15 UTC", "sightings": 1 }, { "indicator": "http://110.39.235.163:58845/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 23:35:14 UTC", "last_seen": "2026-03-23 23:35:14 UTC", "sightings": 1 }, { "indicator": "https://ext3ghost.nebularpointtrace.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-23 23:32:07 UTC", "last_seen": "2026-03-23 23:32:07 UTC", "sightings": 1 }, { "indicator": "http://59.90.191.141:57619/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-23 23:27:07 UTC", "last_seen": "2026-03-23 23:27:07 UTC", "sightings": 1 }, { "indicator": "http://196.189.96.59:32864/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-23 23:26:08 UTC", "last_seen": "2026-03-23 23:26:08 UTC", "sightings": 1 }, { "indicator": "http://219.155.26.235:57250/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 23:26:08 UTC", "last_seen": "2026-03-23 23:26:08 UTC", "sightings": 1 }, { "indicator": "https://ext1proc.nebularpointtrace.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-23 23:22:07 UTC", "last_seen": "2026-03-23 23:22:07 UTC", "sightings": 1 }, { "indicator": "https://svc4link.coherentmetricunit.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-23 23:16:06 UTC", "last_seen": "2026-03-23 23:16:06 UTC", "sightings": 1 }, { "indicator": "http://61.1.29.85:42246/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "mirai" ], "first_seen": "2026-03-23 23:13:16 UTC", "last_seen": "2026-03-23 23:13:16 UTC", "sightings": 1 }, { "indicator": "http://60.211.89.23:38686/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 23:13:15 UTC", "last_seen": "2026-03-23 23:13:15 UTC", "sightings": 1 }, { "indicator": "http://110.39.235.163:58845/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 23:11:17 UTC", "last_seen": "2026-03-23 23:11:17 UTC", "sightings": 1 }, { "indicator": "https://svc3user.coherentmetricunit.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-23 23:10:08 UTC", "last_seen": "2026-03-23 23:10:08 UTC", "sightings": 1 }, { "indicator": "https://svc2base.coherentmetricunit.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-23 23:05:08 UTC", "last_seen": "2026-03-23 23:05:08 UTC", "sightings": 1 }, { "indicator": "https://svc1infra.coherentmetricunit.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-23 22:59:08 UTC", "last_seen": "2026-03-23 22:59:08 UTC", "sightings": 1 }, { "indicator": "http://59.90.191.141:57619/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-23 22:57:08 UTC", "last_seen": "2026-03-23 22:57:08 UTC", "sightings": 1 }, { "indicator": "https://dev4work.tensorvortexlink.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-23 22:55:08 UTC", "last_seen": "2026-03-23 22:55:08 UTC", "sightings": 1 }, { "indicator": "http://42.229.218.119:49085/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-23 22:52:07 UTC", "last_seen": "2026-03-23 22:52:07 UTC", "sightings": 1 }, { "indicator": "http://105.186.202.128:44599/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-23 22:47:17 UTC", "last_seen": "2026-03-23 22:47:17 UTC", "sightings": 1 }, { "indicator": "https://dev3local.tensorvortexlink.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-23 22:47:07 UTC", "last_seen": "2026-03-23 22:47:07 UTC", "sightings": 1 }, { "indicator": "http://61.1.221.39:53070/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 22:46:16 UTC", "last_seen": "2026-03-23 22:46:16 UTC", "sightings": 1 }, { "indicator": "http://61.1.29.85:42246/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "mirai" ], "first_seen": "2026-03-23 22:45:18 UTC", "last_seen": "2026-03-23 22:45:18 UTC", "sightings": 1 }, { "indicator": "https://dev2power.tensorvortexlink.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-23 22:42:07 UTC", "last_seen": "2026-03-23 22:42:07 UTC", "sightings": 1 }, { "indicator": "https://dev1proc.tensorvortexlink.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-23 22:37:08 UTC", "last_seen": "2026-03-23 22:37:08 UTC", "sightings": 1 }, { "indicator": "http://60.211.89.23:38686/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 22:35:20 UTC", "last_seen": "2026-03-23 22:35:20 UTC", "sightings": 1 }, { "indicator": "http://115.50.43.34:52171/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 22:33:18 UTC", "last_seen": "2026-03-23 22:33:18 UTC", "sightings": 1 }, { "indicator": "https://cl4link.entropicbuffergate.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-23 22:30:08 UTC", "last_seen": "2026-03-23 22:30:08 UTC", "sightings": 1 }, { "indicator": "http://117.207.118.36:41000/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 22:28:09 UTC", "last_seen": "2026-03-23 22:28:09 UTC", "sightings": 1 }, { "indicator": "http://42.229.218.119:49085/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-23 22:27:06 UTC", "last_seen": "2026-03-23 22:27:06 UTC", "sightings": 1 }, { "indicator": "http://61.1.221.39:53070/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 22:25:22 UTC", "last_seen": "2026-03-23 22:25:22 UTC", "sightings": 1 }, { "indicator": "https://cl3dev.entropicbuffergate.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-23 22:25:07 UTC", "last_seen": "2026-03-23 22:25:07 UTC", "sightings": 1 }, { "indicator": "http://115.49.241.61:36650/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 22:24:09 UTC", "last_seen": "2026-03-23 22:24:09 UTC", "sightings": 1 }, { "indicator": "http://105.186.202.128:44599/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-23 22:23:07 UTC", "last_seen": "2026-03-23 22:23:07 UTC", "sightings": 1 }, { "indicator": "https://cl2remote.entropicbuffergate.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-23 22:19:06 UTC", "last_seen": "2026-03-23 22:19:06 UTC", "sightings": 1 }, { "indicator": "https://cl1store.entropicbuffergate.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-23 22:13:07 UTC", "last_seen": "2026-03-23 22:13:07 UTC", "sightings": 1 }, { "indicator": "https://ext4sync.isotopeflowbridge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-23 22:08:09 UTC", "last_seen": "2026-03-23 22:08:09 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.168/files/7782139129/ADgr3iT.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey", "WallStealer" ], "first_seen": "2026-03-23 22:05:09 UTC", "last_seen": "2026-03-23 22:05:09 UTC", "sightings": 1 }, { "indicator": "https://ext3gate.isotopeflowbridge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-23 22:03:08 UTC", "last_seen": "2026-03-23 22:03:08 UTC", "sightings": 1 }, { "indicator": "http://123.14.33.100:41187/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 21:59:09 UTC", "last_seen": "2026-03-23 21:59:09 UTC", "sightings": 1 }, { "indicator": "http://221.15.186.110:34744/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-23 21:57:07 UTC", "last_seen": "2026-03-23 21:57:07 UTC", "sightings": 1 }, { "indicator": "https://ext2proc.isotopeflowbridge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-23 21:57:07 UTC", "last_seen": "2026-03-23 21:57:07 UTC", "sightings": 1 }, { "indicator": "http://220.164.229.253:51949/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-23 21:57:07 UTC", "last_seen": "2026-03-23 21:57:07 UTC", "sightings": 1 }, { "indicator": "http://117.207.118.36:41000/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 21:56:19 UTC", "last_seen": "2026-03-23 21:56:19 UTC", "sightings": 1 }, { "indicator": "http://125.44.51.33:51040/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 21:55:22 UTC", "last_seen": "2026-03-23 21:55:22 UTC", "sightings": 1 }, { "indicator": "http://115.50.43.34:52171/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 21:52:29 UTC", "last_seen": "2026-03-23 21:52:29 UTC", "sightings": 1 }, { "indicator": "https://ext1meta.isotopeflowbridge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-23 21:52:08 UTC", "last_seen": "2026-03-23 21:52:08 UTC", "sightings": 1 }, { "indicator": "http://112.198.140.250:56648/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-23 21:48:14 UTC", "last_seen": "2026-03-23 21:48:14 UTC", "sightings": 1 }, { "indicator": "http://117.209.89.209:42079/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 21:46:23 UTC", "last_seen": "2026-03-23 21:46:23 UTC", "sightings": 1 }, { "indicator": "https://svc4static.primordialfluxnode.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-23 21:45:10 UTC", "last_seen": "2026-03-23 21:45:10 UTC", "sightings": 1 }, { "indicator": "https://svc3edge.primordialfluxnode.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-23 21:41:06 UTC", "last_seen": "2026-03-23 21:41:06 UTC", "sightings": 1 }, { "indicator": "http://123.14.33.100:41187/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 21:37:11 UTC", "last_seen": "2026-03-23 21:37:11 UTC", "sightings": 1 }, { "indicator": "https://svc2data.primordialfluxnode.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-23 21:36:12 UTC", "last_seen": "2026-03-23 21:36:12 UTC", "sightings": 1 }, { "indicator": "http://221.15.186.110:34744/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-23 21:32:12 UTC", "last_seen": "2026-03-23 21:32:12 UTC", "sightings": 1 }, { "indicator": "http://125.44.51.33:51040/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 21:30:24 UTC", "last_seen": "2026-03-23 21:30:24 UTC", "sightings": 1 }, { "indicator": "http://115.49.87.133:44859/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 21:30:23 UTC", "last_seen": "2026-03-23 21:30:23 UTC", "sightings": 1 }, { "indicator": "https://ext4point.modularpathfinder.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-23 21:24:08 UTC", "last_seen": "2026-03-23 21:24:08 UTC", "sightings": 1 }, { "indicator": "http://220.164.229.253:51949/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-23 21:22:24 UTC", "last_seen": "2026-03-23 21:22:24 UTC", "sightings": 1 }, { "indicator": "http://59.92.89.58:34103/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 21:22:22 UTC", "last_seen": "2026-03-23 21:22:22 UTC", "sightings": 1 }, { "indicator": "http://115.53.200.190:41244/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 21:22:21 UTC", "last_seen": "2026-03-23 21:22:21 UTC", "sightings": 1 }, { "indicator": "http://117.209.89.209:42079/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 21:19:29 UTC", "last_seen": "2026-03-23 21:19:29 UTC", "sightings": 1 }, { "indicator": "https://ext3data.modularpathfinder.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-23 21:14:07 UTC", "last_seen": "2026-03-23 21:14:07 UTC", "sightings": 1 }, { "indicator": "https://ext2proxy.modularpathfinder.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-23 21:08:07 UTC", "last_seen": "2026-03-23 21:08:07 UTC", "sightings": 1 }, { "indicator": "http://180.120.0.93:44129/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-23 21:07:08 UTC", "last_seen": "2026-03-23 21:07:08 UTC", "sightings": 1 }, { "indicator": "http://182.113.198.68:50065/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 21:05:23 UTC", "last_seen": "2026-03-23 21:05:23 UTC", "sightings": 1 }, { "indicator": "https://ext1infra.modularpathfinder.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-23 21:03:05 UTC", "last_seen": "2026-03-23 21:03:05 UTC", "sightings": 1 }, { "indicator": "http://115.53.200.190:41244/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 20:59:18 UTC", "last_seen": "2026-03-23 20:59:18 UTC", "sightings": 1 }, { "indicator": "http://117.209.83.83:53129/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 20:59:17 UTC", "last_seen": "2026-03-23 20:59:17 UTC", "sightings": 1 }, { "indicator": "https://svc4sat.activestaticsync.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-23 20:57:06 UTC", "last_seen": "2026-03-23 20:57:06 UTC", "sightings": 1 }, { "indicator": "https://svc3core.activestaticsync.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-23 20:51:06 UTC", "last_seen": "2026-03-23 20:51:06 UTC", "sightings": 1 }, { "indicator": "https://svc2steel.activestaticsync.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-23 20:49:07 UTC", "last_seen": "2026-03-23 20:49:07 UTC", "sightings": 1 }, { "indicator": "http://182.113.198.68:50065/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 20:45:28 UTC", "last_seen": "2026-03-23 20:45:28 UTC", "sightings": 1 }, { "indicator": "https://svc1proc.activestaticsync.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-23 20:45:09 UTC", "last_seen": "2026-03-23 20:45:09 UTC", "sightings": 1 }, { "indicator": "http://27.217.33.239:35619/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 20:36:13 UTC", "last_seen": "2026-03-23 20:36:13 UTC", "sightings": 1 }, { "indicator": "http://175.148.158.32:60996/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 20:32:11 UTC", "last_seen": "2026-03-23 20:32:11 UTC", "sightings": 1 }, { "indicator": "https://dev3field.linearprocessnode.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-23 20:29:07 UTC", "last_seen": "2026-03-23 20:29:07 UTC", "sightings": 1 }, { "indicator": "http://120.28.81.136:47825/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-23 20:27:06 UTC", "last_seen": "2026-03-23 20:27:06 UTC", "sightings": 1 }, { "indicator": "http://196.189.98.77:36772/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-23 20:25:17 UTC", "last_seen": "2026-03-23 20:25:17 UTC", "sightings": 1 }, { "indicator": "http://91.92.241.94/mpsl", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mips", "mirai", "ua-wget" ], "first_seen": "2026-03-23 20:24:21 UTC", "last_seen": "2026-03-23 20:24:21 UTC", "sightings": 1 }, { "indicator": "http://91.92.241.94/arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "arm", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-23 20:24:21 UTC", "last_seen": "2026-03-23 20:24:21 UTC", "sightings": 1 }, { "indicator": "http://91.92.241.94/arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "arm", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-23 20:24:20 UTC", "last_seen": "2026-03-23 20:24:20 UTC", "sightings": 1 }, { "indicator": "http://91.92.241.94/massload", "indicator_type": "url", "source": "URLhaus", "tags": [ "gafgyt", "sh", "ua-wget" ], "first_seen": "2026-03-23 20:24:20 UTC", "last_seen": "2026-03-23 20:24:20 UTC", "sightings": 1 }, { "indicator": "http://91.92.241.94/mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "gafgyt", "mips", "mirai", "ua-wget" ], "first_seen": "2026-03-23 20:24:20 UTC", "last_seen": "2026-03-23 20:24:20 UTC", "sightings": 1 }, { "indicator": "http://91.92.241.94/arm4", "indicator_type": "url", "source": "URLhaus", "tags": [ "arm", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-23 20:24:16 UTC", "last_seen": "2026-03-23 20:24:16 UTC", "sightings": 1 }, { "indicator": "https://dev2outer.linearprocessnode.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-23 20:24:08 UTC", "last_seen": "2026-03-23 20:24:08 UTC", "sightings": 1 }, { "indicator": "http://110.37.91.29:53637/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 20:22:14 UTC", "last_seen": "2026-03-23 20:22:14 UTC", "sightings": 1 }, { "indicator": "http://124.6.169.46:57035/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-23 20:21:17 UTC", "last_seen": "2026-03-23 20:21:17 UTC", "sightings": 1 }, { "indicator": "http://58.255.42.57:36801/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 20:18:26 UTC", "last_seen": "2026-03-23 20:18:26 UTC", "sightings": 1 }, { "indicator": "https://dev1proc.linearprocessnode.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-23 20:18:12 UTC", "last_seen": "2026-03-23 20:18:12 UTC", "sightings": 1 }, { "indicator": "http://116.139.26.230:49878/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 20:17:05 UTC", "last_seen": "2026-03-23 20:17:05 UTC", "sightings": 1 }, { "indicator": "https://cl4path.synchrometrixbox.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-23 20:12:06 UTC", "last_seen": "2026-03-23 20:12:06 UTC", "sightings": 1 }, { "indicator": "http://116.139.26.230:49878/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 20:12:06 UTC", "last_seen": "2026-03-23 20:12:06 UTC", "sightings": 1 }, { "indicator": "http://27.217.33.239:35619/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 20:06:16 UTC", "last_seen": "2026-03-23 20:06:16 UTC", "sightings": 1 }, { "indicator": "https://cl3view.synchrometrixbox.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-23 20:06:07 UTC", "last_seen": "2026-03-23 20:06:07 UTC", "sightings": 1 }, { "indicator": "https://cl2point.synchrometrixbox.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-23 20:01:06 UTC", "last_seen": "2026-03-23 20:01:06 UTC", "sightings": 1 }, { "indicator": "http://110.37.95.117:47155/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 20:00:21 UTC", "last_seen": "2026-03-23 20:00:21 UTC", "sightings": 1 }, { "indicator": "https://cl1proc.synchrometrixbox.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-23 19:55:08 UTC", "last_seen": "2026-03-23 19:55:08 UTC", "sightings": 1 }, { "indicator": "http://196.189.98.77:36772/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-23 19:53:18 UTC", "last_seen": "2026-03-23 19:53:18 UTC", "sightings": 1 }, { "indicator": "https://ext4view.vectordiffusion.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-23 19:49:07 UTC", "last_seen": "2026-03-23 19:49:07 UTC", "sightings": 1 }, { "indicator": "http://110.37.61.44:33462/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-23 19:48:17 UTC", "last_seen": "2026-03-23 19:48:17 UTC", "sightings": 1 }, { "indicator": "http://61.3.143.239:35294/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 19:48:13 UTC", "last_seen": "2026-03-23 19:48:13 UTC", "sightings": 1 }, { "indicator": "https://ext3ghost.vectordiffusion.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-23 19:45:07 UTC", "last_seen": "2026-03-23 19:45:07 UTC", "sightings": 1 }, { "indicator": "http://110.38.209.50:56512/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 19:42:07 UTC", "last_seen": "2026-03-23 19:42:07 UTC", "sightings": 1 }, { "indicator": "http://219.154.191.118:57257/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 19:38:15 UTC", "last_seen": "2026-03-23 19:38:15 UTC", "sightings": 1 }, { "indicator": "https://ext2core.vectordiffusion.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-23 19:38:08 UTC", "last_seen": "2026-03-23 19:38:08 UTC", "sightings": 1 }, { "indicator": "http://180.253.226.11:52798/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-23 19:37:06 UTC", "last_seen": "2026-03-23 19:37:06 UTC", "sightings": 1 }, { "indicator": "http://59.97.255.136:47923/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 19:35:07 UTC", "last_seen": "2026-03-23 19:35:07 UTC", "sightings": 1 }, { "indicator": "https://ext1proc.vectordiffusion.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-23 19:34:08 UTC", "last_seen": "2026-03-23 19:34:08 UTC", "sightings": 1 }, { "indicator": "http://110.37.95.117:47155/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 19:31:18 UTC", "last_seen": "2026-03-23 19:31:18 UTC", "sightings": 1 }, { "indicator": "http://115.48.146.54:59878/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-23 19:31:07 UTC", "last_seen": "2026-03-23 19:31:07 UTC", "sightings": 1 }, { "indicator": "http://42.224.87.106:51169/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-23 19:31:06 UTC", "last_seen": "2026-03-23 19:31:06 UTC", "sightings": 1 }, { "indicator": "https://svc4link.dynamicshubpoint.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-23 19:28:06 UTC", "last_seen": "2026-03-23 19:28:06 UTC", "sightings": 1 }, { "indicator": "http://61.54.253.47:56235/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 19:24:16 UTC", "last_seen": "2026-03-23 19:24:16 UTC", "sightings": 1 }, { "indicator": "https://svc3user.dynamicshubpoint.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-23 19:23:08 UTC", "last_seen": "2026-03-23 19:23:08 UTC", "sightings": 1 }, { "indicator": "https://svc2base.dynamicshubpoint.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-23 19:17:07 UTC", "last_seen": "2026-03-23 19:17:07 UTC", "sightings": 1 }, { "indicator": "http://110.37.61.44:33462/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-23 19:16:17 UTC", "last_seen": "2026-03-23 19:16:17 UTC", "sightings": 1 }, { "indicator": "http://87.121.84.57/nuts/poop", "indicator_type": "url", "source": "URLhaus", "tags": [ "CoinMiner", "elf", "ua-wget", "x86" ], "first_seen": "2026-03-23 19:12:16 UTC", "last_seen": "2026-03-23 19:12:16 UTC", "sightings": 1 }, { "indicator": "http://103.172.186.140:37298/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-23 19:12:07 UTC", "last_seen": "2026-03-23 19:12:07 UTC", "sightings": 1 }, { "indicator": "http://103.172.186.140:37298/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-23 19:12:07 UTC", "last_seen": "2026-03-23 19:12:07 UTC", "sightings": 1 }, { "indicator": "http://180.253.226.11:52798/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-23 19:12:07 UTC", "last_seen": "2026-03-23 19:12:07 UTC", "sightings": 1 }, { "indicator": "http://219.154.191.118:57257/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 19:11:11 UTC", "last_seen": "2026-03-23 19:11:11 UTC", "sightings": 1 }, { "indicator": "https://svc1infra.dynamicshubpoint.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-23 19:10:08 UTC", "last_seen": "2026-03-23 19:10:08 UTC", "sightings": 1 }, { "indicator": "http://110.38.209.50:56512/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 19:07:07 UTC", "last_seen": "2026-03-23 19:07:07 UTC", "sightings": 1 }, { "indicator": "http://59.97.255.136:47923/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 19:06:18 UTC", "last_seen": "2026-03-23 19:06:18 UTC", "sightings": 1 }, { "indicator": "https://dev4work.thermalpulserelay.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-23 19:05:09 UTC", "last_seen": "2026-03-23 19:05:09 UTC", "sightings": 1 }, { "indicator": "http://31.56.229.221/nuts/poop", "indicator_type": "url", "source": "URLhaus", "tags": [ "CoinMiner", "elf", "ua-wget", "x86" ], "first_seen": "2026-03-23 19:02:27 UTC", "last_seen": "2026-03-23 19:02:27 UTC", "sightings": 1 }, { "indicator": "http://117.223.141.65:54959/Mozi.m", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mips", "Mozi", "ua-wget" ], "first_seen": "2026-03-23 18:59:13 UTC", "last_seen": "2026-03-23 18:59:13 UTC", "sightings": 1 }, { "indicator": "https://dev3local.thermalpulserelay.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-23 18:59:10 UTC", "last_seen": "2026-03-23 18:59:10 UTC", "sightings": 1 }, { "indicator": "http://61.54.253.47:56235/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 18:54:15 UTC", "last_seen": "2026-03-23 18:54:15 UTC", "sightings": 1 }, { "indicator": "http://218.60.176.173:51705/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 18:53:31 UTC", "last_seen": "2026-03-23 18:53:31 UTC", "sightings": 1 }, { "indicator": "https://dev2power.thermalpulserelay.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-23 18:53:05 UTC", "last_seen": "2026-03-23 18:53:05 UTC", "sightings": 1 }, { "indicator": "https://dev1proc.thermalpulserelay.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-23 18:48:06 UTC", "last_seen": "2026-03-23 18:48:06 UTC", "sightings": 1 }, { "indicator": "http://125.43.225.56:55753/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-23 18:47:08 UTC", "last_seen": "2026-03-23 18:47:08 UTC", "sightings": 1 }, { "indicator": "http://112.227.152.253:37073/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-23 18:43:17 UTC", "last_seen": "2026-03-23 18:43:17 UTC", "sightings": 1 }, { "indicator": "https://cl4link.industrialmetric.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-23 18:43:08 UTC", "last_seen": "2026-03-23 18:43:08 UTC", "sightings": 1 }, { "indicator": "https://cl3dev.industrialmetric.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-23 18:37:07 UTC", "last_seen": "2026-03-23 18:37:07 UTC", "sightings": 1 }, { "indicator": "http://2.249.142.165:48263/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 18:37:06 UTC", "last_seen": "2026-03-23 18:37:06 UTC", "sightings": 1 }, { "indicator": "https://cl2remote.industrialmetric.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-23 18:32:06 UTC", "last_seen": "2026-03-23 18:32:06 UTC", "sightings": 1 }, { "indicator": "https://cl1store.industrialmetric.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-23 18:26:06 UTC", "last_seen": "2026-03-23 18:26:06 UTC", "sightings": 1 }, { "indicator": "https://ext4sync.wavefrontgateway.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-23 18:21:07 UTC", "last_seen": "2026-03-23 18:21:07 UTC", "sightings": 1 }, { "indicator": "http://112.227.152.253:37073/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-23 18:19:40 UTC", "last_seen": "2026-03-23 18:19:40 UTC", "sightings": 1 }, { "indicator": "http://59.88.251.148:60027/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 18:18:09 UTC", "last_seen": "2026-03-23 18:18:09 UTC", "sightings": 1 }, { "indicator": "http://110.37.39.234:40958/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-23 18:15:16 UTC", "last_seen": "2026-03-23 18:15:16 UTC", "sightings": 1 }, { "indicator": "https://ext3gate.wavefrontgateway.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-23 18:14:07 UTC", "last_seen": "2026-03-23 18:14:07 UTC", "sightings": 1 }, { "indicator": "http://182.113.206.110:46354/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 18:09:16 UTC", "last_seen": "2026-03-23 18:09:16 UTC", "sightings": 1 }, { "indicator": "https://ext2proc.wavefrontgateway.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-23 18:08:06 UTC", "last_seen": "2026-03-23 18:08:06 UTC", "sightings": 1 }, { "indicator": "http://122.157.69.181:33377/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-23 18:07:20 UTC", "last_seen": "2026-03-23 18:07:20 UTC", "sightings": 1 }, { "indicator": "https://ext1meta.wavefrontgateway.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-23 18:04:06 UTC", "last_seen": "2026-03-23 18:04:06 UTC", "sightings": 1 }, { "indicator": "https://svc4static.kinematicflowunit.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-23 17:58:06 UTC", "last_seen": "2026-03-23 17:58:06 UTC", "sightings": 1 }, { "indicator": "https://svc3edge.kinematicflowunit.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-23 17:53:06 UTC", "last_seen": "2026-03-23 17:53:06 UTC", "sightings": 1 }, { "indicator": "http://110.38.210.180:58595/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 17:48:06 UTC", "last_seen": "2026-03-23 17:48:06 UTC", "sightings": 1 }, { "indicator": "https://svc2data.kinematicflowunit.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-23 17:47:07 UTC", "last_seen": "2026-03-23 17:47:07 UTC", "sightings": 1 }, { "indicator": "http://122.157.69.181:33377/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-23 17:41:19 UTC", "last_seen": "2026-03-23 17:41:19 UTC", "sightings": 1 }, { "indicator": "https://svc1sync.kinematicflowunit.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-23 17:40:10 UTC", "last_seen": "2026-03-23 17:40:10 UTC", "sightings": 1 }, { "indicator": "http://110.36.80.163:50071/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 17:39:16 UTC", "last_seen": "2026-03-23 17:39:16 UTC", "sightings": 1 }, { "indicator": "https://pvjm75x.silver-dock.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-23 17:35:11 UTC", "last_seen": "2026-03-23 17:35:11 UTC", "sightings": 1 }, { "indicator": "http://182.117.123.178:37542/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 17:34:17 UTC", "last_seen": "2026-03-23 17:34:17 UTC", "sightings": 1 }, { "indicator": "http://60.211.82.17:50618/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 17:31:19 UTC", "last_seen": "2026-03-23 17:31:19 UTC", "sightings": 1 }, { "indicator": "https://trail-vector.silver-dock.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-23 17:29:07 UTC", "last_seen": "2026-03-23 17:29:07 UTC", "sightings": 1 }, { "indicator": "http://222.127.68.176:50801/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-23 17:28:10 UTC", "last_seen": "2026-03-23 17:28:10 UTC", "sightings": 1 }, { "indicator": "http://182.121.117.51:36192/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 17:27:12 UTC", "last_seen": "2026-03-23 17:27:12 UTC", "sightings": 1 }, { "indicator": "http://110.38.210.180:58595/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 17:24:18 UTC", "last_seen": "2026-03-23 17:24:18 UTC", "sightings": 1 }, { "indicator": "https://organizegat.silver-dock.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-23 17:24:13 UTC", "last_seen": "2026-03-23 17:24:13 UTC", "sightings": 1 }, { "indicator": "http://110.39.255.247:33164/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-23 17:22:07 UTC", "last_seen": "2026-03-23 17:22:07 UTC", "sightings": 1 }, { "indicator": "http://117.209.84.104:43367/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 17:21:18 UTC", "last_seen": "2026-03-23 17:21:18 UTC", "sightings": 1 }, { "indicator": "https://ixtl.silver-dock.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-23 17:18:07 UTC", "last_seen": "2026-03-23 17:18:07 UTC", "sightings": 1 }, { "indicator": "http://27.37.62.174:38495/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 17:15:14 UTC", "last_seen": "2026-03-23 17:15:14 UTC", "sightings": 1 }, { "indicator": "http://110.36.80.163:50071/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 17:15:13 UTC", "last_seen": "2026-03-23 17:15:13 UTC", "sightings": 1 }, { "indicator": "https://v4lle-route.silver-dock.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-23 17:13:08 UTC", "last_seen": "2026-03-23 17:13:08 UTC", "sightings": 1 }, { "indicator": "http://182.117.123.178:37542/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 17:11:07 UTC", "last_seen": "2026-03-23 17:11:07 UTC", "sightings": 1 }, { "indicator": "https://kelnexa.cr4ftlane.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-23 17:08:07 UTC", "last_seen": "2026-03-23 17:08:07 UTC", "sightings": 1 }, { "indicator": "http://218.60.253.28:34193/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 17:07:16 UTC", "last_seen": "2026-03-23 17:07:16 UTC", "sightings": 1 }, { "indicator": "http://92.38.51.65:46197/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-23 17:02:08 UTC", "last_seen": "2026-03-23 17:02:08 UTC", "sightings": 1 }, { "indicator": "https://lumspire8os.cr4ftlane.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-23 17:01:06 UTC", "last_seen": "2026-03-23 17:01:06 UTC", "sightings": 1 }, { "indicator": "http://117.209.84.104:43367/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 16:58:16 UTC", "last_seen": "2026-03-23 16:58:16 UTC", "sightings": 1 }, { "indicator": "http://218.60.253.28:34193/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 16:57:09 UTC", "last_seen": "2026-03-23 16:57:09 UTC", "sightings": 1 }, { "indicator": "http://176.226.129.38:54033/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 16:57:06 UTC", "last_seen": "2026-03-23 16:57:06 UTC", "sightings": 1 }, { "indicator": "https://fernprim.cr4ftlane.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-23 16:55:08 UTC", "last_seen": "2026-03-23 16:55:08 UTC", "sightings": 1 }, { "indicator": "http://110.39.255.247:33164/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-23 16:52:07 UTC", "last_seen": "2026-03-23 16:52:07 UTC", "sightings": 1 }, { "indicator": "http://222.138.180.144:60167/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 16:52:06 UTC", "last_seen": "2026-03-23 16:52:06 UTC", "sightings": 1 }, { "indicator": "http://123.134.56.95:37917/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 16:51:10 UTC", "last_seen": "2026-03-23 16:51:10 UTC", "sightings": 1 }, { "indicator": "https://tensorparticle.cr4ftlane.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-23 16:50:08 UTC", "last_seen": "2026-03-23 16:50:08 UTC", "sightings": 1 }, { "indicator": "http://115.59.68.209:50623/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 16:48:20 UTC", "last_seen": "2026-03-23 16:48:20 UTC", "sightings": 1 }, { "indicator": "https://voicetrusted.cr4ftlane.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-23 16:44:10 UTC", "last_seen": "2026-03-23 16:44:10 UTC", "sightings": 1 }, { "indicator": "http://106.41.74.112:56795/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-23 16:42:06 UTC", "last_seen": "2026-03-23 16:42:06 UTC", "sightings": 1 }, { "indicator": "https://0pen-cache.thornbay.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-23 16:39:07 UTC", "last_seen": "2026-03-23 16:39:07 UTC", "sightings": 1 }, { "indicator": "http://182.121.117.51:36192/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 16:37:18 UTC", "last_seen": "2026-03-23 16:37:18 UTC", "sightings": 1 }, { "indicator": "http://112.225.175.193:49691/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-23 16:37:07 UTC", "last_seen": "2026-03-23 16:37:07 UTC", "sightings": 1 }, { "indicator": "http://92.38.51.65:46197/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-23 16:37:07 UTC", "last_seen": "2026-03-23 16:37:07 UTC", "sightings": 1 }, { "indicator": "http://110.37.82.79:36778/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 16:35:19 UTC", "last_seen": "2026-03-23 16:35:19 UTC", "sightings": 1 }, { "indicator": "https://vaultauth.thornbay.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-23 16:33:09 UTC", "last_seen": "2026-03-23 16:33:09 UTC", "sightings": 1 }, { "indicator": "http://110.36.29.195:40384/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-23 16:32:06 UTC", "last_seen": "2026-03-23 16:32:06 UTC", "sightings": 1 }, { "indicator": "http://176.226.129.38:54033/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 16:32:05 UTC", "last_seen": "2026-03-23 16:32:05 UTC", "sightings": 1 }, { "indicator": "https://sewvyh.thornbay.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-23 16:29:10 UTC", "last_seen": "2026-03-23 16:29:10 UTC", "sightings": 1 }, { "indicator": "http://222.127.68.197:48648/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-23 16:26:20 UTC", "last_seen": "2026-03-23 16:26:20 UTC", "sightings": 1 }, { "indicator": "http://123.134.56.95:37917/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 16:24:14 UTC", "last_seen": "2026-03-23 16:24:14 UTC", "sightings": 1 }, { "indicator": "https://wdpoqr.thornbay.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-23 16:22:09 UTC", "last_seen": "2026-03-23 16:22:09 UTC", "sightings": 1 }, { "indicator": "http://117.209.16.20:50183/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 16:21:09 UTC", "last_seen": "2026-03-23 16:21:09 UTC", "sightings": 1 }, { "indicator": "https://0twkb.thornbay.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-23 16:17:06 UTC", "last_seen": "2026-03-23 16:17:06 UTC", "sightings": 1 }, { "indicator": "http://220.201.24.79:40601/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 16:16:09 UTC", "last_seen": "2026-03-23 16:16:09 UTC", "sightings": 1 }, { "indicator": "https://github.com/MinParkwee1212/Speed-Boost-Fantasy-Waifu-cheats/raw/refs/heads/main/isotrimorphic/Speed_Boost_cheats_Fantasy_Waifu_2.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-23 16:14:09 UTC", "last_seen": "2026-03-23 16:14:09 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/MinParkwee1212/Speed-Boost-Fantasy-Waifu-cheats/refs/heads/main/isotrimorphic/Speed_Boost_cheats_Fantasy_Waifu_2.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-23 16:14:07 UTC", "last_seen": "2026-03-23 16:14:07 UTC", "sightings": 1 }, { "indicator": "https://github.com/MisangT/Tycoon-cheats-Drug-Lord/raw/refs/heads/master/clivis/Tycoon-cheats-Drug-Lord.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-23 16:14:07 UTC", "last_seen": "2026-03-23 16:14:07 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/MisangT/Tycoon-cheats-Drug-Lord/refs/heads/master/clivis/Tycoon-cheats-Drug-Lord.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-23 16:14:07 UTC", "last_seen": "2026-03-23 16:14:07 UTC", "sightings": 1 }, { "indicator": "http://182.126.243.96:59354/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 16:13:12 UTC", "last_seen": "2026-03-23 16:13:12 UTC", "sightings": 1 }, { "indicator": "https://uz1gap10.ember-grid.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-23 16:11:08 UTC", "last_seen": "2026-03-23 16:11:08 UTC", "sightings": 1 }, { "indicator": "http://123.12.86.6:40086/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 16:08:23 UTC", "last_seen": "2026-03-23 16:08:23 UTC", "sightings": 1 }, { "indicator": "http://112.225.175.193:49691/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-23 16:07:27 UTC", "last_seen": "2026-03-23 16:07:27 UTC", "sightings": 1 }, { "indicator": "https://dr4w-trail.ember-grid.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-23 16:07:08 UTC", "last_seen": "2026-03-23 16:07:08 UTC", "sightings": 1 }, { "indicator": "http://110.37.115.90:55707/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 16:04:21 UTC", "last_seen": "2026-03-23 16:04:21 UTC", "sightings": 1 }, { "indicator": "https://r4il-stack.ember-grid.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-23 16:00:09 UTC", "last_seen": "2026-03-23 16:00:09 UTC", "sightings": 1 }, { "indicator": "http://222.138.180.144:60167/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 15:57:07 UTC", "last_seen": "2026-03-23 15:57:07 UTC", "sightings": 1 }, { "indicator": "https://hard7-beam.ember-grid.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-23 15:54:09 UTC", "last_seen": "2026-03-23 15:54:09 UTC", "sightings": 1 }, { "indicator": "http://117.209.16.20:50183/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 15:53:22 UTC", "last_seen": "2026-03-23 15:53:22 UTC", "sightings": 1 }, { "indicator": "http://123.12.86.6:40086/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 15:52:17 UTC", "last_seen": "2026-03-23 15:52:17 UTC", "sightings": 1 }, { "indicator": "https://watc2-crest.ember-grid.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-23 15:49:07 UTC", "last_seen": "2026-03-23 15:49:07 UTC", "sightings": 1 }, { "indicator": "http://59.93.188.28:49090/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 15:48:32 UTC", "last_seen": "2026-03-23 15:48:32 UTC", "sightings": 1 }, { "indicator": "http://182.126.243.96:59354/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 15:48:21 UTC", "last_seen": "2026-03-23 15:48:21 UTC", "sightings": 1 }, { "indicator": "https://73dwi.vividfox.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-23 15:45:09 UTC", "last_seen": "2026-03-23 15:45:09 UTC", "sightings": 1 }, { "indicator": "http://82.144.86.37:38207/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-23 15:40:17 UTC", "last_seen": "2026-03-23 15:40:17 UTC", "sightings": 1 }, { "indicator": "http://107.172.135.4/60/img_014246.png", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 15:28:07 UTC", "last_seen": "2026-03-23 15:28:07 UTC", "sightings": 1 }, { "indicator": "http://222.140.132.217:56437/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-23 15:27:08 UTC", "last_seen": "2026-03-23 15:27:08 UTC", "sightings": 1 }, { "indicator": "http://59.177.111.100:46573/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-23 15:27:08 UTC", "last_seen": "2026-03-23 15:27:08 UTC", "sightings": 1 }, { "indicator": "http://59.98.114.128:55724/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 15:23:28 UTC", "last_seen": "2026-03-23 15:23:28 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.168/files/8012574236/NPvu1Ol.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543", "njRAT" ], "first_seen": "2026-03-23 15:23:07 UTC", "last_seen": "2026-03-23 15:23:07 UTC", "sightings": 1 }, { "indicator": "http://59.93.188.28:49090/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 15:21:22 UTC", "last_seen": "2026-03-23 15:21:22 UTC", "sightings": 1 }, { "indicator": "http://125.41.2.93:44518/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 15:21:21 UTC", "last_seen": "2026-03-23 15:21:21 UTC", "sightings": 1 }, { "indicator": "http://82.144.86.37:38207/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-23 15:18:22 UTC", "last_seen": "2026-03-23 15:18:22 UTC", "sightings": 1 }, { "indicator": "http://123.8.28.187:46066/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 15:17:24 UTC", "last_seen": "2026-03-23 15:17:24 UTC", "sightings": 1 }, { "indicator": "https://gateway.lighthouse.storage/ipfs/bafybeifbptcev25ovccag6aiwvcnhfu6nqlgpsh6ojkoxqkhd7gltf3akq/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 15:13:06 UTC", "last_seen": "2026-03-23 15:13:06 UTC", "sightings": 1 }, { "indicator": "https://gateway.lighthouse.storage/ipfs/bafybeibatvwn2q3ygfkv6lnqlj2acwtcvmlgzxqtbil5hld2xvw7c2mogm", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 15:12:14 UTC", "last_seen": "2026-03-23 15:12:14 UTC", "sightings": 1 }, { "indicator": "https://gateway.lighthouse.storage/ipfs/bafybeiajei5px5cjlty5kqxpkmdldp5aaijtvdv4sy7n6bj66r2cmag3ue", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 15:12:13 UTC", "last_seen": "2026-03-23 15:12:13 UTC", "sightings": 1 }, { "indicator": "http://107.172.135.4/img/optimized_MSI.png", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 15:12:12 UTC", "last_seen": "2026-03-23 15:12:12 UTC", "sightings": 1 }, { "indicator": "https://mapshdi.wildscreeen.shop/MSI_164525.png", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 15:12:12 UTC", "last_seen": "2026-03-23 15:12:12 UTC", "sightings": 1 }, { "indicator": "https://mapshdi.wildscreeen.shop/MSI_050254.png", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 15:12:12 UTC", "last_seen": "2026-03-23 15:12:12 UTC", "sightings": 1 }, { "indicator": "https://mapshdi.wildscreeen.shop/MSI_194126.png", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 15:12:12 UTC", "last_seen": "2026-03-23 15:12:12 UTC", "sightings": 1 }, { "indicator": "https://alerts-payables.com/Crypt/optimized_MSI.png", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 15:12:12 UTC", "last_seen": "2026-03-23 15:12:12 UTC", "sightings": 1 }, { "indicator": "https://gateway.lighthouse.storage/ipfs/bafybeigl7leimjh6izjxqapmyjzuobigsz6l7y2lvfcyrnyw5nl254m6aq/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 15:12:12 UTC", "last_seen": "2026-03-23 15:12:12 UTC", "sightings": 1 }, { "indicator": "https://gateway.lighthouse.storage/ipfs/bafybeiajei5px5cjlty5kqxpkmdldp5aaijtvdv4sy7n6bj66r2cmag3ue/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 15:12:12 UTC", "last_seen": "2026-03-23 15:12:12 UTC", "sightings": 1 }, { "indicator": "http://198.23.177.216/fcGqTDMfokE145.bin", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 15:12:11 UTC", "last_seen": "2026-03-23 15:12:11 UTC", "sightings": 1 }, { "indicator": "https://bafybeidvgy76m4r347tpqg6plr3ac2p7o5bpcluicawc25nuh7mowtkssy.ipfs.dweb.link/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 15:12:11 UTC", "last_seen": "2026-03-23 15:12:11 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/kmjs632/png/refs/heads/main/optimizedMSI.png", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 15:12:10 UTC", "last_seen": "2026-03-23 15:12:10 UTC", "sightings": 1 }, { "indicator": "https://gateway.lighthouse.storage/ipfs/bafybeicovilx6e42iqva4adsmngn42m6qp4w2aw2ch7iwdqynd5aius6ka/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 15:12:10 UTC", "last_seen": "2026-03-23 15:12:10 UTC", "sightings": 1 }, { "indicator": "http://198.23.177.216/Konfi.lpk", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 15:12:10 UTC", "last_seen": "2026-03-23 15:12:10 UTC", "sightings": 1 }, { "indicator": "http://198.23.177.216/Kugle.pcx", "indicator_type": "url", "source": "URLhaus", "tags": [ "AgentTesla" ], "first_seen": "2026-03-23 15:12:10 UTC", "last_seen": "2026-03-23 15:12:10 UTC", "sightings": 1 }, { "indicator": "https://shop.pestodo.de/", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClickFix", "Vidar" ], "first_seen": "2026-03-23 15:12:09 UTC", "last_seen": "2026-03-23 15:12:09 UTC", "sightings": 1 }, { "indicator": "https://ia903109.us.archive.org/33/items/optimized_msi_20260316_2256/optimized_MSI.png", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 15:12:09 UTC", "last_seen": "2026-03-23 15:12:09 UTC", "sightings": 1 }, { "indicator": "https://archive.org/download/optimized_msi_20260318_0931/optimized_MSI.png", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 15:12:08 UTC", "last_seen": "2026-03-23 15:12:08 UTC", "sightings": 1 }, { "indicator": "https://dn710909.ca.archive.org/0/items/optimized_msi_20260318_0931/optimized_MSI.png", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 15:12:08 UTC", "last_seen": "2026-03-23 15:12:08 UTC", "sightings": 1 }, { "indicator": "http://120.28.189.182:54410/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-23 15:12:08 UTC", "last_seen": "2026-03-23 15:12:08 UTC", "sightings": 1 }, { "indicator": "http://res.cloudinary.com/dn6bpc2yo/image/upload/v1773640942/optimized_MSI_eheqzz.jpg", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 15:12:07 UTC", "last_seen": "2026-03-23 15:12:07 UTC", "sightings": 1 }, { "indicator": "https://alerts-payables.com/CfBBwMeB/optimized_MSI.png", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 15:12:06 UTC", "last_seen": "2026-03-23 15:12:06 UTC", "sightings": 1 }, { "indicator": "http://res.cloudinary.com/dzptvoj1b/image/upload/v1773339102/MSI_PRO_with_b64_wavpuj.jpg", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 15:12:06 UTC", "last_seen": "2026-03-23 15:12:06 UTC", "sightings": 1 }, { "indicator": "https://res.cloudinary.com/dbixevwws/image/upload/v1773434544/optimized_MSI_yaiw6f.jpg", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 15:12:06 UTC", "last_seen": "2026-03-23 15:12:06 UTC", "sightings": 1 }, { "indicator": "http://110.37.115.90:55707/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 15:09:15 UTC", "last_seen": "2026-03-23 15:09:15 UTC", "sightings": 1 }, { "indicator": "http://117.216.186.168:39462/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 15:05:26 UTC", "last_seen": "2026-03-23 15:05:26 UTC", "sightings": 1 }, { "indicator": "http://120.28.189.182:54410/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-23 15:02:19 UTC", "last_seen": "2026-03-23 15:02:19 UTC", "sightings": 1 }, { "indicator": "http://222.140.132.217:56437/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-23 15:02:08 UTC", "last_seen": "2026-03-23 15:02:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/JaytraJ/pumpfun-terminal/refs/heads/main/src/lib/terminal-pumpfun-v1.4.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-23 14:50:16 UTC", "last_seen": "2026-03-23 14:50:16 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Drs1901/red-alert-map/refs/heads/main/src/map-red-alert-v2.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-23 14:50:16 UTC", "last_seen": "2026-03-23 14:50:16 UTC", "sightings": 1 }, { "indicator": "https://github.com/Drs1901/flowmetrics/raw/refs/heads/main/pages/Software_v2.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-23 14:50:16 UTC", "last_seen": "2026-03-23 14:50:16 UTC", "sightings": 1 }, { "indicator": "https://github.com/Drs1901/red-alert-map/raw/refs/heads/main/src/map-red-alert-v2.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-23 14:50:16 UTC", "last_seen": "2026-03-23 14:50:16 UTC", "sightings": 1 }, { "indicator": "https://github.com/Drs1901/BingeWatch/raw/refs/heads/main/public/locales/he/Watch_Binge_3.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-23 14:50:16 UTC", "last_seen": "2026-03-23 14:50:16 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/nevajay/chandrika1993/refs/heads/main/fifo/chandrika_1.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-23 14:50:15 UTC", "last_seen": "2026-03-23 14:50:15 UTC", "sightings": 1 }, { "indicator": "https://github.com/JaytraJ/pumpfun-terminal/raw/refs/heads/main/src/lib/terminal-pumpfun-v1.4.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-23 14:50:15 UTC", "last_seen": "2026-03-23 14:50:15 UTC", "sightings": 1 }, { "indicator": "https://github.com/Mickebhscoder/TourManagement/raw/refs/heads/main/app/api/stripe/webhook/Management-Tour-3.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-23 14:50:15 UTC", "last_seen": "2026-03-23 14:50:15 UTC", "sightings": 1 }, { "indicator": "https://github.com/Mickebhscoder/glpi-traefik-letsencrypt-docker-compose/raw/refs/heads/main/.github/docker_traefik_compose_letsencrypt_glpi_v3.4.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-23 14:50:14 UTC", "last_seen": "2026-03-23 14:50:14 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Mickebhscoder/openclaw-business/refs/heads/main/app/api/instances/openclaw_business_baronethood.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-23 14:50:14 UTC", "last_seen": "2026-03-23 14:50:14 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Drs1901/BingeWatch/refs/heads/main/public/locales/he/Watch_Binge_3.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-23 14:50:14 UTC", "last_seen": "2026-03-23 14:50:14 UTC", "sightings": 1 }, { "indicator": "https://github.com/Mickebhscoder/openclaw-business/raw/refs/heads/main/app/api/instances/openclaw_business_baronethood.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-23 14:50:14 UTC", "last_seen": "2026-03-23 14:50:14 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Rscarafiocca/ghostpatch/refs/heads/main/rumbling/Software-inamovability.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-23 14:50:14 UTC", "last_seen": "2026-03-23 14:50:14 UTC", "sightings": 1 }, { "indicator": "https://github.com/jordyweerwag/CRM/raw/refs/heads/master/perjurious/Software_3.6.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-23 14:50:14 UTC", "last_seen": "2026-03-23 14:50:14 UTC", "sightings": 1 }, { "indicator": "https://github.com/Rscarafiocca/ghostpatch/raw/refs/heads/main/rumbling/Software-inamovability.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-23 14:50:14 UTC", "last_seen": "2026-03-23 14:50:14 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Drs1901/flowmetrics/refs/heads/main/pages/Software_v2.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-23 14:50:14 UTC", "last_seen": "2026-03-23 14:50:14 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Rscarafiocca/fe-ct-prepcourse-fs/refs/heads/main/M04%20JavaScript%20Bucles/test/fs-fe-prepcourse-ct-v1.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-23 14:50:10 UTC", "last_seen": "2026-03-23 14:50:10 UTC", "sightings": 1 }, { "indicator": "https://github.com/nevajay/chandrika1993/raw/refs/heads/main/fifo/chandrika_1.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-23 14:50:10 UTC", "last_seen": "2026-03-23 14:50:10 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Mickebhscoder/glpi-traefik-letsencrypt-docker-compose/refs/heads/main/.github/docker_traefik_compose_letsencrypt_glpi_v3.4.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-23 14:50:10 UTC", "last_seen": "2026-03-23 14:50:10 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/HTMLGUYNOOB/Portfolio/refs/heads/main/inc-custom-logic/Software-v1.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-23 14:50:09 UTC", "last_seen": "2026-03-23 14:50:09 UTC", "sightings": 1 }, { "indicator": "https://github.com/HTMLGUYNOOB/Portfolio/raw/refs/heads/main/inc-custom-logic/Software-v1.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-23 14:50:09 UTC", "last_seen": "2026-03-23 14:50:09 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/jordyweerwag/CRM/refs/heads/master/perjurious/Software_3.6.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-23 14:50:09 UTC", "last_seen": "2026-03-23 14:50:09 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Mickebhscoder/TourManagement/refs/heads/main/app/api/stripe/webhook/Management-Tour-3.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-23 14:50:09 UTC", "last_seen": "2026-03-23 14:50:09 UTC", "sightings": 1 }, { "indicator": "https://github.com/Rscarafiocca/fe-ct-prepcourse-fs/raw/refs/heads/main/M04%20JavaScript%20Bucles/test/fs-fe-prepcourse-ct-v1.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-23 14:50:09 UTC", "last_seen": "2026-03-23 14:50:09 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.168/files/1781548144/QlQgCVH.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey", "xworm" ], "first_seen": "2026-03-23 14:48:06 UTC", "last_seen": "2026-03-23 14:48:06 UTC", "sightings": 1 }, { "indicator": "http://36.64.184.26:43927/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-23 14:44:25 UTC", "last_seen": "2026-03-23 14:44:25 UTC", "sightings": 1 }, { "indicator": "http://117.216.186.168:39462/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 14:38:22 UTC", "last_seen": "2026-03-23 14:38:22 UTC", "sightings": 1 }, { "indicator": "http://42.56.167.182:49208/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 14:37:05 UTC", "last_seen": "2026-03-23 14:37:05 UTC", "sightings": 1 }, { "indicator": "https://raitran.vividfox.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-23 14:36:05 UTC", "last_seen": "2026-03-23 14:36:05 UTC", "sightings": 1 }, { "indicator": "http://36.64.184.26:43927/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-23 14:34:14 UTC", "last_seen": "2026-03-23 14:34:14 UTC", "sightings": 1 }, { "indicator": "https://15fdtzgp.vividfox.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-23 14:31:06 UTC", "last_seen": "2026-03-23 14:31:06 UTC", "sightings": 1 }, { "indicator": "http://117.193.150.201:54521/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-23 14:27:19 UTC", "last_seen": "2026-03-23 14:27:19 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/B200930040/batrack/refs/heads/main/Depth-Anything/Software-1.7.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-23 14:27:11 UTC", "last_seen": "2026-03-23 14:27:11 UTC", "sightings": 1 }, { "indicator": "https://github.com/B200930040/batrack/raw/refs/heads/main/Depth-Anything/Software-1.7.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-23 14:27:11 UTC", "last_seen": "2026-03-23 14:27:11 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Chromesthesiasmiledoncalifornicus939/nestjs-demo/refs/heads/main/indusiform/nestjs-demo-1.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-23 14:27:10 UTC", "last_seen": "2026-03-23 14:27:10 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Tompedido/HTML-CSS-JS-Star-Trek-LCARS-Layout/refs/heads/main/selectiveness/HTM_CS_Star_J_LCAR_Layout_Trek_v3.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-23 14:27:10 UTC", "last_seen": "2026-03-23 14:27:10 UTC", "sightings": 1 }, { "indicator": "https://github.com/Tompedido/HTML-CSS-JS-Star-Trek-LCARS-Layout/raw/refs/heads/main/selectiveness/HTM_CS_Star_J_LCAR_Layout_Trek_v3.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-23 14:27:10 UTC", "last_seen": "2026-03-23 14:27:10 UTC", "sightings": 1 }, { "indicator": "https://github.com/sd02383/neovim-agentic-copilot/raw/refs/heads/main/lua/core/agentic_neovim_copilot_2.4.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-23 14:27:10 UTC", "last_seen": "2026-03-23 14:27:10 UTC", "sightings": 1 }, { "indicator": "https://github.com/Chromesthesiasmiledoncalifornicus939/nestjs-demo/raw/refs/heads/main/indusiform/nestjs-demo-1.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-23 14:27:10 UTC", "last_seen": "2026-03-23 14:27:10 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/sd02383/neovim-agentic-copilot/refs/heads/main/lua/core/agentic_neovim_copilot_2.4.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-23 14:27:10 UTC", "last_seen": "2026-03-23 14:27:10 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/sd02383/freqtrade/refs/heads/develop/docs/javascripts/Software_v1.4.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-23 14:27:10 UTC", "last_seen": "2026-03-23 14:27:10 UTC", "sightings": 1 }, { "indicator": "https://github.com/RezHub-alt/Perf-Observer/raw/refs/heads/main/src/Perf-Observer-3.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-23 14:27:10 UTC", "last_seen": "2026-03-23 14:27:10 UTC", "sightings": 1 }, { "indicator": "https://github.com/Akshayy-byte/datagrid/raw/refs/heads/main/packages/grid/src/data/Software_v3.9.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-23 14:27:10 UTC", "last_seen": "2026-03-23 14:27:10 UTC", "sightings": 1 }, { "indicator": "https://github.com/Riteshkhodka/MPU/raw/refs/heads/master/src/test/java/Software_v2.6.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-23 14:27:10 UTC", "last_seen": "2026-03-23 14:27:10 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/RezHub-alt/Perf-Observer/refs/heads/main/src/Perf-Observer-3.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-23 14:27:10 UTC", "last_seen": "2026-03-23 14:27:10 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Focused-whitecinnamon815/gpu_benchmark/refs/heads/main/scripts/custom-trend/gpu_benchmark_v3.4.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-23 14:27:10 UTC", "last_seen": "2026-03-23 14:27:10 UTC", "sightings": 1 }, { "indicator": "https://github.com/Focused-whitecinnamon815/gpu_benchmark/raw/refs/heads/main/scripts/custom-trend/gpu_benchmark_v3.4.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-23 14:27:10 UTC", "last_seen": "2026-03-23 14:27:10 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Riteshkhodka/MPU/refs/heads/master/src/test/java/Software_v2.6.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-23 14:27:10 UTC", "last_seen": "2026-03-23 14:27:10 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/sd02383/kiyofm-bot/refs/heads/main/graving/kiyofm-bot-v1.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-23 14:27:10 UTC", "last_seen": "2026-03-23 14:27:10 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Akshayy-byte/datagrid/refs/heads/main/packages/grid/src/data/Software_v3.9.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-23 14:27:10 UTC", "last_seen": "2026-03-23 14:27:10 UTC", "sightings": 1 }, { "indicator": "https://github.com/sd02383/kiyofm-bot/raw/refs/heads/main/graving/kiyofm-bot-v1.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-23 14:27:10 UTC", "last_seen": "2026-03-23 14:27:10 UTC", "sightings": 1 }, { "indicator": "https://github.com/sd02383/freqtrade/raw/refs/heads/develop/docs/javascripts/Software_v1.4.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-23 14:27:10 UTC", "last_seen": "2026-03-23 14:27:10 UTC", "sightings": 1 }, { "indicator": "https://southterm.vividfox.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-23 14:26:07 UTC", "last_seen": "2026-03-23 14:26:07 UTC", "sightings": 1 }, { "indicator": "https://sqfi.vividfox.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-23 14:20:08 UTC", "last_seen": "2026-03-23 14:20:08 UTC", "sightings": 1 }, { "indicator": "http://115.57.13.76:43073/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-23 14:17:06 UTC", "last_seen": "2026-03-23 14:17:06 UTC", "sightings": 1 }, { "indicator": "http://27.37.89.169:52268/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 14:16:12 UTC", "last_seen": "2026-03-23 14:16:12 UTC", "sightings": 1 }, { "indicator": "https://sceneeast.skylint.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-23 14:14:07 UTC", "last_seen": "2026-03-23 14:14:07 UTC", "sightings": 1 }, { "indicator": "http://117.205.86.255:55044/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 14:05:18 UTC", "last_seen": "2026-03-23 14:05:18 UTC", "sightings": 1 }, { "indicator": "https://volt-dock.skylint.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-23 14:04:06 UTC", "last_seen": "2026-03-23 14:04:06 UTC", "sightings": 1 }, { "indicator": "https://trifluxos.skylint.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-23 13:57:06 UTC", "last_seen": "2026-03-23 13:57:06 UTC", "sightings": 1 }, { "indicator": "http://123.13.36.61:57833/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 13:55:20 UTC", "last_seen": "2026-03-23 13:55:20 UTC", "sightings": 1 }, { "indicator": "https://p4tter-array.skylint.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-23 13:53:08 UTC", "last_seen": "2026-03-23 13:53:08 UTC", "sightings": 1 }, { "indicator": "http://115.57.13.76:43073/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-23 13:52:08 UTC", "last_seen": "2026-03-23 13:52:08 UTC", "sightings": 1 }, { "indicator": "https://brokerancient.br1ghtpath.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-23 13:50:09 UTC", "last_seen": "2026-03-23 13:50:09 UTC", "sightings": 1 }, { "indicator": "http://117.243.249.229:33365/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 13:42:07 UTC", "last_seen": "2026-03-23 13:42:07 UTC", "sightings": 1 }, { "indicator": "http://117.205.86.255:55044/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 13:37:18 UTC", "last_seen": "2026-03-23 13:37:18 UTC", "sightings": 1 }, { "indicator": "https://ytjmc4o.br1ghtpath.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-23 13:33:05 UTC", "last_seen": "2026-03-23 13:33:05 UTC", "sightings": 1 }, { "indicator": "http://27.206.213.98:39847/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 13:27:10 UTC", "last_seen": "2026-03-23 13:27:10 UTC", "sightings": 1 }, { "indicator": "http://123.190.22.7:43870/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 13:26:06 UTC", "last_seen": "2026-03-23 13:26:06 UTC", "sightings": 1 }, { "indicator": "http://60.23.237.166:40318/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 13:25:17 UTC", "last_seen": "2026-03-23 13:25:17 UTC", "sightings": 1 }, { "indicator": "https://deep-ech.br1ghtpath.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-23 13:25:08 UTC", "last_seen": "2026-03-23 13:25:08 UTC", "sightings": 1 }, { "indicator": "http://110.36.80.171:52753/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 13:24:17 UTC", "last_seen": "2026-03-23 13:24:17 UTC", "sightings": 1 }, { "indicator": "http://110.37.3.239:37909/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-23 13:22:06 UTC", "last_seen": "2026-03-23 13:22:06 UTC", "sightings": 1 }, { "indicator": "http://123.14.246.227:58634/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 13:21:19 UTC", "last_seen": "2026-03-23 13:21:19 UTC", "sightings": 1 }, { "indicator": "http://117.193.143.1:49088/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 13:18:20 UTC", "last_seen": "2026-03-23 13:18:20 UTC", "sightings": 1 }, { "indicator": "https://c0ol1-leaf.br1ghtpath.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-23 13:16:07 UTC", "last_seen": "2026-03-23 13:16:07 UTC", "sightings": 1 }, { "indicator": "http://213.242.25.214:37203/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-23 13:10:13 UTC", "last_seen": "2026-03-23 13:10:13 UTC", "sightings": 1 }, { "indicator": "https://power-oak.br1ghtpath.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-23 13:07:10 UTC", "last_seen": "2026-03-23 13:07:10 UTC", "sightings": 1 }, { "indicator": "http://123.190.22.7:43870/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 13:05:14 UTC", "last_seen": "2026-03-23 13:05:14 UTC", "sightings": 1 }, { "indicator": "http://27.206.213.98:39847/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 13:01:19 UTC", "last_seen": "2026-03-23 13:01:19 UTC", "sightings": 1 }, { "indicator": "https://dyndraar9.cinder-row.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-23 13:01:07 UTC", "last_seen": "2026-03-23 13:01:07 UTC", "sightings": 1 }, { "indicator": "https://wnkk.cinder-row.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-23 12:58:08 UTC", "last_seen": "2026-03-23 12:58:08 UTC", "sightings": 1 }, { "indicator": "http://117.193.143.1:49088/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 12:54:15 UTC", "last_seen": "2026-03-23 12:54:15 UTC", "sightings": 1 }, { "indicator": "http://60.23.237.166:40318/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 12:53:24 UTC", "last_seen": "2026-03-23 12:53:24 UTC", "sightings": 1 }, { "indicator": "https://cornpu-sheet.cinder-row.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-23 12:53:07 UTC", "last_seen": "2026-03-23 12:53:07 UTC", "sightings": 1 }, { "indicator": "http://111.47.64.19:51967/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-23 12:52:11 UTC", "last_seen": "2026-03-23 12:52:11 UTC", "sightings": 1 }, { "indicator": "https://zenspirear4.cinder-row.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-23 12:49:08 UTC", "last_seen": "2026-03-23 12:49:08 UTC", "sightings": 1 }, { "indicator": "https://coresal.cinder-row.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-23 12:45:11 UTC", "last_seen": "2026-03-23 12:45:11 UTC", "sightings": 1 }, { "indicator": "http://213.242.25.214:37203/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-23 12:43:19 UTC", "last_seen": "2026-03-23 12:43:19 UTC", "sightings": 1 }, { "indicator": "http://185.19.79.32:39343/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 12:42:04 UTC", "last_seen": "2026-03-23 12:42:04 UTC", "sightings": 1 }, { "indicator": "http://175.149.95.200:40270/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 12:40:21 UTC", "last_seen": "2026-03-23 12:40:21 UTC", "sightings": 1 }, { "indicator": "https://vhg5e.fluxhaven.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-23 12:40:09 UTC", "last_seen": "2026-03-23 12:40:09 UTC", "sightings": 1 }, { "indicator": "http://59.92.83.77:44097/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 12:37:13 UTC", "last_seen": "2026-03-23 12:37:13 UTC", "sightings": 1 }, { "indicator": "https://ottercultu.fluxhaven.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-23 12:35:07 UTC", "last_seen": "2026-03-23 12:35:07 UTC", "sightings": 1 }, { "indicator": "https://globalker.fluxhaven.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-23 12:31:07 UTC", "last_seen": "2026-03-23 12:31:07 UTC", "sightings": 1 }, { "indicator": "http://110.37.3.239:37909/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-23 12:22:07 UTC", "last_seen": "2026-03-23 12:22:07 UTC", "sightings": 1 }, { "indicator": "http://123.11.78.17:33905/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-23 12:07:06 UTC", "last_seen": "2026-03-23 12:07:06 UTC", "sightings": 1 }, { "indicator": "http://78.29.39.213:53385/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 12:07:05 UTC", "last_seen": "2026-03-23 12:07:05 UTC", "sightings": 1 }, { "indicator": "http://60.19.217.202:53996/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 12:03:18 UTC", "last_seen": "2026-03-23 12:03:18 UTC", "sightings": 1 }, { "indicator": "http://39.187.82.251:38678/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 12:00:16 UTC", "last_seen": "2026-03-23 12:00:16 UTC", "sightings": 1 }, { "indicator": "http://80.67.33.209:43476/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-23 11:47:16 UTC", "last_seen": "2026-03-23 11:47:16 UTC", "sightings": 1 }, { "indicator": "http://38.52.142.194:58414/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-23 11:47:06 UTC", "last_seen": "2026-03-23 11:47:06 UTC", "sightings": 1 }, { "indicator": "http://78.29.39.213:53385/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 11:47:05 UTC", "last_seen": "2026-03-23 11:47:05 UTC", "sightings": 1 }, { "indicator": "http://115.201.154.255:36519/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-23 11:45:14 UTC", "last_seen": "2026-03-23 11:45:14 UTC", "sightings": 1 }, { "indicator": "http://39.187.82.251:38678/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 11:39:20 UTC", "last_seen": "2026-03-23 11:39:20 UTC", "sightings": 1 }, { "indicator": "http://115.201.154.255:36519/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-23 11:24:14 UTC", "last_seen": "2026-03-23 11:24:14 UTC", "sightings": 1 }, { "indicator": "http://120.28.189.137:60096/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-23 11:22:12 UTC", "last_seen": "2026-03-23 11:22:12 UTC", "sightings": 1 }, { "indicator": "http://202.111.131.58:45223/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 11:17:15 UTC", "last_seen": "2026-03-23 11:17:15 UTC", "sightings": 1 }, { "indicator": "http://38.52.142.194:58414/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-23 11:17:07 UTC", "last_seen": "2026-03-23 11:17:07 UTC", "sightings": 1 }, { "indicator": "http://110.37.14.231:33707/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 11:07:10 UTC", "last_seen": "2026-03-23 11:07:10 UTC", "sightings": 1 }, { "indicator": "http://39.90.184.21:49074/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-23 10:57:07 UTC", "last_seen": "2026-03-23 10:57:07 UTC", "sightings": 1 }, { "indicator": "http://175.150.192.235:34480/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 10:55:19 UTC", "last_seen": "2026-03-23 10:55:19 UTC", "sightings": 1 }, { "indicator": "http://220.164.229.87:52065/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-23 10:55:18 UTC", "last_seen": "2026-03-23 10:55:18 UTC", "sightings": 1 }, { "indicator": "http://123.11.73.179:60585/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 10:53:20 UTC", "last_seen": "2026-03-23 10:53:20 UTC", "sightings": 1 }, { "indicator": "http://125.43.43.191:42708/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 10:52:18 UTC", "last_seen": "2026-03-23 10:52:18 UTC", "sightings": 1 }, { "indicator": "http://110.36.70.136:48022/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-23 10:49:18 UTC", "last_seen": "2026-03-23 10:49:18 UTC", "sightings": 1 }, { "indicator": "http://61.3.107.196:45062/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 10:46:22 UTC", "last_seen": "2026-03-23 10:46:22 UTC", "sightings": 1 }, { "indicator": "http://110.37.14.231:33707/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 10:46:21 UTC", "last_seen": "2026-03-23 10:46:21 UTC", "sightings": 1 }, { "indicator": "http://200.6.91.47:54535/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 10:42:07 UTC", "last_seen": "2026-03-23 10:42:07 UTC", "sightings": 1 }, { "indicator": "http://59.58.42.128:50260/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-23 10:39:08 UTC", "last_seen": "2026-03-23 10:39:08 UTC", "sightings": 1 }, { "indicator": "http://182.126.117.7:36356/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 10:37:18 UTC", "last_seen": "2026-03-23 10:37:18 UTC", "sightings": 1 }, { "indicator": "http://39.90.184.21:49074/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-23 10:32:07 UTC", "last_seen": "2026-03-23 10:32:07 UTC", "sightings": 1 }, { "indicator": "http://220.164.229.87:52065/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-23 10:27:15 UTC", "last_seen": "2026-03-23 10:27:15 UTC", "sightings": 1 }, { "indicator": "http://2.249.142.165:48263/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 10:24:16 UTC", "last_seen": "2026-03-23 10:24:16 UTC", "sightings": 1 }, { "indicator": "http://27.215.114.193:58679/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 10:23:10 UTC", "last_seen": "2026-03-23 10:23:10 UTC", "sightings": 1 }, { "indicator": "http://61.3.107.196:45062/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 10:21:19 UTC", "last_seen": "2026-03-23 10:21:19 UTC", "sightings": 1 }, { "indicator": "http://110.36.70.136:48022/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-23 10:18:20 UTC", "last_seen": "2026-03-23 10:18:20 UTC", "sightings": 1 }, { "indicator": "http://123.5.174.236:40143/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 10:18:20 UTC", "last_seen": "2026-03-23 10:18:20 UTC", "sightings": 1 }, { "indicator": "http://59.58.42.128:50260/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-23 10:09:11 UTC", "last_seen": "2026-03-23 10:09:11 UTC", "sightings": 1 }, { "indicator": "http://42.227.172.47:35121/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 10:08:19 UTC", "last_seen": "2026-03-23 10:08:19 UTC", "sightings": 1 }, { "indicator": "http://27.215.114.193:58679/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 10:08:19 UTC", "last_seen": "2026-03-23 10:08:19 UTC", "sightings": 1 }, { "indicator": "http://110.38.206.49:39262/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 09:57:23 UTC", "last_seen": "2026-03-23 09:57:23 UTC", "sightings": 1 }, { "indicator": "http://42.56.208.137:46771/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 09:55:20 UTC", "last_seen": "2026-03-23 09:55:20 UTC", "sightings": 1 }, { "indicator": "http://110.37.66.198:40471/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 09:54:18 UTC", "last_seen": "2026-03-23 09:54:18 UTC", "sightings": 1 }, { "indicator": "http://42.227.172.47:35121/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 09:47:22 UTC", "last_seen": "2026-03-23 09:47:22 UTC", "sightings": 1 }, { "indicator": "http://61.52.63.101:59507/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-23 09:47:06 UTC", "last_seen": "2026-03-23 09:47:06 UTC", "sightings": 1 }, { "indicator": "http://175.150.85.241:38149/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 09:46:19 UTC", "last_seen": "2026-03-23 09:46:19 UTC", "sightings": 1 }, { "indicator": "http://110.37.66.198:40471/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 09:44:20 UTC", "last_seen": "2026-03-23 09:44:20 UTC", "sightings": 1 }, { "indicator": "http://163.142.77.164:43810/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 09:42:12 UTC", "last_seen": "2026-03-23 09:42:12 UTC", "sightings": 1 }, { "indicator": "http://110.38.206.127:34657/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 09:42:08 UTC", "last_seen": "2026-03-23 09:42:08 UTC", "sightings": 1 }, { "indicator": "http://61.52.63.101:59507/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-23 09:42:07 UTC", "last_seen": "2026-03-23 09:42:07 UTC", "sightings": 1 }, { "indicator": "http://113.238.120.76:58714/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 09:42:07 UTC", "last_seen": "2026-03-23 09:42:07 UTC", "sightings": 1 }, { "indicator": "https://8duovju.withregw.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-23 09:38:12 UTC", "last_seen": "2026-03-23 09:38:12 UTC", "sightings": 1 }, { "indicator": "https://bix29qg.withregw.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-23 09:32:09 UTC", "last_seen": "2026-03-23 09:32:09 UTC", "sightings": 1 }, { "indicator": "http://60.19.221.232:41026/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 09:28:23 UTC", "last_seen": "2026-03-23 09:28:23 UTC", "sightings": 1 }, { "indicator": "https://cast-pine.prowinserv.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-23 09:26:13 UTC", "last_seen": "2026-03-23 09:26:13 UTC", "sightings": 1 }, { "indicator": "http://115.49.87.133:44859/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 09:25:24 UTC", "last_seen": "2026-03-23 09:25:24 UTC", "sightings": 1 }, { "indicator": "http://175.150.85.241:38149/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 09:22:23 UTC", "last_seen": "2026-03-23 09:22:23 UTC", "sightings": 1 }, { "indicator": "http://59.180.181.163:33650/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 09:21:34 UTC", "last_seen": "2026-03-23 09:21:34 UTC", "sightings": 1 }, { "indicator": "http://117.254.177.213:46926/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips" ], "first_seen": "2026-03-23 09:19:20 UTC", "last_seen": "2026-03-23 09:19:20 UTC", "sightings": 1 }, { "indicator": "https://ba5al7-route.silkforge.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:19:09 UTC", "last_seen": "2026-03-23 09:19:09 UTC", "sightings": 1 }, { "indicator": "https://smarlog.vexmoor.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:19:08 UTC", "last_seen": "2026-03-23 09:19:08 UTC", "sightings": 1 }, { "indicator": "https://reso2-vault.prowinserv.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-23 09:19:08 UTC", "last_seen": "2026-03-23 09:19:08 UTC", "sightings": 1 }, { "indicator": "https://drawhyp.prowinserv.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-23 09:19:06 UTC", "last_seen": "2026-03-23 09:19:06 UTC", "sightings": 1 }, { "indicator": "https://t1mb-drive.prowinserv.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-23 09:19:06 UTC", "last_seen": "2026-03-23 09:19:06 UTC", "sightings": 1 }, { "indicator": "https://needlconver.brightcove.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:04:26 UTC", "last_seen": "2026-03-23 09:04:26 UTC", "sightings": 1 }, { "indicator": "https://ext4point.thermalmetrichub.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:04:26 UTC", "last_seen": "2026-03-23 09:04:26 UTC", "sightings": 1 }, { "indicator": "https://cl4view.quantumbufferlink.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:04:26 UTC", "last_seen": "2026-03-23 09:04:26 UTC", "sightings": 1 }, { "indicator": "https://ext3field.synchrometrichub.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:04:26 UTC", "last_seen": "2026-03-23 09:04:26 UTC", "sightings": 1 }, { "indicator": "https://daemonraven.flint-haze.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:04:26 UTC", "last_seen": "2026-03-23 09:04:26 UTC", "sightings": 1 }, { "indicator": "https://trail1-grid.worldcla.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:04:26 UTC", "last_seen": "2026-03-23 09:04:26 UTC", "sightings": 1 }, { "indicator": "https://hub4point.infrastructurestream.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:04:26 UTC", "last_seen": "2026-03-23 09:04:26 UTC", "sightings": 1 }, { "indicator": "https://di5pat-ring.prowinserv.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake", "NetSupport" ], "first_seen": "2026-03-23 09:04:26 UTC", "last_seen": "2026-03-23 09:04:26 UTC", "sightings": 1 }, { "indicator": "https://secureswift.respecti.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:04:25 UTC", "last_seen": "2026-03-23 09:04:25 UTC", "sightings": 1 }, { "indicator": "https://canopyform.gobright.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:04:25 UTC", "last_seen": "2026-03-23 09:04:25 UTC", "sightings": 1 }, { "indicator": "https://0ak-plate.fileost.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:04:25 UTC", "last_seen": "2026-03-23 09:04:25 UTC", "sightings": 1 }, { "indicator": "https://compr-hinge.getverif.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:04:25 UTC", "last_seen": "2026-03-23 09:04:25 UTC", "sightings": 1 }, { "indicator": "https://svc1proc.activefusioncore.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:04:25 UTC", "last_seen": "2026-03-23 09:04:25 UTC", "sightings": 1 }, { "indicator": "https://by42.officeco.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:04:25 UTC", "last_seen": "2026-03-23 09:04:25 UTC", "sightings": 1 }, { "indicator": "https://cl1proc.linearductnode.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:04:24 UTC", "last_seen": "2026-03-23 09:04:24 UTC", "sightings": 1 }, { "indicator": "https://heavyvaultpanel.top/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "indicator_type": "url", "source": "URLhaus", "tags": [ "connectwise", "msi", "rmm", "screenconnect" ], "first_seen": "2026-03-23 09:04:24 UTC", "last_seen": "2026-03-23 09:04:24 UTC", "sightings": 1 }, { "indicator": "https://dev1proc.nodalbufferpoint.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:04:24 UTC", "last_seen": "2026-03-23 09:04:24 UTC", "sightings": 1 }, { "indicator": "https://cl4path.logicmetricgate.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:04:24 UTC", "last_seen": "2026-03-23 09:04:24 UTC", "sightings": 1 }, { "indicator": "https://ext2core.vectorstreamlink.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:04:24 UTC", "last_seen": "2026-03-23 09:04:24 UTC", "sightings": 1 }, { "indicator": "https://svc1proc.modulardatastream.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:04:24 UTC", "last_seen": "2026-03-23 09:04:24 UTC", "sightings": 1 }, { "indicator": "https://svc3core.activefusioncore.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:04:23 UTC", "last_seen": "2026-03-23 09:04:23 UTC", "sightings": 1 }, { "indicator": "https://marginlogistics.snap-echo.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:04:19 UTC", "last_seen": "2026-03-23 09:04:19 UTC", "sightings": 1 }, { "indicator": "http://196.189.68.239:40893/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-23 09:04:19 UTC", "last_seen": "2026-03-23 09:04:19 UTC", "sightings": 1 }, { "indicator": "https://anctheory.frost-pixel.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:04:18 UTC", "last_seen": "2026-03-23 09:04:18 UTC", "sightings": 1 }, { "indicator": "https://ts9qv.officeco.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:04:17 UTC", "last_seen": "2026-03-23 09:04:17 UTC", "sightings": 1 }, { "indicator": "https://assetproxy.catflat.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:04:17 UTC", "last_seen": "2026-03-23 09:04:17 UTC", "sightings": 1 }, { "indicator": "https://dev1proc.photonicdatanode.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:04:16 UTC", "last_seen": "2026-03-23 09:04:16 UTC", "sightings": 1 }, { "indicator": "https://dev1proc.chromadatacenter.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:04:15 UTC", "last_seen": "2026-03-23 09:04:15 UTC", "sightings": 1 }, { "indicator": "https://needlegene.respecti.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:04:13 UTC", "last_seen": "2026-03-23 09:04:13 UTC", "sightings": 1 }, { "indicator": "https://dev2outer.nodalbufferpoint.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:04:13 UTC", "last_seen": "2026-03-23 09:04:13 UTC", "sightings": 1 }, { "indicator": "https://bloomstag.driftoak.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:04:13 UTC", "last_seen": "2026-03-23 09:04:13 UTC", "sightings": 1 }, { "indicator": "https://dev3field.nodalbufferpoint.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:04:12 UTC", "last_seen": "2026-03-23 09:04:12 UTC", "sightings": 1 }, { "indicator": "https://xmr14.worldcla.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:04:12 UTC", "last_seen": "2026-03-23 09:04:12 UTC", "sightings": 1 }, { "indicator": "https://cl2remote.fluxoverificator.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:04:10 UTC", "last_seen": "2026-03-23 09:04:10 UTC", "sightings": 1 }, { "indicator": "https://ext2outer.synchrometrichub.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:04:10 UTC", "last_seen": "2026-03-23 09:04:10 UTC", "sightings": 1 }, { "indicator": "https://ext4link.vectoraltimeter.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:04:09 UTC", "last_seen": "2026-03-23 09:04:09 UTC", "sightings": 1 }, { "indicator": "https://gard-cano.catflat.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:04:08 UTC", "last_seen": "2026-03-23 09:04:08 UTC", "sightings": 1 }, { "indicator": "https://ext1proc.vectorstreamlink.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:04:07 UTC", "last_seen": "2026-03-23 09:04:07 UTC", "sightings": 1 }, { "indicator": "https://layer-graph.officeco.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:04:06 UTC", "last_seen": "2026-03-23 09:04:06 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.168/files/8468794285/ZuVvCYO.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey", "OffLoader" ], "first_seen": "2026-03-23 09:04:05 UTC", "last_seen": "2026-03-23 09:04:05 UTC", "sightings": 1 }, { "indicator": "https://macr-point.frost-pixel.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:04:04 UTC", "last_seen": "2026-03-23 09:04:04 UTC", "sightings": 1 }, { "indicator": "https://svc4work.modulardatastream.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:04:03 UTC", "last_seen": "2026-03-23 09:04:03 UTC", "sightings": 1 }, { "indicator": "https://cl4path.signalpathfinder.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:04:03 UTC", "last_seen": "2026-03-23 09:04:03 UTC", "sightings": 1 }, { "indicator": "https://cl1store.fluxoverificator.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:04:03 UTC", "last_seen": "2026-03-23 09:04:03 UTC", "sightings": 1 }, { "indicator": "https://svc2steel.activefusioncore.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:04:02 UTC", "last_seen": "2026-03-23 09:04:02 UTC", "sightings": 1 }, { "indicator": "http://59.97.252.231:36936/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-23 09:04:02 UTC", "last_seen": "2026-03-23 09:04:02 UTC", "sightings": 1 }, { "indicator": "https://svc1proc.protopathfinder.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:04:02 UTC", "last_seen": "2026-03-23 09:04:02 UTC", "sightings": 1 }, { "indicator": "https://repairnoti.driftoak.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:04:01 UTC", "last_seen": "2026-03-23 09:04:01 UTC", "sightings": 1 }, { "indicator": "https://xipsrdlf.frost-pixel.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:04:01 UTC", "last_seen": "2026-03-23 09:04:01 UTC", "sightings": 1 }, { "indicator": "https://runwa1-path.getverif.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:04:01 UTC", "last_seen": "2026-03-23 09:04:01 UTC", "sightings": 1 }, { "indicator": "https://ext1proc.remotediagnosticlink.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:04:00 UTC", "last_seen": "2026-03-23 09:04:00 UTC", "sightings": 1 }, { "indicator": "https://svc3user.systemictracebox.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:04:00 UTC", "last_seen": "2026-03-23 09:04:00 UTC", "sightings": 1 }, { "indicator": "https://cfg3dev.resourcebalancer.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:04:00 UTC", "last_seen": "2026-03-23 09:04:00 UTC", "sightings": 1 }, { "indicator": "https://cl3ghost.quantumbufferlink.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:03:59 UTC", "last_seen": "2026-03-23 09:03:59 UTC", "sightings": 1 }, { "indicator": "https://cl4link.microflowprocess.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:03:57 UTC", "last_seen": "2026-03-23 09:03:57 UTC", "sightings": 1 }, { "indicator": "https://cavvoya.catflow.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:03:57 UTC", "last_seen": "2026-03-23 09:03:57 UTC", "sightings": 1 }, { "indicator": "https://svc4link.systemictracebox.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:03:57 UTC", "last_seen": "2026-03-23 09:03:57 UTC", "sightings": 1 }, { "indicator": "https://cl2remote.microflowprocess.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:03:56 UTC", "last_seen": "2026-03-23 09:03:56 UTC", "sightings": 1 }, { "indicator": "https://xxkvm5.temprock.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:03:56 UTC", "last_seen": "2026-03-23 09:03:56 UTC", "sightings": 1 }, { "indicator": "https://svc2power.modulardatastream.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:03:56 UTC", "last_seen": "2026-03-23 09:03:56 UTC", "sightings": 1 }, { "indicator": "https://ext2base.vectoraltimeter.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:03:53 UTC", "last_seen": "2026-03-23 09:03:53 UTC", "sightings": 1 }, { "indicator": "https://dev4space.nodalbufferpoint.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:03:53 UTC", "last_seen": "2026-03-23 09:03:53 UTC", "sightings": 1 }, { "indicator": "https://svc4path.protopathfinder.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:03:53 UTC", "last_seen": "2026-03-23 09:03:53 UTC", "sightings": 1 }, { "indicator": "https://gfdrj.bravevro.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:03:52 UTC", "last_seen": "2026-03-23 09:03:52 UTC", "sightings": 1 }, { "indicator": "https://ext3user.vectoraltimeter.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:03:52 UTC", "last_seen": "2026-03-23 09:03:52 UTC", "sightings": 1 }, { "indicator": "http://115.59.68.209:50623/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 09:03:51 UTC", "last_seen": "2026-03-23 09:03:51 UTC", "sightings": 1 }, { "indicator": "https://ext3field.remotediagnosticlink.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:03:51 UTC", "last_seen": "2026-03-23 09:03:51 UTC", "sightings": 1 }, { "indicator": "https://cl1proc.quantumbufferlink.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:03:50 UTC", "last_seen": "2026-03-23 09:03:50 UTC", "sightings": 1 }, { "indicator": "https://dev3local.photonicdatanode.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:03:50 UTC", "last_seen": "2026-03-23 09:03:50 UTC", "sightings": 1 }, { "indicator": "https://normesh1ex.tr1bekit.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:03:50 UTC", "last_seen": "2026-03-23 09:03:50 UTC", "sightings": 1 }, { "indicator": "https://cl4link.fluxoverificator.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:03:49 UTC", "last_seen": "2026-03-23 09:03:49 UTC", "sightings": 1 }, { "indicator": "https://rstaj.storm-ink.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:03:49 UTC", "last_seen": "2026-03-23 09:03:49 UTC", "sightings": 1 }, { "indicator": "https://ext1proc.synchrometrichub.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:03:48 UTC", "last_seen": "2026-03-23 09:03:48 UTC", "sightings": 1 }, { "indicator": "https://trivaleum7.worldcla.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:03:45 UTC", "last_seen": "2026-03-23 09:03:45 UTC", "sightings": 1 }, { "indicator": "https://cl1proc.logicmetricgate.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:03:43 UTC", "last_seen": "2026-03-23 09:03:43 UTC", "sightings": 1 }, { "indicator": "https://shoalthorn.gobright.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:03:42 UTC", "last_seen": "2026-03-23 09:03:42 UTC", "sightings": 1 }, { "indicator": "https://qekmfeu.qy7mral.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:03:42 UTC", "last_seen": "2026-03-23 09:03:42 UTC", "sightings": 1 }, { "indicator": "https://710fdch.ravenloop.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:03:41 UTC", "last_seen": "2026-03-23 09:03:41 UTC", "sightings": 1 }, { "indicator": "https://forgeledg.clocknet.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:03:41 UTC", "last_seen": "2026-03-23 09:03:41 UTC", "sightings": 1 }, { "indicator": "https://res1infra.applicationservice.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:03:41 UTC", "last_seen": "2026-03-23 09:03:41 UTC", "sightings": 1 }, { "indicator": "https://svc3local.modulardatastream.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:03:40 UTC", "last_seen": "2026-03-23 09:03:40 UTC", "sightings": 1 }, { "indicator": "https://hub2proxy.infrastructurestream.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:03:40 UTC", "last_seen": "2026-03-23 09:03:40 UTC", "sightings": 1 }, { "indicator": "https://gwqs23ca.temprock.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:03:40 UTC", "last_seen": "2026-03-23 09:03:40 UTC", "sightings": 1 }, { "indicator": "https://int4sat.distributedlogicunit.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:03:39 UTC", "last_seen": "2026-03-23 09:03:39 UTC", "sightings": 1 }, { "indicator": "https://kk54.joksserver.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-23 09:03:39 UTC", "last_seen": "2026-03-23 09:03:39 UTC", "sightings": 1 }, { "indicator": "https://umhbryzn.respecti.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:03:39 UTC", "last_seen": "2026-03-23 09:03:39 UTC", "sightings": 1 }, { "indicator": "https://rocdyna.si1kforge.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:03:37 UTC", "last_seen": "2026-03-23 09:03:37 UTC", "sightings": 1 }, { "indicator": "https://svc3view.protopathfinder.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:03:36 UTC", "last_seen": "2026-03-23 09:03:36 UTC", "sightings": 1 }, { "indicator": "https://qu3ry-glow.fileost.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:03:36 UTC", "last_seen": "2026-03-23 09:03:36 UTC", "sightings": 1 }, { "indicator": "https://convertdri.bravevro.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:03:35 UTC", "last_seen": "2026-03-23 09:03:35 UTC", "sightings": 1 }, { "indicator": "https://ext3ghost.vectorstreamlink.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:03:35 UTC", "last_seen": "2026-03-23 09:03:35 UTC", "sightings": 1 }, { "indicator": "https://svc2point.protopathfinder.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:03:35 UTC", "last_seen": "2026-03-23 09:03:35 UTC", "sightings": 1 }, { "indicator": "http://59.97.252.231:36936/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-23 09:03:35 UTC", "last_seen": "2026-03-23 09:03:35 UTC", "sightings": 1 }, { "indicator": "https://firmwarevale.bravevro.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:03:34 UTC", "last_seen": "2026-03-23 09:03:34 UTC", "sightings": 1 }, { "indicator": "https://discovership.worldcla.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:03:34 UTC", "last_seen": "2026-03-23 09:03:34 UTC", "sightings": 1 }, { "indicator": "https://svc1infra.systemictracebox.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:03:34 UTC", "last_seen": "2026-03-23 09:03:34 UTC", "sightings": 1 }, { "indicator": "https://cl3dev.fluxoverificator.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:03:34 UTC", "last_seen": "2026-03-23 09:03:34 UTC", "sightings": 1 }, { "indicator": "https://cl3view.logicmetricgate.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:03:33 UTC", "last_seen": "2026-03-23 09:03:33 UTC", "sightings": 1 }, { "indicator": "https://svc2base.systemictracebox.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:03:33 UTC", "last_seen": "2026-03-23 09:03:33 UTC", "sightings": 1 }, { "indicator": "https://rn1x-mesh.catflow.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:03:33 UTC", "last_seen": "2026-03-23 09:03:33 UTC", "sightings": 1 }, { "indicator": "https://ext4space.synchrometrichub.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:03:33 UTC", "last_seen": "2026-03-23 09:03:33 UTC", "sightings": 1 }, { "indicator": "https://goo8039f.catflat.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:03:33 UTC", "last_seen": "2026-03-23 09:03:33 UTC", "sightings": 1 }, { "indicator": "https://ext4view.vectorstreamlink.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:03:33 UTC", "last_seen": "2026-03-23 09:03:33 UTC", "sightings": 1 }, { "indicator": "https://svc4sat.activefusioncore.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:03:33 UTC", "last_seen": "2026-03-23 09:03:33 UTC", "sightings": 1 }, { "indicator": "https://kelvenum.getverif.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:03:32 UTC", "last_seen": "2026-03-23 09:03:32 UTC", "sightings": 1 }, { "indicator": "https://p4st-logic.fileost.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:03:32 UTC", "last_seen": "2026-03-23 09:03:32 UTC", "sightings": 1 }, { "indicator": "https://67hl8p.yellglass.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:03:31 UTC", "last_seen": "2026-03-23 09:03:31 UTC", "sightings": 1 }, { "indicator": "https://ijl3voy.temprock.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:03:30 UTC", "last_seen": "2026-03-23 09:03:30 UTC", "sightings": 1 }, { "indicator": "https://sollithal.respecti.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:03:30 UTC", "last_seen": "2026-03-23 09:03:30 UTC", "sightings": 1 }, { "indicator": "https://ewt2o.catflat.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:03:29 UTC", "last_seen": "2026-03-23 09:03:29 UTC", "sightings": 1 }, { "indicator": "https://reportobserve.fileost.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:03:27 UTC", "last_seen": "2026-03-23 09:03:27 UTC", "sightings": 1 }, { "indicator": "https://cl2core.quantumbufferlink.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:03:26 UTC", "last_seen": "2026-03-23 09:03:26 UTC", "sightings": 1 }, { "indicator": "https://ext1meta.topologygatehub.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:03:25 UTC", "last_seen": "2026-03-23 09:03:25 UTC", "sightings": 1 }, { "indicator": "https://cl2point.logicmetricgate.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:03:25 UTC", "last_seen": "2026-03-23 09:03:25 UTC", "sightings": 1 }, { "indicator": "https://cl1sync.orbitaltraceunit.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:03:24 UTC", "last_seen": "2026-03-23 09:03:24 UTC", "sightings": 1 }, { "indicator": "https://res1proc.operationalgateway.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:03:21 UTC", "last_seen": "2026-03-23 09:03:21 UTC", "sightings": 1 }, { "indicator": "https://cedar-focu.catflow.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:03:20 UTC", "last_seen": "2026-03-23 09:03:20 UTC", "sightings": 1 }, { "indicator": "https://ext1infra.vectoraltimeter.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:03:20 UTC", "last_seen": "2026-03-23 09:03:20 UTC", "sightings": 1 }, { "indicator": "https://ext2outer.remotediagnosticlink.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:03:19 UTC", "last_seen": "2026-03-23 09:03:19 UTC", "sightings": 1 }, { "indicator": "https://hub3data.infrastructurestream.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:03:19 UTC", "last_seen": "2026-03-23 09:03:19 UTC", "sightings": 1 }, { "indicator": "https://dev4work.photonicdatanode.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:03:19 UTC", "last_seen": "2026-03-23 09:03:19 UTC", "sightings": 1 }, { "indicator": "https://cpz2.way2dot.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:03:19 UTC", "last_seen": "2026-03-23 09:03:19 UTC", "sightings": 1 }, { "indicator": "https://tpbr.intechvaraible.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:03:17 UTC", "last_seen": "2026-03-23 09:03:17 UTC", "sightings": 1 }, { "indicator": "https://zen-lineis.bravevro.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:03:15 UTC", "last_seen": "2026-03-23 09:03:15 UTC", "sightings": 1 }, { "indicator": "https://api8-well.slowcube.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:03:13 UTC", "last_seen": "2026-03-23 09:03:13 UTC", "sightings": 1 }, { "indicator": "https://cl1nic3-point.officeco.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:03:13 UTC", "last_seen": "2026-03-23 09:03:13 UTC", "sightings": 1 }, { "indicator": "https://cl3dev.microflowprocess.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:03:12 UTC", "last_seen": "2026-03-23 09:03:12 UTC", "sightings": 1 }, { "indicator": "https://gr4n-spool.way2dot.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:03:12 UTC", "last_seen": "2026-03-23 09:03:12 UTC", "sightings": 1 }, { "indicator": "https://ext3data.thermalmetrichub.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:03:12 UTC", "last_seen": "2026-03-23 09:03:12 UTC", "sightings": 1 }, { "indicator": "https://dev2power.photonicdatanode.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:03:10 UTC", "last_seen": "2026-03-23 09:03:10 UTC", "sightings": 1 }, { "indicator": "http://42.236.222.86:58675/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-23 09:03:09 UTC", "last_seen": "2026-03-23 09:03:09 UTC", "sightings": 1 }, { "indicator": "https://shad-wave.temprock.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 09:03:08 UTC", "last_seen": "2026-03-23 09:03:08 UTC", "sightings": 1 }, { "indicator": "https://msk4point.datacenterstream.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:50:42 UTC", "last_seen": "2026-03-23 08:50:42 UTC", "sightings": 1 }, { "indicator": "https://n4rr-wave.gobright.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:50:42 UTC", "last_seen": "2026-03-23 08:50:42 UTC", "sightings": 1 }, { "indicator": "https://cl1proc.signalpathfinder.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:50:42 UTC", "last_seen": "2026-03-23 08:50:42 UTC", "sightings": 1 }, { "indicator": "https://int1proc.virtualgatekeeper.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:50:42 UTC", "last_seen": "2026-03-23 08:50:42 UTC", "sightings": 1 }, { "indicator": "https://svc4link.binaryflowbuffer.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:50:41 UTC", "last_seen": "2026-03-23 08:50:41 UTC", "sightings": 1 }, { "indicator": "https://dev1proc.vectorquantizer.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:50:41 UTC", "last_seen": "2026-03-23 08:50:41 UTC", "sightings": 1 }, { "indicator": "https://dev4work.vectorquantizer.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:50:41 UTC", "last_seen": "2026-03-23 08:50:41 UTC", "sightings": 1 }, { "indicator": "https://cl4sat.linearductnode.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:50:41 UTC", "last_seen": "2026-03-23 08:50:41 UTC", "sightings": 1 }, { "indicator": "https://res2point.operationalgateway.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:50:41 UTC", "last_seen": "2026-03-23 08:50:41 UTC", "sightings": 1 }, { "indicator": "https://rt3user.protocolanalyzer.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:50:41 UTC", "last_seen": "2026-03-23 08:50:41 UTC", "sightings": 1 }, { "indicator": "https://splitcrim.dotnet.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:50:41 UTC", "last_seen": "2026-03-23 08:50:41 UTC", "sightings": 1 }, { "indicator": "https://loc4view.managementresource.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:50:40 UTC", "last_seen": "2026-03-23 08:50:40 UTC", "sightings": 1 }, { "indicator": "https://int3core.distributedlogicunit.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:50:40 UTC", "last_seen": "2026-03-23 08:50:40 UTC", "sightings": 1 }, { "indicator": "https://freshbuil.protdast.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:50:40 UTC", "last_seen": "2026-03-23 08:50:40 UTC", "sightings": 1 }, { "indicator": "https://pnt3field.connectivitybuffer.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:50:38 UTC", "last_seen": "2026-03-23 08:50:38 UTC", "sightings": 1 }, { "indicator": "https://msk2power.endpointvalidator.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:50:38 UTC", "last_seen": "2026-03-23 08:50:38 UTC", "sightings": 1 }, { "indicator": "https://vld3view.dynamictelemetry.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:50:37 UTC", "last_seen": "2026-03-23 08:50:37 UTC", "sightings": 1 }, { "indicator": "https://rt3gate.integritychecker.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:50:37 UTC", "last_seen": "2026-03-23 08:50:37 UTC", "sightings": 1 }, { "indicator": "https://233sum.yardcloud.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:50:36 UTC", "last_seen": "2026-03-23 08:50:36 UTC", "sightings": 1 }, { "indicator": "https://msk2data.distributedledger.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:50:35 UTC", "last_seen": "2026-03-23 08:50:35 UTC", "sightings": 1 }, { "indicator": "https://svc3data.activetensorbase.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:50:35 UTC", "last_seen": "2026-03-23 08:50:35 UTC", "sightings": 1 }, { "indicator": "https://web3.terminalobserver.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:50:34 UTC", "last_seen": "2026-03-23 08:50:34 UTC", "sightings": 1 }, { "indicator": "https://sub-atornic.cloudvariable.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:50:32 UTC", "last_seen": "2026-03-23 08:50:32 UTC", "sightings": 1 }, { "indicator": "https://cl3dev.spectralunitgate.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:50:31 UTC", "last_seen": "2026-03-23 08:50:31 UTC", "sightings": 1 }, { "indicator": "https://ext4sync.topologygatehub.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:50:31 UTC", "last_seen": "2026-03-23 08:50:31 UTC", "sightings": 1 }, { "indicator": "https://ext3data.thermalmatrixlink.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:50:31 UTC", "last_seen": "2026-03-23 08:50:31 UTC", "sightings": 1 }, { "indicator": "http://ext1meta.securityaccessgateway.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 08:50:30 UTC", "last_seen": "2026-03-23 08:50:30 UTC", "sightings": 1 }, { "indicator": "https://cl2remote.tensorstorageunit.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:50:27 UTC", "last_seen": "2026-03-23 08:50:27 UTC", "sightings": 1 }, { "indicator": "https://rt4link.protocolanalyzer.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:50:27 UTC", "last_seen": "2026-03-23 08:50:27 UTC", "sightings": 1 }, { "indicator": "https://ext4view.tensorpointlink.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:50:27 UTC", "last_seen": "2026-03-23 08:50:27 UTC", "sightings": 1 }, { "indicator": "https://pnt2base.diagnosticendpoint.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:50:27 UTC", "last_seen": "2026-03-23 08:50:27 UTC", "sightings": 1 }, { "indicator": "https://ext1meta.analyticalhubnode.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:50:26 UTC", "last_seen": "2026-03-23 08:50:26 UTC", "sightings": 1 }, { "indicator": "https://dispatchvoi.cloudvariable.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:50:25 UTC", "last_seen": "2026-03-23 08:50:25 UTC", "sightings": 1 }, { "indicator": "https://ext2core.tensorpointlink.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:50:25 UTC", "last_seen": "2026-03-23 08:50:25 UTC", "sightings": 1 }, { "indicator": "http://sandboxairway.n1ghtlark.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 08:50:24 UTC", "last_seen": "2026-03-23 08:50:24 UTC", "sightings": 1 }, { "indicator": "http://zen-spireos.engineeringtech.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 08:50:23 UTC", "last_seen": "2026-03-23 08:50:23 UTC", "sightings": 1 }, { "indicator": "https://pnt4link.diagnosticendpoint.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:50:23 UTC", "last_seen": "2026-03-23 08:50:23 UTC", "sightings": 1 }, { "indicator": "https://kellitha4.cloudvariable.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:50:23 UTC", "last_seen": "2026-03-23 08:50:23 UTC", "sightings": 1 }, { "indicator": "http://s3-web-infra.ferroviva.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:50:21 UTC", "last_seen": "2026-03-23 08:50:21 UTC", "sightings": 1 }, { "indicator": "http://serven7al.cloudgloss.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 08:50:21 UTC", "last_seen": "2026-03-23 08:50:21 UTC", "sightings": 1 }, { "indicator": "https://cfg2steel.networkoptimizer.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:50:21 UTC", "last_seen": "2026-03-23 08:50:21 UTC", "sightings": 1 }, { "indicator": "https://pnt3gate.infrastructurecloud.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:50:21 UTC", "last_seen": "2026-03-23 08:50:21 UTC", "sightings": 1 }, { "indicator": "https://rt2base.protocolanalyzer.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:50:20 UTC", "last_seen": "2026-03-23 08:50:20 UTC", "sightings": 1 }, { "indicator": "https://tren-mesh.foxbyte.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:50:20 UTC", "last_seen": "2026-03-23 08:50:20 UTC", "sightings": 1 }, { "indicator": "http://svc4static.oscilloflowunit.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 08:50:19 UTC", "last_seen": "2026-03-23 08:50:19 UTC", "sightings": 1 }, { "indicator": "https://bjsoik.checkingsum.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:50:19 UTC", "last_seen": "2026-03-23 08:50:19 UTC", "sightings": 1 }, { "indicator": "https://p01nt.logicflowmanager.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:50:18 UTC", "last_seen": "2026-03-23 08:50:18 UTC", "sightings": 1 }, { "indicator": "https://ext4sync.analyticalhubnode.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:50:18 UTC", "last_seen": "2026-03-23 08:50:18 UTC", "sightings": 1 }, { "indicator": "https://cl4link.spectralunitgate.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:50:18 UTC", "last_seen": "2026-03-23 08:50:18 UTC", "sightings": 1 }, { "indicator": "http://velforgeex.storm-ink.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 08:50:17 UTC", "last_seen": "2026-03-23 08:50:17 UTC", "sightings": 1 }, { "indicator": "https://mooinne.highligh.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 08:50:17 UTC", "last_seen": "2026-03-23 08:50:17 UTC", "sightings": 1 }, { "indicator": "https://int2steel.distributedlogicunit.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:50:16 UTC", "last_seen": "2026-03-23 08:50:16 UTC", "sightings": 1 }, { "indicator": "https://cl1store.microflowprocess.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:50:16 UTC", "last_seen": "2026-03-23 08:50:16 UTC", "sightings": 1 }, { "indicator": "https://vld2point.dynamictelemetry.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:50:15 UTC", "last_seen": "2026-03-23 08:50:15 UTC", "sightings": 1 }, { "indicator": "https://pnt2outer.connectivitybuffer.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:50:13 UTC", "last_seen": "2026-03-23 08:50:13 UTC", "sightings": 1 }, { "indicator": "http://xpj5ocpo.way2dot.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 08:50:11 UTC", "last_seen": "2026-03-23 08:50:11 UTC", "sightings": 1 }, { "indicator": "https://cfg4sat.networkoptimizer.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:50:11 UTC", "last_seen": "2026-03-23 08:50:11 UTC", "sightings": 1 }, { "indicator": "http://proto-p1an.getlight.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 08:50:11 UTC", "last_seen": "2026-03-23 08:50:11 UTC", "sightings": 1 }, { "indicator": "https://msk1proc.gatewayprocessor.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:50:11 UTC", "last_seen": "2026-03-23 08:50:11 UTC", "sightings": 1 }, { "indicator": "https://msk2proxy.datacenterstream.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:50:10 UTC", "last_seen": "2026-03-23 08:50:10 UTC", "sightings": 1 }, { "indicator": "https://dev3local.vectorquantizer.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:50:09 UTC", "last_seen": "2026-03-23 08:50:09 UTC", "sightings": 1 }, { "indicator": "https://msk2point.gatewayprocessor.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:50:08 UTC", "last_seen": "2026-03-23 08:50:08 UTC", "sightings": 1 }, { "indicator": "https://svc1infra.binaryflowbuffer.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:50:08 UTC", "last_seen": "2026-03-23 08:50:08 UTC", "sightings": 1 }, { "indicator": "https://loc3dev.telemetryinterface.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:50:07 UTC", "last_seen": "2026-03-23 08:50:07 UTC", "sightings": 1 }, { "indicator": "http://6gx6.dotnet.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 08:50:07 UTC", "last_seen": "2026-03-23 08:50:07 UTC", "sightings": 1 }, { "indicator": "http://neo-dep0.biglight.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 08:50:07 UTC", "last_seen": "2026-03-23 08:50:07 UTC", "sightings": 1 }, { "indicator": "http://dussil.quick-fern.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 08:50:07 UTC", "last_seen": "2026-03-23 08:50:07 UTC", "sightings": 1 }, { "indicator": "http://6ohi.silkforge.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 08:50:07 UTC", "last_seen": "2026-03-23 08:50:07 UTC", "sightings": 1 }, { "indicator": "https://ext2proc.hydrofluxstorage.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:50:07 UTC", "last_seen": "2026-03-23 08:50:07 UTC", "sightings": 1 }, { "indicator": "http://byte-ster.tatneft.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 08:50:05 UTC", "last_seen": "2026-03-23 08:50:05 UTC", "sightings": 1 }, { "indicator": "http://ledge8-route.vectorsend.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 08:50:05 UTC", "last_seen": "2026-03-23 08:50:05 UTC", "sightings": 1 }, { "indicator": "http://jqzgl.briskvale.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 08:50:01 UTC", "last_seen": "2026-03-23 08:50:01 UTC", "sightings": 1 }, { "indicator": "https://msk4work.endpointvalidator.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:50:00 UTC", "last_seen": "2026-03-23 08:50:00 UTC", "sightings": 1 }, { "indicator": "https://rt2outer.terminalobserver.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:50:00 UTC", "last_seen": "2026-03-23 08:50:00 UTC", "sightings": 1 }, { "indicator": "https://vld4path.dynamictelemetry.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:49:59 UTC", "last_seen": "2026-03-23 08:49:59 UTC", "sightings": 1 }, { "indicator": "https://pnt1infra.diagnosticendpoint.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:49:59 UTC", "last_seen": "2026-03-23 08:49:59 UTC", "sightings": 1 }, { "indicator": "https://ext1sync.volumetricproxy.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:49:59 UTC", "last_seen": "2026-03-23 08:49:59 UTC", "sightings": 1 }, { "indicator": "https://dc4point.applicationbuffer.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:49:59 UTC", "last_seen": "2026-03-23 08:49:59 UTC", "sightings": 1 }, { "indicator": "https://dynlineum5.dotnet.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:49:59 UTC", "last_seen": "2026-03-23 08:49:59 UTC", "sightings": 1 }, { "indicator": "https://quot-hidd.protdast.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:49:59 UTC", "last_seen": "2026-03-23 08:49:59 UTC", "sightings": 1 }, { "indicator": "http://q4-dev-host.terralibre.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:49:58 UTC", "last_seen": "2026-03-23 08:49:58 UTC", "sightings": 1 }, { "indicator": "https://dev3field.chromadatacenter.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:49:58 UTC", "last_seen": "2026-03-23 08:49:58 UTC", "sightings": 1 }, { "indicator": "http://pitch6-signal.todayglow.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 08:49:58 UTC", "last_seen": "2026-03-23 08:49:58 UTC", "sightings": 1 }, { "indicator": "https://cl2data.orbitaltraceunit.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:49:58 UTC", "last_seen": "2026-03-23 08:49:58 UTC", "sightings": 1 }, { "indicator": "https://svc3edge.spectralsyncunit.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:49:58 UTC", "last_seen": "2026-03-23 08:49:58 UTC", "sightings": 1 }, { "indicator": "https://lumven3al.cloudvariable.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:49:57 UTC", "last_seen": "2026-03-23 08:49:57 UTC", "sightings": 1 }, { "indicator": "https://dev4space.chromadatacenter.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:49:57 UTC", "last_seen": "2026-03-23 08:49:57 UTC", "sightings": 1 }, { "indicator": "https://srv1proc.virtualenvironment.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:49:57 UTC", "last_seen": "2026-03-23 08:49:57 UTC", "sightings": 1 }, { "indicator": "https://vld1proc.dynamictelemetry.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:49:57 UTC", "last_seen": "2026-03-23 08:49:57 UTC", "sightings": 1 }, { "indicator": "https://cfg4link.resourcebalancer.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:49:57 UTC", "last_seen": "2026-03-23 08:49:57 UTC", "sightings": 1 }, { "indicator": "http://alt-4g3nt.oilglass.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 08:49:55 UTC", "last_seen": "2026-03-23 08:49:55 UTC", "sightings": 1 }, { "indicator": "https://svc2data.spectralsyncunit.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:49:55 UTC", "last_seen": "2026-03-23 08:49:55 UTC", "sightings": 1 }, { "indicator": "https://int1store.securitybackbone.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:49:52 UTC", "last_seen": "2026-03-23 08:49:52 UTC", "sightings": 1 }, { "indicator": "https://svc2data.opticalsensorhub.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:49:51 UTC", "last_seen": "2026-03-23 08:49:51 UTC", "sightings": 1 }, { "indicator": "http://hub1sync.terminaldataprocessor.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 08:49:51 UTC", "last_seen": "2026-03-23 08:49:51 UTC", "sightings": 1 }, { "indicator": "https://oh4ndjz.c1vicsun.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:49:50 UTC", "last_seen": "2026-03-23 08:49:50 UTC", "sightings": 1 }, { "indicator": "http://taltide2ex.si1kforge.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 08:49:50 UTC", "last_seen": "2026-03-23 08:49:50 UTC", "sightings": 1 }, { "indicator": "https://querybra.lumen-rift.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:49:49 UTC", "last_seen": "2026-03-23 08:49:49 UTC", "sightings": 1 }, { "indicator": "http://svc3edge.oscilloflowunit.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 08:49:49 UTC", "last_seen": "2026-03-23 08:49:49 UTC", "sightings": 1 }, { "indicator": "http://banne4-frame.backyard.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 08:49:48 UTC", "last_seen": "2026-03-23 08:49:48 UTC", "sightings": 1 }, { "indicator": "https://prox-route.yardcloud.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:49:48 UTC", "last_seen": "2026-03-23 08:49:48 UTC", "sightings": 1 }, { "indicator": "https://ext3field.coreconnectivity.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:49:48 UTC", "last_seen": "2026-03-23 08:49:48 UTC", "sightings": 1 }, { "indicator": "https://ytp1swow.fotestat.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 08:49:47 UTC", "last_seen": "2026-03-23 08:49:47 UTC", "sightings": 1 }, { "indicator": "http://nobl-lan.frost-pixel.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 08:49:47 UTC", "last_seen": "2026-03-23 08:49:47 UTC", "sightings": 1 }, { "indicator": "https://ext1meta.geospatialnode.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:49:47 UTC", "last_seen": "2026-03-23 08:49:47 UTC", "sightings": 1 }, { "indicator": "https://dc1infra.applicationbuffer.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:49:46 UTC", "last_seen": "2026-03-23 08:49:46 UTC", "sightings": 1 }, { "indicator": "http://aejq9b.cloudgloss.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 08:49:45 UTC", "last_seen": "2026-03-23 08:49:45 UTC", "sightings": 1 }, { "indicator": "https://ext4space.coreconnectivity.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:49:45 UTC", "last_seen": "2026-03-23 08:49:45 UTC", "sightings": 1 }, { "indicator": "http://tri-meshon.silkforge.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 08:49:45 UTC", "last_seen": "2026-03-23 08:49:45 UTC", "sightings": 1 }, { "indicator": "http://f4-base-infra.velocicorsa.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:49:45 UTC", "last_seen": "2026-03-23 08:49:45 UTC", "sightings": 1 }, { "indicator": "http://w0rk3r2-leaf.intechvaraible.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 08:49:44 UTC", "last_seen": "2026-03-23 08:49:44 UTC", "sightings": 1 }, { "indicator": "http://airbay.ravenloop.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 08:49:44 UTC", "last_seen": "2026-03-23 08:49:44 UTC", "sightings": 1 }, { "indicator": "https://loc1store.telemetryinterface.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:49:43 UTC", "last_seen": "2026-03-23 08:49:43 UTC", "sightings": 1 }, { "indicator": "https://byte-ster.tatneft.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 08:49:43 UTC", "last_seen": "2026-03-23 08:49:43 UTC", "sightings": 1 }, { "indicator": "https://msk3edge.distributedledger.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:49:43 UTC", "last_seen": "2026-03-23 08:49:43 UTC", "sightings": 1 }, { "indicator": "https://svc4static.signalflowmetrics.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:49:43 UTC", "last_seen": "2026-03-23 08:49:43 UTC", "sightings": 1 }, { "indicator": "https://hello1.aiqworldwide.ai/trans.gif?70fb2d96c0245047f1412a5c1f5b3373", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 08:49:42 UTC", "last_seen": "2026-03-23 08:49:42 UTC", "sightings": 1 }, { "indicator": "https://vorven5um.snap-echo.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:49:42 UTC", "last_seen": "2026-03-23 08:49:42 UTC", "sightings": 1 }, { "indicator": "https://loc1infra.analyticspipeline.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:49:42 UTC", "last_seen": "2026-03-23 08:49:42 UTC", "sightings": 1 }, { "indicator": "https://msk1proc.endpointvalidator.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:49:42 UTC", "last_seen": "2026-03-23 08:49:42 UTC", "sightings": 1 }, { "indicator": "https://loyalcinema.lumen-rift.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:49:42 UTC", "last_seen": "2026-03-23 08:49:42 UTC", "sightings": 1 }, { "indicator": "http://unl25bit.getverif.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 08:49:42 UTC", "last_seen": "2026-03-23 08:49:42 UTC", "sightings": 1 }, { "indicator": "http://t1d3-reach.backyard.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 08:49:41 UTC", "last_seen": "2026-03-23 08:49:41 UTC", "sightings": 1 }, { "indicator": "https://5har-crest.c1vicsun.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:49:41 UTC", "last_seen": "2026-03-23 08:49:41 UTC", "sightings": 1 }, { "indicator": "http://notifiersenso.gobright.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 08:49:41 UTC", "last_seen": "2026-03-23 08:49:41 UTC", "sightings": 1 }, { "indicator": "http://shoal7-forge.storm-ink.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 08:49:41 UTC", "last_seen": "2026-03-23 08:49:41 UTC", "sightings": 1 }, { "indicator": "https://ext4space.remotediagnosticlink.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:49:40 UTC", "last_seen": "2026-03-23 08:49:40 UTC", "sightings": 1 }, { "indicator": "https://br4nd-crest.dotnet.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:49:40 UTC", "last_seen": "2026-03-23 08:49:40 UTC", "sightings": 1 }, { "indicator": "https://pr1me9-pulse.foxbyte.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:49:40 UTC", "last_seen": "2026-03-23 08:49:40 UTC", "sightings": 1 }, { "indicator": "http://ext1meta.cartopointgate.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 08:49:40 UTC", "last_seen": "2026-03-23 08:49:40 UTC", "sightings": 1 }, { "indicator": "https://frostmac.c1vicsun.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:49:40 UTC", "last_seen": "2026-03-23 08:49:40 UTC", "sightings": 1 }, { "indicator": "https://vld4point.logicflowmanager.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:49:39 UTC", "last_seen": "2026-03-23 08:49:39 UTC", "sightings": 1 }, { "indicator": "http://laneserv.protdast.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 08:49:39 UTC", "last_seen": "2026-03-23 08:49:39 UTC", "sightings": 1 }, { "indicator": "https://rt1meta.integritychecker.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:49:38 UTC", "last_seen": "2026-03-23 08:49:38 UTC", "sightings": 1 }, { "indicator": "http://gjugxvg.easttea.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 08:49:38 UTC", "last_seen": "2026-03-23 08:49:38 UTC", "sightings": 1 }, { "indicator": "https://validat-gri.tatneft.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 08:49:38 UTC", "last_seen": "2026-03-23 08:49:38 UTC", "sightings": 1 }, { "indicator": "https://pnt4space.connectivitybuffer.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:49:38 UTC", "last_seen": "2026-03-23 08:49:38 UTC", "sightings": 1 }, { "indicator": "https://cfg4view.interfacehandler.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:49:37 UTC", "last_seen": "2026-03-23 08:49:37 UTC", "sightings": 1 }, { "indicator": "http://tal-lineal.glowmire.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 08:49:37 UTC", "last_seen": "2026-03-23 08:49:37 UTC", "sightings": 1 }, { "indicator": "https://clipfactor.hostingvar.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:49:35 UTC", "last_seen": "2026-03-23 08:49:35 UTC", "sightings": 1 }, { "indicator": "https://cl2point.signalpathfinder.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:49:33 UTC", "last_seen": "2026-03-23 08:49:33 UTC", "sightings": 1 }, { "indicator": "https://srv2outer.virtualenvironment.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:49:33 UTC", "last_seen": "2026-03-23 08:49:33 UTC", "sightings": 1 }, { "indicator": "http://hub1infra.infrastructurestream.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 08:49:33 UTC", "last_seen": "2026-03-23 08:49:33 UTC", "sightings": 1 }, { "indicator": "https://t0k35-hinge.driftoak.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:49:32 UTC", "last_seen": "2026-03-23 08:49:32 UTC", "sightings": 1 }, { "indicator": "https://our.datacenterstream.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:49:32 UTC", "last_seen": "2026-03-23 08:49:32 UTC", "sightings": 1 }, { "indicator": "https://soldra1um.briskvale.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:49:31 UTC", "last_seen": "2026-03-23 08:49:31 UTC", "sightings": 1 }, { "indicator": "http://ytp1swow.fotestat.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 08:49:31 UTC", "last_seen": "2026-03-23 08:49:31 UTC", "sightings": 1 }, { "indicator": "https://ibdd.briskvale.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:49:31 UTC", "last_seen": "2026-03-23 08:49:31 UTC", "sightings": 1 }, { "indicator": "http://n8-api-remote.terralibre.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:49:30 UTC", "last_seen": "2026-03-23 08:49:30 UTC", "sightings": 1 }, { "indicator": "https://cfg2remote.resourcebalancer.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:49:29 UTC", "last_seen": "2026-03-23 08:49:29 UTC", "sightings": 1 }, { "indicator": "https://ext3gate.topologygatehub.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:49:29 UTC", "last_seen": "2026-03-23 08:49:29 UTC", "sightings": 1 }, { "indicator": "http://plasmatransmit.gobright.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 08:49:29 UTC", "last_seen": "2026-03-23 08:49:29 UTC", "sightings": 1 }, { "indicator": "http://rmly.onelight.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 08:49:27 UTC", "last_seen": "2026-03-23 08:49:27 UTC", "sightings": 1 }, { "indicator": "https://int1proc.systemicvalidator.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:49:27 UTC", "last_seen": "2026-03-23 08:49:27 UTC", "sightings": 1 }, { "indicator": "http://schema-well.checkingsum.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 08:49:27 UTC", "last_seen": "2026-03-23 08:49:27 UTC", "sightings": 1 }, { "indicator": "https://int4view.virtualgatekeeper.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:49:27 UTC", "last_seen": "2026-03-23 08:49:27 UTC", "sightings": 1 }, { "indicator": "http://solvenum.norsdwest.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 08:49:26 UTC", "last_seen": "2026-03-23 08:49:26 UTC", "sightings": 1 }, { "indicator": "https://loc2remote.telemetryinterface.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:49:26 UTC", "last_seen": "2026-03-23 08:49:26 UTC", "sightings": 1 }, { "indicator": "http://voic9-branch.ravenloop.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 08:49:25 UTC", "last_seen": "2026-03-23 08:49:25 UTC", "sightings": 1 }, { "indicator": "https://ext2proxy.thermalmetrichub.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:49:24 UTC", "last_seen": "2026-03-23 08:49:24 UTC", "sightings": 1 }, { "indicator": "http://lumlithal.checkingsum.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 08:49:23 UTC", "last_seen": "2026-03-23 08:49:23 UTC", "sightings": 1 }, { "indicator": "https://app3core.distributedmatrix.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:49:23 UTC", "last_seen": "2026-03-23 08:49:23 UTC", "sightings": 1 }, { "indicator": "https://ext1proc.tensorpointlink.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:49:23 UTC", "last_seen": "2026-03-23 08:49:23 UTC", "sightings": 1 }, { "indicator": "https://cfg3core.networkoptimizer.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:49:23 UTC", "last_seen": "2026-03-23 08:49:23 UTC", "sightings": 1 }, { "indicator": "https://int3core.systemicvalidator.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:49:23 UTC", "last_seen": "2026-03-23 08:49:23 UTC", "sightings": 1 }, { "indicator": "http://hub3local.systemintegritynode.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 08:49:22 UTC", "last_seen": "2026-03-23 08:49:22 UTC", "sightings": 1 }, { "indicator": "https://msk4static.distributedledger.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:49:22 UTC", "last_seen": "2026-03-23 08:49:22 UTC", "sightings": 1 }, { "indicator": "https://ext3gate.volumetricproxy.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:49:22 UTC", "last_seen": "2026-03-23 08:49:22 UTC", "sightings": 1 }, { "indicator": "http://d8-net-global.velocicorsa.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:49:21 UTC", "last_seen": "2026-03-23 08:49:21 UTC", "sightings": 1 }, { "indicator": "http://voadtm.glowmire.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 08:49:21 UTC", "last_seen": "2026-03-23 08:49:21 UTC", "sightings": 1 }, { "indicator": "https://res1proc.platformcontroller.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:49:20 UTC", "last_seen": "2026-03-23 08:49:20 UTC", "sightings": 1 }, { "indicator": "http://vendo-vali.n1ghtlark.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 08:49:20 UTC", "last_seen": "2026-03-23 08:49:20 UTC", "sightings": 1 }, { "indicator": "http://merdraor6.silkforge.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 08:49:19 UTC", "last_seen": "2026-03-23 08:49:19 UTC", "sightings": 1 }, { "indicator": "https://rt4sync.integritychecker.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:49:19 UTC", "last_seen": "2026-03-23 08:49:19 UTC", "sightings": 1 }, { "indicator": "https://n7-core-db.terrafirma.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 08:49:19 UTC", "last_seen": "2026-03-23 08:49:19 UTC", "sightings": 1 }, { "indicator": "http://rim-x7-outer.silberstromz.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:49:19 UTC", "last_seen": "2026-03-23 08:49:19 UTC", "sightings": 1 }, { "indicator": "https://ext2proc.volumetricproxy.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:49:18 UTC", "last_seen": "2026-03-23 08:49:18 UTC", "sightings": 1 }, { "indicator": "https://msk1sync.distributedledger.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:49:18 UTC", "last_seen": "2026-03-23 08:49:18 UTC", "sightings": 1 }, { "indicator": "https://download2343.mediafire.com/8k7grqrs7fzgtBERthbEuL8l4eKUVDbUMnVBKYDXQLaK1YrLVpSJ6dAaB24oOErv2P-u9ttsXz8ogA9863KE-BOlRZgwp6y26E6e2K8_sarIxqlikn27sCY8RdeMvYItfq0CRT9sHnQlpavO887-1EqrfhHxdo7oz-zwpUfUdg/lv2xyfq7r6aqedg/antic.pdf", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 08:49:17 UTC", "last_seen": "2026-03-23 08:49:17 UTC", "sightings": 1 }, { "indicator": "http://tvxiarw7.silkforge.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 08:49:16 UTC", "last_seen": "2026-03-23 08:49:16 UTC", "sightings": 1 }, { "indicator": "https://rt1proc.terminalobserver.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:49:16 UTC", "last_seen": "2026-03-23 08:49:16 UTC", "sightings": 1 }, { "indicator": "http://cour1e1-beam.cokenote.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 08:49:16 UTC", "last_seen": "2026-03-23 08:49:16 UTC", "sightings": 1 }, { "indicator": "https://cl4static.orbitaltraceunit.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:49:16 UTC", "last_seen": "2026-03-23 08:49:16 UTC", "sightings": 1 }, { "indicator": "https://rt2proc.integritychecker.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:49:16 UTC", "last_seen": "2026-03-23 08:49:16 UTC", "sightings": 1 }, { "indicator": "https://loc2power.networkcontroller.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:49:16 UTC", "last_seen": "2026-03-23 08:49:16 UTC", "sightings": 1 }, { "indicator": "https://dynspireon.vexmoor.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:49:16 UTC", "last_seen": "2026-03-23 08:49:16 UTC", "sightings": 1 }, { "indicator": "http://hub2data.terminaldataprocessor.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 08:49:15 UTC", "last_seen": "2026-03-23 08:49:15 UTC", "sightings": 1 }, { "indicator": "http://667hwn.si1kforge.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 08:49:15 UTC", "last_seen": "2026-03-23 08:49:15 UTC", "sightings": 1 }, { "indicator": "http://c2-core-sync.focozero.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:49:15 UTC", "last_seen": "2026-03-23 08:49:15 UTC", "sightings": 1 }, { "indicator": "http://shel-grid.intechvaraible.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 08:49:14 UTC", "last_seen": "2026-03-23 08:49:14 UTC", "sightings": 1 }, { "indicator": "http://micr-line.cloudgloss.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 08:49:14 UTC", "last_seen": "2026-03-23 08:49:14 UTC", "sightings": 1 }, { "indicator": "http://ext4sync.cartopointgate.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 08:49:14 UTC", "last_seen": "2026-03-23 08:49:14 UTC", "sightings": 1 }, { "indicator": "https://reag-ring.driftoak.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:49:14 UTC", "last_seen": "2026-03-23 08:49:14 UTC", "sightings": 1 }, { "indicator": "http://pr1me-zone.ravenloop.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 08:49:13 UTC", "last_seen": "2026-03-23 08:49:13 UTC", "sightings": 1 }, { "indicator": "http://tinytrai.glowmire.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 08:49:13 UTC", "last_seen": "2026-03-23 08:49:13 UTC", "sightings": 1 }, { "indicator": "https://int3dev.securitybackbone.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:49:12 UTC", "last_seen": "2026-03-23 08:49:12 UTC", "sightings": 1 }, { "indicator": "https://cl2remote.spectralunitgate.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:49:12 UTC", "last_seen": "2026-03-23 08:49:12 UTC", "sightings": 1 }, { "indicator": "http://vorven9is.cokenote.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 08:49:12 UTC", "last_seen": "2026-03-23 08:49:12 UTC", "sightings": 1 }, { "indicator": "https://a1zu.intechvaraible.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:49:10 UTC", "last_seen": "2026-03-23 08:49:10 UTC", "sightings": 1 }, { "indicator": "https://y0cc.briskvale.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:49:10 UTC", "last_seen": "2026-03-23 08:49:10 UTC", "sightings": 1 }, { "indicator": "https://node1proc.remotemanagement.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:49:09 UTC", "last_seen": "2026-03-23 08:49:09 UTC", "sightings": 1 }, { "indicator": "https://ext2base.operationalmatrix.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:49:08 UTC", "last_seen": "2026-03-23 08:49:08 UTC", "sightings": 1 }, { "indicator": "https://cfg2core.interfacehandler.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:49:08 UTC", "last_seen": "2026-03-23 08:49:08 UTC", "sightings": 1 }, { "indicator": "http://mzmwx.systemchck.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 08:49:06 UTC", "last_seen": "2026-03-23 08:49:06 UTC", "sightings": 1 }, { "indicator": "http://p7-gate-proxy.ferroviva.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:49:06 UTC", "last_seen": "2026-03-23 08:49:06 UTC", "sightings": 1 }, { "indicator": "https://pnt2proc.infrastructurecloud.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:49:05 UTC", "last_seen": "2026-03-23 08:49:05 UTC", "sightings": 1 }, { "indicator": "http://needlshore.si1kforge.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 08:49:04 UTC", "last_seen": "2026-03-23 08:49:04 UTC", "sightings": 1 }, { "indicator": "https://cl1store.spectralunitgate.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:49:04 UTC", "last_seen": "2026-03-23 08:49:04 UTC", "sightings": 1 }, { "indicator": "https://vld4static.cyberneticsystems.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:49:03 UTC", "last_seen": "2026-03-23 08:49:03 UTC", "sightings": 1 }, { "indicator": "http://layer-graph.officeco.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 08:49:03 UTC", "last_seen": "2026-03-23 08:49:03 UTC", "sightings": 1 }, { "indicator": "http://metricpubl.frost-pixel.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 08:49:02 UTC", "last_seen": "2026-03-23 08:49:02 UTC", "sightings": 1 }, { "indicator": "https://res4work.platformcontroller.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:49:02 UTC", "last_seen": "2026-03-23 08:49:02 UTC", "sightings": 1 }, { "indicator": "https://msk3local.endpointvalidator.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:49:02 UTC", "last_seen": "2026-03-23 08:49:02 UTC", "sightings": 1 }, { "indicator": "https://vld3data.logicflowmanager.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:49:01 UTC", "last_seen": "2026-03-23 08:49:01 UTC", "sightings": 1 }, { "indicator": "https://1533o.checkingsum.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:49:00 UTC", "last_seen": "2026-03-23 08:49:00 UTC", "sightings": 1 }, { "indicator": "https://cfg1proc.networkoptimizer.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:48:59 UTC", "last_seen": "2026-03-23 08:48:59 UTC", "sightings": 1 }, { "indicator": "https://msk4path.gatewayprocessor.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:48:59 UTC", "last_seen": "2026-03-23 08:48:59 UTC", "sightings": 1 }, { "indicator": "http://hppx.vectorsend.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 08:48:59 UTC", "last_seen": "2026-03-23 08:48:59 UTC", "sightings": 1 }, { "indicator": "https://rt3field.terminalobserver.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:48:59 UTC", "last_seen": "2026-03-23 08:48:59 UTC", "sightings": 1 }, { "indicator": "https://loc1proc.managementresource.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:48:58 UTC", "last_seen": "2026-03-23 08:48:58 UTC", "sightings": 1 }, { "indicator": "https://pnt1meta.infrastructurecloud.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:48:58 UTC", "last_seen": "2026-03-23 08:48:58 UTC", "sightings": 1 }, { "indicator": "https://app2steel.distributedmatrix.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:48:58 UTC", "last_seen": "2026-03-23 08:48:58 UTC", "sightings": 1 }, { "indicator": "http://ts2hfdf.cokefun.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 08:48:57 UTC", "last_seen": "2026-03-23 08:48:57 UTC", "sightings": 1 }, { "indicator": "https://14sm.yardcloud.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:48:57 UTC", "last_seen": "2026-03-23 08:48:57 UTC", "sightings": 1 }, { "indicator": "https://node1proc.databaseintegrity.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:48:57 UTC", "last_seen": "2026-03-23 08:48:57 UTC", "sightings": 1 }, { "indicator": "https://proc.networkoptimizer.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:48:56 UTC", "last_seen": "2026-03-23 08:48:56 UTC", "sightings": 1 }, { "indicator": "https://loc2core.managementresource.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:48:56 UTC", "last_seen": "2026-03-23 08:48:56 UTC", "sightings": 1 }, { "indicator": "https://w2-web-cache.arcostruttura.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 08:48:55 UTC", "last_seen": "2026-03-23 08:48:55 UTC", "sightings": 1 }, { "indicator": "https://x5-gate-33.arcostruttura.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 08:48:55 UTC", "last_seen": "2026-03-23 08:48:55 UTC", "sightings": 1 }, { "indicator": "https://svc4point.activetensorbase.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:48:55 UTC", "last_seen": "2026-03-23 08:48:55 UTC", "sightings": 1 }, { "indicator": "https://svc4static.opticalsensorhub.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:48:55 UTC", "last_seen": "2026-03-23 08:48:55 UTC", "sightings": 1 }, { "indicator": "https://svc1proc.acousticnodebase.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:48:54 UTC", "last_seen": "2026-03-23 08:48:54 UTC", "sightings": 1 }, { "indicator": "https://int4sat.systemicvalidator.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:48:53 UTC", "last_seen": "2026-03-23 08:48:53 UTC", "sightings": 1 }, { "indicator": "https://83wi.snap-echo.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:48:53 UTC", "last_seen": "2026-03-23 08:48:53 UTC", "sightings": 1 }, { "indicator": "https://uf0t.scrollnft.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 08:48:53 UTC", "last_seen": "2026-03-23 08:48:53 UTC", "sightings": 1 }, { "indicator": "https://ext1infra.thermalmetrichub.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:48:53 UTC", "last_seen": "2026-03-23 08:48:53 UTC", "sightings": 1 }, { "indicator": "https://svc3user.binaryflowbuffer.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:48:51 UTC", "last_seen": "2026-03-23 08:48:51 UTC", "sightings": 1 }, { "indicator": "https://svc1sync.opticalsensorhub.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:48:51 UTC", "last_seen": "2026-03-23 08:48:51 UTC", "sightings": 1 }, { "indicator": "http://crbn95bh.cokefun.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 08:48:51 UTC", "last_seen": "2026-03-23 08:48:51 UTC", "sightings": 1 }, { "indicator": "https://pnt1proc.connectivitybuffer.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:48:51 UTC", "last_seen": "2026-03-23 08:48:51 UTC", "sightings": 1 }, { "indicator": "http://zwlaax.n1ghtlark.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 08:48:50 UTC", "last_seen": "2026-03-23 08:48:50 UTC", "sightings": 1 }, { "indicator": "https://svc2steel.acousticnodebase.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:48:50 UTC", "last_seen": "2026-03-23 08:48:50 UTC", "sightings": 1 }, { "indicator": "https://sh1p0-loop.yardcloud.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:48:50 UTC", "last_seen": "2026-03-23 08:48:50 UTC", "sightings": 1 }, { "indicator": "https://svc3core.acousticnodebase.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:48:50 UTC", "last_seen": "2026-03-23 08:48:50 UTC", "sightings": 1 }, { "indicator": "https://ext3ghost.tensorpointlink.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:48:49 UTC", "last_seen": "2026-03-23 08:48:49 UTC", "sightings": 1 }, { "indicator": "http://passi-vault.quick-fern.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 08:48:49 UTC", "last_seen": "2026-03-23 08:48:49 UTC", "sightings": 1 }, { "indicator": "http://markterminal.grosstao.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 08:48:48 UTC", "last_seen": "2026-03-23 08:48:48 UTC", "sightings": 1 }, { "indicator": "http://i1-vision-sync.duronodo.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:48:48 UTC", "last_seen": "2026-03-23 08:48:48 UTC", "sightings": 1 }, { "indicator": "http://svc1sync.oscilloflowunit.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 08:48:48 UTC", "last_seen": "2026-03-23 08:48:48 UTC", "sightings": 1 }, { "indicator": "http://b1-cloud-store.terralibre.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:48:48 UTC", "last_seen": "2026-03-23 08:48:48 UTC", "sightings": 1 }, { "indicator": "http://vid3o9-spark.vectorsend.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 08:48:47 UTC", "last_seen": "2026-03-23 08:48:47 UTC", "sightings": 1 }, { "indicator": "http://j9-main-point.ferroviva.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:48:45 UTC", "last_seen": "2026-03-23 08:48:45 UTC", "sightings": 1 }, { "indicator": "http://y2-trace-alpha.duronodo.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:48:44 UTC", "last_seen": "2026-03-23 08:48:44 UTC", "sightings": 1 }, { "indicator": "https://download2343.mediafire.com/12jmp0obxupg5z57vLPM8nZZi2vqc82MCfbT4gS7J26TKPLimpWJgJiwIaX94viwx-3OTJoxtoYdSnHut9Y6_SHTadgto7a3ks9sZpS5AwfxuxTYzPeFMNneQ4QNdYApFLmElsHKepR9mt8guqRTRAEd05V4CYsWwqTVbADjR1czaQ/lv2xyfq7r6aqedg/antic.pdf", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 08:48:44 UTC", "last_seen": "2026-03-23 08:48:44 UTC", "sightings": 1 }, { "indicator": "https://app4sat.distributedmatrix.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:48:44 UTC", "last_seen": "2026-03-23 08:48:44 UTC", "sightings": 1 }, { "indicator": "https://pnt3user.diagnosticendpoint.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:48:43 UTC", "last_seen": "2026-03-23 08:48:43 UTC", "sightings": 1 }, { "indicator": "https://loc1proc.distributednetwork.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:48:43 UTC", "last_seen": "2026-03-23 08:48:43 UTC", "sightings": 1 }, { "indicator": "http://f1am3-sheet.way2dot.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 08:48:42 UTC", "last_seen": "2026-03-23 08:48:42 UTC", "sightings": 1 }, { "indicator": "http://ext3gate.cartopointgate.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 08:48:41 UTC", "last_seen": "2026-03-23 08:48:41 UTC", "sightings": 1 }, { "indicator": "https://softrun.todayglow.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:48:41 UTC", "last_seen": "2026-03-23 08:48:41 UTC", "sightings": 1 }, { "indicator": "https://int2steel.systemicvalidator.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:48:41 UTC", "last_seen": "2026-03-23 08:48:41 UTC", "sightings": 1 }, { "indicator": "https://ext2proc.topologygatehub.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:48:40 UTC", "last_seen": "2026-03-23 08:48:40 UTC", "sightings": 1 }, { "indicator": "https://cl4path.binaryintegritynet.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:48:40 UTC", "last_seen": "2026-03-23 08:48:40 UTC", "sightings": 1 }, { "indicator": "https://int3ghost.virtualgatekeeper.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:48:40 UTC", "last_seen": "2026-03-23 08:48:40 UTC", "sightings": 1 }, { "indicator": "https://r3-mon-v8.terrafirma.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 08:48:39 UTC", "last_seen": "2026-03-23 08:48:39 UTC", "sightings": 1 }, { "indicator": "http://2pqcis.ravenloop.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 08:48:39 UTC", "last_seen": "2026-03-23 08:48:39 UTC", "sightings": 1 }, { "indicator": "https://cfg1store.resourcebalancer.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:48:38 UTC", "last_seen": "2026-03-23 08:48:38 UTC", "sightings": 1 }, { "indicator": "http://coomajor.glowmire.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 08:48:38 UTC", "last_seen": "2026-03-23 08:48:38 UTC", "sightings": 1 }, { "indicator": "http://uf0t.scrollnft.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 08:48:36 UTC", "last_seen": "2026-03-23 08:48:36 UTC", "sightings": 1 }, { "indicator": "http://x0-space-open.altasphera.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:48:36 UTC", "last_seen": "2026-03-23 08:48:36 UTC", "sightings": 1 }, { "indicator": "https://7yjxzm.foxbyte.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:48:36 UTC", "last_seen": "2026-03-23 08:48:36 UTC", "sightings": 1 }, { "indicator": "http://ext1meta.analyticalhubnode.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 08:48:35 UTC", "last_seen": "2026-03-23 08:48:35 UTC", "sightings": 1 }, { "indicator": "https://svc4static.spectralsyncunit.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:48:35 UTC", "last_seen": "2026-03-23 08:48:35 UTC", "sightings": 1 }, { "indicator": "https://ext1proc.coreconnectivity.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:48:34 UTC", "last_seen": "2026-03-23 08:48:34 UTC", "sightings": 1 }, { "indicator": "https://node4sat.remotemanagement.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:48:34 UTC", "last_seen": "2026-03-23 08:48:34 UTC", "sightings": 1 }, { "indicator": "http://hfcn.backyard.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 08:48:34 UTC", "last_seen": "2026-03-23 08:48:34 UTC", "sightings": 1 }, { "indicator": "https://cl3edge.orbitaltraceunit.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:48:34 UTC", "last_seen": "2026-03-23 08:48:34 UTC", "sightings": 1 }, { "indicator": "https://dev2outer.orbitalvectorhub.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:48:34 UTC", "last_seen": "2026-03-23 08:48:34 UTC", "sightings": 1 }, { "indicator": "http://k9-rim-outer.altasphera.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:48:33 UTC", "last_seen": "2026-03-23 08:48:33 UTC", "sightings": 1 }, { "indicator": "http://l9-auth-user.velocicorsa.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:48:33 UTC", "last_seen": "2026-03-23 08:48:33 UTC", "sightings": 1 }, { "indicator": "https://cl3core.linearductnode.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:48:33 UTC", "last_seen": "2026-03-23 08:48:33 UTC", "sightings": 1 }, { "indicator": "http://xivuhpzc.onelight.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 08:48:33 UTC", "last_seen": "2026-03-23 08:48:33 UTC", "sightings": 1 }, { "indicator": "http://ultra-rep0r.ravenloop.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 08:48:33 UTC", "last_seen": "2026-03-23 08:48:33 UTC", "sightings": 1 }, { "indicator": "https://cl3view.signalpathfinder.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:48:33 UTC", "last_seen": "2026-03-23 08:48:33 UTC", "sightings": 1 }, { "indicator": "https://p1-sync-v9.arcostruttura.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 08:48:32 UTC", "last_seen": "2026-03-23 08:48:32 UTC", "sightings": 1 }, { "indicator": "https://link4entry.vectorstorage.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:48:32 UTC", "last_seen": "2026-03-23 08:48:32 UTC", "sightings": 1 }, { "indicator": "http://validat-gri.tatneft.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 08:48:32 UTC", "last_seen": "2026-03-23 08:48:32 UTC", "sightings": 1 }, { "indicator": "https://cl1store.tensorstorageunit.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:48:32 UTC", "last_seen": "2026-03-23 08:48:32 UTC", "sightings": 1 }, { "indicator": "https://svc4sat.acousticnodebase.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:48:32 UTC", "last_seen": "2026-03-23 08:48:32 UTC", "sightings": 1 }, { "indicator": "https://rt1infra.protocolanalyzer.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:48:32 UTC", "last_seen": "2026-03-23 08:48:32 UTC", "sightings": 1 }, { "indicator": "http://1on-field.systemchck.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 08:48:32 UTC", "last_seen": "2026-03-23 08:48:32 UTC", "sightings": 1 }, { "indicator": "http://kel-meshum.dotnet.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 08:48:32 UTC", "last_seen": "2026-03-23 08:48:32 UTC", "sightings": 1 }, { "indicator": "http://driveloa.briskvale.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 08:48:32 UTC", "last_seen": "2026-03-23 08:48:32 UTC", "sightings": 1 }, { "indicator": "https://ext3gate.analyticalhubnode.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:48:31 UTC", "last_seen": "2026-03-23 08:48:31 UTC", "sightings": 1 }, { "indicator": "https://stormbro.c1vicsun.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:48:31 UTC", "last_seen": "2026-03-23 08:48:31 UTC", "sightings": 1 }, { "indicator": "https://m8-app-unit.arcostruttura.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 08:48:28 UTC", "last_seen": "2026-03-23 08:48:28 UTC", "sightings": 1 }, { "indicator": "https://dc2proxy.applicationbuffer.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:48:27 UTC", "last_seen": "2026-03-23 08:48:27 UTC", "sightings": 1 }, { "indicator": "https://ext2proc.geospatialnode.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:48:27 UTC", "last_seen": "2026-03-23 08:48:27 UTC", "sightings": 1 }, { "indicator": "https://a1z.driftoak.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:48:27 UTC", "last_seen": "2026-03-23 08:48:27 UTC", "sightings": 1 }, { "indicator": "https://int2remote.securitybackbone.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:48:27 UTC", "last_seen": "2026-03-23 08:48:27 UTC", "sightings": 1 }, { "indicator": "https://svc2proxy.activetensorbase.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:48:26 UTC", "last_seen": "2026-03-23 08:48:26 UTC", "sightings": 1 }, { "indicator": "https://dev2power.vectorquantizer.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:48:25 UTC", "last_seen": "2026-03-23 08:48:25 UTC", "sightings": 1 }, { "indicator": "https://4563j5v.hostingvar.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:48:25 UTC", "last_seen": "2026-03-23 08:48:25 UTC", "sightings": 1 }, { "indicator": "http://ext2proc.cartopointgate.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 08:48:25 UTC", "last_seen": "2026-03-23 08:48:25 UTC", "sightings": 1 }, { "indicator": "https://node2steel.remotemanagement.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:48:25 UTC", "last_seen": "2026-03-23 08:48:25 UTC", "sightings": 1 }, { "indicator": "http://m3di-sheet.quick-fern.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 08:48:24 UTC", "last_seen": "2026-03-23 08:48:24 UTC", "sightings": 1 }, { "indicator": "https://load3host.vectorstorage.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:48:24 UTC", "last_seen": "2026-03-23 08:48:24 UTC", "sightings": 1 }, { "indicator": "https://ext4sync.hydrofluxstorage.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:48:23 UTC", "last_seen": "2026-03-23 08:48:23 UTC", "sightings": 1 }, { "indicator": "https://res4path.operationalgateway.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:48:23 UTC", "last_seen": "2026-03-23 08:48:23 UTC", "sightings": 1 }, { "indicator": "https://rt4space.terminalobserver.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:48:22 UTC", "last_seen": "2026-03-23 08:48:22 UTC", "sightings": 1 }, { "indicator": "http://expor1-frame.si1kforge.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 08:48:22 UTC", "last_seen": "2026-03-23 08:48:22 UTC", "sightings": 1 }, { "indicator": "http://r2-gate-entry.terralibre.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:48:20 UTC", "last_seen": "2026-03-23 08:48:20 UTC", "sightings": 1 }, { "indicator": "https://res3view.operationalgateway.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:48:19 UTC", "last_seen": "2026-03-23 08:48:19 UTC", "sightings": 1 }, { "indicator": "https://g0-data-z9.viametrica.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 08:48:19 UTC", "last_seen": "2026-03-23 08:48:19 UTC", "sightings": 1 }, { "indicator": "https://dc3data.applicationbuffer.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:48:19 UTC", "last_seen": "2026-03-23 08:48:19 UTC", "sightings": 1 }, { "indicator": "https://dev2outer.chromadatacenter.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:48:18 UTC", "last_seen": "2026-03-23 08:48:18 UTC", "sightings": 1 }, { "indicator": "https://ext2outer.coreconnectivity.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:48:18 UTC", "last_seen": "2026-03-23 08:48:18 UTC", "sightings": 1 }, { "indicator": "https://vld3local.dataintegritynet.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:48:18 UTC", "last_seen": "2026-03-23 08:48:18 UTC", "sightings": 1 }, { "indicator": "https://loc4link.telemetryinterface.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:48:17 UTC", "last_seen": "2026-03-23 08:48:17 UTC", "sightings": 1 }, { "indicator": "https://pnt4sync.infrastructurecloud.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:48:17 UTC", "last_seen": "2026-03-23 08:48:17 UTC", "sightings": 1 }, { "indicator": "https://msk3data.datacenterstream.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:48:16 UTC", "last_seen": "2026-03-23 08:48:16 UTC", "sightings": 1 }, { "indicator": "https://cfg1proc.interfacehandler.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:48:16 UTC", "last_seen": "2026-03-23 08:48:16 UTC", "sightings": 1 }, { "indicator": "http://3nsojlm.cokenote.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 08:48:16 UTC", "last_seen": "2026-03-23 08:48:16 UTC", "sightings": 1 }, { "indicator": "https://int1proc.distributedlogicunit.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:48:16 UTC", "last_seen": "2026-03-23 08:48:16 UTC", "sightings": 1 }, { "indicator": "https://rela-labe.protdast.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:48:15 UTC", "last_seen": "2026-03-23 08:48:15 UTC", "sightings": 1 }, { "indicator": "http://xfuhz.n1ghtlark.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 08:48:15 UTC", "last_seen": "2026-03-23 08:48:15 UTC", "sightings": 1 }, { "indicator": "https://s1-ext-link.terrafirma.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 08:48:15 UTC", "last_seen": "2026-03-23 08:48:15 UTC", "sightings": 1 }, { "indicator": "https://svc1sync.spectralsyncunit.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:48:14 UTC", "last_seen": "2026-03-23 08:48:14 UTC", "sightings": 1 }, { "indicator": "http://vld2power.dataintegritynet.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 08:48:13 UTC", "last_seen": "2026-03-23 08:48:13 UTC", "sightings": 1 }, { "indicator": "https://ext1meta.hydrofluxstorage.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:48:13 UTC", "last_seen": "2026-03-23 08:48:13 UTC", "sightings": 1 }, { "indicator": "https://node4view.databaseintegrity.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:48:12 UTC", "last_seen": "2026-03-23 08:48:12 UTC", "sightings": 1 }, { "indicator": "http://g7-db-point.velocicorsa.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:48:12 UTC", "last_seen": "2026-03-23 08:48:12 UTC", "sightings": 1 }, { "indicator": "https://h4-node-00.pietraforte.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 08:48:11 UTC", "last_seen": "2026-03-23 08:48:11 UTC", "sightings": 1 }, { "indicator": "http://xgj9.fotestat.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 08:48:11 UTC", "last_seen": "2026-03-23 08:48:11 UTC", "sightings": 1 }, { "indicator": "http://svc2data.oscilloflowunit.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 08:48:10 UTC", "last_seen": "2026-03-23 08:48:10 UTC", "sightings": 1 }, { "indicator": "http://sjyv.engineeringtech.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 08:48:09 UTC", "last_seen": "2026-03-23 08:48:09 UTC", "sightings": 1 }, { "indicator": "http://sales-path.norsdwest.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 08:48:07 UTC", "last_seen": "2026-03-23 08:48:07 UTC", "sightings": 1 }, { "indicator": "http://quorflux1um.vectorsend.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 08:48:07 UTC", "last_seen": "2026-03-23 08:48:07 UTC", "sightings": 1 }, { "indicator": "http://solvaleix1.quick-fern.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 08:48:07 UTC", "last_seen": "2026-03-23 08:48:07 UTC", "sightings": 1 }, { "indicator": "https://u9-bal-01.terrafirma.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 08:48:07 UTC", "last_seen": "2026-03-23 08:48:07 UTC", "sightings": 1 }, { "indicator": "http://neo-c4st.engineeringtech.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 08:48:06 UTC", "last_seen": "2026-03-23 08:48:06 UTC", "sightings": 1 }, { "indicator": "http://8vxgsoq9.cokefun.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 08:48:06 UTC", "last_seen": "2026-03-23 08:48:06 UTC", "sightings": 1 }, { "indicator": "http://hub4work.systemintegritynode.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 08:48:06 UTC", "last_seen": "2026-03-23 08:48:06 UTC", "sightings": 1 }, { "indicator": "http://msk1infra.datacenterstream.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 08:48:06 UTC", "last_seen": "2026-03-23 08:48:06 UTC", "sightings": 1 }, { "indicator": "http://epymb.n1ghtlark.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 08:48:06 UTC", "last_seen": "2026-03-23 08:48:06 UTC", "sightings": 1 }, { "indicator": "https://xgj9.fotestat.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 08:48:05 UTC", "last_seen": "2026-03-23 08:48:05 UTC", "sightings": 1 }, { "indicator": "https://workerembe.highligh.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 08:48:05 UTC", "last_seen": "2026-03-23 08:48:05 UTC", "sightings": 1 }, { "indicator": "http://853rfm15.norsdwest.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 08:48:05 UTC", "last_seen": "2026-03-23 08:48:05 UTC", "sightings": 1 }, { "indicator": "http://quortideex3.backyard.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 08:48:05 UTC", "last_seen": "2026-03-23 08:48:05 UTC", "sightings": 1 }, { "indicator": "http://yefa.easttea.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 08:48:05 UTC", "last_seen": "2026-03-23 08:48:05 UTC", "sightings": 1 }, { "indicator": "http://196.189.68.239:40893/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-23 08:46:24 UTC", "last_seen": "2026-03-23 08:46:24 UTC", "sightings": 1 }, { "indicator": "http://117.254.177.213:46926/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips" ], "first_seen": "2026-03-23 08:46:24 UTC", "last_seen": "2026-03-23 08:46:24 UTC", "sightings": 1 }, { "indicator": "https://supplyreef.joksserver.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-23 08:46:09 UTC", "last_seen": "2026-03-23 08:46:09 UTC", "sightings": 1 }, { "indicator": "http://42.236.222.86:58675/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-23 08:42:07 UTC", "last_seen": "2026-03-23 08:42:07 UTC", "sightings": 1 }, { "indicator": "https://uvqy.joksserver.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-23 08:40:08 UTC", "last_seen": "2026-03-23 08:40:08 UTC", "sightings": 1 }, { "indicator": "http://125.41.2.93:44518/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-23 08:26:40 UTC", "last_seen": "2026-03-23 08:26:40 UTC", "sightings": 1 }, { "indicator": "http://27.37.62.32:46073/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 08:25:25 UTC", "last_seen": "2026-03-23 08:25:25 UTC", "sightings": 1 }, { "indicator": "http://110.39.230.3:40565/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 08:24:20 UTC", "last_seen": "2026-03-23 08:24:20 UTC", "sightings": 1 }, { "indicator": "http://110.37.48.94:42185/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 08:20:15 UTC", "last_seen": "2026-03-23 08:20:15 UTC", "sightings": 1 }, { "indicator": "http://115.192.43.142:34459/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-23 08:17:09 UTC", "last_seen": "2026-03-23 08:17:09 UTC", "sightings": 1 }, { "indicator": "http://46.236.171.191:33719/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 08:09:20 UTC", "last_seen": "2026-03-23 08:09:20 UTC", "sightings": 1 }, { "indicator": "http://113.221.74.253:37348/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-23 08:09:20 UTC", "last_seen": "2026-03-23 08:09:20 UTC", "sightings": 1 }, { "indicator": "http://110.37.123.210:56548/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 08:09:19 UTC", "last_seen": "2026-03-23 08:09:19 UTC", "sightings": 1 }, { "indicator": "http://110.39.230.3:40565/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 08:09:19 UTC", "last_seen": "2026-03-23 08:09:19 UTC", "sightings": 1 }, { "indicator": "http://46.236.171.191:33719/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 08:09:19 UTC", "last_seen": "2026-03-23 08:09:19 UTC", "sightings": 1 }, { "indicator": "https://invoi7-field.tr1bekit.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-23 08:09:09 UTC", "last_seen": "2026-03-23 08:09:09 UTC", "sightings": 1 }, { "indicator": "https://xpj5ocpo.way2dot.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:09:09 UTC", "last_seen": "2026-03-23 08:09:09 UTC", "sightings": 1 }, { "indicator": "https://6ohi.silkforge.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:09:08 UTC", "last_seen": "2026-03-23 08:09:08 UTC", "sightings": 1 }, { "indicator": "https://nmq41jqp.silkforge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-23 08:09:08 UTC", "last_seen": "2026-03-23 08:09:08 UTC", "sightings": 1 }, { "indicator": "https://vendo-vali.n1ghtlark.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 08:09:08 UTC", "last_seen": "2026-03-23 08:09:08 UTC", "sightings": 1 }, { "indicator": "https://metricpubl.frost-pixel.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 07:53:38 UTC", "last_seen": "2026-03-23 07:53:38 UTC", "sightings": 1 }, { "indicator": "https://shoal7-forge.storm-ink.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 07:53:38 UTC", "last_seen": "2026-03-23 07:53:38 UTC", "sightings": 1 }, { "indicator": "https://tri-meshon.silkforge.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 07:53:38 UTC", "last_seen": "2026-03-23 07:53:38 UTC", "sightings": 1 }, { "indicator": "https://m3di-sheet.quick-fern.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 07:53:38 UTC", "last_seen": "2026-03-23 07:53:38 UTC", "sightings": 1 }, { "indicator": "https://sandboxairway.n1ghtlark.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 07:53:38 UTC", "last_seen": "2026-03-23 07:53:38 UTC", "sightings": 1 }, { "indicator": "https://2pqcis.ravenloop.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 07:53:38 UTC", "last_seen": "2026-03-23 07:53:38 UTC", "sightings": 1 }, { "indicator": "https://667hwn.si1kforge.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 07:53:36 UTC", "last_seen": "2026-03-23 07:53:36 UTC", "sightings": 1 }, { "indicator": "https://jqzgl.briskvale.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 07:53:36 UTC", "last_seen": "2026-03-23 07:53:36 UTC", "sightings": 1 }, { "indicator": "https://solvaleix1.quick-fern.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 07:53:35 UTC", "last_seen": "2026-03-23 07:53:35 UTC", "sightings": 1 }, { "indicator": "https://srv4sync.cloudinfrastructure.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 07:53:35 UTC", "last_seen": "2026-03-23 07:53:35 UTC", "sightings": 1 }, { "indicator": "https://tinytrai.glowmire.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 07:53:35 UTC", "last_seen": "2026-03-23 07:53:35 UTC", "sightings": 1 }, { "indicator": "https://vid3o9-spark.vectorsend.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 07:53:35 UTC", "last_seen": "2026-03-23 07:53:35 UTC", "sightings": 1 }, { "indicator": "https://ultra-rep0r.ravenloop.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 07:53:35 UTC", "last_seen": "2026-03-23 07:53:35 UTC", "sightings": 1 }, { "indicator": "https://aejq9b.cloudgloss.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 07:53:35 UTC", "last_seen": "2026-03-23 07:53:35 UTC", "sightings": 1 }, { "indicator": "https://njlads.frost-pixel.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-23 07:53:34 UTC", "last_seen": "2026-03-23 07:53:34 UTC", "sightings": 1 }, { "indicator": "https://merdraor6.silkforge.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 07:53:34 UTC", "last_seen": "2026-03-23 07:53:34 UTC", "sightings": 1 }, { "indicator": "https://ledge8-route.vectorsend.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 07:53:33 UTC", "last_seen": "2026-03-23 07:53:33 UTC", "sightings": 1 }, { "indicator": "http://113.225.35.233:46688/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 07:53:32 UTC", "last_seen": "2026-03-23 07:53:32 UTC", "sightings": 1 }, { "indicator": "https://epymb.n1ghtlark.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 07:53:29 UTC", "last_seen": "2026-03-23 07:53:29 UTC", "sightings": 1 }, { "indicator": "https://driveloa.briskvale.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 07:53:29 UTC", "last_seen": "2026-03-23 07:53:29 UTC", "sightings": 1 }, { "indicator": "https://airbay.ravenloop.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 07:53:29 UTC", "last_seen": "2026-03-23 07:53:29 UTC", "sightings": 1 }, { "indicator": "https://hub1infra.infrastructurestream.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 07:53:29 UTC", "last_seen": "2026-03-23 07:53:29 UTC", "sightings": 1 }, { "indicator": "https://zwlaax.n1ghtlark.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 07:53:29 UTC", "last_seen": "2026-03-23 07:53:29 UTC", "sightings": 1 }, { "indicator": "https://1on-field.systemchck.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 07:53:29 UTC", "last_seen": "2026-03-23 07:53:29 UTC", "sightings": 1 }, { "indicator": "https://hppx.vectorsend.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 07:53:28 UTC", "last_seen": "2026-03-23 07:53:28 UTC", "sightings": 1 }, { "indicator": "https://needlshore.si1kforge.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 07:53:28 UTC", "last_seen": "2026-03-23 07:53:28 UTC", "sightings": 1 }, { "indicator": "https://velforgeex.storm-ink.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 07:53:28 UTC", "last_seen": "2026-03-23 07:53:28 UTC", "sightings": 1 }, { "indicator": "https://ext1meta.securityaccessgateway.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 07:53:28 UTC", "last_seen": "2026-03-23 07:53:28 UTC", "sightings": 1 }, { "indicator": "https://schema-well.checkingsum.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 07:53:28 UTC", "last_seen": "2026-03-23 07:53:28 UTC", "sightings": 1 }, { "indicator": "https://hub4work.systemintegritynode.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 07:53:27 UTC", "last_seen": "2026-03-23 07:53:27 UTC", "sightings": 1 }, { "indicator": "https://tal-lineal.glowmire.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 07:53:27 UTC", "last_seen": "2026-03-23 07:53:27 UTC", "sightings": 1 }, { "indicator": "https://f1am3-sheet.way2dot.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 07:53:27 UTC", "last_seen": "2026-03-23 07:53:27 UTC", "sightings": 1 }, { "indicator": "https://voic9-branch.ravenloop.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 07:53:27 UTC", "last_seen": "2026-03-23 07:53:27 UTC", "sightings": 1 }, { "indicator": "https://coomajor.glowmire.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 07:53:26 UTC", "last_seen": "2026-03-23 07:53:26 UTC", "sightings": 1 }, { "indicator": "https://spectrumdaemon.deepglom.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 07:53:26 UTC", "last_seen": "2026-03-23 07:53:26 UTC", "sightings": 1 }, { "indicator": "https://micr-line.cloudgloss.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 07:53:25 UTC", "last_seen": "2026-03-23 07:53:25 UTC", "sightings": 1 }, { "indicator": "https://lumlithal.checkingsum.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 07:53:25 UTC", "last_seen": "2026-03-23 07:53:25 UTC", "sightings": 1 }, { "indicator": "https://passi-vault.quick-fern.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 07:53:25 UTC", "last_seen": "2026-03-23 07:53:25 UTC", "sightings": 1 }, { "indicator": "https://laneserv.protdast.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 07:53:24 UTC", "last_seen": "2026-03-23 07:53:24 UTC", "sightings": 1 }, { "indicator": "https://o4bw.si1kforge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-23 07:53:23 UTC", "last_seen": "2026-03-23 07:53:23 UTC", "sightings": 1 }, { "indicator": "https://hub1sync.terminaldataprocessor.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 07:53:23 UTC", "last_seen": "2026-03-23 07:53:23 UTC", "sightings": 1 }, { "indicator": "https://nobl-lan.frost-pixel.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 07:53:23 UTC", "last_seen": "2026-03-23 07:53:23 UTC", "sightings": 1 }, { "indicator": "https://svc4static.oscilloflowunit.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 07:53:23 UTC", "last_seen": "2026-03-23 07:53:23 UTC", "sightings": 1 }, { "indicator": "https://serven7al.cloudgloss.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 07:53:23 UTC", "last_seen": "2026-03-23 07:53:23 UTC", "sightings": 1 }, { "indicator": "https://expor1-frame.si1kforge.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 07:53:20 UTC", "last_seen": "2026-03-23 07:53:20 UTC", "sightings": 1 }, { "indicator": "https://hub2data.terminaldataprocessor.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 07:53:20 UTC", "last_seen": "2026-03-23 07:53:20 UTC", "sightings": 1 }, { "indicator": "https://xfuhz.n1ghtlark.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 07:53:19 UTC", "last_seen": "2026-03-23 07:53:19 UTC", "sightings": 1 }, { "indicator": "https://hub3local.systemintegritynode.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 07:53:18 UTC", "last_seen": "2026-03-23 07:53:18 UTC", "sightings": 1 }, { "indicator": "https://tvxiarw7.silkforge.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 07:53:18 UTC", "last_seen": "2026-03-23 07:53:18 UTC", "sightings": 1 }, { "indicator": "https://dussil.quick-fern.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 07:53:16 UTC", "last_seen": "2026-03-23 07:53:16 UTC", "sightings": 1 }, { "indicator": "https://quorflux1um.vectorsend.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 07:53:16 UTC", "last_seen": "2026-03-23 07:53:16 UTC", "sightings": 1 }, { "indicator": "https://voadtm.glowmire.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 07:53:15 UTC", "last_seen": "2026-03-23 07:53:15 UTC", "sightings": 1 }, { "indicator": "https://taltide2ex.si1kforge.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 07:53:15 UTC", "last_seen": "2026-03-23 07:53:15 UTC", "sightings": 1 }, { "indicator": "https://pr1me-zone.ravenloop.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 07:53:14 UTC", "last_seen": "2026-03-23 07:53:14 UTC", "sightings": 1 }, { "indicator": "https://mzmwx.systemchck.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 07:53:13 UTC", "last_seen": "2026-03-23 07:53:13 UTC", "sightings": 1 }, { "indicator": "https://download2343.mediafire.com/48b2hwddxohghJzAVLAZ4mAhiW8tqj1d5THJQlCsS1jafUnp-Yu37gGxisPkRn6FBo1bxaPdfUJEO6123_NBsGs6uznelnnBjZb9atFny64LdCa-IGKnt3cg3--TP0iXXaN2w_G5G2PGIvzcKF0R3UDa2_YvxucvJr0n-bcs7vlLCA/lv2xyfq7r6aqedg/antic.pdf", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 07:38:33 UTC", "last_seen": "2026-03-23 07:38:33 UTC", "sightings": 1 }, { "indicator": "https://int1proc.globalmetricshandler.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 07:38:30 UTC", "last_seen": "2026-03-23 07:38:30 UTC", "sightings": 1 }, { "indicator": "https://abhd27da.grovopen.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 07:38:30 UTC", "last_seen": "2026-03-23 07:38:30 UTC", "sightings": 1 }, { "indicator": "https://partne2-field.grovopen.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 07:38:30 UTC", "last_seen": "2026-03-23 07:38:30 UTC", "sightings": 1 }, { "indicator": "https://node1store.securityframework.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 07:38:30 UTC", "last_seen": "2026-03-23 07:38:30 UTC", "sightings": 1 }, { "indicator": "https://ext4sync.cartopointgate.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 07:38:30 UTC", "last_seen": "2026-03-23 07:38:30 UTC", "sightings": 1 }, { "indicator": "https://hub2power.systemintegritynode.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 07:38:30 UTC", "last_seen": "2026-03-23 07:38:30 UTC", "sightings": 1 }, { "indicator": "https://z5odl9.grovopen.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 07:38:30 UTC", "last_seen": "2026-03-23 07:38:30 UTC", "sightings": 1 }, { "indicator": "https://mixazu.intechvaraible.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 07:38:30 UTC", "last_seen": "2026-03-23 07:38:30 UTC", "sightings": 1 }, { "indicator": "https://bhkpzpne.grovopen.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 07:38:30 UTC", "last_seen": "2026-03-23 07:38:30 UTC", "sightings": 1 }, { "indicator": "https://w0rk3r2-leaf.intechvaraible.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 07:38:29 UTC", "last_seen": "2026-03-23 07:38:29 UTC", "sightings": 1 }, { "indicator": "https://svc3edge.oscilloflowunit.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 07:38:28 UTC", "last_seen": "2026-03-23 07:38:28 UTC", "sightings": 1 }, { "indicator": "https://loc1sync.streamdatahandler.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 07:38:28 UTC", "last_seen": "2026-03-23 07:38:28 UTC", "sightings": 1 }, { "indicator": "https://shel-grid.intechvaraible.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 07:38:28 UTC", "last_seen": "2026-03-23 07:38:28 UTC", "sightings": 1 }, { "indicator": "https://xpm713mg.deepglom.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 07:38:27 UTC", "last_seen": "2026-03-23 07:38:27 UTC", "sightings": 1 }, { "indicator": "https://node2remote.securityframework.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 07:38:27 UTC", "last_seen": "2026-03-23 07:38:27 UTC", "sightings": 1 }, { "indicator": "https://loc1proc.networkcontroller.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 07:38:26 UTC", "last_seen": "2026-03-23 07:38:26 UTC", "sightings": 1 }, { "indicator": "https://loc4static.streamdatahandler.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 07:38:25 UTC", "last_seen": "2026-03-23 07:38:25 UTC", "sightings": 1 }, { "indicator": "https://zen-spireos.engineeringtech.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 07:38:25 UTC", "last_seen": "2026-03-23 07:38:25 UTC", "sightings": 1 }, { "indicator": "https://loc2data.streamdatahandler.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 07:38:24 UTC", "last_seen": "2026-03-23 07:38:24 UTC", "sightings": 1 }, { "indicator": "https://srv1meta.cloudinfrastructure.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 07:38:23 UTC", "last_seen": "2026-03-23 07:38:23 UTC", "sightings": 1 }, { "indicator": "https://msk1infra.datacenterstream.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 07:38:22 UTC", "last_seen": "2026-03-23 07:38:22 UTC", "sightings": 1 }, { "indicator": "https://node4link.securityframework.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 07:38:21 UTC", "last_seen": "2026-03-23 07:38:21 UTC", "sightings": 1 }, { "indicator": "https://loc3edge.streamdatahandler.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 07:38:21 UTC", "last_seen": "2026-03-23 07:38:21 UTC", "sightings": 1 }, { "indicator": "https://hub1proc.cloudoperationcenter.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 07:38:21 UTC", "last_seen": "2026-03-23 07:38:21 UTC", "sightings": 1 }, { "indicator": "https://svc1sync.oscilloflowunit.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 07:38:21 UTC", "last_seen": "2026-03-23 07:38:21 UTC", "sightings": 1 }, { "indicator": "https://sjyv.engineeringtech.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 07:38:21 UTC", "last_seen": "2026-03-23 07:38:21 UTC", "sightings": 1 }, { "indicator": "https://node3dev.securityframework.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 07:38:20 UTC", "last_seen": "2026-03-23 07:38:20 UTC", "sightings": 1 }, { "indicator": "http://xpj5ocpo.way2dot.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 07:38:19 UTC", "last_seen": "2026-03-23 07:38:19 UTC", "sightings": 1 }, { "indicator": "https://ext3gate.cartopointgate.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 07:38:18 UTC", "last_seen": "2026-03-23 07:38:18 UTC", "sightings": 1 }, { "indicator": "https://ext1meta.cartopointgate.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 07:38:17 UTC", "last_seen": "2026-03-23 07:38:17 UTC", "sightings": 1 }, { "indicator": "https://pitch6-signal.todayglow.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 07:38:17 UTC", "last_seen": "2026-03-23 07:38:17 UTC", "sightings": 1 }, { "indicator": "https://silenparser.deepglom.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 07:38:17 UTC", "last_seen": "2026-03-23 07:38:17 UTC", "sightings": 1 }, { "indicator": "https://ext1infra.virtualinterfacenet.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 07:38:17 UTC", "last_seen": "2026-03-23 07:38:17 UTC", "sightings": 1 }, { "indicator": "https://9uhve7s.deepglom.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 07:38:17 UTC", "last_seen": "2026-03-23 07:38:17 UTC", "sightings": 1 }, { "indicator": "https://neo-c4st.engineeringtech.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 07:38:17 UTC", "last_seen": "2026-03-23 07:38:17 UTC", "sightings": 1 }, { "indicator": "https://ext2proc.cartopointgate.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 07:38:17 UTC", "last_seen": "2026-03-23 07:38:17 UTC", "sightings": 1 }, { "indicator": "https://5p4r-node.grovopen.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 07:38:16 UTC", "last_seen": "2026-03-23 07:38:16 UTC", "sightings": 1 }, { "indicator": "https://svc2data.oscilloflowunit.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 07:38:16 UTC", "last_seen": "2026-03-23 07:38:16 UTC", "sightings": 1 }, { "indicator": "https://srv3gate.cloudinfrastructure.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 07:38:16 UTC", "last_seen": "2026-03-23 07:38:16 UTC", "sightings": 1 }, { "indicator": "https://unl25bit.getverif.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-23 07:38:16 UTC", "last_seen": "2026-03-23 07:38:16 UTC", "sightings": 1 }, { "indicator": "http://182.121.109.59:48609/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-23 07:37:07 UTC", "last_seen": "2026-03-23 07:37:07 UTC", "sightings": 1 }, { "indicator": "http://45.156.87.17/reload", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 07:36:20 UTC", "last_seen": "2026-03-23 07:36:20 UTC", "sightings": 1 }, { "indicator": "http://45.156.87.17/load.ps1", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 07:36:20 UTC", "last_seen": "2026-03-23 07:36:20 UTC", "sightings": 1 }, { "indicator": "http://120.28.222.207:55994/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-23 07:32:07 UTC", "last_seen": "2026-03-23 07:32:07 UTC", "sightings": 1 }, { "indicator": "https://serverfait.qy7mral.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-23 07:32:07 UTC", "last_seen": "2026-03-23 07:32:07 UTC", "sightings": 1 }, { "indicator": "https://mg60yc.brightcove.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-23 07:28:07 UTC", "last_seen": "2026-03-23 07:28:07 UTC", "sightings": 1 }, { "indicator": "https://measurecrims.storm-ink.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-23 07:25:09 UTC", "last_seen": "2026-03-23 07:25:09 UTC", "sightings": 1 }, { "indicator": "http://59.96.137.156:33910/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 07:19:21 UTC", "last_seen": "2026-03-23 07:19:21 UTC", "sightings": 1 }, { "indicator": "http://110.39.244.189:45658/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 07:18:19 UTC", "last_seen": "2026-03-23 07:18:19 UTC", "sightings": 1 }, { "indicator": "http://115.56.153.145:51082/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-23 07:17:07 UTC", "last_seen": "2026-03-23 07:17:07 UTC", "sightings": 1 }, { "indicator": "http://188.241.219.55:9000/proxy-peer-windows-amd64.exe", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 07:15:10 UTC", "last_seen": "2026-03-23 07:15:10 UTC", "sightings": 1 }, { "indicator": "https://springprof.ravenloop.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-23 07:12:14 UTC", "last_seen": "2026-03-23 07:12:14 UTC", "sightings": 1 }, { "indicator": "https://marginlogistics.snap-echo.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-23 07:07:07 UTC", "last_seen": "2026-03-23 07:07:07 UTC", "sightings": 1 }, { "indicator": "http://110.39.244.67:54942/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-23 07:02:06 UTC", "last_seen": "2026-03-23 07:02:06 UTC", "sightings": 1 }, { "indicator": "http://222.138.150.30:45532/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 07:01:08 UTC", "last_seen": "2026-03-23 07:01:08 UTC", "sightings": 1 }, { "indicator": "https://smarlog.vexmoor.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-23 07:00:09 UTC", "last_seen": "2026-03-23 07:00:09 UTC", "sightings": 1 }, { "indicator": "http://192.3.122.231/img/hoo/img_180511.png", "indicator_type": "url", "source": "URLhaus", "tags": [ "rat", "RemcosRAT" ], "first_seen": "2026-03-23 06:57:08 UTC", "last_seen": "2026-03-23 06:57:08 UTC", "sightings": 1 }, { "indicator": "https://daemonraven.flint-haze.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-23 06:56:10 UTC", "last_seen": "2026-03-23 06:56:10 UTC", "sightings": 1 }, { "indicator": "http://104.168.5.54/133/givemebestthingsbrother.vbs", "indicator_type": "url", "source": "URLhaus", "tags": [ "rat", "RemcosRAT" ], "first_seen": "2026-03-23 06:56:09 UTC", "last_seen": "2026-03-23 06:56:09 UTC", "sightings": 1 }, { "indicator": "http://110.39.244.189:45658/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 06:55:23 UTC", "last_seen": "2026-03-23 06:55:23 UTC", "sightings": 1 }, { "indicator": "http://59.96.137.156:33910/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 06:53:15 UTC", "last_seen": "2026-03-23 06:53:15 UTC", "sightings": 1 }, { "indicator": "http://79.17.142.40:55911/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-23 06:53:12 UTC", "last_seen": "2026-03-23 06:53:12 UTC", "sightings": 1 }, { "indicator": "http://117.235.230.126:57213/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-23 06:52:07 UTC", "last_seen": "2026-03-23 06:52:07 UTC", "sightings": 1 }, { "indicator": "https://normesh1ex.tr1bekit.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-23 06:52:07 UTC", "last_seen": "2026-03-23 06:52:07 UTC", "sightings": 1 }, { "indicator": "https://ba5al7-route.silkforge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-23 06:39:10 UTC", "last_seen": "2026-03-23 06:39:10 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.168/files/1032264266/l8iybfv.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey", "rustystealer" ], "first_seen": "2026-03-23 06:35:14 UTC", "last_seen": "2026-03-23 06:35:14 UTC", "sightings": 1 }, { "indicator": "https://rocdyna.si1kforge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-23 06:35:10 UTC", "last_seen": "2026-03-23 06:35:10 UTC", "sightings": 1 }, { "indicator": "https://tranyasy.com.cn/TD-Setup.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SilverFox", "Trojan/SilverFox.cw" ], "first_seen": "2026-03-23 06:32:21 UTC", "last_seen": "2026-03-23 06:32:21 UTC", "sightings": 1 }, { "indicator": "http://45.156.87.17/reg", "indicator_type": "url", "source": "URLhaus", "tags": [ "64-bit", "powershell", "ps1", "windows" ], "first_seen": "2026-03-23 06:32:13 UTC", "last_seen": "2026-03-23 06:32:13 UTC", "sightings": 1 }, { "indicator": "https://github.com/featherwallet/feather/releases/latest/download/Feather-Wallet-Setup.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "exe" ], "first_seen": "2026-03-23 06:32:06 UTC", "last_seen": "2026-03-23 06:32:06 UTC", "sightings": 1 }, { "indicator": "http://192.109.200.199/cat.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 06:32:06 UTC", "last_seen": "2026-03-23 06:32:06 UTC", "sightings": 1 }, { "indicator": "https://featherwallet.io/download.php?direct=true", "indicator_type": "url", "source": "URLhaus", "tags": [ "exe" ], "first_seen": "2026-03-23 06:32:06 UTC", "last_seen": "2026-03-23 06:32:06 UTC", "sightings": 1 }, { "indicator": "http://178.16.54.73/9Wq1O.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 06:32:05 UTC", "last_seen": "2026-03-23 06:32:05 UTC", "sightings": 1 }, { "indicator": "http://64.89.163.24/b_mipsel", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 06:32:05 UTC", "last_seen": "2026-03-23 06:32:05 UTC", "sightings": 1 }, { "indicator": "http://64.89.163.24/b_x86", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 06:32:05 UTC", "last_seen": "2026-03-23 06:32:05 UTC", "sightings": 1 }, { "indicator": "http://222.138.150.30:45532/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 06:27:26 UTC", "last_seen": "2026-03-23 06:27:26 UTC", "sightings": 1 }, { "indicator": "http://117.235.230.126:57213/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-23 06:27:15 UTC", "last_seen": "2026-03-23 06:27:15 UTC", "sightings": 1 }, { "indicator": "https://xipsrdlf.frost-pixel.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-23 06:27:08 UTC", "last_seen": "2026-03-23 06:27:08 UTC", "sightings": 1 }, { "indicator": "http://110.37.87.223:48624/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-23 06:27:07 UTC", "last_seen": "2026-03-23 06:27:07 UTC", "sightings": 1 }, { "indicator": "http://79.17.142.40:55911/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-23 06:26:22 UTC", "last_seen": "2026-03-23 06:26:22 UTC", "sightings": 1 }, { "indicator": "http://59.93.28.131:48486/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 06:24:15 UTC", "last_seen": "2026-03-23 06:24:15 UTC", "sightings": 1 }, { "indicator": "http://110.37.85.16:57038/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 06:20:18 UTC", "last_seen": "2026-03-23 06:20:18 UTC", "sightings": 1 }, { "indicator": "https://qekmfeu.qy7mral.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-23 06:20:10 UTC", "last_seen": "2026-03-23 06:20:10 UTC", "sightings": 1 }, { "indicator": "https://needlconver.brightcove.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-23 06:14:07 UTC", "last_seen": "2026-03-23 06:14:07 UTC", "sightings": 1 }, { "indicator": "http://59.93.28.131:48486/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 06:09:16 UTC", "last_seen": "2026-03-23 06:09:16 UTC", "sightings": 1 }, { "indicator": "https://rstaj.storm-ink.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-23 06:07:08 UTC", "last_seen": "2026-03-23 06:07:08 UTC", "sightings": 1 }, { "indicator": "http://60.18.123.222:45482/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 06:07:06 UTC", "last_seen": "2026-03-23 06:07:06 UTC", "sightings": 1 }, { "indicator": "http://123.129.62.250:55748/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 06:03:21 UTC", "last_seen": "2026-03-23 06:03:21 UTC", "sightings": 1 }, { "indicator": "http://110.37.37.129:43157/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-23 06:02:06 UTC", "last_seen": "2026-03-23 06:02:06 UTC", "sightings": 1 }, { "indicator": "https://710fdch.ravenloop.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-23 06:00:10 UTC", "last_seen": "2026-03-23 06:00:10 UTC", "sightings": 1 }, { "indicator": "http://59.97.179.100:51568/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 05:57:07 UTC", "last_seen": "2026-03-23 05:57:07 UTC", "sightings": 1 }, { "indicator": "https://svc4sat.activefusioncore.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-23 05:54:07 UTC", "last_seen": "2026-03-23 05:54:07 UTC", "sightings": 1 }, { "indicator": "http://123.14.180.117:58839/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 05:50:19 UTC", "last_seen": "2026-03-23 05:50:19 UTC", "sightings": 1 }, { "indicator": "http://59.97.255.251:54527/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 05:47:16 UTC", "last_seen": "2026-03-23 05:47:16 UTC", "sightings": 1 }, { "indicator": "https://svc3core.activefusioncore.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-23 05:47:07 UTC", "last_seen": "2026-03-23 05:47:07 UTC", "sightings": 1 }, { "indicator": "http://60.18.123.222:45482/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 05:42:09 UTC", "last_seen": "2026-03-23 05:42:09 UTC", "sightings": 1 }, { "indicator": "https://svc2steel.activefusioncore.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-23 05:41:06 UTC", "last_seen": "2026-03-23 05:41:06 UTC", "sightings": 1 }, { "indicator": "http://123.14.180.117:58839/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 05:35:17 UTC", "last_seen": "2026-03-23 05:35:17 UTC", "sightings": 1 }, { "indicator": "https://svc1proc.activefusioncore.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-23 05:34:07 UTC", "last_seen": "2026-03-23 05:34:07 UTC", "sightings": 1 }, { "indicator": "http://125.40.2.67:33196/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-23 05:32:06 UTC", "last_seen": "2026-03-23 05:32:06 UTC", "sightings": 1 }, { "indicator": "http://59.97.255.251:54527/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 05:27:16 UTC", "last_seen": "2026-03-23 05:27:16 UTC", "sightings": 1 }, { "indicator": "https://dev4space.nodalbufferpoint.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-23 05:27:08 UTC", "last_seen": "2026-03-23 05:27:08 UTC", "sightings": 1 }, { "indicator": "https://dev3field.nodalbufferpoint.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-23 05:21:07 UTC", "last_seen": "2026-03-23 05:21:07 UTC", "sightings": 1 }, { "indicator": "http://42.56.208.137:46771/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 05:17:08 UTC", "last_seen": "2026-03-23 05:17:08 UTC", "sightings": 1 }, { "indicator": "http://123.11.78.17:33905/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-23 05:17:08 UTC", "last_seen": "2026-03-23 05:17:08 UTC", "sightings": 1 }, { "indicator": "http://27.37.110.143:35260/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 05:17:08 UTC", "last_seen": "2026-03-23 05:17:08 UTC", "sightings": 1 }, { "indicator": "http://117.196.183.130:34453/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 05:17:08 UTC", "last_seen": "2026-03-23 05:17:08 UTC", "sightings": 1 }, { "indicator": "http://182.113.208.207:33293/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-23 05:17:07 UTC", "last_seen": "2026-03-23 05:17:07 UTC", "sightings": 1 }, { "indicator": "http://110.39.231.61:43412/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-23 05:17:07 UTC", "last_seen": "2026-03-23 05:17:07 UTC", "sightings": 1 }, { "indicator": "http://110.37.40.215:50845/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-23 05:17:07 UTC", "last_seen": "2026-03-23 05:17:07 UTC", "sightings": 1 }, { "indicator": "http://110.37.40.215:50845/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-23 05:17:07 UTC", "last_seen": "2026-03-23 05:17:07 UTC", "sightings": 1 }, { "indicator": "http://163.142.84.94:40650/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 05:17:07 UTC", "last_seen": "2026-03-23 05:17:07 UTC", "sightings": 1 }, { "indicator": "https://dev2outer.nodalbufferpoint.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-23 05:15:08 UTC", "last_seen": "2026-03-23 05:15:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/anclarrs/Silentum-Spoofer/raw/refs/heads/main/Silentum_Spoofer.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "BRAT", "exe" ], "first_seen": "2026-03-23 05:11:09 UTC", "last_seen": "2026-03-23 05:11:09 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/anclarrs/Silentum-Spoofer/refs/heads/main/Silentum_Spoofer.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "BRAT", "exe" ], "first_seen": "2026-03-23 05:11:09 UTC", "last_seen": "2026-03-23 05:11:09 UTC", "sightings": 1 }, { "indicator": "http://220.201.24.79:40601/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 05:09:17 UTC", "last_seen": "2026-03-23 05:09:17 UTC", "sightings": 1 }, { "indicator": "https://dev1proc.nodalbufferpoint.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-23 05:09:07 UTC", "last_seen": "2026-03-23 05:09:07 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/arnaplug/cosmic-lab/refs/heads/master/wallet/subnet/primary/common/utxotest/cosmic-lab-v3.6-alpha.4.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-23 05:05:12 UTC", "last_seen": "2026-03-23 05:05:12 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Pauloshan/rustli/refs/heads/main/Network%20Automation%20projects/Network%20toolkit/roles/vlans/Software_v3.6-alpha.4.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-23 05:05:12 UTC", "last_seen": "2026-03-23 05:05:12 UTC", "sightings": 1 }, { "indicator": "https://github.com/Pauloshan/Pauloshan-Fish-Supply-/raw/refs/heads/main/nogheaded/Supply_Fish_Pauloshan_tornade.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-23 05:05:12 UTC", "last_seen": "2026-03-23 05:05:12 UTC", "sightings": 1 }, { "indicator": "https://github.com/Pauloshan/rustli/raw/refs/heads/main/Network%20Automation%20projects/Network%20toolkit/roles/vlans/Software_v3.6-alpha.4.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-23 05:05:11 UTC", "last_seen": "2026-03-23 05:05:11 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Mago6424/clojure-3km/refs/heads/main/solidification/clojure_km_2.0.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-23 05:05:11 UTC", "last_seen": "2026-03-23 05:05:11 UTC", "sightings": 1 }, { "indicator": "https://github.com/1887sagar/hybrid_template_kotlin/raw/refs/heads/main/application/src/main/kotlin/com/abitofhelp/kotlin_template_hybrid_v1.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-23 05:05:10 UTC", "last_seen": "2026-03-23 05:05:10 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/1887sagar/hybrid_template_kotlin/refs/heads/main/application/src/main/kotlin/com/abitofhelp/kotlin_template_hybrid_v1.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-23 05:05:10 UTC", "last_seen": "2026-03-23 05:05:10 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Pauloshan/Pauloshan-Fish-Supply-/refs/heads/main/nogheaded/Supply_Fish_Pauloshan_tornade.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-23 05:05:10 UTC", "last_seen": "2026-03-23 05:05:10 UTC", "sightings": 1 }, { "indicator": "https://github.com/vaibhavnegi123/microgpt/raw/refs/heads/main/assets/Software-1.1-beta.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-23 05:05:10 UTC", "last_seen": "2026-03-23 05:05:10 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Naroux-dev/gorm-6jc/refs/heads/main/zira/gorm_jc_v1.9.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-23 05:05:10 UTC", "last_seen": "2026-03-23 05:05:10 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/vaibhavnegi123/microgpt/refs/heads/main/assets/Software-1.1-beta.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-23 05:05:10 UTC", "last_seen": "2026-03-23 05:05:10 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/johnnydough1919/fastap/refs/heads/main/fastapi_scaff/Software_3.7.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-23 05:05:10 UTC", "last_seen": "2026-03-23 05:05:10 UTC", "sightings": 1 }, { "indicator": "https://github.com/Naroux-dev/gorm-6jc/raw/refs/heads/main/zira/gorm_jc_v1.9.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-23 05:05:10 UTC", "last_seen": "2026-03-23 05:05:10 UTC", "sightings": 1 }, { "indicator": "https://github.com/johnnydough1919/fastap/raw/refs/heads/main/fastapi_scaff/Software_3.7.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-23 05:05:10 UTC", "last_seen": "2026-03-23 05:05:10 UTC", "sightings": 1 }, { "indicator": "https://github.com/arnaplug/cosmic-lab/raw/refs/heads/master/wallet/subnet/primary/common/utxotest/cosmic-lab-v3.6-alpha.4.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-23 05:05:10 UTC", "last_seen": "2026-03-23 05:05:10 UTC", "sightings": 1 }, { "indicator": "https://github.com/Mago6424/clojure-3km/raw/refs/heads/main/solidification/clojure_km_2.0.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-23 05:05:10 UTC", "last_seen": "2026-03-23 05:05:10 UTC", "sightings": 1 }, { "indicator": "https://cl4path.logicmetricgate.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-23 05:04:07 UTC", "last_seen": "2026-03-23 05:04:07 UTC", "sightings": 1 }, { "indicator": "http://39.67.88.37:50473/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-23 05:02:19 UTC", "last_seen": "2026-03-23 05:02:19 UTC", "sightings": 1 }, { "indicator": "https://cl3view.logicmetricgate.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-23 04:58:07 UTC", "last_seen": "2026-03-23 04:58:07 UTC", "sightings": 1 }, { "indicator": "https://github.com/SKYLINERGB/FounderOS/raw/refs/heads/main/counterspying/Founder-OS-Hanbalite.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-23 04:57:09 UTC", "last_seen": "2026-03-23 04:57:09 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/SKYLINERGB/FounderOS/refs/heads/main/counterspying/Founder-OS-Hanbalite.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-23 04:57:07 UTC", "last_seen": "2026-03-23 04:57:07 UTC", "sightings": 1 }, { "indicator": "https://cl2point.logicmetricgate.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-23 04:52:07 UTC", "last_seen": "2026-03-23 04:52:07 UTC", "sightings": 1 }, { "indicator": "http://163.142.84.94:40650/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 04:47:06 UTC", "last_seen": "2026-03-23 04:47:06 UTC", "sightings": 1 }, { "indicator": "https://cl1proc.logicmetricgate.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-23 04:47:06 UTC", "last_seen": "2026-03-23 04:47:06 UTC", "sightings": 1 }, { "indicator": "http://59.88.90.115:41301/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 04:42:09 UTC", "last_seen": "2026-03-23 04:42:09 UTC", "sightings": 1 }, { "indicator": "https://ext4view.vectorstreamlink.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-23 04:42:08 UTC", "last_seen": "2026-03-23 04:42:08 UTC", "sightings": 1 }, { "indicator": "http://222.127.71.141:47611/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-23 04:42:07 UTC", "last_seen": "2026-03-23 04:42:07 UTC", "sightings": 1 }, { "indicator": "http://222.127.71.141:47611/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-23 04:42:07 UTC", "last_seen": "2026-03-23 04:42:07 UTC", "sightings": 1 }, { "indicator": "https://ext3ghost.vectorstreamlink.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-23 04:37:09 UTC", "last_seen": "2026-03-23 04:37:09 UTC", "sightings": 1 }, { "indicator": "http://39.67.88.37:50473/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-23 04:32:11 UTC", "last_seen": "2026-03-23 04:32:11 UTC", "sightings": 1 }, { "indicator": "https://ext2core.vectorstreamlink.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-23 04:30:09 UTC", "last_seen": "2026-03-23 04:30:09 UTC", "sightings": 1 }, { "indicator": "http://180.252.221.19:56481/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-23 04:28:17 UTC", "last_seen": "2026-03-23 04:28:17 UTC", "sightings": 1 }, { "indicator": "https://ext1proc.vectorstreamlink.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-23 04:25:08 UTC", "last_seen": "2026-03-23 04:25:08 UTC", "sightings": 1 }, { "indicator": "http://203.101.187.22:51889/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 04:23:15 UTC", "last_seen": "2026-03-23 04:23:15 UTC", "sightings": 1 }, { "indicator": "https://svc4link.systemictracebox.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-23 04:20:10 UTC", "last_seen": "2026-03-23 04:20:10 UTC", "sightings": 1 }, { "indicator": "http://117.216.177.51:48184/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 04:18:11 UTC", "last_seen": "2026-03-23 04:18:11 UTC", "sightings": 1 }, { "indicator": "http://110.38.206.49:39262/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 04:13:16 UTC", "last_seen": "2026-03-23 04:13:16 UTC", "sightings": 1 }, { "indicator": "https://svc3user.systemictracebox.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-23 04:13:06 UTC", "last_seen": "2026-03-23 04:13:06 UTC", "sightings": 1 }, { "indicator": "http://117.209.89.6:44130/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-23 04:12:06 UTC", "last_seen": "2026-03-23 04:12:06 UTC", "sightings": 1 }, { "indicator": "https://svc2base.systemictracebox.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-23 04:08:08 UTC", "last_seen": "2026-03-23 04:08:08 UTC", "sightings": 1 }, { "indicator": "http://115.49.27.59:36910/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 04:03:25 UTC", "last_seen": "2026-03-23 04:03:25 UTC", "sightings": 1 }, { "indicator": "http://110.39.251.84:57211/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 04:03:19 UTC", "last_seen": "2026-03-23 04:03:19 UTC", "sightings": 1 }, { "indicator": "https://github.com/boufia/vllm-lan-inference/raw/refs/heads/main/upend/inference-vllm-lan-islandress.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-23 04:03:08 UTC", "last_seen": "2026-03-23 04:03:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/boufia/vllm-lan-inference/refs/heads/main/upend/inference-vllm-lan-islandress.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-23 04:03:07 UTC", "last_seen": "2026-03-23 04:03:07 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/boufia/game/refs/heads/main/phylloporphyrin/Software-v1.0.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-23 04:03:07 UTC", "last_seen": "2026-03-23 04:03:07 UTC", "sightings": 1 }, { "indicator": "https://github.com/boufia/game/raw/refs/heads/main/phylloporphyrin/Software-v1.0.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-23 04:03:07 UTC", "last_seen": "2026-03-23 04:03:07 UTC", "sightings": 1 }, { "indicator": "https://svc1infra.systemictracebox.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-23 04:02:08 UTC", "last_seen": "2026-03-23 04:02:08 UTC", "sightings": 1 }, { "indicator": "http://182.127.86.72:33163/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-23 04:02:06 UTC", "last_seen": "2026-03-23 04:02:06 UTC", "sightings": 1 }, { "indicator": "http://180.252.221.19:56481/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-23 03:56:21 UTC", "last_seen": "2026-03-23 03:56:21 UTC", "sightings": 1 }, { "indicator": "https://dev4work.photonicdatanode.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-23 03:56:05 UTC", "last_seen": "2026-03-23 03:56:05 UTC", "sightings": 1 }, { "indicator": "https://github.com/SameerVerse2/Earn-Verse-01/raw/refs/heads/main/BrainstormBuddy/server/Earn-Verse-v1.0.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-23 03:55:09 UTC", "last_seen": "2026-03-23 03:55:09 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/SameerVerse2/Earn-Verse-01/refs/heads/main/BrainstormBuddy/server/Earn-Verse-v1.0.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-23 03:55:08 UTC", "last_seen": "2026-03-23 03:55:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/SameerVerse2/agent-teams-playbook/raw/refs/heads/main/images/teams_agent_playbook_v3.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-23 03:55:08 UTC", "last_seen": "2026-03-23 03:55:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/SameerVerse2/agent-teams-playbook/refs/heads/main/images/teams_agent_playbook_v3.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-23 03:55:08 UTC", "last_seen": "2026-03-23 03:55:08 UTC", "sightings": 1 }, { "indicator": "http://203.101.187.22:51889/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 03:54:10 UTC", "last_seen": "2026-03-23 03:54:10 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/ANTIREELEER/scripts/refs/heads/main/ornamentist/Software_v1.1-alpha.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-23 03:53:05 UTC", "last_seen": "2026-03-23 03:53:05 UTC", "sightings": 1 }, { "indicator": "https://github.com/ANTIREELEER/scripts/raw/refs/heads/main/ornamentist/Software_v1.1-alpha.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-23 03:52:07 UTC", "last_seen": "2026-03-23 03:52:07 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/ANTIREELEER/clearbox/refs/heads/master/app/api/gmail/archive/Software_v2.0.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-23 03:52:07 UTC", "last_seen": "2026-03-23 03:52:07 UTC", "sightings": 1 }, { "indicator": "https://github.com/ANTIREELEER/clearbox/raw/refs/heads/master/app/api/gmail/archive/Software_v2.0.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-23 03:52:07 UTC", "last_seen": "2026-03-23 03:52:07 UTC", "sightings": 1 }, { "indicator": "http://115.49.27.59:36910/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 03:51:20 UTC", "last_seen": "2026-03-23 03:51:20 UTC", "sightings": 1 }, { "indicator": "https://dev3local.photonicdatanode.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-23 03:51:07 UTC", "last_seen": "2026-03-23 03:51:07 UTC", "sightings": 1 }, { "indicator": "http://117.216.177.51:48184/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 03:50:36 UTC", "last_seen": "2026-03-23 03:50:36 UTC", "sightings": 1 }, { "indicator": "https://github.com/hootie0971/claude-code-via-antigravity/raw/refs/heads/main/Pachytylus/antigravity-code-claude-via-3.7.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-23 03:47:13 UTC", "last_seen": "2026-03-23 03:47:13 UTC", "sightings": 1 }, { "indicator": "https://github.com/arko322/jm-portfolio-web/raw/refs/heads/main/src/styles/web_jm_portfolio_v2.4.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-23 03:47:13 UTC", "last_seen": "2026-03-23 03:47:13 UTC", "sightings": 1 }, { "indicator": "https://github.com/heromen22/sandstorm/raw/refs/heads/main/api/Software_1.2-alpha.4.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-23 03:47:13 UTC", "last_seen": "2026-03-23 03:47:13 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/arko322/jm-portfolio-web/refs/heads/main/src/styles/web_jm_portfolio_v2.4.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-23 03:47:13 UTC", "last_seen": "2026-03-23 03:47:13 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/viggof09/viggosapp/refs/heads/main/preoperatively/Software-v2.9.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-23 03:47:13 UTC", "last_seen": "2026-03-23 03:47:13 UTC", "sightings": 1 }, { "indicator": "https://github.com/viggof09/metal-mc-terrain/raw/refs/heads/main/src/main/java/terrain_metal_mc_v1.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-23 03:47:13 UTC", "last_seen": "2026-03-23 03:47:13 UTC", "sightings": 1 }, { "indicator": "https://github.com/viggof09/viggosapp/raw/refs/heads/main/preoperatively/Software-v2.9.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-23 03:47:13 UTC", "last_seen": "2026-03-23 03:47:13 UTC", "sightings": 1 }, { "indicator": "https://github.com/Jayslams/AutoMTProxy/raw/refs/heads/main/assets/Proxy_Auto_MT_1.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-23 03:47:13 UTC", "last_seen": "2026-03-23 03:47:13 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/viggof09/metal-mc-terrain/refs/heads/main/src/main/java/terrain_metal_mc_v1.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-23 03:47:13 UTC", "last_seen": "2026-03-23 03:47:13 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Jayslams/AutoMTProxy/refs/heads/main/assets/Proxy_Auto_MT_1.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-23 03:47:13 UTC", "last_seen": "2026-03-23 03:47:13 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Taehyang1/franken_networkx/refs/heads/main/crates/fnx-conformance/franken-networkx-v3.7-alpha.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-23 03:47:10 UTC", "last_seen": "2026-03-23 03:47:10 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/srof8bp/backtest-lab/refs/heads/main/examples/backtest-lab-v1.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-23 03:47:10 UTC", "last_seen": "2026-03-23 03:47:10 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/heromen22/sandstorm/refs/heads/main/api/Software_1.2-alpha.4.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-23 03:47:09 UTC", "last_seen": "2026-03-23 03:47:09 UTC", "sightings": 1 }, { "indicator": "https://github.com/hootie0971/ahmia-index/raw/refs/heads/master/bagatelle/ahmia_index_3.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-23 03:47:09 UTC", "last_seen": "2026-03-23 03:47:09 UTC", "sightings": 1 }, { "indicator": "https://github.com/srof8bp/backtest-lab/raw/refs/heads/main/examples/backtest-lab-v1.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-23 03:47:07 UTC", "last_seen": "2026-03-23 03:47:07 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/hootie0971/ahmia-index/refs/heads/master/bagatelle/ahmia_index_3.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-23 03:47:07 UTC", "last_seen": "2026-03-23 03:47:07 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/hootie0971/claude-code-via-antigravity/refs/heads/main/Pachytylus/antigravity-code-claude-via-3.7.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-23 03:47:07 UTC", "last_seen": "2026-03-23 03:47:07 UTC", "sightings": 1 }, { "indicator": "https://github.com/Taehyang1/franken_networkx/raw/refs/heads/main/crates/fnx-conformance/franken-networkx-v3.7-alpha.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-23 03:47:07 UTC", "last_seen": "2026-03-23 03:47:07 UTC", "sightings": 1 }, { "indicator": "https://dev2power.photonicdatanode.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-23 03:46:07 UTC", "last_seen": "2026-03-23 03:46:07 UTC", "sightings": 1 }, { "indicator": "http://175.165.81.253:48766/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 03:41:27 UTC", "last_seen": "2026-03-23 03:41:27 UTC", "sightings": 1 }, { "indicator": "https://dev1proc.photonicdatanode.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-23 03:39:07 UTC", "last_seen": "2026-03-23 03:39:07 UTC", "sightings": 1 }, { "indicator": "http://117.241.182.33:47372/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 03:36:11 UTC", "last_seen": "2026-03-23 03:36:11 UTC", "sightings": 1 }, { "indicator": "http://182.126.117.7:36356/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 03:35:25 UTC", "last_seen": "2026-03-23 03:35:25 UTC", "sightings": 1 }, { "indicator": "http://110.39.251.84:57211/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 03:34:20 UTC", "last_seen": "2026-03-23 03:34:20 UTC", "sightings": 1 }, { "indicator": "https://cl4link.microflowprocess.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-23 03:34:06 UTC", "last_seen": "2026-03-23 03:34:06 UTC", "sightings": 1 }, { "indicator": "http://36.70.72.104:44896/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-23 03:32:08 UTC", "last_seen": "2026-03-23 03:32:08 UTC", "sightings": 1 }, { "indicator": "https://cl3dev.microflowprocess.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-23 03:29:07 UTC", "last_seen": "2026-03-23 03:29:07 UTC", "sightings": 1 }, { "indicator": "http://110.37.102.128:47522/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 03:27:06 UTC", "last_seen": "2026-03-23 03:27:06 UTC", "sightings": 1 }, { "indicator": "https://github.com/MrxMoxuintexa/pipeforge/raw/refs/heads/main/Lipan/Software_3.0-beta.4.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-23 03:24:12 UTC", "last_seen": "2026-03-23 03:24:12 UTC", "sightings": 1 }, { "indicator": "https://github.com/MrxMoxuintexa/pipeforge/raw/refs/heads/main/Lipan/Software_v2.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-23 03:24:12 UTC", "last_seen": "2026-03-23 03:24:12 UTC", "sightings": 1 }, { "indicator": "https://github.com/MrxMoxuintexa/mrxmoxuintexa.github.io/raw/refs/heads/main/Monimia/mrxmoxuintexa_io_github_v2.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-23 03:24:12 UTC", "last_seen": "2026-03-23 03:24:12 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/MrxMoxuintexa/pipeforge/refs/heads/main/Lipan/Software_3.0-beta.4.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-23 03:24:12 UTC", "last_seen": "2026-03-23 03:24:12 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/MrxMoxuintexa/mrxmoxuintexa.github.io/refs/heads/main/Monimia/mrxmoxuintexa_io_github_v2.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-23 03:24:12 UTC", "last_seen": "2026-03-23 03:24:12 UTC", "sightings": 1 }, { "indicator": "https://github.com/MrxMoxuintexa/mrxmoxuintexa.github.io/raw/refs/heads/main/Monimia/io-mrxmoxuintexa-github-3.0.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-23 03:24:12 UTC", "last_seen": "2026-03-23 03:24:12 UTC", "sightings": 1 }, { "indicator": "https://github.com/MrxMoxuintexa/mrxmoxuintexa.github.io/raw/refs/heads/main/Monimia/mrxmoxuintexa_io_github_3.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-23 03:24:12 UTC", "last_seen": "2026-03-23 03:24:12 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/MrxMoxuintexa/mrxmoxuintexa.github.io/refs/heads/main/Monimia/io-mrxmoxuintexa-github-3.0.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-23 03:24:12 UTC", "last_seen": "2026-03-23 03:24:12 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/MrxMoxuintexa/pipeforge/refs/heads/main/Lipan/Software_v2.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-23 03:24:12 UTC", "last_seen": "2026-03-23 03:24:12 UTC", "sightings": 1 }, { "indicator": "https://github.com/MrxMoxuintexa/pipeforge/raw/refs/heads/main/Lipan/Software_3.6.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-23 03:24:12 UTC", "last_seen": "2026-03-23 03:24:12 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/MrxMoxuintexa/pipeforge/refs/heads/main/Lipan/Software_3.6.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-23 03:24:12 UTC", "last_seen": "2026-03-23 03:24:12 UTC", "sightings": 1 }, { "indicator": "https://github.com/MrxMoxuintexa/mrxmoxuintexa.github.io/raw/refs/heads/main/Monimia/mrxmoxuintexa-io-github-v3.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-23 03:24:11 UTC", "last_seen": "2026-03-23 03:24:11 UTC", "sightings": 1 }, { "indicator": "https://github.com/MrxMoxuintexa/pipeforge/raw/refs/heads/main/Lipan/Software-castigable.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-23 03:24:11 UTC", "last_seen": "2026-03-23 03:24:11 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/MrxMoxuintexa/mrxmoxuintexa.github.io/refs/heads/main/Monimia/mrxmoxuintexa-io-github-v3.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-23 03:24:11 UTC", "last_seen": "2026-03-23 03:24:11 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/MrxMoxuintexa/pipeforge/refs/heads/main/Lipan/Software-castigable.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-23 03:24:11 UTC", "last_seen": "2026-03-23 03:24:11 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/MrxMoxuintexa/mrxmoxuintexa.github.io/refs/heads/main/Monimia/mrxmoxuintexa_io_github_3.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-23 03:24:10 UTC", "last_seen": "2026-03-23 03:24:10 UTC", "sightings": 1 }, { "indicator": "http://110.36.95.252:56597/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-23 03:22:07 UTC", "last_seen": "2026-03-23 03:22:07 UTC", "sightings": 1 }, { "indicator": "https://cl2remote.microflowprocess.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-23 03:22:07 UTC", "last_seen": "2026-03-23 03:22:07 UTC", "sightings": 1 }, { "indicator": "http://110.36.93.200:43537/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 03:21:21 UTC", "last_seen": "2026-03-23 03:21:21 UTC", "sightings": 1 }, { "indicator": "https://cl1store.microflowprocess.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-23 03:18:10 UTC", "last_seen": "2026-03-23 03:18:10 UTC", "sightings": 1 }, { "indicator": "http://117.209.27.3:44884/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-23 03:17:17 UTC", "last_seen": "2026-03-23 03:17:17 UTC", "sightings": 1 }, { "indicator": "https://ext4sync.topologygatehub.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-23 03:12:11 UTC", "last_seen": "2026-03-23 03:12:11 UTC", "sightings": 1 }, { "indicator": "http://175.165.81.253:48766/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 03:10:28 UTC", "last_seen": "2026-03-23 03:10:28 UTC", "sightings": 1 }, { "indicator": "http://42.6.188.169:59708/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 03:08:20 UTC", "last_seen": "2026-03-23 03:08:20 UTC", "sightings": 1 }, { "indicator": "https://ext3gate.topologygatehub.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-23 03:05:09 UTC", "last_seen": "2026-03-23 03:05:09 UTC", "sightings": 1 }, { "indicator": "http://27.37.126.230:47933/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 03:04:23 UTC", "last_seen": "2026-03-23 03:04:23 UTC", "sightings": 1 }, { "indicator": "https://ext2proc.topologygatehub.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-23 03:03:07 UTC", "last_seen": "2026-03-23 03:03:07 UTC", "sightings": 1 }, { "indicator": "http://110.37.26.48:56795/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 03:02:23 UTC", "last_seen": "2026-03-23 03:02:23 UTC", "sightings": 1 }, { "indicator": "http://27.215.52.130:40996/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 03:02:23 UTC", "last_seen": "2026-03-23 03:02:23 UTC", "sightings": 1 }, { "indicator": "http://110.37.102.128:47522/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 03:02:15 UTC", "last_seen": "2026-03-23 03:02:15 UTC", "sightings": 1 }, { "indicator": "http://117.241.182.33:47372/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 03:01:07 UTC", "last_seen": "2026-03-23 03:01:07 UTC", "sightings": 1 }, { "indicator": "http://110.36.95.252:56597/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-23 02:57:09 UTC", "last_seen": "2026-03-23 02:57:09 UTC", "sightings": 1 }, { "indicator": "https://ext1meta.topologygatehub.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-23 02:56:07 UTC", "last_seen": "2026-03-23 02:56:07 UTC", "sightings": 1 }, { "indicator": "http://110.36.93.200:43537/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 02:54:22 UTC", "last_seen": "2026-03-23 02:54:22 UTC", "sightings": 1 }, { "indicator": "https://svc4static.spectralsyncunit.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-23 02:49:07 UTC", "last_seen": "2026-03-23 02:49:07 UTC", "sightings": 1 }, { "indicator": "https://svc3edge.spectralsyncunit.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-23 02:44:07 UTC", "last_seen": "2026-03-23 02:44:07 UTC", "sightings": 1 }, { "indicator": "http://110.37.26.48:56795/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 02:41:12 UTC", "last_seen": "2026-03-23 02:41:12 UTC", "sightings": 1 }, { "indicator": "http://27.37.126.230:47933/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 02:38:22 UTC", "last_seen": "2026-03-23 02:38:22 UTC", "sightings": 1 }, { "indicator": "https://svc2data.spectralsyncunit.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-23 02:38:06 UTC", "last_seen": "2026-03-23 02:38:06 UTC", "sightings": 1 }, { "indicator": "http://182.114.251.160:38866/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 02:37:17 UTC", "last_seen": "2026-03-23 02:37:17 UTC", "sightings": 1 }, { "indicator": "http://61.3.103.195:40831/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-23 02:37:08 UTC", "last_seen": "2026-03-23 02:37:08 UTC", "sightings": 1 }, { "indicator": "https://svc1sync.spectralsyncunit.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-23 02:32:06 UTC", "last_seen": "2026-03-23 02:32:06 UTC", "sightings": 1 }, { "indicator": "https://cl4static.orbitaltraceunit.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-23 02:26:09 UTC", "last_seen": "2026-03-23 02:26:09 UTC", "sightings": 1 }, { "indicator": "http://74.9.224.148:45537/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 02:22:09 UTC", "last_seen": "2026-03-23 02:22:09 UTC", "sightings": 1 }, { "indicator": "http://110.37.1.254:40512/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 02:21:17 UTC", "last_seen": "2026-03-23 02:21:17 UTC", "sightings": 1 }, { "indicator": "https://cl3edge.orbitaltraceunit.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-23 02:21:08 UTC", "last_seen": "2026-03-23 02:21:08 UTC", "sightings": 1 }, { "indicator": "http://125.45.57.78:39653/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 02:19:16 UTC", "last_seen": "2026-03-23 02:19:16 UTC", "sightings": 1 }, { "indicator": "http://42.225.200.140:53601/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-23 02:17:20 UTC", "last_seen": "2026-03-23 02:17:20 UTC", "sightings": 1 }, { "indicator": "https://cl2data.orbitaltraceunit.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-23 02:16:06 UTC", "last_seen": "2026-03-23 02:16:06 UTC", "sightings": 1 }, { "indicator": "http://61.3.103.195:40831/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-23 02:12:08 UTC", "last_seen": "2026-03-23 02:12:08 UTC", "sightings": 1 }, { "indicator": "http://110.38.218.176:59962/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-23 02:11:14 UTC", "last_seen": "2026-03-23 02:11:14 UTC", "sightings": 1 }, { "indicator": "http://182.114.251.160:38866/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 02:11:14 UTC", "last_seen": "2026-03-23 02:11:14 UTC", "sightings": 1 }, { "indicator": "https://cl1sync.orbitaltraceunit.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-23 02:11:06 UTC", "last_seen": "2026-03-23 02:11:06 UTC", "sightings": 1 }, { "indicator": "https://ext4point.thermalmetrichub.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-23 02:04:07 UTC", "last_seen": "2026-03-23 02:04:07 UTC", "sightings": 1 }, { "indicator": "https://ext3data.thermalmetrichub.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-23 01:59:06 UTC", "last_seen": "2026-03-23 01:59:06 UTC", "sightings": 1 }, { "indicator": "http://110.37.1.254:40512/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 01:56:17 UTC", "last_seen": "2026-03-23 01:56:17 UTC", "sightings": 1 }, { "indicator": "http://125.45.57.78:39653/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 01:53:22 UTC", "last_seen": "2026-03-23 01:53:22 UTC", "sightings": 1 }, { "indicator": "https://ext2proxy.thermalmetrichub.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-23 01:53:07 UTC", "last_seen": "2026-03-23 01:53:07 UTC", "sightings": 1 }, { "indicator": "http://182.112.41.169:32770/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 01:52:07 UTC", "last_seen": "2026-03-23 01:52:07 UTC", "sightings": 1 }, { "indicator": "https://ext1infra.thermalmetrichub.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-23 01:47:06 UTC", "last_seen": "2026-03-23 01:47:06 UTC", "sightings": 1 }, { "indicator": "http://115.55.226.146:50888/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 01:43:19 UTC", "last_seen": "2026-03-23 01:43:19 UTC", "sightings": 1 }, { "indicator": "https://svc4sat.acousticnodebase.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-23 01:43:09 UTC", "last_seen": "2026-03-23 01:43:09 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.168/files/8012574236/ZMxUkZd.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543", "njRAT" ], "first_seen": "2026-03-23 01:43:07 UTC", "last_seen": "2026-03-23 01:43:07 UTC", "sightings": 1 }, { "indicator": "https://svc3core.acousticnodebase.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-23 01:36:06 UTC", "last_seen": "2026-03-23 01:36:06 UTC", "sightings": 1 }, { "indicator": "http://124.6.185.122:43118/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-23 01:35:17 UTC", "last_seen": "2026-03-23 01:35:17 UTC", "sightings": 1 }, { "indicator": "https://svc2steel.acousticnodebase.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-23 01:30:10 UTC", "last_seen": "2026-03-23 01:30:10 UTC", "sightings": 1 }, { "indicator": "https://svc1proc.acousticnodebase.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-23 01:26:06 UTC", "last_seen": "2026-03-23 01:26:06 UTC", "sightings": 1 }, { "indicator": "https://dev4space.chromadatacenter.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-23 01:21:11 UTC", "last_seen": "2026-03-23 01:21:11 UTC", "sightings": 1 }, { "indicator": "http://115.55.226.146:50888/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 01:21:10 UTC", "last_seen": "2026-03-23 01:21:10 UTC", "sightings": 1 }, { "indicator": "http://74.9.224.148:45537/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 01:18:09 UTC", "last_seen": "2026-03-23 01:18:09 UTC", "sightings": 1 }, { "indicator": "http://117.241.61.216:43250/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-23 01:17:12 UTC", "last_seen": "2026-03-23 01:17:12 UTC", "sightings": 1 }, { "indicator": "http://117.203.144.105:40012/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 01:16:09 UTC", "last_seen": "2026-03-23 01:16:09 UTC", "sightings": 1 }, { "indicator": "https://dev3field.chromadatacenter.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-23 01:14:06 UTC", "last_seen": "2026-03-23 01:14:06 UTC", "sightings": 1 }, { "indicator": "http://110.36.64.245:42879/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-23 01:12:06 UTC", "last_seen": "2026-03-23 01:12:06 UTC", "sightings": 1 }, { "indicator": "https://dev2outer.chromadatacenter.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-23 01:08:07 UTC", "last_seen": "2026-03-23 01:08:07 UTC", "sightings": 1 }, { "indicator": "http://124.6.185.122:43118/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-23 01:07:21 UTC", "last_seen": "2026-03-23 01:07:21 UTC", "sightings": 1 }, { "indicator": "http://110.38.201.35:54608/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 01:05:19 UTC", "last_seen": "2026-03-23 01:05:19 UTC", "sightings": 1 }, { "indicator": "http://110.37.115.91:36661/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 01:02:15 UTC", "last_seen": "2026-03-23 01:02:15 UTC", "sightings": 1 }, { "indicator": "https://dev1proc.chromadatacenter.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-23 01:02:06 UTC", "last_seen": "2026-03-23 01:02:06 UTC", "sightings": 1 }, { "indicator": "http://182.112.41.169:32770/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 00:58:18 UTC", "last_seen": "2026-03-23 00:58:18 UTC", "sightings": 1 }, { "indicator": "http://110.36.77.16:56608/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 00:58:17 UTC", "last_seen": "2026-03-23 00:58:17 UTC", "sightings": 1 }, { "indicator": "https://cl4path.signalpathfinder.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-23 00:57:06 UTC", "last_seen": "2026-03-23 00:57:06 UTC", "sightings": 1 }, { "indicator": "http://110.37.102.167:51069/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 00:53:15 UTC", "last_seen": "2026-03-23 00:53:15 UTC", "sightings": 1 }, { "indicator": "http://113.221.74.253:37348/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-23 00:51:07 UTC", "last_seen": "2026-03-23 00:51:07 UTC", "sightings": 1 }, { "indicator": "http://117.205.164.156:45902/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 00:51:07 UTC", "last_seen": "2026-03-23 00:51:07 UTC", "sightings": 1 }, { "indicator": "https://cl3view.signalpathfinder.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-23 00:51:05 UTC", "last_seen": "2026-03-23 00:51:05 UTC", "sightings": 1 }, { "indicator": "http://123.5.174.236:40143/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 00:49:17 UTC", "last_seen": "2026-03-23 00:49:17 UTC", "sightings": 1 }, { "indicator": "http://117.203.144.105:40012/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 00:49:17 UTC", "last_seen": "2026-03-23 00:49:17 UTC", "sightings": 1 }, { "indicator": "https://cl2point.signalpathfinder.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-23 00:46:06 UTC", "last_seen": "2026-03-23 00:46:06 UTC", "sightings": 1 }, { "indicator": "http://117.215.62.6:47840/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 00:40:16 UTC", "last_seen": "2026-03-23 00:40:16 UTC", "sightings": 1 }, { "indicator": "https://cl1proc.signalpathfinder.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-23 00:40:08 UTC", "last_seen": "2026-03-23 00:40:08 UTC", "sightings": 1 }, { "indicator": "http://110.38.201.35:54608/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 00:39:07 UTC", "last_seen": "2026-03-23 00:39:07 UTC", "sightings": 1 }, { "indicator": "http://222.138.64.12:34719/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-23 00:37:22 UTC", "last_seen": "2026-03-23 00:37:22 UTC", "sightings": 1 }, { "indicator": "http://125.43.36.102:44063/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-23 00:37:06 UTC", "last_seen": "2026-03-23 00:37:06 UTC", "sightings": 1 }, { "indicator": "http://175.165.81.8:44459/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-23 00:37:06 UTC", "last_seen": "2026-03-23 00:37:06 UTC", "sightings": 1 }, { "indicator": "http://59.97.183.238:35071/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-23 00:37:06 UTC", "last_seen": "2026-03-23 00:37:06 UTC", "sightings": 1 }, { "indicator": "https://ext4view.tensorpointlink.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-23 00:34:06 UTC", "last_seen": "2026-03-23 00:34:06 UTC", "sightings": 1 }, { "indicator": "http://110.37.115.91:36661/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 00:33:16 UTC", "last_seen": "2026-03-23 00:33:16 UTC", "sightings": 1 }, { "indicator": "https://ext3ghost.tensorpointlink.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-23 00:30:08 UTC", "last_seen": "2026-03-23 00:30:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/Argaakhsan/proc/raw/refs/heads/main/365/lib.txt", "indicator_type": "url", "source": "URLhaus", "tags": [ "lua", "SmartLoader" ], "first_seen": "2026-03-23 00:28:07 UTC", "last_seen": "2026-03-23 00:28:07 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Argaakhsan/proc/refs/heads/main/365/lib.txt", "indicator_type": "url", "source": "URLhaus", "tags": [ "lua", "SmartLoader" ], "first_seen": "2026-03-23 00:28:05 UTC", "last_seen": "2026-03-23 00:28:05 UTC", "sightings": 1 }, { "indicator": "https://ext2core.tensorpointlink.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-23 00:23:12 UTC", "last_seen": "2026-03-23 00:23:12 UTC", "sightings": 1 }, { "indicator": "http://182.119.60.58:50550/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 00:18:17 UTC", "last_seen": "2026-03-23 00:18:17 UTC", "sightings": 1 }, { "indicator": "https://ext1proc.tensorpointlink.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-23 00:18:09 UTC", "last_seen": "2026-03-23 00:18:09 UTC", "sightings": 1 }, { "indicator": "http://110.37.52.73:51106/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-23 00:12:05 UTC", "last_seen": "2026-03-23 00:12:05 UTC", "sightings": 1 }, { "indicator": "https://svc4link.binaryflowbuffer.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-23 00:12:05 UTC", "last_seen": "2026-03-23 00:12:05 UTC", "sightings": 1 }, { "indicator": "http://219.155.208.150:34979/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-23 00:11:09 UTC", "last_seen": "2026-03-23 00:11:09 UTC", "sightings": 1 }, { "indicator": "http://222.138.64.12:34719/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-23 00:07:12 UTC", "last_seen": "2026-03-23 00:07:12 UTC", "sightings": 1 }, { "indicator": "https://svc3user.binaryflowbuffer.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-23 00:07:07 UTC", "last_seen": "2026-03-23 00:07:07 UTC", "sightings": 1 }, { "indicator": "https://svc2base.binaryflowbuffer.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-23 00:00:11 UTC", "last_seen": "2026-03-23 00:00:11 UTC", "sightings": 1 }, { "indicator": "https://svc1infra.binaryflowbuffer.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 23:56:07 UTC", "last_seen": "2026-03-22 23:56:07 UTC", "sightings": 1 }, { "indicator": "http://182.119.60.58:50550/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 23:51:23 UTC", "last_seen": "2026-03-22 23:51:23 UTC", "sightings": 1 }, { "indicator": "https://dev4work.vectorquantizer.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 23:50:08 UTC", "last_seen": "2026-03-22 23:50:08 UTC", "sightings": 1 }, { "indicator": "http://110.38.206.127:34657/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 23:48:18 UTC", "last_seen": "2026-03-22 23:48:18 UTC", "sightings": 1 }, { "indicator": "http://123.13.36.61:57833/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 23:46:22 UTC", "last_seen": "2026-03-22 23:46:22 UTC", "sightings": 1 }, { "indicator": "http://219.155.208.150:34979/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 23:46:12 UTC", "last_seen": "2026-03-22 23:46:12 UTC", "sightings": 1 }, { "indicator": "https://dev3local.vectorquantizer.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 23:44:07 UTC", "last_seen": "2026-03-22 23:44:07 UTC", "sightings": 1 }, { "indicator": "http://110.37.37.129:43157/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 23:39:21 UTC", "last_seen": "2026-03-22 23:39:21 UTC", "sightings": 1 }, { "indicator": "https://dev2power.vectorquantizer.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 23:38:06 UTC", "last_seen": "2026-03-22 23:38:06 UTC", "sightings": 1 }, { "indicator": "http://113.206.14.54:60299/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-22 23:37:08 UTC", "last_seen": "2026-03-22 23:37:08 UTC", "sightings": 1 }, { "indicator": "http://27.219.143.27:46458/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-22 23:32:06 UTC", "last_seen": "2026-03-22 23:32:06 UTC", "sightings": 1 }, { "indicator": "https://dev1proc.vectorquantizer.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 23:32:06 UTC", "last_seen": "2026-03-22 23:32:06 UTC", "sightings": 1 }, { "indicator": "https://cl4link.spectralunitgate.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 23:28:06 UTC", "last_seen": "2026-03-22 23:28:06 UTC", "sightings": 1 }, { "indicator": "http://119.183.26.169:53982/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-22 23:22:21 UTC", "last_seen": "2026-03-22 23:22:21 UTC", "sightings": 1 }, { "indicator": "https://cl3dev.spectralunitgate.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 23:22:07 UTC", "last_seen": "2026-03-22 23:22:07 UTC", "sightings": 1 }, { "indicator": "http://59.88.251.92:34827/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 23:21:12 UTC", "last_seen": "2026-03-22 23:21:12 UTC", "sightings": 1 }, { "indicator": "http://59.93.180.237:48660/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 23:18:10 UTC", "last_seen": "2026-03-22 23:18:10 UTC", "sightings": 1 }, { "indicator": "https://cl2remote.spectralunitgate.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 23:16:04 UTC", "last_seen": "2026-03-22 23:16:04 UTC", "sightings": 1 }, { "indicator": "http://113.206.14.54:60299/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-22 23:12:06 UTC", "last_seen": "2026-03-22 23:12:06 UTC", "sightings": 1 }, { "indicator": "https://cl1store.spectralunitgate.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 23:11:08 UTC", "last_seen": "2026-03-22 23:11:08 UTC", "sightings": 1 }, { "indicator": "http://110.37.76.196:51783/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 23:10:12 UTC", "last_seen": "2026-03-22 23:10:12 UTC", "sightings": 1 }, { "indicator": "https://ext4sync.hydrofluxstorage.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 23:04:06 UTC", "last_seen": "2026-03-22 23:04:06 UTC", "sightings": 1 }, { "indicator": "http://27.219.143.27:46458/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-22 23:02:06 UTC", "last_seen": "2026-03-22 23:02:06 UTC", "sightings": 1 }, { "indicator": "https://ext3gate.hydrofluxstorage.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 22:59:06 UTC", "last_seen": "2026-03-22 22:59:06 UTC", "sightings": 1 }, { "indicator": "http://119.183.26.169:53982/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-22 22:57:06 UTC", "last_seen": "2026-03-22 22:57:06 UTC", "sightings": 1 }, { "indicator": "https://ext2proc.hydrofluxstorage.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 22:54:07 UTC", "last_seen": "2026-03-22 22:54:07 UTC", "sightings": 1 }, { "indicator": "http://59.93.180.237:48660/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 22:53:21 UTC", "last_seen": "2026-03-22 22:53:21 UTC", "sightings": 1 }, { "indicator": "http://59.88.251.92:34827/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 22:52:18 UTC", "last_seen": "2026-03-22 22:52:18 UTC", "sightings": 1 }, { "indicator": "https://ext1meta.hydrofluxstorage.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 22:48:06 UTC", "last_seen": "2026-03-22 22:48:06 UTC", "sightings": 1 }, { "indicator": "http://60.19.221.232:41026/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 22:47:15 UTC", "last_seen": "2026-03-22 22:47:15 UTC", "sightings": 1 }, { "indicator": "http://117.209.21.68:36734/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 22:46:17 UTC", "last_seen": "2026-03-22 22:46:17 UTC", "sightings": 1 }, { "indicator": "http://110.38.208.89:37931/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 22:43:07 UTC", "last_seen": "2026-03-22 22:43:07 UTC", "sightings": 1 }, { "indicator": "https://svc4static.opticalsensorhub.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 22:43:06 UTC", "last_seen": "2026-03-22 22:43:06 UTC", "sightings": 1 }, { "indicator": "https://svc3edge.opticalsensorhub.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 22:37:11 UTC", "last_seen": "2026-03-22 22:37:11 UTC", "sightings": 1 }, { "indicator": "http://117.248.26.134:46317/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 22:34:16 UTC", "last_seen": "2026-03-22 22:34:16 UTC", "sightings": 1 }, { "indicator": "http://222.141.139.177:45000/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 22:33:12 UTC", "last_seen": "2026-03-22 22:33:12 UTC", "sightings": 1 }, { "indicator": "http://110.37.105.169:53345/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 22:31:09 UTC", "last_seen": "2026-03-22 22:31:09 UTC", "sightings": 1 }, { "indicator": "http://42.224.98.159:42914/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 22:30:18 UTC", "last_seen": "2026-03-22 22:30:18 UTC", "sightings": 1 }, { "indicator": "https://svc2data.opticalsensorhub.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 22:30:10 UTC", "last_seen": "2026-03-22 22:30:10 UTC", "sightings": 1 }, { "indicator": "https://svc1sync.opticalsensorhub.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 22:25:08 UTC", "last_seen": "2026-03-22 22:25:08 UTC", "sightings": 1 }, { "indicator": "http://124.131.4.213:46689/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 22:24:20 UTC", "last_seen": "2026-03-22 22:24:20 UTC", "sightings": 1 }, { "indicator": "http://110.38.199.22:50725/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 22:23:18 UTC", "last_seen": "2026-03-22 22:23:18 UTC", "sightings": 1 }, { "indicator": "http://218.91.153.60:39720/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-22 22:22:07 UTC", "last_seen": "2026-03-22 22:22:07 UTC", "sightings": 1 }, { "indicator": "http://117.209.21.68:36734/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 22:19:27 UTC", "last_seen": "2026-03-22 22:19:27 UTC", "sightings": 1 }, { "indicator": "https://ext4point.thermalmatrixlink.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 22:19:07 UTC", "last_seen": "2026-03-22 22:19:07 UTC", "sightings": 1 }, { "indicator": "http://42.224.98.159:42914/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 22:18:06 UTC", "last_seen": "2026-03-22 22:18:06 UTC", "sightings": 1 }, { "indicator": "http://110.37.24.11:59635/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 22:16:10 UTC", "last_seen": "2026-03-22 22:16:10 UTC", "sightings": 1 }, { "indicator": "https://ext3data.thermalmatrixlink.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 22:14:06 UTC", "last_seen": "2026-03-22 22:14:06 UTC", "sightings": 1 }, { "indicator": "http://110.38.208.89:37931/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 22:13:06 UTC", "last_seen": "2026-03-22 22:13:06 UTC", "sightings": 1 }, { "indicator": "https://ext2proxy.thermalmatrixlink.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 22:08:09 UTC", "last_seen": "2026-03-22 22:08:09 UTC", "sightings": 1 }, { "indicator": "http://110.36.14.229:59592/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-22 22:07:06 UTC", "last_seen": "2026-03-22 22:07:06 UTC", "sightings": 1 }, { "indicator": "http://117.248.26.134:46317/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 22:06:14 UTC", "last_seen": "2026-03-22 22:06:14 UTC", "sightings": 1 }, { "indicator": "http://110.37.105.169:53345/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 22:06:13 UTC", "last_seen": "2026-03-22 22:06:13 UTC", "sightings": 1 }, { "indicator": "https://ext1infra.thermalmatrixlink.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 22:02:07 UTC", "last_seen": "2026-03-22 22:02:07 UTC", "sightings": 1 }, { "indicator": "https://svc4sat.quantumrelaypoint.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 21:57:08 UTC", "last_seen": "2026-03-22 21:57:08 UTC", "sightings": 1 }, { "indicator": "http://218.91.153.60:39720/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-22 21:57:07 UTC", "last_seen": "2026-03-22 21:57:07 UTC", "sightings": 1 }, { "indicator": "http://110.37.24.11:59635/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 21:56:22 UTC", "last_seen": "2026-03-22 21:56:22 UTC", "sightings": 1 }, { "indicator": "http://124.131.4.213:46689/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 21:55:16 UTC", "last_seen": "2026-03-22 21:55:16 UTC", "sightings": 1 }, { "indicator": "http://175.165.81.8:44459/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 21:54:25 UTC", "last_seen": "2026-03-22 21:54:25 UTC", "sightings": 1 }, { "indicator": "https://svc3core.quantumrelaypoint.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 21:52:07 UTC", "last_seen": "2026-03-22 21:52:07 UTC", "sightings": 1 }, { "indicator": "https://github.com/navsahu/navsahu.github.io/raw/refs/heads/main/unperformable/io_navsahu_github_1.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-22 21:50:12 UTC", "last_seen": "2026-03-22 21:50:12 UTC", "sightings": 1 }, { "indicator": "https://github.com/navsahu/navsahu.github.io/raw/refs/heads/main/unperformable/github_io_navsahu_externum.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-22 21:50:11 UTC", "last_seen": "2026-03-22 21:50:11 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/navsahu/navsahu.github.io/refs/heads/main/unperformable/github_io_navsahu_externum.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-22 21:50:09 UTC", "last_seen": "2026-03-22 21:50:09 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/navsahu/navsahu.github.io/refs/heads/main/unperformable/io_navsahu_github_1.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-22 21:50:09 UTC", "last_seen": "2026-03-22 21:50:09 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/navsahu/x402-deploy/refs/heads/main/examples/fastapi-translation/deploy-x-2.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-22 21:50:09 UTC", "last_seen": "2026-03-22 21:50:09 UTC", "sightings": 1 }, { "indicator": "https://github.com/navsahu/x402-deploy/raw/refs/heads/main/examples/fastapi-translation/deploy-x-2.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-22 21:50:09 UTC", "last_seen": "2026-03-22 21:50:09 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/navsahu/navsahu.github.io/refs/heads/main/unperformable/io_github_navsahu_3.0.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-22 21:50:09 UTC", "last_seen": "2026-03-22 21:50:09 UTC", "sightings": 1 }, { "indicator": "https://github.com/navsahu/navsahu.github.io/raw/refs/heads/main/unperformable/io_github_navsahu_3.0.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-22 21:50:09 UTC", "last_seen": "2026-03-22 21:50:09 UTC", "sightings": 1 }, { "indicator": "http://123.10.70.201:60783/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-22 21:47:20 UTC", "last_seen": "2026-03-22 21:47:20 UTC", "sightings": 1 }, { "indicator": "http://182.127.86.72:33163/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-22 21:47:06 UTC", "last_seen": "2026-03-22 21:47:06 UTC", "sightings": 1 }, { "indicator": "https://svc2steel.quantumrelaypoint.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 21:46:09 UTC", "last_seen": "2026-03-22 21:46:09 UTC", "sightings": 1 }, { "indicator": "http://117.209.92.26:55808/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 21:45:29 UTC", "last_seen": "2026-03-22 21:45:29 UTC", "sightings": 1 }, { "indicator": "https://svc1proc.quantumrelaypoint.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 21:41:06 UTC", "last_seen": "2026-03-22 21:41:06 UTC", "sightings": 1 }, { "indicator": "http://110.37.76.196:51783/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-22 21:37:06 UTC", "last_seen": "2026-03-22 21:37:06 UTC", "sightings": 1 }, { "indicator": "https://dev4space.orbitalvectorhub.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 21:35:07 UTC", "last_seen": "2026-03-22 21:35:07 UTC", "sightings": 1 }, { "indicator": "http://221.1.227.135:55314/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-22 21:32:06 UTC", "last_seen": "2026-03-22 21:32:06 UTC", "sightings": 1 }, { "indicator": "http://110.38.221.182:52027/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 21:30:22 UTC", "last_seen": "2026-03-22 21:30:22 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.168/files/1103068177/8WTjrO1.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-03-22 21:30:11 UTC", "last_seen": "2026-03-22 21:30:11 UTC", "sightings": 1 }, { "indicator": "https://dev3field.orbitalvectorhub.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 21:29:06 UTC", "last_seen": "2026-03-22 21:29:06 UTC", "sightings": 1 }, { "indicator": "http://123.10.70.201:60783/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-22 21:28:26 UTC", "last_seen": "2026-03-22 21:28:26 UTC", "sightings": 1 }, { "indicator": "http://221.1.227.135:55314/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-22 21:27:07 UTC", "last_seen": "2026-03-22 21:27:07 UTC", "sightings": 1 }, { "indicator": "https://dev2outer.orbitalvectorhub.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 21:23:07 UTC", "last_seen": "2026-03-22 21:23:07 UTC", "sightings": 1 }, { "indicator": "http://221.200.208.152:44108/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-22 21:22:11 UTC", "last_seen": "2026-03-22 21:22:11 UTC", "sightings": 1 }, { "indicator": "https://dev1proc.orbitalvectorhub.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 21:18:10 UTC", "last_seen": "2026-03-22 21:18:10 UTC", "sightings": 1 }, { "indicator": "http://59.97.180.61:40374/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 21:17:22 UTC", "last_seen": "2026-03-22 21:17:22 UTC", "sightings": 1 }, { "indicator": "https://cl4path.binaryintegritynet.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 21:13:10 UTC", "last_seen": "2026-03-22 21:13:10 UTC", "sightings": 1 }, { "indicator": "http://182.127.152.97:60629/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-22 21:12:07 UTC", "last_seen": "2026-03-22 21:12:07 UTC", "sightings": 1 }, { "indicator": "http://182.129.144.150:48841/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-22 21:12:07 UTC", "last_seen": "2026-03-22 21:12:07 UTC", "sightings": 1 }, { "indicator": "http://110.37.119.220:55297/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-22 21:11:20 UTC", "last_seen": "2026-03-22 21:11:20 UTC", "sightings": 1 }, { "indicator": "http://110.36.77.16:56608/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 21:07:20 UTC", "last_seen": "2026-03-22 21:07:20 UTC", "sightings": 1 }, { "indicator": "https://cl3view.binaryintegritynet.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 21:06:06 UTC", "last_seen": "2026-03-22 21:06:06 UTC", "sightings": 1 }, { "indicator": "http://110.38.221.182:52027/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 21:05:20 UTC", "last_seen": "2026-03-22 21:05:20 UTC", "sightings": 1 }, { "indicator": "http://222.134.163.3:47637/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-22 21:02:08 UTC", "last_seen": "2026-03-22 21:02:08 UTC", "sightings": 1 }, { "indicator": "http://222.134.163.3:47637/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-22 21:02:08 UTC", "last_seen": "2026-03-22 21:02:08 UTC", "sightings": 1 }, { "indicator": "https://cl2point.binaryintegritynet.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 21:01:07 UTC", "last_seen": "2026-03-22 21:01:07 UTC", "sightings": 1 }, { "indicator": "https://cl1proc.binaryintegritynet.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 20:56:07 UTC", "last_seen": "2026-03-22 20:56:07 UTC", "sightings": 1 }, { "indicator": "http://175.148.167.32:34140/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 20:55:25 UTC", "last_seen": "2026-03-22 20:55:25 UTC", "sightings": 1 }, { "indicator": "http://219.156.97.142:48691/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 20:50:20 UTC", "last_seen": "2026-03-22 20:50:20 UTC", "sightings": 1 }, { "indicator": "https://ext4view.acousticdatabuffer.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 20:50:07 UTC", "last_seen": "2026-03-22 20:50:07 UTC", "sightings": 1 }, { "indicator": "http://182.129.144.150:48841/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-22 20:47:07 UTC", "last_seen": "2026-03-22 20:47:07 UTC", "sightings": 1 }, { "indicator": "https://ext3ghost.acousticdatabuffer.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 20:45:09 UTC", "last_seen": "2026-03-22 20:45:09 UTC", "sightings": 1 }, { "indicator": "https://ext2core.acousticdatabuffer.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 20:38:06 UTC", "last_seen": "2026-03-22 20:38:06 UTC", "sightings": 1 }, { "indicator": "http://125.43.36.102:44063/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-22 20:37:05 UTC", "last_seen": "2026-03-22 20:37:05 UTC", "sightings": 1 }, { "indicator": "http://110.37.119.220:55297/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-22 20:36:07 UTC", "last_seen": "2026-03-22 20:36:07 UTC", "sightings": 1 }, { "indicator": "http://117.209.25.215:56533/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 20:35:24 UTC", "last_seen": "2026-03-22 20:35:24 UTC", "sightings": 1 }, { "indicator": "https://ext1proc.acousticdatabuffer.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 20:33:07 UTC", "last_seen": "2026-03-22 20:33:07 UTC", "sightings": 1 }, { "indicator": "http://219.156.97.142:48691/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 20:31:17 UTC", "last_seen": "2026-03-22 20:31:17 UTC", "sightings": 1 }, { "indicator": "http://182.123.225.10:44274/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 20:29:17 UTC", "last_seen": "2026-03-22 20:29:17 UTC", "sightings": 1 }, { "indicator": "https://svc4link.spectralgateway.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 20:29:06 UTC", "last_seen": "2026-03-22 20:29:06 UTC", "sightings": 1 }, { "indicator": "https://svc3user.spectralgateway.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 20:26:07 UTC", "last_seen": "2026-03-22 20:26:07 UTC", "sightings": 1 }, { "indicator": "http://115.55.57.13:51905/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 20:25:18 UTC", "last_seen": "2026-03-22 20:25:18 UTC", "sightings": 1 }, { "indicator": "http://125.40.2.67:33196/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 20:24:12 UTC", "last_seen": "2026-03-22 20:24:12 UTC", "sightings": 1 }, { "indicator": "http://27.15.37.36:58633/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-22 20:23:12 UTC", "last_seen": "2026-03-22 20:23:12 UTC", "sightings": 1 }, { "indicator": "http://182.126.112.204:40437/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-22 20:22:07 UTC", "last_seen": "2026-03-22 20:22:07 UTC", "sightings": 1 }, { "indicator": "https://svc2base.spectralgateway.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 20:17:06 UTC", "last_seen": "2026-03-22 20:17:06 UTC", "sightings": 1 }, { "indicator": "http://117.209.18.69:48602/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 20:15:22 UTC", "last_seen": "2026-03-22 20:15:22 UTC", "sightings": 1 }, { "indicator": "https://svc1infra.spectralgateway.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 20:11:05 UTC", "last_seen": "2026-03-22 20:11:05 UTC", "sightings": 1 }, { "indicator": "https://dev4work.chromaprocessing.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 20:04:08 UTC", "last_seen": "2026-03-22 20:04:08 UTC", "sightings": 1 }, { "indicator": "http://182.123.225.10:44274/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 20:01:20 UTC", "last_seen": "2026-03-22 20:01:20 UTC", "sightings": 1 }, { "indicator": "https://dev3local.chromaprocessing.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 19:59:08 UTC", "last_seen": "2026-03-22 19:59:08 UTC", "sightings": 1 }, { "indicator": "http://27.15.37.36:58633/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-22 19:58:18 UTC", "last_seen": "2026-03-22 19:58:18 UTC", "sightings": 1 }, { "indicator": "http://115.55.57.13:51905/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 19:55:18 UTC", "last_seen": "2026-03-22 19:55:18 UTC", "sightings": 1 }, { "indicator": "https://dev2power.chromaprocessing.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 19:54:07 UTC", "last_seen": "2026-03-22 19:54:07 UTC", "sightings": 1 }, { "indicator": "http://182.126.112.204:40437/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-22 19:52:06 UTC", "last_seen": "2026-03-22 19:52:06 UTC", "sightings": 1 }, { "indicator": "https://dev1proc.chromaprocessing.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 19:48:06 UTC", "last_seen": "2026-03-22 19:48:06 UTC", "sightings": 1 }, { "indicator": "http://88.214.20.143/bins/tux.arm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-22 19:47:18 UTC", "last_seen": "2026-03-22 19:47:18 UTC", "sightings": 1 }, { "indicator": "http://88.214.20.143/bins/tux.arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-22 19:47:18 UTC", "last_seen": "2026-03-22 19:47:18 UTC", "sightings": 1 }, { "indicator": "http://88.214.20.143/bins/tux.sh4", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-22 19:47:18 UTC", "last_seen": "2026-03-22 19:47:18 UTC", "sightings": 1 }, { "indicator": "http://117.209.18.69:48602/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 19:46:29 UTC", "last_seen": "2026-03-22 19:46:29 UTC", "sightings": 1 }, { "indicator": "http://174.138.43.79/iran.armv7l", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-22 19:46:28 UTC", "last_seen": "2026-03-22 19:46:28 UTC", "sightings": 1 }, { "indicator": "http://174.138.43.79/iran.arc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-22 19:46:28 UTC", "last_seen": "2026-03-22 19:46:28 UTC", "sightings": 1 }, { "indicator": "http://174.138.43.79/iran.x86_64", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-22 19:46:28 UTC", "last_seen": "2026-03-22 19:46:28 UTC", "sightings": 1 }, { "indicator": "http://174.138.43.79/iran.aarch64", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-22 19:46:27 UTC", "last_seen": "2026-03-22 19:46:27 UTC", "sightings": 1 }, { "indicator": "http://174.138.43.79/iran.armv5l", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-22 19:46:27 UTC", "last_seen": "2026-03-22 19:46:27 UTC", "sightings": 1 }, { "indicator": "http://174.138.43.79/iran.m68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-22 19:46:27 UTC", "last_seen": "2026-03-22 19:46:27 UTC", "sightings": 1 }, { "indicator": "http://174.138.43.79/iran.mipsel", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-22 19:46:24 UTC", "last_seen": "2026-03-22 19:46:24 UTC", "sightings": 1 }, { "indicator": "http://174.138.43.79/iran.armv4l", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-22 19:46:24 UTC", "last_seen": "2026-03-22 19:46:24 UTC", "sightings": 1 }, { "indicator": "http://174.138.43.79/iran.sh4", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-22 19:46:24 UTC", "last_seen": "2026-03-22 19:46:24 UTC", "sightings": 1 }, { "indicator": "http://174.138.43.79/iran.armv6l", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-22 19:46:23 UTC", "last_seen": "2026-03-22 19:46:23 UTC", "sightings": 1 }, { "indicator": "http://174.138.43.79/iran.sparc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-22 19:46:23 UTC", "last_seen": "2026-03-22 19:46:23 UTC", "sightings": 1 }, { "indicator": "http://174.138.43.79/iran.i486", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-22 19:46:23 UTC", "last_seen": "2026-03-22 19:46:23 UTC", "sightings": 1 }, { "indicator": "http://174.138.43.79/iran.mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-22 19:46:22 UTC", "last_seen": "2026-03-22 19:46:22 UTC", "sightings": 1 }, { "indicator": "http://174.138.43.79/iran.powerpc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-22 19:46:22 UTC", "last_seen": "2026-03-22 19:46:22 UTC", "sightings": 1 }, { "indicator": "http://83.168.95.235/bins/skid.m68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-22 19:46:20 UTC", "last_seen": "2026-03-22 19:46:20 UTC", "sightings": 1 }, { "indicator": "http://83.168.95.235/bins/skid.ppc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-22 19:46:19 UTC", "last_seen": "2026-03-22 19:46:19 UTC", "sightings": 1 }, { "indicator": "http://83.168.95.235/bins/skid.sh4", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-22 19:46:19 UTC", "last_seen": "2026-03-22 19:46:19 UTC", "sightings": 1 }, { "indicator": "http://88.214.20.143/bins/tux.x86", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-22 19:46:19 UTC", "last_seen": "2026-03-22 19:46:19 UTC", "sightings": 1 }, { "indicator": "http://88.214.20.143/bins/tux.arm4", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-22 19:46:18 UTC", "last_seen": "2026-03-22 19:46:18 UTC", "sightings": 1 }, { "indicator": "http://88.214.20.143/bins/tux.arc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-22 19:46:18 UTC", "last_seen": "2026-03-22 19:46:18 UTC", "sightings": 1 }, { "indicator": "http://88.214.20.143/bins/tux.mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-22 19:46:14 UTC", "last_seen": "2026-03-22 19:46:14 UTC", "sightings": 1 }, { "indicator": "http://88.214.20.143/bins/tux.arm", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-22 19:46:14 UTC", "last_seen": "2026-03-22 19:46:14 UTC", "sightings": 1 }, { "indicator": "http://88.214.20.143/bins/tux.mpsl", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-22 19:46:14 UTC", "last_seen": "2026-03-22 19:46:14 UTC", "sightings": 1 }, { "indicator": "http://88.214.20.143/bins/tux.m68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-22 19:46:14 UTC", "last_seen": "2026-03-22 19:46:14 UTC", "sightings": 1 }, { "indicator": "http://83.168.95.235/bins/skid.arm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-22 19:46:14 UTC", "last_seen": "2026-03-22 19:46:14 UTC", "sightings": 1 }, { "indicator": "http://83.168.95.235/bins/skid.x86", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-22 19:46:14 UTC", "last_seen": "2026-03-22 19:46:14 UTC", "sightings": 1 }, { "indicator": "http://83.168.95.235/bins/skid.x86_64", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-22 19:46:14 UTC", "last_seen": "2026-03-22 19:46:14 UTC", "sightings": 1 }, { "indicator": "http://88.214.20.143/bins/tux.ppc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-22 19:46:14 UTC", "last_seen": "2026-03-22 19:46:14 UTC", "sightings": 1 }, { "indicator": "http://88.214.20.143/bins/tux.arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-22 19:46:14 UTC", "last_seen": "2026-03-22 19:46:14 UTC", "sightings": 1 }, { "indicator": "http://83.168.95.235/bins/skid.arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-22 19:46:13 UTC", "last_seen": "2026-03-22 19:46:13 UTC", "sightings": 1 }, { "indicator": "http://83.168.95.235/bins/skid.spc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-22 19:46:13 UTC", "last_seen": "2026-03-22 19:46:13 UTC", "sightings": 1 }, { "indicator": "http://83.168.95.235/bins/skid.arm", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-22 19:46:13 UTC", "last_seen": "2026-03-22 19:46:13 UTC", "sightings": 1 }, { "indicator": "http://83.168.95.235/bins/skid.mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-22 19:46:13 UTC", "last_seen": "2026-03-22 19:46:13 UTC", "sightings": 1 }, { "indicator": "http://83.168.95.235/bins/skid.arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-22 19:46:13 UTC", "last_seen": "2026-03-22 19:46:13 UTC", "sightings": 1 }, { "indicator": "http://83.168.95.235/bins/skid.mpsl", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-22 19:46:11 UTC", "last_seen": "2026-03-22 19:46:11 UTC", "sightings": 1 }, { "indicator": "http://117.241.182.221:46120/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-22 19:44:19 UTC", "last_seen": "2026-03-22 19:44:19 UTC", "sightings": 1 }, { "indicator": "https://cl4link.tensorstorageunit.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 19:42:08 UTC", "last_seen": "2026-03-22 19:42:08 UTC", "sightings": 1 }, { "indicator": "http://125.45.55.183:44884/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-22 19:42:06 UTC", "last_seen": "2026-03-22 19:42:06 UTC", "sightings": 1 }, { "indicator": "http://221.200.217.112:55098/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 19:39:08 UTC", "last_seen": "2026-03-22 19:39:08 UTC", "sightings": 1 }, { "indicator": "https://cl3dev.tensorstorageunit.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 19:37:07 UTC", "last_seen": "2026-03-22 19:37:07 UTC", "sightings": 1 }, { "indicator": "http://167.71.7.162/x86", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-22 19:33:05 UTC", "last_seen": "2026-03-22 19:33:05 UTC", "sightings": 1 }, { "indicator": "http://167.71.7.162/x86_64", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-22 19:33:04 UTC", "last_seen": "2026-03-22 19:33:04 UTC", "sightings": 1 }, { "indicator": "http://167.71.7.162/sh4", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-22 19:33:04 UTC", "last_seen": "2026-03-22 19:33:04 UTC", "sightings": 1 }, { "indicator": "http://167.71.7.162/arm64", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-22 19:33:04 UTC", "last_seen": "2026-03-22 19:33:04 UTC", "sightings": 1 }, { "indicator": "http://167.71.7.162/m68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-22 19:33:04 UTC", "last_seen": "2026-03-22 19:33:04 UTC", "sightings": 1 }, { "indicator": "http://167.71.7.162/arm", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-22 19:33:04 UTC", "last_seen": "2026-03-22 19:33:04 UTC", "sightings": 1 }, { "indicator": "http://167.71.7.162/arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-22 19:33:04 UTC", "last_seen": "2026-03-22 19:33:04 UTC", "sightings": 1 }, { "indicator": "http://167.71.7.162/ppc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-22 19:33:04 UTC", "last_seen": "2026-03-22 19:33:04 UTC", "sightings": 1 }, { "indicator": "http://167.71.7.162/arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-22 19:33:04 UTC", "last_seen": "2026-03-22 19:33:04 UTC", "sightings": 1 }, { "indicator": "http://167.71.7.162/arm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-22 19:33:04 UTC", "last_seen": "2026-03-22 19:33:04 UTC", "sightings": 1 }, { "indicator": "http://167.71.7.162/i686", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-22 19:33:04 UTC", "last_seen": "2026-03-22 19:33:04 UTC", "sightings": 1 }, { "indicator": "http://167.71.7.162/mpsl", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-22 19:33:04 UTC", "last_seen": "2026-03-22 19:33:04 UTC", "sightings": 1 }, { "indicator": "http://167.71.7.162/mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-22 19:33:04 UTC", "last_seen": "2026-03-22 19:33:04 UTC", "sightings": 1 }, { "indicator": "https://cl2remote.tensorstorageunit.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 19:32:07 UTC", "last_seen": "2026-03-22 19:32:07 UTC", "sightings": 1 }, { "indicator": "https://cl1store.tensorstorageunit.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 19:26:07 UTC", "last_seen": "2026-03-22 19:26:07 UTC", "sightings": 1 }, { "indicator": "http://175.43.169.24:50527/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-22 19:22:07 UTC", "last_seen": "2026-03-22 19:22:07 UTC", "sightings": 1 }, { "indicator": "http://27.37.215.51:34137/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 19:20:19 UTC", "last_seen": "2026-03-22 19:20:19 UTC", "sightings": 1 }, { "indicator": "https://ext4sync.geospatialnode.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 19:20:09 UTC", "last_seen": "2026-03-22 19:20:09 UTC", "sightings": 1 }, { "indicator": "http://125.45.55.183:44884/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-22 19:17:07 UTC", "last_seen": "2026-03-22 19:17:07 UTC", "sightings": 1 }, { "indicator": "https://ext3gate.geospatialnode.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 19:14:06 UTC", "last_seen": "2026-03-22 19:14:06 UTC", "sightings": 1 }, { "indicator": "http://182.115.239.251:38279/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 19:13:17 UTC", "last_seen": "2026-03-22 19:13:17 UTC", "sightings": 1 }, { "indicator": "http://59.97.252.28:59841/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 19:11:09 UTC", "last_seen": "2026-03-22 19:11:09 UTC", "sightings": 1 }, { "indicator": "https://ext2proc.geospatialnode.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 19:08:07 UTC", "last_seen": "2026-03-22 19:08:07 UTC", "sightings": 1 }, { "indicator": "http://117.209.3.166:56115/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 19:05:13 UTC", "last_seen": "2026-03-22 19:05:13 UTC", "sightings": 1 }, { "indicator": "https://ext1meta.geospatialnode.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 19:03:11 UTC", "last_seen": "2026-03-22 19:03:11 UTC", "sightings": 1 }, { "indicator": "https://svc4static.signalflowmetrics.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 18:58:06 UTC", "last_seen": "2026-03-22 18:58:06 UTC", "sightings": 1 }, { "indicator": "https://svc3edge.signalflowmetrics.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 18:53:07 UTC", "last_seen": "2026-03-22 18:53:07 UTC", "sightings": 1 }, { "indicator": "http://27.37.215.51:34137/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 18:51:17 UTC", "last_seen": "2026-03-22 18:51:17 UTC", "sightings": 1 }, { "indicator": "https://svc2data.signalflowmetrics.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 18:47:07 UTC", "last_seen": "2026-03-22 18:47:07 UTC", "sightings": 1 }, { "indicator": "http://120.28.215.129:43281/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-22 18:46:20 UTC", "last_seen": "2026-03-22 18:46:20 UTC", "sightings": 1 }, { "indicator": "http://58.255.41.186:60330/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 18:44:12 UTC", "last_seen": "2026-03-22 18:44:12 UTC", "sightings": 1 }, { "indicator": "https://svc1sync.signalflowmetrics.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 18:41:12 UTC", "last_seen": "2026-03-22 18:41:12 UTC", "sightings": 1 }, { "indicator": "http://60.19.217.183:48494/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-22 18:37:21 UTC", "last_seen": "2026-03-22 18:37:21 UTC", "sightings": 1 }, { "indicator": "https://191da.snap-echo.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 18:35:09 UTC", "last_seen": "2026-03-22 18:35:09 UTC", "sightings": 1 }, { "indicator": "http://175.175.129.6:55722/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 18:32:13 UTC", "last_seen": "2026-03-22 18:32:13 UTC", "sightings": 1 }, { "indicator": "https://transmitpass.snap-echo.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 18:32:07 UTC", "last_seen": "2026-03-22 18:32:07 UTC", "sightings": 1 }, { "indicator": "http://222.140.156.194:49998/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-22 18:32:07 UTC", "last_seen": "2026-03-22 18:32:07 UTC", "sightings": 1 }, { "indicator": "https://xdyue.snap-echo.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 18:29:07 UTC", "last_seen": "2026-03-22 18:29:07 UTC", "sightings": 1 }, { "indicator": "https://c02az6tr.lakeweb.digital/?=check&&actmn=IBYzVKUyCMfWNVuB", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-22 18:29:06 UTC", "last_seen": "2026-03-22 18:29:06 UTC", "sightings": 1 }, { "indicator": "http://123.10.203.70:44627/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-22 18:22:08 UTC", "last_seen": "2026-03-22 18:22:08 UTC", "sightings": 1 }, { "indicator": "http://59.184.251.232:59538/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 18:21:12 UTC", "last_seen": "2026-03-22 18:21:12 UTC", "sightings": 1 }, { "indicator": "https://83wi.snap-echo.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-22 18:19:11 UTC", "last_seen": "2026-03-22 18:19:11 UTC", "sightings": 1 }, { "indicator": "http://185.222.160.157/files/7268244560/lJWEIBb.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-03-22 18:15:20 UTC", "last_seen": "2026-03-22 18:15:20 UTC", "sightings": 1 }, { "indicator": "http://5.252.21.239/files/7268244560/lJWEIBb.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-03-22 18:15:20 UTC", "last_seen": "2026-03-22 18:15:20 UTC", "sightings": 1 }, { "indicator": "http://5.252.21.239/files/8468794285/gMZcvzp.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-03-22 18:15:20 UTC", "last_seen": "2026-03-22 18:15:20 UTC", "sightings": 1 }, { "indicator": "http://5.252.21.239/files/7535437325/hGTWd27.bat", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-03-22 18:15:20 UTC", "last_seen": "2026-03-22 18:15:20 UTC", "sightings": 1 }, { "indicator": "http://185.222.160.157/files/8520831842/ItFz5ZS.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-03-22 18:15:20 UTC", "last_seen": "2026-03-22 18:15:20 UTC", "sightings": 1 }, { "indicator": "https://vorven5um.snap-echo.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-22 18:13:06 UTC", "last_seen": "2026-03-22 18:13:06 UTC", "sightings": 1 }, { "indicator": "https://proto-sk3t.vexmoor.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-22 18:08:07 UTC", "last_seen": "2026-03-22 18:08:07 UTC", "sightings": 1 }, { "indicator": "http://5.252.21.239/files/8520831842/ItFz5ZS.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-03-22 18:06:19 UTC", "last_seen": "2026-03-22 18:06:19 UTC", "sightings": 1 }, { "indicator": "https://vahanindia.sbs/apk/mParivahan.apk", "indicator_type": "url", "source": "URLhaus", "tags": [ "apk ", "smsspy" ], "first_seen": "2026-03-22 18:06:08 UTC", "last_seen": "2026-03-22 18:06:08 UTC", "sightings": 1 }, { "indicator": "https://zoomaccess.us/us04web/d/database20260301/817a901d-93be-47ae-b232-f5bfa59ec395/ZoomInstallerx64.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "exe" ], "first_seen": "2026-03-22 18:06:05 UTC", "last_seen": "2026-03-22 18:06:05 UTC", "sightings": 1 }, { "indicator": "http://sitepromclop.click", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-22 18:06:05 UTC", "last_seen": "2026-03-22 18:06:05 UTC", "sightings": 1 }, { "indicator": "https://zoomaccess.us/lightout/notepads.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "exe", "RatonRAT" ], "first_seen": "2026-03-22 18:06:05 UTC", "last_seen": "2026-03-22 18:06:05 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.168/files/7268244560/PHl2Bgd.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-03-22 18:06:04 UTC", "last_seen": "2026-03-22 18:06:04 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.7/files/1323113534/JMn7hFc.msi", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-03-22 18:05:23 UTC", "last_seen": "2026-03-22 18:05:23 UTC", "sightings": 1 }, { "indicator": "https://cdn.filestackcontent.com/EVvXtHQTTeWyiJ1rM62A", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-22 18:05:17 UTC", "last_seen": "2026-03-22 18:05:17 UTC", "sightings": 1 }, { "indicator": "https://main45.b-cdn.net/new26/MicrosoftEdgeUpdateTaskMachineCoreM.msi", "indicator_type": "url", "source": "URLhaus", "tags": [ "Arechclient2" ], "first_seen": "2026-03-22 18:05:13 UTC", "last_seen": "2026-03-22 18:05:13 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/twitodaniel10-sudo/Security/refs/heads/main/ChromeSetup.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "exe", "github" ], "first_seen": "2026-03-22 18:05:13 UTC", "last_seen": "2026-03-22 18:05:13 UTC", "sightings": 1 }, { "indicator": "https://socketusercontent.com/blob/QGKJPg-gHR5Q43Kt6GATFGgDa_B1SZpimbgZA0eXdZxo", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-22 18:05:13 UTC", "last_seen": "2026-03-22 18:05:13 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/twitodaniel10-sudo/Security/refs/heads/main/runner.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "exe", "github", "Havoc" ], "first_seen": "2026-03-22 18:05:12 UTC", "last_seen": "2026-03-22 18:05:12 UTC", "sightings": 1 }, { "indicator": "https://main45.b-cdn.net/new26/new30h.jar", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-22 18:05:12 UTC", "last_seen": "2026-03-22 18:05:12 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/charliefloud-bot/Testrepository/refs/heads/main/CryptifyV2upload.txt", "indicator_type": "url", "source": "URLhaus", "tags": [ "github", "rev-base64-loader", "txt" ], "first_seen": "2026-03-22 18:05:12 UTC", "last_seen": "2026-03-22 18:05:12 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/twitodaniel10-sudo/Security/refs/heads/main/old.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "exe", "github", "Havoc" ], "first_seen": "2026-03-22 18:05:10 UTC", "last_seen": "2026-03-22 18:05:10 UTC", "sightings": 1 }, { "indicator": "https://klsmw.oss-cn-hongkong.aliyuncs.com/qishui0317_setup154.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SilverFox", "trojan" ], "first_seen": "2026-03-22 18:05:08 UTC", "last_seen": "2026-03-22 18:05:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/twitodaniel10-sudo/Security/main/SysAuditHost.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "exe", "github", "Havoc" ], "first_seen": "2026-03-22 18:05:08 UTC", "last_seen": "2026-03-22 18:05:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/twitodaniel10-sudo/Security/refs/heads/main/toogood.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "exe", "github", "Havoc" ], "first_seen": "2026-03-22 18:05:08 UTC", "last_seen": "2026-03-22 18:05:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/twitodaniel10-sudo/Security/refs/heads/main/WinCloudSync.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "exe", "github" ], "first_seen": "2026-03-22 18:05:08 UTC", "last_seen": "2026-03-22 18:05:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/twitodaniel10-sudo/Security/refs/heads/main/vcruntime140_rel.dll", "indicator_type": "url", "source": "URLhaus", "tags": [ "dll", "github" ], "first_seen": "2026-03-22 18:05:08 UTC", "last_seen": "2026-03-22 18:05:08 UTC", "sightings": 1 }, { "indicator": "http://144.31.147.180/cat.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "script" ], "first_seen": "2026-03-22 18:05:06 UTC", "last_seen": "2026-03-22 18:05:06 UTC", "sightings": 1 }, { "indicator": "https://kinetiqa.space/l/1mnIJ3BH.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-03-22 18:05:06 UTC", "last_seen": "2026-03-22 18:05:06 UTC", "sightings": 1 }, { "indicator": "https://chilloutvrhub.com/Chilloutvrmod_Setup.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "StealitStealer", "zip" ], "first_seen": "2026-03-22 18:04:22 UTC", "last_seen": "2026-03-22 18:04:22 UTC", "sightings": 1 }, { "indicator": "http://repost.optico-voda.info/denyexorcist", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-22 18:04:06 UTC", "last_seen": "2026-03-22 18:04:06 UTC", "sightings": 1 }, { "indicator": "https://imaginary.fluxobase.info/denyexorcist", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-22 18:04:05 UTC", "last_seen": "2026-03-22 18:04:05 UTC", "sightings": 1 }, { "indicator": "https://coastal.dwindlingoverlord.com/boot_config.json", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-22 18:04:04 UTC", "last_seen": "2026-03-22 18:04:04 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.168/files/7341834371/BgAtGH0.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey", "Stealc" ], "first_seen": "2026-03-22 18:03:07 UTC", "last_seen": "2026-03-22 18:03:07 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.168/files/7850695435/gpaMBVQ.msi", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey", "EternalRocks" ], "first_seen": "2026-03-22 18:03:07 UTC", "last_seen": "2026-03-22 18:03:07 UTC", "sightings": 1 }, { "indicator": "https://publish4-mark.vexmoor.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-22 18:03:07 UTC", "last_seen": "2026-03-22 18:03:07 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.168/files/7453936223/KAQ8PQ5.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey", "Vidar" ], "first_seen": "2026-03-22 18:03:06 UTC", "last_seen": "2026-03-22 18:03:06 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.168/files/7782139129/1fz7hzL.bat", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-03-22 18:03:05 UTC", "last_seen": "2026-03-22 18:03:05 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.168/files/5900855435/eNLe4nm.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543", "Vidar" ], "first_seen": "2026-03-22 18:01:05 UTC", "last_seen": "2026-03-22 18:01:05 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.168/files/8036065901/ggGms6j.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey", "OffLoader" ], "first_seen": "2026-03-22 18:00:08 UTC", "last_seen": "2026-03-22 18:00:08 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.168/files/7535437325/hyYzXsC.bat", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-03-22 18:00:06 UTC", "last_seen": "2026-03-22 18:00:06 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.168/files/8531638373/QWFfVk7.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey", "Vidar" ], "first_seen": "2026-03-22 18:00:06 UTC", "last_seen": "2026-03-22 18:00:06 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.168/files/7782139129/S6xWuZ1.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey", "Vidar" ], "first_seen": "2026-03-22 17:59:11 UTC", "last_seen": "2026-03-22 17:59:11 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.168/files/8717422379/VMa1dJb.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-22 17:59:06 UTC", "last_seen": "2026-03-22 17:59:06 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.168/files/8574065846/HPlEReH.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543", "Vidar" ], "first_seen": "2026-03-22 17:59:06 UTC", "last_seen": "2026-03-22 17:59:06 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.168/files/7782139129/ZSZfFtn.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey", "SalatStealer" ], "first_seen": "2026-03-22 17:59:06 UTC", "last_seen": "2026-03-22 17:59:06 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.168/files/8434554557/X8cqVrA.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey", "rustystealer", "Vidar" ], "first_seen": "2026-03-22 17:58:06 UTC", "last_seen": "2026-03-22 17:58:06 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.168/files/5848981546/hRw1yLa.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey", "Smoke Loader" ], "first_seen": "2026-03-22 17:58:06 UTC", "last_seen": "2026-03-22 17:58:06 UTC", "sightings": 1 }, { "indicator": "http://123.10.203.70:44627/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-22 17:57:05 UTC", "last_seen": "2026-03-22 17:57:05 UTC", "sightings": 1 }, { "indicator": "https://seio.vexmoor.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-22 17:56:07 UTC", "last_seen": "2026-03-22 17:56:07 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.168/files/neo/random.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-03-22 17:52:09 UTC", "last_seen": "2026-03-22 17:52:09 UTC", "sightings": 1 }, { "indicator": "http://59.93.76.246:53013/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-22 17:52:07 UTC", "last_seen": "2026-03-22 17:52:07 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.168/test/random.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-03-22 17:51:04 UTC", "last_seen": "2026-03-22 17:51:04 UTC", "sightings": 1 }, { "indicator": "https://narrowsudden.vexmoor.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-22 17:50:10 UTC", "last_seen": "2026-03-22 17:50:10 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.168/final/random.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey", "NirCmd" ], "first_seen": "2026-03-22 17:50:07 UTC", "last_seen": "2026-03-22 17:50:07 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.168/files/gop/random.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey", "Vidar" ], "first_seen": "2026-03-22 17:50:06 UTC", "last_seen": "2026-03-22 17:50:06 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.168/files/unique5/random.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543", "Vidar" ], "first_seen": "2026-03-22 17:50:06 UTC", "last_seen": "2026-03-22 17:50:06 UTC", "sightings": 1 }, { "indicator": "http://182.126.109.85:33212/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 17:49:16 UTC", "last_seen": "2026-03-22 17:49:16 UTC", "sightings": 1 }, { "indicator": "http://110.37.32.92:44266/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 17:48:16 UTC", "last_seen": "2026-03-22 17:48:16 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.168/vidar/random.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "connectwise", "dropped-by-amadey", "Vidar" ], "first_seen": "2026-03-22 17:45:08 UTC", "last_seen": "2026-03-22 17:45:08 UTC", "sightings": 1 }, { "indicator": "http://222.139.75.176:50789/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 17:44:18 UTC", "last_seen": "2026-03-22 17:44:18 UTC", "sightings": 1 }, { "indicator": "https://dynspireon.vexmoor.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-22 17:44:09 UTC", "last_seen": "2026-03-22 17:44:09 UTC", "sightings": 1 }, { "indicator": "https://zl6s.flint-haze.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-22 17:40:07 UTC", "last_seen": "2026-03-22 17:40:07 UTC", "sightings": 1 }, { "indicator": "https://8o8xcdx1.rockapp.digital/?=check&&actmn=KcwvMoWxvrfXnZaI", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-22 17:37:11 UTC", "last_seen": "2026-03-22 17:37:11 UTC", "sightings": 1 }, { "indicator": "https://zenvaleor.flint-haze.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-22 17:34:06 UTC", "last_seen": "2026-03-22 17:34:06 UTC", "sightings": 1 }, { "indicator": "https://zenforge0os.flint-haze.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 17:28:07 UTC", "last_seen": "2026-03-22 17:28:07 UTC", "sightings": 1 }, { "indicator": "http://59.93.76.246:53013/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-22 17:27:07 UTC", "last_seen": "2026-03-22 17:27:07 UTC", "sightings": 1 }, { "indicator": "http://110.37.32.92:44266/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 17:23:16 UTC", "last_seen": "2026-03-22 17:23:16 UTC", "sightings": 1 }, { "indicator": "https://mullbqud.flint-haze.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 17:23:07 UTC", "last_seen": "2026-03-22 17:23:07 UTC", "sightings": 1 }, { "indicator": "http://110.37.82.255:57521/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-22 17:22:15 UTC", "last_seen": "2026-03-22 17:22:15 UTC", "sightings": 1 }, { "indicator": "https://unitecove.flint-haze.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 17:17:06 UTC", "last_seen": "2026-03-22 17:17:06 UTC", "sightings": 1 }, { "indicator": "https://geo-r3bate.tr1bekit.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 17:11:09 UTC", "last_seen": "2026-03-22 17:11:09 UTC", "sightings": 1 }, { "indicator": "http://59.177.98.13:46573/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-22 17:06:13 UTC", "last_seen": "2026-03-22 17:06:13 UTC", "sightings": 1 }, { "indicator": "http://175.168.146.69:55310/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-22 17:06:12 UTC", "last_seen": "2026-03-22 17:06:12 UTC", "sightings": 1 }, { "indicator": "https://pzcdml.tr1bekit.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 17:06:08 UTC", "last_seen": "2026-03-22 17:06:08 UTC", "sightings": 1 }, { "indicator": "http://110.37.5.55:45096/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-22 17:06:07 UTC", "last_seen": "2026-03-22 17:06:07 UTC", "sightings": 1 }, { "indicator": "http://180.190.186.97:54679/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-22 17:06:07 UTC", "last_seen": "2026-03-22 17:06:07 UTC", "sightings": 1 }, { "indicator": "http://185.222.160.157/files/5848981546/l119oBn.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey", "Smoke Loader" ], "first_seen": "2026-03-22 17:06:07 UTC", "last_seen": "2026-03-22 17:06:07 UTC", "sightings": 1 }, { "indicator": "http://175.149.170.220:60731/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-22 17:06:06 UTC", "last_seen": "2026-03-22 17:06:06 UTC", "sightings": 1 }, { "indicator": "http://42.228.47.155:45992/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-22 17:06:06 UTC", "last_seen": "2026-03-22 17:06:06 UTC", "sightings": 1 }, { "indicator": "http://110.37.40.14:52071/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-22 17:06:06 UTC", "last_seen": "2026-03-22 17:06:06 UTC", "sightings": 1 }, { "indicator": "http://117.24.140.20:47976/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-22 17:06:06 UTC", "last_seen": "2026-03-22 17:06:06 UTC", "sightings": 1 }, { "indicator": "http://182.176.82.151:37715/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-22 17:05:15 UTC", "last_seen": "2026-03-22 17:05:15 UTC", "sightings": 1 }, { "indicator": "http://117.24.140.20:47976/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-22 17:05:10 UTC", "last_seen": "2026-03-22 17:05:10 UTC", "sightings": 1 }, { "indicator": "http://42.228.47.155:45992/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-22 17:05:10 UTC", "last_seen": "2026-03-22 17:05:10 UTC", "sightings": 1 }, { "indicator": "http://125.41.104.30:43021/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-22 17:05:09 UTC", "last_seen": "2026-03-22 17:05:09 UTC", "sightings": 1 }, { "indicator": "http://110.37.65.64:51271/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-22 17:05:09 UTC", "last_seen": "2026-03-22 17:05:09 UTC", "sightings": 1 }, { "indicator": "http://110.37.55.92:40736/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-22 17:05:09 UTC", "last_seen": "2026-03-22 17:05:09 UTC", "sightings": 1 }, { "indicator": "http://182.127.152.97:60629/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-22 17:05:09 UTC", "last_seen": "2026-03-22 17:05:09 UTC", "sightings": 1 }, { "indicator": "http://110.37.65.64:51271/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-22 17:05:09 UTC", "last_seen": "2026-03-22 17:05:09 UTC", "sightings": 1 }, { "indicator": "http://219.157.37.45:55376/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-22 17:05:09 UTC", "last_seen": "2026-03-22 17:05:09 UTC", "sightings": 1 }, { "indicator": "http://118.34.109.121:55879/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-22 17:05:09 UTC", "last_seen": "2026-03-22 17:05:09 UTC", "sightings": 1 }, { "indicator": "http://182.124.70.244:53860/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-22 17:05:09 UTC", "last_seen": "2026-03-22 17:05:09 UTC", "sightings": 1 }, { "indicator": "http://110.37.5.55:45096/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-22 17:04:12 UTC", "last_seen": "2026-03-22 17:04:12 UTC", "sightings": 1 }, { "indicator": "http://175.23.79.171:33671/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-22 17:04:09 UTC", "last_seen": "2026-03-22 17:04:09 UTC", "sightings": 1 }, { "indicator": "http://110.37.40.14:52071/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-22 17:04:08 UTC", "last_seen": "2026-03-22 17:04:08 UTC", "sightings": 1 }, { "indicator": "http://110.36.80.173:36625/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-22 17:04:08 UTC", "last_seen": "2026-03-22 17:04:08 UTC", "sightings": 1 }, { "indicator": "http://221.15.90.192:51238/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-22 17:04:08 UTC", "last_seen": "2026-03-22 17:04:08 UTC", "sightings": 1 }, { "indicator": "http://42.6.188.169:59708/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-22 17:04:08 UTC", "last_seen": "2026-03-22 17:04:08 UTC", "sightings": 1 }, { "indicator": "http://125.41.104.30:43021/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-22 17:04:08 UTC", "last_seen": "2026-03-22 17:04:08 UTC", "sightings": 1 }, { "indicator": "http://175.149.170.220:60731/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-22 17:04:08 UTC", "last_seen": "2026-03-22 17:04:08 UTC", "sightings": 1 }, { "indicator": "http://182.126.109.85:33212/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-22 17:04:08 UTC", "last_seen": "2026-03-22 17:04:08 UTC", "sightings": 1 }, { "indicator": "http://182.124.70.244:53860/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-22 17:04:08 UTC", "last_seen": "2026-03-22 17:04:08 UTC", "sightings": 1 }, { "indicator": "http://182.115.239.251:38279/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-22 17:04:07 UTC", "last_seen": "2026-03-22 17:04:07 UTC", "sightings": 1 }, { "indicator": "http://110.37.55.92:40736/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-22 17:04:07 UTC", "last_seen": "2026-03-22 17:04:07 UTC", "sightings": 1 }, { "indicator": "http://101.109.242.120:33609/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-22 17:04:07 UTC", "last_seen": "2026-03-22 17:04:07 UTC", "sightings": 1 }, { "indicator": "http://221.15.90.192:51238/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-22 17:04:07 UTC", "last_seen": "2026-03-22 17:04:07 UTC", "sightings": 1 }, { "indicator": "http://185.222.160.157/files/7268244560/PHl2Bgd.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543", "rustystealer" ], "first_seen": "2026-03-22 17:01:07 UTC", "last_seen": "2026-03-22 17:01:07 UTC", "sightings": 1 }, { "indicator": "https://local-bark.tr1bekit.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 17:00:09 UTC", "last_seen": "2026-03-22 17:00:09 UTC", "sightings": 1 }, { "indicator": "http://110.37.96.168:35133/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 16:58:16 UTC", "last_seen": "2026-03-22 16:58:16 UTC", "sightings": 1 }, { "indicator": "http://110.37.82.255:57521/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-22 16:57:20 UTC", "last_seen": "2026-03-22 16:57:20 UTC", "sightings": 1 }, { "indicator": "https://gss3j.tr1bekit.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 16:54:06 UTC", "last_seen": "2026-03-22 16:54:06 UTC", "sightings": 1 }, { "indicator": "https://splitmedi.tr1bekit.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 16:50:07 UTC", "last_seen": "2026-03-22 16:50:07 UTC", "sightings": 1 }, { "indicator": "https://partnerthorn.silkforge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 16:44:07 UTC", "last_seen": "2026-03-22 16:44:07 UTC", "sightings": 1 }, { "indicator": "http://110.36.94.0:60115/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 16:40:21 UTC", "last_seen": "2026-03-22 16:40:21 UTC", "sightings": 1 }, { "indicator": "http://110.36.94.0:60115/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 16:37:18 UTC", "last_seen": "2026-03-22 16:37:18 UTC", "sightings": 1 }, { "indicator": "http://42.239.159.165:53940/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 16:37:17 UTC", "last_seen": "2026-03-22 16:37:17 UTC", "sightings": 1 }, { "indicator": "https://tri-meshon.silkforge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 16:37:06 UTC", "last_seen": "2026-03-22 16:37:06 UTC", "sightings": 1 }, { "indicator": "https://tvxiarw7.silkforge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 16:33:07 UTC", "last_seen": "2026-03-22 16:33:07 UTC", "sightings": 1 }, { "indicator": "https://merdraor6.silkforge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 16:27:07 UTC", "last_seen": "2026-03-22 16:27:07 UTC", "sightings": 1 }, { "indicator": "http://222.142.227.3:42614/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 16:26:18 UTC", "last_seen": "2026-03-22 16:26:18 UTC", "sightings": 1 }, { "indicator": "http://115.54.121.157:39814/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 16:23:10 UTC", "last_seen": "2026-03-22 16:23:10 UTC", "sightings": 1 }, { "indicator": "https://6ohi.silkforge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 16:21:08 UTC", "last_seen": "2026-03-22 16:21:08 UTC", "sightings": 1 }, { "indicator": "https://expor1-frame.si1kforge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 16:15:08 UTC", "last_seen": "2026-03-22 16:15:08 UTC", "sightings": 1 }, { "indicator": "http://110.37.107.203:57690/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 16:11:22 UTC", "last_seen": "2026-03-22 16:11:22 UTC", "sightings": 1 }, { "indicator": "https://taltide2ex.si1kforge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 16:10:08 UTC", "last_seen": "2026-03-22 16:10:08 UTC", "sightings": 1 }, { "indicator": "http://185.222.160.157/files/7535437325/hyYzXsC.bat", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-03-22 16:07:05 UTC", "last_seen": "2026-03-22 16:07:05 UTC", "sightings": 1 }, { "indicator": "https://667hwn.si1kforge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 16:04:08 UTC", "last_seen": "2026-03-22 16:04:08 UTC", "sightings": 1 }, { "indicator": "http://42.239.159.165:53940/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 15:59:23 UTC", "last_seen": "2026-03-22 15:59:23 UTC", "sightings": 1 }, { "indicator": "http://115.49.241.61:36650/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 15:59:18 UTC", "last_seen": "2026-03-22 15:59:18 UTC", "sightings": 1 }, { "indicator": "https://needlshore.si1kforge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 15:59:08 UTC", "last_seen": "2026-03-22 15:59:08 UTC", "sightings": 1 }, { "indicator": "https://ikgmcnga.si1kforge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 15:53:08 UTC", "last_seen": "2026-03-22 15:53:08 UTC", "sightings": 1 }, { "indicator": "http://115.54.121.157:39814/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 15:52:20 UTC", "last_seen": "2026-03-22 15:52:20 UTC", "sightings": 1 }, { "indicator": "http://110.37.35.235:50539/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 15:48:19 UTC", "last_seen": "2026-03-22 15:48:19 UTC", "sightings": 1 }, { "indicator": "http://120.28.199.61:53925/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-22 15:47:19 UTC", "last_seen": "2026-03-22 15:47:19 UTC", "sightings": 1 }, { "indicator": "https://nobl-lan.frost-pixel.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 15:47:09 UTC", "last_seen": "2026-03-22 15:47:09 UTC", "sightings": 1 }, { "indicator": "http://libss.0x504.com/linux_mips64el", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "ua-wget" ], "first_seen": "2026-03-22 15:44:22 UTC", "last_seen": "2026-03-22 15:44:22 UTC", "sightings": 1 }, { "indicator": "http://libss.0x504.com/linux_arm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "gafgyt", "ua-wget" ], "first_seen": "2026-03-22 15:44:22 UTC", "last_seen": "2026-03-22 15:44:22 UTC", "sightings": 1 }, { "indicator": "http://libss.0x504.com/linux_ppc64", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "ua-wget" ], "first_seen": "2026-03-22 15:44:22 UTC", "last_seen": "2026-03-22 15:44:22 UTC", "sightings": 1 }, { "indicator": "http://libss.0x504.com/linux_ppc64el", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "ua-wget" ], "first_seen": "2026-03-22 15:44:22 UTC", "last_seen": "2026-03-22 15:44:22 UTC", "sightings": 1 }, { "indicator": "http://libss.0x504.com/linux_arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "gafgyt", "ua-wget" ], "first_seen": "2026-03-22 15:44:22 UTC", "last_seen": "2026-03-22 15:44:22 UTC", "sightings": 1 }, { "indicator": "http://libss.0x504.com/linux_mips_softfloat", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "ua-wget" ], "first_seen": "2026-03-22 15:44:22 UTC", "last_seen": "2026-03-22 15:44:22 UTC", "sightings": 1 }, { "indicator": "http://libss.0x504.com/linux_mips64", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "ua-wget" ], "first_seen": "2026-03-22 15:44:21 UTC", "last_seen": "2026-03-22 15:44:21 UTC", "sightings": 1 }, { "indicator": "http://libss.0x504.com/linux_aarch64", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "ua-wget" ], "first_seen": "2026-03-22 15:44:20 UTC", "last_seen": "2026-03-22 15:44:20 UTC", "sightings": 1 }, { "indicator": "http://libss.0x504.com/linux_amd64", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "ua-wget" ], "first_seen": "2026-03-22 15:44:20 UTC", "last_seen": "2026-03-22 15:44:20 UTC", "sightings": 1 }, { "indicator": "http://libss.0x504.com/linux_mipsel_softfloat", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "ua-wget" ], "first_seen": "2026-03-22 15:44:19 UTC", "last_seen": "2026-03-22 15:44:19 UTC", "sightings": 1 }, { "indicator": "http://libss.0x504.com/linux_386", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "ua-wget" ], "first_seen": "2026-03-22 15:44:19 UTC", "last_seen": "2026-03-22 15:44:19 UTC", "sightings": 1 }, { "indicator": "http://libss.0x504.com/linux_mipsel_hardfloat", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "ua-wget" ], "first_seen": "2026-03-22 15:44:19 UTC", "last_seen": "2026-03-22 15:44:19 UTC", "sightings": 1 }, { "indicator": "http://libss.0x504.com/linux_mips_hardfloat", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "ua-wget" ], "first_seen": "2026-03-22 15:44:19 UTC", "last_seen": "2026-03-22 15:44:19 UTC", "sightings": 1 }, { "indicator": "http://libss.0x504.com/linux_arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "gafgyt", "ua-wget" ], "first_seen": "2026-03-22 15:44:17 UTC", "last_seen": "2026-03-22 15:44:17 UTC", "sightings": 1 }, { "indicator": "http://libss.0x504.com/cccc.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "sh", "ua-wget" ], "first_seen": "2026-03-22 15:41:20 UTC", "last_seen": "2026-03-22 15:41:20 UTC", "sightings": 1 }, { "indicator": "https://metricpubl.frost-pixel.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 15:41:08 UTC", "last_seen": "2026-03-22 15:41:08 UTC", "sightings": 1 }, { "indicator": "http://120.28.215.129:43281/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-22 15:40:20 UTC", "last_seen": "2026-03-22 15:40:20 UTC", "sightings": 1 }, { "indicator": "http://185.222.160.157/files/8434554557/X8cqVrA.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey", "Vidar" ], "first_seen": "2026-03-22 15:40:07 UTC", "last_seen": "2026-03-22 15:40:07 UTC", "sightings": 1 }, { "indicator": "http://185.222.160.157/files/8036065901/ggGms6j.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey", "OffLoader" ], "first_seen": "2026-03-22 15:39:11 UTC", "last_seen": "2026-03-22 15:39:11 UTC", "sightings": 1 }, { "indicator": "http://185.222.160.157/files/7453936223/KAQ8PQ5.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey", "Vidar" ], "first_seen": "2026-03-22 15:39:06 UTC", "last_seen": "2026-03-22 15:39:06 UTC", "sightings": 1 }, { "indicator": "http://185.222.160.157/files/5900855435/eNLe4nm.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey", "Vidar" ], "first_seen": "2026-03-22 15:39:06 UTC", "last_seen": "2026-03-22 15:39:06 UTC", "sightings": 1 }, { "indicator": "http://119.116.160.159:36351/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 15:38:21 UTC", "last_seen": "2026-03-22 15:38:21 UTC", "sightings": 1 }, { "indicator": "http://185.222.160.157/files/7782139129/S6xWuZ1.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey", "Vidar" ], "first_seen": "2026-03-22 15:38:14 UTC", "last_seen": "2026-03-22 15:38:14 UTC", "sightings": 1 }, { "indicator": "http://185.222.160.157/files/7782139129/ZSZfFtn.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey", "SalatStealer" ], "first_seen": "2026-03-22 15:38:07 UTC", "last_seen": "2026-03-22 15:38:07 UTC", "sightings": 1 }, { "indicator": "http://185.222.160.157/files/8574065846/HPlEReH.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey", "Vidar" ], "first_seen": "2026-03-22 15:38:06 UTC", "last_seen": "2026-03-22 15:38:06 UTC", "sightings": 1 }, { "indicator": "http://185.222.160.157/files/7341834371/BgAtGH0.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey", "Stealc" ], "first_seen": "2026-03-22 15:37:08 UTC", "last_seen": "2026-03-22 15:37:08 UTC", "sightings": 1 }, { "indicator": "http://185.222.160.157/files/7850695435/gpaMBVQ.msi", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey", "EternalRocks" ], "first_seen": "2026-03-22 15:37:08 UTC", "last_seen": "2026-03-22 15:37:08 UTC", "sightings": 1 }, { "indicator": "http://185.222.160.157/files/8531638373/QWFfVk7.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey", "Vidar" ], "first_seen": "2026-03-22 15:37:06 UTC", "last_seen": "2026-03-22 15:37:06 UTC", "sightings": 1 }, { "indicator": "http://185.222.160.157/files/8717422379/VMa1dJb.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-03-22 15:34:06 UTC", "last_seen": "2026-03-22 15:34:06 UTC", "sightings": 1 }, { "indicator": "http://185.222.160.157/files/7782139129/1fz7hzL.bat", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-03-22 15:34:05 UTC", "last_seen": "2026-03-22 15:34:05 UTC", "sightings": 1 }, { "indicator": "http://110.36.80.169:40282/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 15:32:14 UTC", "last_seen": "2026-03-22 15:32:14 UTC", "sightings": 1 }, { "indicator": "http://185.222.160.157/files/unique5/random.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey", "Vidar" ], "first_seen": "2026-03-22 15:31:07 UTC", "last_seen": "2026-03-22 15:31:07 UTC", "sightings": 1 }, { "indicator": "https://anctheory.frost-pixel.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 15:30:08 UTC", "last_seen": "2026-03-22 15:30:08 UTC", "sightings": 1 }, { "indicator": "http://185.222.160.157/final/random.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey", "NirCmd" ], "first_seen": "2026-03-22 15:28:08 UTC", "last_seen": "2026-03-22 15:28:08 UTC", "sightings": 1 }, { "indicator": "http://185.222.160.157/files/rdx/random.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey", "Vidar" ], "first_seen": "2026-03-22 15:27:06 UTC", "last_seen": "2026-03-22 15:27:06 UTC", "sightings": 1 }, { "indicator": "http://185.222.160.157/files/gop/random.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey", "Vidar" ], "first_seen": "2026-03-22 15:26:06 UTC", "last_seen": "2026-03-22 15:26:06 UTC", "sightings": 1 }, { "indicator": "http://120.28.199.61:53925/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-22 15:25:23 UTC", "last_seen": "2026-03-22 15:25:23 UTC", "sightings": 1 }, { "indicator": "https://macr-point.frost-pixel.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 15:24:07 UTC", "last_seen": "2026-03-22 15:24:07 UTC", "sightings": 1 }, { "indicator": "http://185.222.160.157/test/random.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-22 15:24:06 UTC", "last_seen": "2026-03-22 15:24:06 UTC", "sightings": 1 }, { "indicator": "http://185.222.160.157/files/neo/random.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-22 15:23:09 UTC", "last_seen": "2026-03-22 15:23:09 UTC", "sightings": 1 }, { "indicator": "http://110.37.35.235:50539/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 15:21:25 UTC", "last_seen": "2026-03-22 15:21:25 UTC", "sightings": 1 }, { "indicator": "https://stackrende.qy7mral.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 15:20:08 UTC", "last_seen": "2026-03-22 15:20:08 UTC", "sightings": 1 }, { "indicator": "http://117.209.119.213:32820/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 15:13:18 UTC", "last_seen": "2026-03-22 15:13:18 UTC", "sightings": 1 }, { "indicator": "http://119.116.160.159:36351/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 15:13:15 UTC", "last_seen": "2026-03-22 15:13:15 UTC", "sightings": 1 }, { "indicator": "https://bloom-track.qy7mral.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 15:13:07 UTC", "last_seen": "2026-03-22 15:13:07 UTC", "sightings": 1 }, { "indicator": "http://185.222.160.157/vidar/random.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey", "Vidar" ], "first_seen": "2026-03-22 15:10:10 UTC", "last_seen": "2026-03-22 15:10:10 UTC", "sightings": 1 }, { "indicator": "https://notifsilv.qy7mral.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 15:08:07 UTC", "last_seen": "2026-03-22 15:08:07 UTC", "sightings": 1 }, { "indicator": "http://110.36.80.169:40282/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 15:04:18 UTC", "last_seen": "2026-03-22 15:04:18 UTC", "sightings": 1 }, { "indicator": "https://decodecrest.qy7mral.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 15:03:08 UTC", "last_seen": "2026-03-22 15:03:08 UTC", "sightings": 1 }, { "indicator": "https://ciqc7g6.qy7mral.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 15:03:06 UTC", "last_seen": "2026-03-22 15:03:06 UTC", "sightings": 1 }, { "indicator": "http://110.37.67.34:43074/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-22 14:55:12 UTC", "last_seen": "2026-03-22 14:55:12 UTC", "sightings": 1 }, { "indicator": "https://ruralbridge.brightcove.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 14:51:06 UTC", "last_seen": "2026-03-22 14:51:06 UTC", "sightings": 1 }, { "indicator": "http://117.209.29.51:46331/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 14:45:18 UTC", "last_seen": "2026-03-22 14:45:18 UTC", "sightings": 1 }, { "indicator": "https://69316.brightcove.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 14:45:08 UTC", "last_seen": "2026-03-22 14:45:08 UTC", "sightings": 1 }, { "indicator": "https://civi1-flow.brightcove.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 14:40:08 UTC", "last_seen": "2026-03-22 14:40:08 UTC", "sightings": 1 }, { "indicator": "http://110.37.96.168:35133/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 14:38:22 UTC", "last_seen": "2026-03-22 14:38:22 UTC", "sightings": 1 }, { "indicator": "http://175.9.166.82:39420/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-22 14:34:16 UTC", "last_seen": "2026-03-22 14:34:16 UTC", "sightings": 1 }, { "indicator": "https://parce1-plate.brightcove.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 14:34:10 UTC", "last_seen": "2026-03-22 14:34:10 UTC", "sightings": 1 }, { "indicator": "https://eewh.brightcove.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 14:29:09 UTC", "last_seen": "2026-03-22 14:29:09 UTC", "sightings": 1 }, { "indicator": "http://110.37.67.34:43074/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-22 14:28:06 UTC", "last_seen": "2026-03-22 14:28:06 UTC", "sightings": 1 }, { "indicator": "http://117.209.29.51:46331/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 14:26:26 UTC", "last_seen": "2026-03-22 14:26:26 UTC", "sightings": 1 }, { "indicator": "http://182.114.34.148:60562/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 14:23:11 UTC", "last_seen": "2026-03-22 14:23:11 UTC", "sightings": 1 }, { "indicator": "https://sfc80ox.storm-ink.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 14:23:08 UTC", "last_seen": "2026-03-22 14:23:08 UTC", "sightings": 1 }, { "indicator": "https://talmarkum.storm-ink.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 14:11:06 UTC", "last_seen": "2026-03-22 14:11:06 UTC", "sightings": 1 }, { "indicator": "http://175.9.166.82:39420/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-22 14:10:21 UTC", "last_seen": "2026-03-22 14:10:21 UTC", "sightings": 1 }, { "indicator": "https://velforgeex.storm-ink.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 14:06:07 UTC", "last_seen": "2026-03-22 14:06:07 UTC", "sightings": 1 }, { "indicator": "http://42.5.232.94:37282/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 14:04:21 UTC", "last_seen": "2026-03-22 14:04:21 UTC", "sightings": 1 }, { "indicator": "https://shoal7-forge.storm-ink.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 14:01:07 UTC", "last_seen": "2026-03-22 14:01:07 UTC", "sightings": 1 }, { "indicator": "https://github.com/ishusahu246/fold/raw/refs/heads/main/56/05.txt", "indicator_type": "url", "source": "URLhaus", "tags": [ "lua", "SmartLoader" ], "first_seen": "2026-03-22 13:55:09 UTC", "last_seen": "2026-03-22 13:55:09 UTC", "sightings": 1 }, { "indicator": "https://airbay.ravenloop.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 13:55:09 UTC", "last_seen": "2026-03-22 13:55:09 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/ishusahu246/fold/refs/heads/main/56/05.txt", "indicator_type": "url", "source": "URLhaus", "tags": [ "lua", "SmartLoader" ], "first_seen": "2026-03-22 13:55:08 UTC", "last_seen": "2026-03-22 13:55:08 UTC", "sightings": 1 }, { "indicator": "https://ultra-rep0r.ravenloop.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 13:50:09 UTC", "last_seen": "2026-03-22 13:50:09 UTC", "sightings": 1 }, { "indicator": "https://voic9-branch.ravenloop.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 13:49:13 UTC", "last_seen": "2026-03-22 13:49:13 UTC", "sightings": 1 }, { "indicator": "https://github.com/UlaLee/ulalee.github.io/raw/refs/heads/main/nonpreference/github-ulalee-io-3.7.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-22 13:49:12 UTC", "last_seen": "2026-03-22 13:49:12 UTC", "sightings": 1 }, { "indicator": "https://github.com/UlaLee/skills-npm/raw/refs/heads/main/test/fixtures/pnpm-monorepo/packages/pkg-b/node_modules/@test-scope/npm-skills-1.8-alpha.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-22 13:49:11 UTC", "last_seen": "2026-03-22 13:49:11 UTC", "sightings": 1 }, { "indicator": "https://pr1me-zone.ravenloop.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 13:49:11 UTC", "last_seen": "2026-03-22 13:49:11 UTC", "sightings": 1 }, { "indicator": "https://github.com/UlaLee/ulalee.github.io/raw/refs/heads/main/nonpreference/ulalee-io-github-v1.7.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-22 13:49:11 UTC", "last_seen": "2026-03-22 13:49:11 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/UlaLee/ulalee.github.io/refs/heads/main/nonpreference/ulalee-io-github-v1.7.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-22 13:49:11 UTC", "last_seen": "2026-03-22 13:49:11 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/UlaLee/skills-npm/refs/heads/main/test/fixtures/pnpm-monorepo/packages/pkg-b/node_modules/%40test-scope/npm-skills-1.8-alpha.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-22 13:49:11 UTC", "last_seen": "2026-03-22 13:49:11 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/UlaLee/skills-npm/refs/heads/main/test/fixtures/pnpm-monorepo/packages/pkg-a/node_modules/test-pkg-a/npm_skills_celeste.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-22 13:49:10 UTC", "last_seen": "2026-03-22 13:49:10 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/algobytesolutions/algobytesolutions.github.io/refs/heads/main/das/io-github-algobytesolutions-v1.7-beta.4.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-22 13:49:10 UTC", "last_seen": "2026-03-22 13:49:10 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/UlaLee/ulalee.github.io/refs/heads/main/nonpreference/github-ulalee-io-3.7.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-22 13:49:10 UTC", "last_seen": "2026-03-22 13:49:10 UTC", "sightings": 1 }, { "indicator": "https://github.com/UlaLee/skills-npm/raw/refs/heads/main/test/fixtures/pnpm-monorepo/packages/pkg-a/node_modules/test-pkg-a/npm_skills_celeste.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-22 13:49:08 UTC", "last_seen": "2026-03-22 13:49:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/AAAbiola/aaabiola.github.io/raw/refs/heads/main/chirographary/github_io_aaabiola_1.0.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-22 13:33:21 UTC", "last_seen": "2026-03-22 13:33:21 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/ali-maiga/ali-maiga.github.io/refs/heads/main/talotibial/github_maiga_ali_io_Leonid.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-22 13:33:18 UTC", "last_seen": "2026-03-22 13:33:18 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/ali-maiga/ali-maiga.github.io/refs/heads/main/talotibial/ali_github_maiga_io_v2.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-22 13:33:18 UTC", "last_seen": "2026-03-22 13:33:18 UTC", "sightings": 1 }, { "indicator": "https://github.com/kaninis/kaninis.github.io/raw/refs/heads/main/unforgiven/kaninis_io_github_1.6.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-22 13:33:17 UTC", "last_seen": "2026-03-22 13:33:17 UTC", "sightings": 1 }, { "indicator": "https://github.com/kaninis/-Classification-with-Random-Forest/raw/refs/heads/master/azeotropic/with-Forest-Classification-Random-v3.0.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-22 13:33:17 UTC", "last_seen": "2026-03-22 13:33:17 UTC", "sightings": 1 }, { "indicator": "https://github.com/ali-maiga/ali-maiga.github.io/raw/refs/heads/main/talotibial/github_maiga_ali_io_Leonid.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-22 13:33:17 UTC", "last_seen": "2026-03-22 13:33:17 UTC", "sightings": 1 }, { "indicator": "https://github.com/ali-maiga/ali-maiga.github.io/raw/refs/heads/main/talotibial/ali_github_maiga_io_v2.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-22 13:33:17 UTC", "last_seen": "2026-03-22 13:33:17 UTC", "sightings": 1 }, { "indicator": "https://github.com/algobytesolutions/algobytesolutions.github.io/raw/refs/heads/main/das/io-github-algobytesolutions-v1.7-beta.4.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-22 13:33:16 UTC", "last_seen": "2026-03-22 13:33:16 UTC", "sightings": 1 }, { "indicator": "https://github.com/kaninis/-Classification-with-Random-Forest/raw/refs/heads/master/azeotropic/Forest_with_Classification_Random_3.9.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-22 13:33:16 UTC", "last_seen": "2026-03-22 13:33:16 UTC", "sightings": 1 }, { "indicator": "https://github.com/kaninis/-Classification-with-Random-Forest/raw/refs/heads/master/azeotropic/Forest_with_Classification_Random_antialcoholist.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-22 13:33:15 UTC", "last_seen": "2026-03-22 13:33:15 UTC", "sightings": 1 }, { "indicator": "https://github.com/ali-maiga/ali-maiga.github.io/raw/refs/heads/main/talotibial/maiga-ali-github-io-slumpproof.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-22 13:33:15 UTC", "last_seen": "2026-03-22 13:33:15 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/kaninis/kaninis.github.io/refs/heads/main/unforgiven/github-kaninis-io-v1.6.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-22 13:33:15 UTC", "last_seen": "2026-03-22 13:33:15 UTC", "sightings": 1 }, { "indicator": "https://github.com/AAAbiola/aaabiola.github.io/raw/refs/heads/main/chirographary/aaabiola_io_github_3.7.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-22 13:33:15 UTC", "last_seen": "2026-03-22 13:33:15 UTC", "sightings": 1 }, { "indicator": "https://github.com/AAAbiola/openclaw-docker/raw/refs/heads/main/Diatrymiformes/openclaw-docker-v1.6.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-22 13:33:15 UTC", "last_seen": "2026-03-22 13:33:15 UTC", "sightings": 1 }, { "indicator": "https://github.com/ali-maiga/base-hyprland/raw/refs/heads/main/files/system/usr/share/ublue-os/just/base_hyprland_2.4.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-22 13:33:15 UTC", "last_seen": "2026-03-22 13:33:15 UTC", "sightings": 1 }, { "indicator": "https://github.com/kaninis/kaninis.github.io/raw/refs/heads/main/unforgiven/github-kaninis-io-3.8-beta.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-22 13:33:15 UTC", "last_seen": "2026-03-22 13:33:15 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/kaninis/kaninis.github.io/refs/heads/main/unforgiven/kaninis_io_github_1.6.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-22 13:33:15 UTC", "last_seen": "2026-03-22 13:33:15 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/kaninis/kaninis.github.io/refs/heads/main/unforgiven/github-kaninis-io-3.8-beta.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-22 13:33:15 UTC", "last_seen": "2026-03-22 13:33:15 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/kaninis/-Classification-with-Random-Forest/refs/heads/master/azeotropic/Forest_with_Classification_Random_antialcoholist.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-22 13:33:15 UTC", "last_seen": "2026-03-22 13:33:15 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/AAAbiola/aaabiola.github.io/refs/heads/main/chirographary/aaabiola_io_github_3.7.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-22 13:33:15 UTC", "last_seen": "2026-03-22 13:33:15 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/ali-maiga/base-hyprland/refs/heads/main/files/system/hyprland/base-hyprland-2.0.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-22 13:33:15 UTC", "last_seen": "2026-03-22 13:33:15 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/kaninis/kaninis.github.io/refs/heads/main/unforgiven/kaninis-io-github-v2.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-22 13:33:15 UTC", "last_seen": "2026-03-22 13:33:15 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/ali-maiga/base-hyprland/refs/heads/main/files/system/usr/share/ublue-os/just/base_hyprland_2.4.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-22 13:33:15 UTC", "last_seen": "2026-03-22 13:33:15 UTC", "sightings": 1 }, { "indicator": "https://github.com/AAAbiola/openclaw-docker/raw/refs/heads/main/Diatrymiformes/docker-openclaw-v3.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-22 13:33:14 UTC", "last_seen": "2026-03-22 13:33:14 UTC", "sightings": 1 }, { "indicator": "https://github.com/AAAbiola/openclaw-docker/raw/refs/heads/main/Diatrymiformes/docker-openclaw-v1.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-22 13:33:14 UTC", "last_seen": "2026-03-22 13:33:14 UTC", "sightings": 1 }, { "indicator": "https://github.com/algobytesolutions/algobytesolutions.github.io/raw/refs/heads/main/das/algobytesolutions-github-io-1.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-22 13:33:14 UTC", "last_seen": "2026-03-22 13:33:14 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/AAAbiola/aaabiola.github.io/refs/heads/main/chirographary/github_io_aaabiola_1.0.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-22 13:33:14 UTC", "last_seen": "2026-03-22 13:33:14 UTC", "sightings": 1 }, { "indicator": "https://github.com/kaninis/-Classification-with-Random-Forest/raw/refs/heads/master/azeotropic/with-Random-Forest-Classification-v3.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-22 13:33:14 UTC", "last_seen": "2026-03-22 13:33:14 UTC", "sightings": 1 }, { "indicator": "https://github.com/kaninis/-Classification-with-Random-Forest/raw/refs/heads/master/azeotropic/Classification-with-Random-Forest-3.0.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-22 13:33:14 UTC", "last_seen": "2026-03-22 13:33:14 UTC", "sightings": 1 }, { "indicator": "https://github.com/algobytesolutions/Best-Crypto-Telegram-Channels/raw/refs/heads/main/analyzer/migrations/Channels_Crypto_Telegram_Best_v2.7.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-22 13:33:14 UTC", "last_seen": "2026-03-22 13:33:14 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/AAAbiola/openclaw-docker/refs/heads/main/Diatrymiformes/docker-openclaw-v1.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-22 13:33:14 UTC", "last_seen": "2026-03-22 13:33:14 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/algobytesolutions/Best-Crypto-Telegram-Channels/refs/heads/main/analyzer/migrations/Channels_Crypto_Telegram_Best_v2.7.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-22 13:33:14 UTC", "last_seen": "2026-03-22 13:33:14 UTC", "sightings": 1 }, { "indicator": "https://github.com/ali-maiga/base-hyprland/raw/refs/heads/main/files/system/hyprland/base-hyprland-2.0.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-22 13:33:14 UTC", "last_seen": "2026-03-22 13:33:14 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/kaninis/-Classification-with-Random-Forest/refs/heads/master/azeotropic/with-Random-Forest-Classification-v3.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-22 13:33:14 UTC", "last_seen": "2026-03-22 13:33:14 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/kaninis/-Classification-with-Random-Forest/refs/heads/master/azeotropic/Classification-with-Random-Forest-3.0.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-22 13:33:14 UTC", "last_seen": "2026-03-22 13:33:14 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/ali-maiga/ali-maiga.github.io/refs/heads/main/talotibial/maiga-ali-github-io-slumpproof.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-22 13:33:14 UTC", "last_seen": "2026-03-22 13:33:14 UTC", "sightings": 1 }, { "indicator": "https://github.com/kaninis/kaninis.github.io/raw/refs/heads/main/unforgiven/kaninis-io-github-v2.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-22 13:33:14 UTC", "last_seen": "2026-03-22 13:33:14 UTC", "sightings": 1 }, { "indicator": "https://github.com/kaninis/kaninis.github.io/raw/refs/heads/main/unforgiven/io_github_kaninis_acrophonetic.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-22 13:33:14 UTC", "last_seen": "2026-03-22 13:33:14 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/kaninis/kaninis.github.io/refs/heads/main/unforgiven/io_github_kaninis_acrophonetic.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-22 13:33:14 UTC", "last_seen": "2026-03-22 13:33:14 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/algobytesolutions/algobytesolutions.github.io/refs/heads/main/das/algobytesolutions-github-io-1.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-22 13:33:14 UTC", "last_seen": "2026-03-22 13:33:14 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/kaninis/-Classification-with-Random-Forest/refs/heads/master/azeotropic/with-Forest-Classification-Random-v3.0.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-22 13:33:14 UTC", "last_seen": "2026-03-22 13:33:14 UTC", "sightings": 1 }, { "indicator": "https://github.com/kaninis/kaninis.github.io/raw/refs/heads/main/unforgiven/github-kaninis-io-v1.6.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-22 13:33:14 UTC", "last_seen": "2026-03-22 13:33:14 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/AAAbiola/openclaw-docker/refs/heads/main/Diatrymiformes/openclaw-docker-v1.6.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-22 13:33:13 UTC", "last_seen": "2026-03-22 13:33:13 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/kaninis/-Classification-with-Random-Forest/refs/heads/master/azeotropic/Forest_with_Classification_Random_3.9.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-22 13:33:13 UTC", "last_seen": "2026-03-22 13:33:13 UTC", "sightings": 1 }, { "indicator": "https://github.com/AAAbiola/aaabiola.github.io/raw/refs/heads/main/chirographary/io-github-aaabiola-v1.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-22 13:33:13 UTC", "last_seen": "2026-03-22 13:33:13 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/AAAbiola/openclaw-docker/refs/heads/main/Diatrymiformes/docker-openclaw-v3.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-22 13:33:12 UTC", "last_seen": "2026-03-22 13:33:12 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/AAAbiola/aaabiola.github.io/refs/heads/main/chirographary/io-github-aaabiola-v1.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-22 13:33:12 UTC", "last_seen": "2026-03-22 13:33:12 UTC", "sightings": 1 }, { "indicator": "https://2pqcis.ravenloop.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 13:32:08 UTC", "last_seen": "2026-03-22 13:32:08 UTC", "sightings": 1 }, { "indicator": "http://110.37.61.34:55435/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 13:28:15 UTC", "last_seen": "2026-03-22 13:28:15 UTC", "sightings": 1 }, { "indicator": "https://coomajor.glowmire.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 13:27:07 UTC", "last_seen": "2026-03-22 13:27:07 UTC", "sightings": 1 }, { "indicator": "http://110.37.61.34:55435/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 13:26:06 UTC", "last_seen": "2026-03-22 13:26:06 UTC", "sightings": 1 }, { "indicator": "https://voadtm.glowmire.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 13:16:06 UTC", "last_seen": "2026-03-22 13:16:06 UTC", "sightings": 1 }, { "indicator": "https://github.com/savagegodfather/tma-llms-txt/raw/refs/heads/main/technolithic/txt-tma-llms-v1.7.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-22 13:14:09 UTC", "last_seen": "2026-03-22 13:14:09 UTC", "sightings": 1 }, { "indicator": "https://github.com/eridanux/eridanux.github.io/raw/refs/heads/main/excentral/github-eridanux-io-v1.7-beta.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-22 13:14:09 UTC", "last_seen": "2026-03-22 13:14:09 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Rajkumarsingh23/nestjs-demo/refs/heads/main/nous/demo_nestjs_v2.0.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-22 13:14:09 UTC", "last_seen": "2026-03-22 13:14:09 UTC", "sightings": 1 }, { "indicator": "https://github.com/savagegodfather/savagegodfather.github.io/raw/refs/heads/main/proctorling/savagegodfather-github-io-v2.8-beta.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-22 13:14:09 UTC", "last_seen": "2026-03-22 13:14:09 UTC", "sightings": 1 }, { "indicator": "https://github.com/Rajkumarsingh23/nestjs-demo/raw/refs/heads/main/nous/demo_nestjs_v2.0.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-22 13:14:09 UTC", "last_seen": "2026-03-22 13:14:09 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/eridanux/blades-of-fire-external-toolset/refs/heads/branch/ischiocerite/of-blades-fire-external-toolset-2.0.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-22 13:14:08 UTC", "last_seen": "2026-03-22 13:14:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/savagegodfather/tma-llms-txt/refs/heads/main/technolithic/txt-tma-llms-v1.7.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-22 13:14:08 UTC", "last_seen": "2026-03-22 13:14:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/eridanux/eridanux.github.io/refs/heads/main/excentral/github-eridanux-io-v1.7-beta.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-22 13:14:08 UTC", "last_seen": "2026-03-22 13:14:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/eridanux/blades-of-fire-external-toolset/raw/refs/heads/branch/ischiocerite/of-blades-fire-external-toolset-2.0.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-22 13:14:08 UTC", "last_seen": "2026-03-22 13:14:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/eridanux/cashu-skill/raw/refs/heads/main/cli/cashu-skill-v3.6.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-22 13:14:08 UTC", "last_seen": "2026-03-22 13:14:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/savagegodfather/savagegodfather.github.io/refs/heads/main/proctorling/savagegodfather-github-io-v2.8-beta.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-22 13:14:08 UTC", "last_seen": "2026-03-22 13:14:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/eridanux/cashu-skill/refs/heads/main/cli/cashu-skill-v3.6.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-22 13:14:08 UTC", "last_seen": "2026-03-22 13:14:08 UTC", "sightings": 1 }, { "indicator": "https://tinytrai.glowmire.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 13:10:11 UTC", "last_seen": "2026-03-22 13:10:11 UTC", "sightings": 1 }, { "indicator": "https://tal-lineal.glowmire.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 13:05:11 UTC", "last_seen": "2026-03-22 13:05:11 UTC", "sightings": 1 }, { "indicator": "http://117.216.190.200:53608/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 12:58:19 UTC", "last_seen": "2026-03-22 12:58:19 UTC", "sightings": 1 }, { "indicator": "https://m3di-sheet.quick-fern.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 12:58:06 UTC", "last_seen": "2026-03-22 12:58:06 UTC", "sightings": 1 }, { "indicator": "http://117.216.190.200:53608/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 12:57:22 UTC", "last_seen": "2026-03-22 12:57:22 UTC", "sightings": 1 }, { "indicator": "https://passi-vault.quick-fern.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 12:54:06 UTC", "last_seen": "2026-03-22 12:54:06 UTC", "sightings": 1 }, { "indicator": "https://dussil.quick-fern.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 12:48:08 UTC", "last_seen": "2026-03-22 12:48:08 UTC", "sightings": 1 }, { "indicator": "http://182.127.124.4:59397/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 12:47:16 UTC", "last_seen": "2026-03-22 12:47:16 UTC", "sightings": 1 }, { "indicator": "https://solvaleix1.quick-fern.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 12:37:08 UTC", "last_seen": "2026-03-22 12:37:08 UTC", "sightings": 1 }, { "indicator": "http://115.63.13.217:34216/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 12:34:17 UTC", "last_seen": "2026-03-22 12:34:17 UTC", "sightings": 1 }, { "indicator": "https://sandboxairway.n1ghtlark.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 12:30:08 UTC", "last_seen": "2026-03-22 12:30:08 UTC", "sightings": 1 }, { "indicator": "http://113.221.24.152:33054/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-22 12:25:12 UTC", "last_seen": "2026-03-22 12:25:12 UTC", "sightings": 1 }, { "indicator": "https://epymb.n1ghtlark.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 12:25:09 UTC", "last_seen": "2026-03-22 12:25:09 UTC", "sightings": 1 }, { "indicator": "http://182.127.124.4:59397/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 12:20:16 UTC", "last_seen": "2026-03-22 12:20:16 UTC", "sightings": 1 }, { "indicator": "https://zwlaax.n1ghtlark.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 12:20:08 UTC", "last_seen": "2026-03-22 12:20:08 UTC", "sightings": 1 }, { "indicator": "http://175.0.66.172:50274/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-22 12:18:19 UTC", "last_seen": "2026-03-22 12:18:19 UTC", "sightings": 1 }, { "indicator": "https://xfuhz.n1ghtlark.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 12:14:06 UTC", "last_seen": "2026-03-22 12:14:06 UTC", "sightings": 1 }, { "indicator": "http://118.232.137.101:45794/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-22 12:12:11 UTC", "last_seen": "2026-03-22 12:12:11 UTC", "sightings": 1 }, { "indicator": "https://vendo-vali.n1ghtlark.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 12:09:09 UTC", "last_seen": "2026-03-22 12:09:09 UTC", "sightings": 1 }, { "indicator": "http://222.137.95.153:46962/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 12:07:17 UTC", "last_seen": "2026-03-22 12:07:17 UTC", "sightings": 1 }, { "indicator": "https://jqzgl.briskvale.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 12:03:09 UTC", "last_seen": "2026-03-22 12:03:09 UTC", "sightings": 1 }, { "indicator": "http://113.221.24.152:33054/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-22 11:58:21 UTC", "last_seen": "2026-03-22 11:58:21 UTC", "sightings": 1 }, { "indicator": "https://driveloa.briskvale.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 11:58:06 UTC", "last_seen": "2026-03-22 11:58:06 UTC", "sightings": 1 }, { "indicator": "http://95.72.141.230:53427/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 11:56:18 UTC", "last_seen": "2026-03-22 11:56:18 UTC", "sightings": 1 }, { "indicator": "https://ibdd.briskvale.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 11:52:13 UTC", "last_seen": "2026-03-22 11:52:13 UTC", "sightings": 1 }, { "indicator": "http://222.137.95.153:46962/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 11:48:12 UTC", "last_seen": "2026-03-22 11:48:12 UTC", "sightings": 1 }, { "indicator": "https://soldra1um.briskvale.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 11:47:07 UTC", "last_seen": "2026-03-22 11:47:07 UTC", "sightings": 1 }, { "indicator": "http://66.167.166.231:37937/Mozi.7", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-22 11:43:22 UTC", "last_seen": "2026-03-22 11:43:22 UTC", "sightings": 1 }, { "indicator": "http://79.137.195.151/cleanfda/init.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "sh", "ua-wget" ], "first_seen": "2026-03-22 11:42:08 UTC", "last_seen": "2026-03-22 11:42:08 UTC", "sightings": 1 }, { "indicator": "https://y0cc.briskvale.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 11:41:06 UTC", "last_seen": "2026-03-22 11:41:06 UTC", "sightings": 1 }, { "indicator": "http://118.232.137.101:45794/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-22 11:40:19 UTC", "last_seen": "2026-03-22 11:40:19 UTC", "sightings": 1 }, { "indicator": "https://7yjxzm.foxbyte.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 11:35:07 UTC", "last_seen": "2026-03-22 11:35:07 UTC", "sightings": 1 }, { "indicator": "http://42.224.87.106:51169/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 11:34:19 UTC", "last_seen": "2026-03-22 11:34:19 UTC", "sightings": 1 }, { "indicator": "https://pr1me9-pulse.foxbyte.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 11:30:08 UTC", "last_seen": "2026-03-22 11:30:08 UTC", "sightings": 1 }, { "indicator": "http://110.37.95.229:58268/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 11:26:16 UTC", "last_seen": "2026-03-22 11:26:16 UTC", "sightings": 1 }, { "indicator": "https://sp3ctr-field.foxbyte.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 11:24:08 UTC", "last_seen": "2026-03-22 11:24:08 UTC", "sightings": 1 }, { "indicator": "https://quornex1en.foxbyte.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 11:18:07 UTC", "last_seen": "2026-03-22 11:18:07 UTC", "sightings": 1 }, { "indicator": "http://175.175.129.6:55722/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 11:13:09 UTC", "last_seen": "2026-03-22 11:13:09 UTC", "sightings": 1 }, { "indicator": "https://tren-mesh.foxbyte.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 11:13:07 UTC", "last_seen": "2026-03-22 11:13:07 UTC", "sightings": 1 }, { "indicator": "https://b1rc-well.lumen-rift.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 11:08:07 UTC", "last_seen": "2026-03-22 11:08:07 UTC", "sightings": 1 }, { "indicator": "https://loyalcinema.lumen-rift.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 11:02:06 UTC", "last_seen": "2026-03-22 11:02:06 UTC", "sightings": 1 }, { "indicator": "http://110.37.95.229:58268/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 11:00:08 UTC", "last_seen": "2026-03-22 11:00:08 UTC", "sightings": 1 }, { "indicator": "https://querybra.lumen-rift.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 10:55:08 UTC", "last_seen": "2026-03-22 10:55:08 UTC", "sightings": 1 }, { "indicator": "https://grandwhol.lumen-rift.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 10:50:07 UTC", "last_seen": "2026-03-22 10:50:07 UTC", "sightings": 1 }, { "indicator": "http://27.37.121.47:45769/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 10:49:22 UTC", "last_seen": "2026-03-22 10:49:22 UTC", "sightings": 1 }, { "indicator": "https://zkpbkc7p.lumen-rift.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 10:44:08 UTC", "last_seen": "2026-03-22 10:44:08 UTC", "sightings": 1 }, { "indicator": "https://frostmac.c1vicsun.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 10:38:08 UTC", "last_seen": "2026-03-22 10:38:08 UTC", "sightings": 1 }, { "indicator": "http://61.7.184.38:45934/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-22 10:36:08 UTC", "last_seen": "2026-03-22 10:36:08 UTC", "sightings": 1 }, { "indicator": "https://l4un-beam.c1vicsun.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 10:34:08 UTC", "last_seen": "2026-03-22 10:34:08 UTC", "sightings": 1 }, { "indicator": "https://stormbro.c1vicsun.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 10:27:08 UTC", "last_seen": "2026-03-22 10:27:08 UTC", "sightings": 1 }, { "indicator": "https://5har-crest.c1vicsun.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 10:23:06 UTC", "last_seen": "2026-03-22 10:23:06 UTC", "sightings": 1 }, { "indicator": "https://oh4ndjz.c1vicsun.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 10:17:07 UTC", "last_seen": "2026-03-22 10:17:07 UTC", "sightings": 1 }, { "indicator": "https://reag-ring.driftoak.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 10:11:06 UTC", "last_seen": "2026-03-22 10:11:06 UTC", "sightings": 1 }, { "indicator": "http://117.209.16.211:37490/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 10:10:28 UTC", "last_seen": "2026-03-22 10:10:28 UTC", "sightings": 1 }, { "indicator": "http://117.209.240.17:58178/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 10:10:20 UTC", "last_seen": "2026-03-22 10:10:20 UTC", "sightings": 1 }, { "indicator": "https://repairnoti.driftoak.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 10:05:08 UTC", "last_seen": "2026-03-22 10:05:08 UTC", "sightings": 1 }, { "indicator": "https://bloomstag.driftoak.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 10:00:09 UTC", "last_seen": "2026-03-22 10:00:09 UTC", "sightings": 1 }, { "indicator": "http://61.7.184.38:45934/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-22 09:56:46 UTC", "last_seen": "2026-03-22 09:56:46 UTC", "sightings": 1 }, { "indicator": "https://t0k35-hinge.driftoak.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 09:55:06 UTC", "last_seen": "2026-03-22 09:55:06 UTC", "sightings": 1 }, { "indicator": "https://a1z.driftoak.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 09:48:07 UTC", "last_seen": "2026-03-22 09:48:07 UTC", "sightings": 1 }, { "indicator": "http://110.39.226.150:52385/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 09:46:26 UTC", "last_seen": "2026-03-22 09:46:26 UTC", "sightings": 1 }, { "indicator": "https://a1zu.intechvaraible.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 09:45:08 UTC", "last_seen": "2026-03-22 09:45:08 UTC", "sightings": 1 }, { "indicator": "https://233sum.yardcloud.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 09:41:08 UTC", "last_seen": "2026-03-22 09:41:08 UTC", "sightings": 1 }, { "indicator": "http://110.37.3.227:37354/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 09:38:22 UTC", "last_seen": "2026-03-22 09:38:22 UTC", "sightings": 1 }, { "indicator": "http://110.37.3.227:37354/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 09:18:13 UTC", "last_seen": "2026-03-22 09:18:13 UTC", "sightings": 1 }, { "indicator": "http://111.50.70.34:60809/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 09:17:24 UTC", "last_seen": "2026-03-22 09:17:24 UTC", "sightings": 1 }, { "indicator": "http://110.39.226.150:52385/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 09:16:16 UTC", "last_seen": "2026-03-22 09:16:16 UTC", "sightings": 1 }, { "indicator": "http://61.2.246.248:51603/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 09:12:19 UTC", "last_seen": "2026-03-22 09:12:19 UTC", "sightings": 1 }, { "indicator": "http://112.140.191.204:54810/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-22 09:12:18 UTC", "last_seen": "2026-03-22 09:12:18 UTC", "sightings": 1 }, { "indicator": "http://111.50.70.34:60809/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 08:58:35 UTC", "last_seen": "2026-03-22 08:58:35 UTC", "sightings": 1 }, { "indicator": "http://112.140.191.204:54810/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-22 08:49:14 UTC", "last_seen": "2026-03-22 08:49:14 UTC", "sightings": 1 }, { "indicator": "http://222.127.75.70:36290/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-22 08:49:14 UTC", "last_seen": "2026-03-22 08:49:14 UTC", "sightings": 1 }, { "indicator": "https://prox-route.yardcloud.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 08:47:09 UTC", "last_seen": "2026-03-22 08:47:09 UTC", "sightings": 1 }, { "indicator": "https://14sm.yardcloud.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 08:42:08 UTC", "last_seen": "2026-03-22 08:42:08 UTC", "sightings": 1 }, { "indicator": "http://110.37.88.34:43011/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-22 08:39:24 UTC", "last_seen": "2026-03-22 08:39:24 UTC", "sightings": 1 }, { "indicator": "https://opensol.yardcloud.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 08:38:07 UTC", "last_seen": "2026-03-22 08:38:07 UTC", "sightings": 1 }, { "indicator": "http://78.66.61.19:34773/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-22 08:36:20 UTC", "last_seen": "2026-03-22 08:36:20 UTC", "sightings": 1 }, { "indicator": "https://sh1p0-loop.yardcloud.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 08:33:07 UTC", "last_seen": "2026-03-22 08:33:07 UTC", "sightings": 1 }, { "indicator": "https://mixazu.intechvaraible.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 08:30:09 UTC", "last_seen": "2026-03-22 08:30:09 UTC", "sightings": 1 }, { "indicator": "http://38.226.161.86:45719/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 08:22:16 UTC", "last_seen": "2026-03-22 08:22:16 UTC", "sightings": 1 }, { "indicator": "https://w0rk3r2-leaf.intechvaraible.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 08:19:06 UTC", "last_seen": "2026-03-22 08:19:06 UTC", "sightings": 1 }, { "indicator": "https://shel-grid.intechvaraible.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 08:14:06 UTC", "last_seen": "2026-03-22 08:14:06 UTC", "sightings": 1 }, { "indicator": "http://110.37.88.34:43011/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-22 08:11:10 UTC", "last_seen": "2026-03-22 08:11:10 UTC", "sightings": 1 }, { "indicator": "http://78.66.61.19:34773/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-22 08:10:16 UTC", "last_seen": "2026-03-22 08:10:16 UTC", "sightings": 1 }, { "indicator": "https://tpbr.intechvaraible.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 08:08:09 UTC", "last_seen": "2026-03-22 08:08:09 UTC", "sightings": 1 }, { "indicator": "https://nor-meshor.engineeringtech.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 08:03:06 UTC", "last_seen": "2026-03-22 08:03:06 UTC", "sightings": 1 }, { "indicator": "http://38.226.161.86:45719/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 07:58:13 UTC", "last_seen": "2026-03-22 07:58:13 UTC", "sightings": 1 }, { "indicator": "http://115.53.198.243:33129/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 07:57:17 UTC", "last_seen": "2026-03-22 07:57:17 UTC", "sightings": 1 }, { "indicator": "https://neo-c4st.engineeringtech.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 07:57:05 UTC", "last_seen": "2026-03-22 07:57:05 UTC", "sightings": 1 }, { "indicator": "http://115.50.216.123:35157/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 07:55:12 UTC", "last_seen": "2026-03-22 07:55:12 UTC", "sightings": 1 }, { "indicator": "https://sjyv.engineeringtech.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 07:52:07 UTC", "last_seen": "2026-03-22 07:52:07 UTC", "sightings": 1 }, { "indicator": "https://zen-spireos.engineeringtech.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 07:45:08 UTC", "last_seen": "2026-03-22 07:45:08 UTC", "sightings": 1 }, { "indicator": "http://42.5.7.161:50556/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 07:43:16 UTC", "last_seen": "2026-03-22 07:43:16 UTC", "sightings": 1 }, { "indicator": "http://77.245.107.223:51228/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 07:43:15 UTC", "last_seen": "2026-03-22 07:43:15 UTC", "sightings": 1 }, { "indicator": "https://pitch6-signal.todayglow.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 07:40:08 UTC", "last_seen": "2026-03-22 07:40:08 UTC", "sightings": 1 }, { "indicator": "https://572yd.todayglow.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 07:35:09 UTC", "last_seen": "2026-03-22 07:35:09 UTC", "sightings": 1 }, { "indicator": "http://115.53.198.243:33129/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 07:32:19 UTC", "last_seen": "2026-03-22 07:32:19 UTC", "sightings": 1 }, { "indicator": "http://123.10.159.114:50081/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 07:30:20 UTC", "last_seen": "2026-03-22 07:30:20 UTC", "sightings": 1 }, { "indicator": "https://b4rk-core.todayglow.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 07:28:07 UTC", "last_seen": "2026-03-22 07:28:07 UTC", "sightings": 1 }, { "indicator": "http://115.50.216.123:35157/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 07:24:20 UTC", "last_seen": "2026-03-22 07:24:20 UTC", "sightings": 1 }, { "indicator": "https://softrun.todayglow.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 07:23:08 UTC", "last_seen": "2026-03-22 07:23:08 UTC", "sightings": 1 }, { "indicator": "http://115.49.209.218:57704/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 07:22:07 UTC", "last_seen": "2026-03-22 07:22:07 UTC", "sightings": 1 }, { "indicator": "http://5.252.21.239/files/7268244560/aXV4mjN.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey", "rustystealer" ], "first_seen": "2026-03-22 07:18:07 UTC", "last_seen": "2026-03-22 07:18:07 UTC", "sightings": 1 }, { "indicator": "https://crims7-field.hostingvar.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 07:18:05 UTC", "last_seen": "2026-03-22 07:18:05 UTC", "sightings": 1 }, { "indicator": "https://hcxvzqf.hostingvar.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 07:12:06 UTC", "last_seen": "2026-03-22 07:12:06 UTC", "sightings": 1 }, { "indicator": "http://123.10.159.114:50081/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 07:06:13 UTC", "last_seen": "2026-03-22 07:06:13 UTC", "sightings": 1 }, { "indicator": "https://4563j5v.hostingvar.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 07:06:06 UTC", "last_seen": "2026-03-22 07:06:06 UTC", "sightings": 1 }, { "indicator": "http://110.37.3.251:57741/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-22 07:05:24 UTC", "last_seen": "2026-03-22 07:05:24 UTC", "sightings": 1 }, { "indicator": "https://clipfactor.hostingvar.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 07:01:08 UTC", "last_seen": "2026-03-22 07:01:08 UTC", "sightings": 1 }, { "indicator": "http://117.231.138.153:49426/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 06:57:14 UTC", "last_seen": "2026-03-22 06:57:14 UTC", "sightings": 1 }, { "indicator": "https://sub-atornic.cloudvariable.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 06:55:09 UTC", "last_seen": "2026-03-22 06:55:09 UTC", "sightings": 1 }, { "indicator": "http://115.49.209.218:57704/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 06:53:08 UTC", "last_seen": "2026-03-22 06:53:08 UTC", "sightings": 1 }, { "indicator": "http://115.55.242.85:56256/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 06:52:17 UTC", "last_seen": "2026-03-22 06:52:17 UTC", "sightings": 1 }, { "indicator": "http://115.54.165.197:42272/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 06:51:14 UTC", "last_seen": "2026-03-22 06:51:14 UTC", "sightings": 1 }, { "indicator": "https://lumven3al.cloudvariable.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 06:49:07 UTC", "last_seen": "2026-03-22 06:49:07 UTC", "sightings": 1 }, { "indicator": "http://123.14.246.227:58634/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 06:46:18 UTC", "last_seen": "2026-03-22 06:46:18 UTC", "sightings": 1 }, { "indicator": "http://110.37.0.211:54548/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-22 06:46:12 UTC", "last_seen": "2026-03-22 06:46:12 UTC", "sightings": 1 }, { "indicator": "http://61.53.74.56:53763/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 06:45:17 UTC", "last_seen": "2026-03-22 06:45:17 UTC", "sightings": 1 }, { "indicator": "https://dispatchvoi.cloudvariable.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 06:45:07 UTC", "last_seen": "2026-03-22 06:45:07 UTC", "sightings": 1 }, { "indicator": "http://117.215.48.174:47822/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "mirai" ], "first_seen": "2026-03-22 06:43:18 UTC", "last_seen": "2026-03-22 06:43:18 UTC", "sightings": 1 }, { "indicator": "http://119.187.244.181:46409/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 06:39:10 UTC", "last_seen": "2026-03-22 06:39:10 UTC", "sightings": 1 }, { "indicator": "https://kellitha4.cloudvariable.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 06:39:06 UTC", "last_seen": "2026-03-22 06:39:06 UTC", "sightings": 1 }, { "indicator": "https://1533o.checkingsum.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 06:33:07 UTC", "last_seen": "2026-03-22 06:33:07 UTC", "sightings": 1 }, { "indicator": "http://117.231.138.153:49426/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 06:30:19 UTC", "last_seen": "2026-03-22 06:30:19 UTC", "sightings": 1 }, { "indicator": "http://115.55.242.85:56256/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 06:28:10 UTC", "last_seen": "2026-03-22 06:28:10 UTC", "sightings": 1 }, { "indicator": "http://110.36.81.71:60339/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 06:28:09 UTC", "last_seen": "2026-03-22 06:28:09 UTC", "sightings": 1 }, { "indicator": "https://bjsoik.checkingsum.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 06:28:06 UTC", "last_seen": "2026-03-22 06:28:06 UTC", "sightings": 1 }, { "indicator": "http://61.53.74.56:53763/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 06:23:33 UTC", "last_seen": "2026-03-22 06:23:33 UTC", "sightings": 1 }, { "indicator": "https://schema-well.checkingsum.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 06:21:08 UTC", "last_seen": "2026-03-22 06:21:08 UTC", "sightings": 1 }, { "indicator": "http://110.37.53.236:37008/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 06:20:07 UTC", "last_seen": "2026-03-22 06:20:07 UTC", "sightings": 1 }, { "indicator": "http://117.215.48.174:47822/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "mirai" ], "first_seen": "2026-03-22 06:17:19 UTC", "last_seen": "2026-03-22 06:17:19 UTC", "sightings": 1 }, { "indicator": "https://lumlithal.checkingsum.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 06:16:07 UTC", "last_seen": "2026-03-22 06:16:07 UTC", "sightings": 1 }, { "indicator": "http://61.53.87.166:34758/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 06:14:18 UTC", "last_seen": "2026-03-22 06:14:18 UTC", "sightings": 1 }, { "indicator": "https://hppx.vectorsend.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 06:10:11 UTC", "last_seen": "2026-03-22 06:10:11 UTC", "sightings": 1 }, { "indicator": "http://115.62.63.29:52188/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 06:09:18 UTC", "last_seen": "2026-03-22 06:09:18 UTC", "sightings": 1 }, { "indicator": "http://115.51.42.168:32833/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 06:07:13 UTC", "last_seen": "2026-03-22 06:07:13 UTC", "sightings": 1 }, { "indicator": "https://vid3o9-spark.vectorsend.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 06:05:08 UTC", "last_seen": "2026-03-22 06:05:08 UTC", "sightings": 1 }, { "indicator": "http://60.19.11.29:54382/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 05:59:16 UTC", "last_seen": "2026-03-22 05:59:16 UTC", "sightings": 1 }, { "indicator": "https://quorflux1um.vectorsend.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 05:59:06 UTC", "last_seen": "2026-03-22 05:59:06 UTC", "sightings": 1 }, { "indicator": "https://ledge8-route.vectorsend.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 05:53:08 UTC", "last_seen": "2026-03-22 05:53:08 UTC", "sightings": 1 }, { "indicator": "http://115.51.42.168:32833/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 05:51:23 UTC", "last_seen": "2026-03-22 05:51:23 UTC", "sightings": 1 }, { "indicator": "https://aejq9b.cloudgloss.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 05:48:08 UTC", "last_seen": "2026-03-22 05:48:08 UTC", "sightings": 1 }, { "indicator": "http://61.53.87.166:34758/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 05:46:22 UTC", "last_seen": "2026-03-22 05:46:22 UTC", "sightings": 1 }, { "indicator": "http://110.37.53.236:37008/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 05:44:22 UTC", "last_seen": "2026-03-22 05:44:22 UTC", "sightings": 1 }, { "indicator": "http://110.37.59.228:41463/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 05:43:18 UTC", "last_seen": "2026-03-22 05:43:18 UTC", "sightings": 1 }, { "indicator": "https://micr-line.cloudgloss.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 05:42:06 UTC", "last_seen": "2026-03-22 05:42:06 UTC", "sightings": 1 }, { "indicator": "https://serven7al.cloudgloss.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 05:30:12 UTC", "last_seen": "2026-03-22 05:30:12 UTC", "sightings": 1 }, { "indicator": "http://59.88.10.76:34811/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 05:28:18 UTC", "last_seen": "2026-03-22 05:28:18 UTC", "sightings": 1 }, { "indicator": "https://1on-field.systemchck.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 05:25:10 UTC", "last_seen": "2026-03-22 05:25:10 UTC", "sightings": 1 }, { "indicator": "https://mzmwx.systemchck.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 05:21:06 UTC", "last_seen": "2026-03-22 05:21:06 UTC", "sightings": 1 }, { "indicator": "http://59.183.141.119:55344/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 05:19:11 UTC", "last_seen": "2026-03-22 05:19:11 UTC", "sightings": 1 }, { "indicator": "http://61.3.103.226:58453/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "mirai" ], "first_seen": "2026-03-22 05:17:10 UTC", "last_seen": "2026-03-22 05:17:10 UTC", "sightings": 1 }, { "indicator": "https://retailclip.systemchck.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 05:14:07 UTC", "last_seen": "2026-03-22 05:14:07 UTC", "sightings": 1 }, { "indicator": "http://27.215.52.130:40996/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 05:12:09 UTC", "last_seen": "2026-03-22 05:12:09 UTC", "sightings": 1 }, { "indicator": "http://59.88.10.76:34811/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 05:03:26 UTC", "last_seen": "2026-03-22 05:03:26 UTC", "sightings": 1 }, { "indicator": "https://ext4sync.volumetricproxy.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 05:02:08 UTC", "last_seen": "2026-03-22 05:02:08 UTC", "sightings": 1 }, { "indicator": "http://117.217.210.124:42217/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 05:01:15 UTC", "last_seen": "2026-03-22 05:01:15 UTC", "sightings": 1 }, { "indicator": "http://110.37.51.25:47812/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-22 05:01:11 UTC", "last_seen": "2026-03-22 05:01:11 UTC", "sightings": 1 }, { "indicator": "http://110.37.51.25:47812/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-22 04:59:10 UTC", "last_seen": "2026-03-22 04:59:10 UTC", "sightings": 1 }, { "indicator": "https://ext3gate.volumetricproxy.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 04:58:07 UTC", "last_seen": "2026-03-22 04:58:07 UTC", "sightings": 1 }, { "indicator": "http://110.37.38.176:49714/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-22 04:56:08 UTC", "last_seen": "2026-03-22 04:56:08 UTC", "sightings": 1 }, { "indicator": "http://61.3.103.226:58453/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "mirai" ], "first_seen": "2026-03-22 04:55:11 UTC", "last_seen": "2026-03-22 04:55:11 UTC", "sightings": 1 }, { "indicator": "https://ext2proc.volumetricproxy.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 04:52:12 UTC", "last_seen": "2026-03-22 04:52:12 UTC", "sightings": 1 }, { "indicator": "http://110.37.61.44:52593/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-22 04:51:18 UTC", "last_seen": "2026-03-22 04:51:18 UTC", "sightings": 1 }, { "indicator": "https://ext1sync.volumetricproxy.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 04:46:06 UTC", "last_seen": "2026-03-22 04:46:06 UTC", "sightings": 1 }, { "indicator": "http://196.190.69.149:37948/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-22 04:44:14 UTC", "last_seen": "2026-03-22 04:44:14 UTC", "sightings": 1 }, { "indicator": "https://svc4point.activetensorbase.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 04:40:07 UTC", "last_seen": "2026-03-22 04:40:07 UTC", "sightings": 1 }, { "indicator": "http://110.37.107.203:57690/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 04:39:14 UTC", "last_seen": "2026-03-22 04:39:14 UTC", "sightings": 1 }, { "indicator": "http://117.231.141.121:56693/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 04:38:18 UTC", "last_seen": "2026-03-22 04:38:18 UTC", "sightings": 1 }, { "indicator": "http://42.230.17.22:39150/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 04:35:13 UTC", "last_seen": "2026-03-22 04:35:13 UTC", "sightings": 1 }, { "indicator": "https://svc3data.activetensorbase.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 04:35:08 UTC", "last_seen": "2026-03-22 04:35:08 UTC", "sightings": 1 }, { "indicator": "https://svc2proxy.activetensorbase.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 04:29:07 UTC", "last_seen": "2026-03-22 04:29:07 UTC", "sightings": 1 }, { "indicator": "http://110.37.61.44:52593/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-22 04:25:14 UTC", "last_seen": "2026-03-22 04:25:14 UTC", "sightings": 1 }, { "indicator": "http://110.36.80.171:37929/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 04:24:12 UTC", "last_seen": "2026-03-22 04:24:12 UTC", "sightings": 1 }, { "indicator": "http://196.190.69.149:37948/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-22 04:22:09 UTC", "last_seen": "2026-03-22 04:22:09 UTC", "sightings": 1 }, { "indicator": "http://219.157.39.79:43523/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-22 04:21:19 UTC", "last_seen": "2026-03-22 04:21:19 UTC", "sightings": 1 }, { "indicator": "http://42.230.17.22:39150/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 04:20:12 UTC", "last_seen": "2026-03-22 04:20:12 UTC", "sightings": 1 }, { "indicator": "https://cl4sat.linearductnode.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 04:18:08 UTC", "last_seen": "2026-03-22 04:18:08 UTC", "sightings": 1 }, { "indicator": "https://cl3core.linearductnode.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 04:13:08 UTC", "last_seen": "2026-03-22 04:13:08 UTC", "sightings": 1 }, { "indicator": "http://222.142.210.224:59779/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 04:03:17 UTC", "last_seen": "2026-03-22 04:03:17 UTC", "sightings": 1 }, { "indicator": "https://cl1proc.linearductnode.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 04:01:08 UTC", "last_seen": "2026-03-22 04:01:08 UTC", "sightings": 1 }, { "indicator": "http://103.160.130.109:42681/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 03:57:20 UTC", "last_seen": "2026-03-22 03:57:20 UTC", "sightings": 1 }, { "indicator": "https://ext4space.synchrometrichub.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 03:56:06 UTC", "last_seen": "2026-03-22 03:56:06 UTC", "sightings": 1 }, { "indicator": "http://1.196.78.114:54384/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 03:55:25 UTC", "last_seen": "2026-03-22 03:55:25 UTC", "sightings": 1 }, { "indicator": "http://182.114.34.148:60562/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 03:54:22 UTC", "last_seen": "2026-03-22 03:54:22 UTC", "sightings": 1 }, { "indicator": "http://110.37.11.215:40149/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 03:52:20 UTC", "last_seen": "2026-03-22 03:52:20 UTC", "sightings": 1 }, { "indicator": "http://5.252.21.239/files/1323113534/0GEqRqp.msi", "indicator_type": "url", "source": "URLhaus", "tags": [ "connectwise", "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-22 03:52:11 UTC", "last_seen": "2026-03-22 03:52:11 UTC", "sightings": 1 }, { "indicator": "https://ext3field.synchrometrichub.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 03:51:06 UTC", "last_seen": "2026-03-22 03:51:06 UTC", "sightings": 1 }, { "indicator": "http://115.61.108.77:42010/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 03:48:22 UTC", "last_seen": "2026-03-22 03:48:22 UTC", "sightings": 1 }, { "indicator": "http://117.231.141.121:56693/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 03:44:36 UTC", "last_seen": "2026-03-22 03:44:36 UTC", "sightings": 1 }, { "indicator": "http://115.63.13.217:34216/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 03:44:25 UTC", "last_seen": "2026-03-22 03:44:25 UTC", "sightings": 1 }, { "indicator": "https://ext2outer.synchrometrichub.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 03:44:07 UTC", "last_seen": "2026-03-22 03:44:07 UTC", "sightings": 1 }, { "indicator": "http://117.223.143.156:40711/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 03:41:22 UTC", "last_seen": "2026-03-22 03:41:22 UTC", "sightings": 1 }, { "indicator": "http://222.142.210.224:59779/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 03:40:22 UTC", "last_seen": "2026-03-22 03:40:22 UTC", "sightings": 1 }, { "indicator": "https://ext1proc.synchrometrichub.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 03:38:08 UTC", "last_seen": "2026-03-22 03:38:08 UTC", "sightings": 1 }, { "indicator": "https://svc4path.protopathfinder.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 03:33:07 UTC", "last_seen": "2026-03-22 03:33:07 UTC", "sightings": 1 }, { "indicator": "https://svc3view.protopathfinder.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 03:29:08 UTC", "last_seen": "2026-03-22 03:29:08 UTC", "sightings": 1 }, { "indicator": "http://1.196.78.114:54384/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 03:27:45 UTC", "last_seen": "2026-03-22 03:27:45 UTC", "sightings": 1 }, { "indicator": "https://svc2point.protopathfinder.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 03:27:29 UTC", "last_seen": "2026-03-22 03:27:29 UTC", "sightings": 1 }, { "indicator": "http://120.61.10.45:36540/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 03:25:18 UTC", "last_seen": "2026-03-22 03:25:18 UTC", "sightings": 1 }, { "indicator": "http://115.53.222.178:47307/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 03:24:20 UTC", "last_seen": "2026-03-22 03:24:20 UTC", "sightings": 1 }, { "indicator": "http://115.61.108.77:42010/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 03:23:24 UTC", "last_seen": "2026-03-22 03:23:24 UTC", "sightings": 1 }, { "indicator": "http://115.53.222.178:47307/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 03:19:19 UTC", "last_seen": "2026-03-22 03:19:19 UTC", "sightings": 1 }, { "indicator": "https://svc1proc.protopathfinder.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 03:17:10 UTC", "last_seen": "2026-03-22 03:17:10 UTC", "sightings": 1 }, { "indicator": "http://117.223.143.156:40711/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 03:13:26 UTC", "last_seen": "2026-03-22 03:13:26 UTC", "sightings": 1 }, { "indicator": "https://cl4view.quantumbufferlink.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 03:13:06 UTC", "last_seen": "2026-03-22 03:13:06 UTC", "sightings": 1 }, { "indicator": "http://219.155.9.13:41781/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 03:11:14 UTC", "last_seen": "2026-03-22 03:11:14 UTC", "sightings": 1 }, { "indicator": "http://110.37.61.110:52360/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 03:10:21 UTC", "last_seen": "2026-03-22 03:10:21 UTC", "sightings": 1 }, { "indicator": "https://cl3ghost.quantumbufferlink.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 03:10:08 UTC", "last_seen": "2026-03-22 03:10:08 UTC", "sightings": 1 }, { "indicator": "https://cl2core.quantumbufferlink.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 03:00:11 UTC", "last_seen": "2026-03-22 03:00:11 UTC", "sightings": 1 }, { "indicator": "http://219.155.9.13:41781/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 02:56:28 UTC", "last_seen": "2026-03-22 02:56:28 UTC", "sightings": 1 }, { "indicator": "https://cl1proc.quantumbufferlink.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 02:54:07 UTC", "last_seen": "2026-03-22 02:54:07 UTC", "sightings": 1 }, { "indicator": "https://ext4link.vectoraltimeter.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 02:49:10 UTC", "last_seen": "2026-03-22 02:49:10 UTC", "sightings": 1 }, { "indicator": "http://42.230.24.213:34588/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 02:48:20 UTC", "last_seen": "2026-03-22 02:48:20 UTC", "sightings": 1 }, { "indicator": "http://61.1.230.163:45951/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 02:45:25 UTC", "last_seen": "2026-03-22 02:45:25 UTC", "sightings": 1 }, { "indicator": "http://110.37.121.43:60093/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 02:44:18 UTC", "last_seen": "2026-03-22 02:44:18 UTC", "sightings": 1 }, { "indicator": "https://ext3user.vectoraltimeter.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 02:44:06 UTC", "last_seen": "2026-03-22 02:44:06 UTC", "sightings": 1 }, { "indicator": "https://ext2base.vectoraltimeter.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 02:37:09 UTC", "last_seen": "2026-03-22 02:37:09 UTC", "sightings": 1 }, { "indicator": "https://ext1infra.vectoraltimeter.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 02:31:08 UTC", "last_seen": "2026-03-22 02:31:08 UTC", "sightings": 1 }, { "indicator": "http://42.230.24.213:34588/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 02:27:15 UTC", "last_seen": "2026-03-22 02:27:15 UTC", "sightings": 1 }, { "indicator": "https://svc4work.modulardatastream.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 02:26:06 UTC", "last_seen": "2026-03-22 02:26:06 UTC", "sightings": 1 }, { "indicator": "http://110.37.58.152:50732/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-22 02:24:18 UTC", "last_seen": "2026-03-22 02:24:18 UTC", "sightings": 1 }, { "indicator": "https://svc3local.modulardatastream.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 02:20:08 UTC", "last_seen": "2026-03-22 02:20:08 UTC", "sightings": 1 }, { "indicator": "http://110.37.121.43:60093/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 02:19:16 UTC", "last_seen": "2026-03-22 02:19:16 UTC", "sightings": 1 }, { "indicator": "http://61.1.230.163:45951/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 02:17:07 UTC", "last_seen": "2026-03-22 02:17:07 UTC", "sightings": 1 }, { "indicator": "http://221.200.217.112:55098/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 02:15:31 UTC", "last_seen": "2026-03-22 02:15:31 UTC", "sightings": 1 }, { "indicator": "https://svc2power.modulardatastream.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 02:15:09 UTC", "last_seen": "2026-03-22 02:15:09 UTC", "sightings": 1 }, { "indicator": "https://svc1proc.modulardatastream.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 02:09:08 UTC", "last_seen": "2026-03-22 02:09:08 UTC", "sightings": 1 }, { "indicator": "https://cl4link.fluxoverificator.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 02:04:06 UTC", "last_seen": "2026-03-22 02:04:06 UTC", "sightings": 1 }, { "indicator": "https://cl3dev.fluxoverificator.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 01:57:06 UTC", "last_seen": "2026-03-22 01:57:06 UTC", "sightings": 1 }, { "indicator": "http://110.37.58.152:50732/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-22 01:56:20 UTC", "last_seen": "2026-03-22 01:56:20 UTC", "sightings": 1 }, { "indicator": "http://59.101.174.131:50346/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 01:53:18 UTC", "last_seen": "2026-03-22 01:53:18 UTC", "sightings": 1 }, { "indicator": "https://cl2remote.fluxoverificator.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 01:52:11 UTC", "last_seen": "2026-03-22 01:52:11 UTC", "sightings": 1 }, { "indicator": "https://cl1store.fluxoverificator.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 01:47:06 UTC", "last_seen": "2026-03-22 01:47:06 UTC", "sightings": 1 }, { "indicator": "https://ext4sync.cartopointgate.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 01:41:06 UTC", "last_seen": "2026-03-22 01:41:06 UTC", "sightings": 1 }, { "indicator": "http://110.37.100.99:58363/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 01:39:16 UTC", "last_seen": "2026-03-22 01:39:16 UTC", "sightings": 1 }, { "indicator": "http://110.37.100.99:58363/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 01:38:15 UTC", "last_seen": "2026-03-22 01:38:15 UTC", "sightings": 1 }, { "indicator": "https://ext3gate.cartopointgate.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 01:35:07 UTC", "last_seen": "2026-03-22 01:35:07 UTC", "sightings": 1 }, { "indicator": "http://59.101.174.131:50346/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 01:34:12 UTC", "last_seen": "2026-03-22 01:34:12 UTC", "sightings": 1 }, { "indicator": "https://ext2proc.cartopointgate.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 01:31:08 UTC", "last_seen": "2026-03-22 01:31:08 UTC", "sightings": 1 }, { "indicator": "http://117.208.244.97:38392/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 01:30:23 UTC", "last_seen": "2026-03-22 01:30:23 UTC", "sightings": 1 }, { "indicator": "http://117.200.150.193:45419/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 01:28:10 UTC", "last_seen": "2026-03-22 01:28:10 UTC", "sightings": 1 }, { "indicator": "https://ext1meta.cartopointgate.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 01:24:07 UTC", "last_seen": "2026-03-22 01:24:07 UTC", "sightings": 1 }, { "indicator": "http://114.182.56.191:48114/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 01:22:16 UTC", "last_seen": "2026-03-22 01:22:16 UTC", "sightings": 1 }, { "indicator": "https://svc4static.oscilloflowunit.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 01:19:06 UTC", "last_seen": "2026-03-22 01:19:06 UTC", "sightings": 1 }, { "indicator": "https://svc3edge.oscilloflowunit.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 01:13:06 UTC", "last_seen": "2026-03-22 01:13:06 UTC", "sightings": 1 }, { "indicator": "http://196.191.231.12:41287/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-22 01:07:17 UTC", "last_seen": "2026-03-22 01:07:17 UTC", "sightings": 1 }, { "indicator": "https://svc2data.oscilloflowunit.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 01:07:07 UTC", "last_seen": "2026-03-22 01:07:07 UTC", "sightings": 1 }, { "indicator": "http://115.62.116.30:51937/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 01:06:15 UTC", "last_seen": "2026-03-22 01:06:15 UTC", "sightings": 1 }, { "indicator": "https://svc1sync.oscilloflowunit.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 01:02:08 UTC", "last_seen": "2026-03-22 01:02:08 UTC", "sightings": 1 }, { "indicator": "http://221.13.234.229:39666/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 00:59:17 UTC", "last_seen": "2026-03-22 00:59:17 UTC", "sightings": 1 }, { "indicator": "http://5.252.21.239/files/8167064937/lU3Mc6r.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-22 00:58:17 UTC", "last_seen": "2026-03-22 00:58:17 UTC", "sightings": 1 }, { "indicator": "http://114.182.56.191:48114/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 00:57:12 UTC", "last_seen": "2026-03-22 00:57:12 UTC", "sightings": 1 }, { "indicator": "https://hub4point.infrastructurestream.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 00:57:05 UTC", "last_seen": "2026-03-22 00:57:05 UTC", "sightings": 1 }, { "indicator": "https://hub3data.infrastructurestream.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 00:50:08 UTC", "last_seen": "2026-03-22 00:50:08 UTC", "sightings": 1 }, { "indicator": "https://hub2proxy.infrastructurestream.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 00:45:09 UTC", "last_seen": "2026-03-22 00:45:09 UTC", "sightings": 1 }, { "indicator": "https://hub1infra.infrastructurestream.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 00:39:07 UTC", "last_seen": "2026-03-22 00:39:07 UTC", "sightings": 1 }, { "indicator": "http://196.191.231.12:41287/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-22 00:35:17 UTC", "last_seen": "2026-03-22 00:35:17 UTC", "sightings": 1 }, { "indicator": "https://int4sat.distributedlogicunit.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 00:34:08 UTC", "last_seen": "2026-03-22 00:34:08 UTC", "sightings": 1 }, { "indicator": "http://59.95.91.106:40437/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 00:33:21 UTC", "last_seen": "2026-03-22 00:33:21 UTC", "sightings": 1 }, { "indicator": "http://115.62.116.30:51937/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 00:32:19 UTC", "last_seen": "2026-03-22 00:32:19 UTC", "sightings": 1 }, { "indicator": "https://int3core.distributedlogicunit.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 00:28:11 UTC", "last_seen": "2026-03-22 00:28:11 UTC", "sightings": 1 }, { "indicator": "http://42.228.33.93:46794/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 00:25:18 UTC", "last_seen": "2026-03-22 00:25:18 UTC", "sightings": 1 }, { "indicator": "https://int2steel.distributedlogicunit.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 00:23:08 UTC", "last_seen": "2026-03-22 00:23:08 UTC", "sightings": 1 }, { "indicator": "https://int1proc.distributedlogicunit.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 00:19:08 UTC", "last_seen": "2026-03-22 00:19:08 UTC", "sightings": 1 }, { "indicator": "http://110.37.39.146:40587/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-22 00:16:08 UTC", "last_seen": "2026-03-22 00:16:08 UTC", "sightings": 1 }, { "indicator": "http://123.8.63.241:55413/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 00:16:08 UTC", "last_seen": "2026-03-22 00:16:08 UTC", "sightings": 1 }, { "indicator": "http://42.228.33.93:46794/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 00:15:12 UTC", "last_seen": "2026-03-22 00:15:12 UTC", "sightings": 1 }, { "indicator": "http://110.37.103.207:53267/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-22 00:14:16 UTC", "last_seen": "2026-03-22 00:14:16 UTC", "sightings": 1 }, { "indicator": "http://110.39.235.153:53308/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 00:12:20 UTC", "last_seen": "2026-03-22 00:12:20 UTC", "sightings": 1 }, { "indicator": "https://ext4space.remotediagnosticlink.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 00:12:07 UTC", "last_seen": "2026-03-22 00:12:07 UTC", "sightings": 1 }, { "indicator": "http://110.38.196.142:48437/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 00:11:09 UTC", "last_seen": "2026-03-22 00:11:09 UTC", "sightings": 1 }, { "indicator": "http://110.38.196.142:48437/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 00:10:18 UTC", "last_seen": "2026-03-22 00:10:18 UTC", "sightings": 1 }, { "indicator": "http://42.231.49.218:54039/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 00:07:16 UTC", "last_seen": "2026-03-22 00:07:16 UTC", "sightings": 1 }, { "indicator": "http://5.252.21.239/vidar/random.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey", "Vidar" ], "first_seen": "2026-03-22 00:06:06 UTC", "last_seen": "2026-03-22 00:06:06 UTC", "sightings": 1 }, { "indicator": "https://ext3field.remotediagnosticlink.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 00:06:06 UTC", "last_seen": "2026-03-22 00:06:06 UTC", "sightings": 1 }, { "indicator": "http://221.13.234.229:39666/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-22 00:01:10 UTC", "last_seen": "2026-03-22 00:01:10 UTC", "sightings": 1 }, { "indicator": "https://ext2outer.remotediagnosticlink.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-22 00:00:16 UTC", "last_seen": "2026-03-22 00:00:16 UTC", "sightings": 1 }, { "indicator": "https://ext1proc.remotediagnosticlink.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 23:54:07 UTC", "last_seen": "2026-03-21 23:54:07 UTC", "sightings": 1 }, { "indicator": "http://123.8.63.241:55413/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 23:52:18 UTC", "last_seen": "2026-03-21 23:52:18 UTC", "sightings": 1 }, { "indicator": "http://110.37.103.207:53267/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-21 23:51:20 UTC", "last_seen": "2026-03-21 23:51:20 UTC", "sightings": 1 }, { "indicator": "http://175.150.192.235:34480/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 23:50:19 UTC", "last_seen": "2026-03-21 23:50:19 UTC", "sightings": 1 }, { "indicator": "https://hub4path.cloudoperationcenter.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 23:50:10 UTC", "last_seen": "2026-03-21 23:50:10 UTC", "sightings": 1 }, { "indicator": "http://5.252.21.239/files/rdx/random.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543", "Vidar" ], "first_seen": "2026-03-21 23:50:07 UTC", "last_seen": "2026-03-21 23:50:07 UTC", "sightings": 1 }, { "indicator": "http://110.37.39.146:40587/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-21 23:48:15 UTC", "last_seen": "2026-03-21 23:48:15 UTC", "sightings": 1 }, { "indicator": "http://110.37.61.110:52360/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 23:46:08 UTC", "last_seen": "2026-03-21 23:46:08 UTC", "sightings": 1 }, { "indicator": "http://5.252.21.239/files/7776573655/KSsORhg.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey", "gcleaner" ], "first_seen": "2026-03-21 23:46:05 UTC", "last_seen": "2026-03-21 23:46:05 UTC", "sightings": 1 }, { "indicator": "http://110.39.235.153:53308/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 23:45:22 UTC", "last_seen": "2026-03-21 23:45:22 UTC", "sightings": 1 }, { "indicator": "http://5.252.21.239/files/7782139129/ZSZfFtn.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543", "SalatStealer" ], "first_seen": "2026-03-21 23:45:09 UTC", "last_seen": "2026-03-21 23:45:09 UTC", "sightings": 1 }, { "indicator": "http://5.252.21.239/files/7453936223/KAQ8PQ5.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey", "Vidar" ], "first_seen": "2026-03-21 23:45:08 UTC", "last_seen": "2026-03-21 23:45:08 UTC", "sightings": 1 }, { "indicator": "http://5.252.21.239/files/7115306239/4VbzEBd.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-03-21 23:45:08 UTC", "last_seen": "2026-03-21 23:45:08 UTC", "sightings": 1 }, { "indicator": "http://5.252.21.239/files/7782139129/1fz7hzL.bat", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-03-21 23:45:07 UTC", "last_seen": "2026-03-21 23:45:07 UTC", "sightings": 1 }, { "indicator": "http://5.252.21.239/files/8531638373/QWFfVk7.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey", "Vidar" ], "first_seen": "2026-03-21 23:44:06 UTC", "last_seen": "2026-03-21 23:44:06 UTC", "sightings": 1 }, { "indicator": "https://hub3view.cloudoperationcenter.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 23:44:06 UTC", "last_seen": "2026-03-21 23:44:06 UTC", "sightings": 1 }, { "indicator": "http://5.252.21.239/files/8717422379/VMa1dJb.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-21 23:44:06 UTC", "last_seen": "2026-03-21 23:44:06 UTC", "sightings": 1 }, { "indicator": "http://42.231.49.218:54039/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 23:43:22 UTC", "last_seen": "2026-03-21 23:43:22 UTC", "sightings": 1 }, { "indicator": "http://5.252.21.239/files/7782139129/S6xWuZ1.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543", "Vidar" ], "first_seen": "2026-03-21 23:43:11 UTC", "last_seen": "2026-03-21 23:43:11 UTC", "sightings": 1 }, { "indicator": "http://5.252.21.239/files/7341834371/BgAtGH0.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey", "Stealc" ], "first_seen": "2026-03-21 23:43:05 UTC", "last_seen": "2026-03-21 23:43:05 UTC", "sightings": 1 }, { "indicator": "http://5.252.21.239/files/8434554557/X8cqVrA.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey", "PureHVNC", "Vidar" ], "first_seen": "2026-03-21 23:42:07 UTC", "last_seen": "2026-03-21 23:42:07 UTC", "sightings": 1 }, { "indicator": "http://5.252.21.239/files/7850695435/gpaMBVQ.msi", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey", "EternalRocks" ], "first_seen": "2026-03-21 23:42:07 UTC", "last_seen": "2026-03-21 23:42:07 UTC", "sightings": 1 }, { "indicator": "http://5.252.21.239/files/5900855435/eNLe4nm.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543", "Vidar" ], "first_seen": "2026-03-21 23:42:06 UTC", "last_seen": "2026-03-21 23:42:06 UTC", "sightings": 1 }, { "indicator": "http://5.252.21.239/files/8499672124/b1JNsvy.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543", "Fuery" ], "first_seen": "2026-03-21 23:42:05 UTC", "last_seen": "2026-03-21 23:42:05 UTC", "sightings": 1 }, { "indicator": "http://5.252.21.239/files/8574065846/HPlEReH.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey", "Vidar" ], "first_seen": "2026-03-21 23:42:05 UTC", "last_seen": "2026-03-21 23:42:05 UTC", "sightings": 1 }, { "indicator": "http://5.252.21.239/files/8036065901/ggGms6j.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey", "OffLoader" ], "first_seen": "2026-03-21 23:41:07 UTC", "last_seen": "2026-03-21 23:41:07 UTC", "sightings": 1 }, { "indicator": "http://5.252.21.239/files/gop/random.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543", "Vidar" ], "first_seen": "2026-03-21 23:40:07 UTC", "last_seen": "2026-03-21 23:40:07 UTC", "sightings": 1 }, { "indicator": "http://5.252.21.239/files/7115306239/Qub5kf3.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-21 23:40:07 UTC", "last_seen": "2026-03-21 23:40:07 UTC", "sightings": 1 }, { "indicator": "https://hub2point.cloudoperationcenter.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 23:38:06 UTC", "last_seen": "2026-03-21 23:38:06 UTC", "sightings": 1 }, { "indicator": "https://hub1proc.cloudoperationcenter.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 23:33:07 UTC", "last_seen": "2026-03-21 23:33:07 UTC", "sightings": 1 }, { "indicator": "https://int4view.globalmetricshandler.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 23:27:07 UTC", "last_seen": "2026-03-21 23:27:07 UTC", "sightings": 1 }, { "indicator": "http://5.252.21.239/files/unique5/random.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey", "Vidar" ], "first_seen": "2026-03-21 23:27:06 UTC", "last_seen": "2026-03-21 23:27:06 UTC", "sightings": 1 }, { "indicator": "http://5.252.21.239/final/random.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543", "NirCmd" ], "first_seen": "2026-03-21 23:26:07 UTC", "last_seen": "2026-03-21 23:26:07 UTC", "sightings": 1 }, { "indicator": "http://110.36.80.163:60166/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 23:25:14 UTC", "last_seen": "2026-03-21 23:25:14 UTC", "sightings": 1 }, { "indicator": "http://5.252.21.239/test/random.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-03-21 23:23:08 UTC", "last_seen": "2026-03-21 23:23:08 UTC", "sightings": 1 }, { "indicator": "http://5.252.21.239/files/neo/random.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-03-21 23:22:09 UTC", "last_seen": "2026-03-21 23:22:09 UTC", "sightings": 1 }, { "indicator": "https://int3ghost.globalmetricshandler.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 23:21:07 UTC", "last_seen": "2026-03-21 23:21:07 UTC", "sightings": 1 }, { "indicator": "https://int2core.globalmetricshandler.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 23:15:08 UTC", "last_seen": "2026-03-21 23:15:08 UTC", "sightings": 1 }, { "indicator": "https://int1proc.globalmetricshandler.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 23:10:09 UTC", "last_seen": "2026-03-21 23:10:09 UTC", "sightings": 1 }, { "indicator": "https://ext4link.virtualinterfacenet.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 23:05:08 UTC", "last_seen": "2026-03-21 23:05:08 UTC", "sightings": 1 }, { "indicator": "http://110.37.118.241:46476/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-21 23:03:13 UTC", "last_seen": "2026-03-21 23:03:13 UTC", "sightings": 1 }, { "indicator": "https://ext3user.virtualinterfacenet.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 22:58:07 UTC", "last_seen": "2026-03-21 22:58:07 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/wordoffarewellothonna275/Anvil/refs/heads/main/example/Software_v3.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-21 22:53:11 UTC", "last_seen": "2026-03-21 22:53:11 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/cracklingscapitalofsouthdakota649/gpu_benchmark/refs/heads/main/supports/benchmark_gpu_v2.7.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-21 22:53:10 UTC", "last_seen": "2026-03-21 22:53:10 UTC", "sightings": 1 }, { "indicator": "https://ext2base.virtualinterfacenet.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 22:53:09 UTC", "last_seen": "2026-03-21 22:53:09 UTC", "sightings": 1 }, { "indicator": "https://github.com/wordoffarewellothonna275/Anvil/raw/refs/heads/main/example/Software_v3.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-21 22:53:09 UTC", "last_seen": "2026-03-21 22:53:09 UTC", "sightings": 1 }, { "indicator": "https://github.com/cracklingscapitalofsouthdakota649/gpu_benchmark/raw/refs/heads/main/supports/benchmark_gpu_v2.7.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-21 22:53:09 UTC", "last_seen": "2026-03-21 22:53:09 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/giaaaa0121/Fourmeme-bot/refs/heads/main/src/lib/copy/bot_Fourmeme_v1.6.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-21 22:53:07 UTC", "last_seen": "2026-03-21 22:53:07 UTC", "sightings": 1 }, { "indicator": "https://github.com/giaaaa0121/Fourmeme-bot/raw/refs/heads/main/src/lib/copy/bot_Fourmeme_v1.6.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-21 22:53:07 UTC", "last_seen": "2026-03-21 22:53:07 UTC", "sightings": 1 }, { "indicator": "https://ext1infra.virtualinterfacenet.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 22:47:08 UTC", "last_seen": "2026-03-21 22:47:08 UTC", "sightings": 1 }, { "indicator": "http://218.24.99.3:46916/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 22:42:23 UTC", "last_seen": "2026-03-21 22:42:23 UTC", "sightings": 1 }, { "indicator": "https://hub4work.systemintegritynode.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 22:42:06 UTC", "last_seen": "2026-03-21 22:42:06 UTC", "sightings": 1 }, { "indicator": "https://hub3local.systemintegritynode.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 22:36:08 UTC", "last_seen": "2026-03-21 22:36:08 UTC", "sightings": 1 }, { "indicator": "http://103.102.25.50:57308/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 22:32:10 UTC", "last_seen": "2026-03-21 22:32:10 UTC", "sightings": 1 }, { "indicator": "https://hub2power.systemintegritynode.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 22:30:10 UTC", "last_seen": "2026-03-21 22:30:10 UTC", "sightings": 1 }, { "indicator": "http://115.50.231.16:50498/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 22:24:10 UTC", "last_seen": "2026-03-21 22:24:10 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Kaylynhusbandly717/cursor-2api/refs/heads/main/app/core/api_cursor_v1.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-21 22:21:12 UTC", "last_seen": "2026-03-21 22:21:12 UTC", "sightings": 1 }, { "indicator": "https://github.com/ZakwanShah16/LeetBuddy/raw/refs/heads/main/backend/extension/routes/Buddy_Leet_1.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-21 22:21:11 UTC", "last_seen": "2026-03-21 22:21:11 UTC", "sightings": 1 }, { "indicator": "https://github.com/JJYT12/jjyt12.github.io/raw/refs/heads/main/overfreely/jjyt-github-io-3.9-beta.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-21 22:21:10 UTC", "last_seen": "2026-03-21 22:21:10 UTC", "sightings": 1 }, { "indicator": "https://github.com/Bri20-ctrl/laravel-starter-kit-inertia-react/raw/refs/heads/main/resources/js/pages/user-password-confirmation/laravel_react_starter_inertia_kit_1.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-21 22:21:10 UTC", "last_seen": "2026-03-21 22:21:10 UTC", "sightings": 1 }, { "indicator": "https://github.com/msopu/mawari-node-setup/raw/refs/heads/main/pygmyship/mawari-setup-node-3.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-21 22:21:10 UTC", "last_seen": "2026-03-21 22:21:10 UTC", "sightings": 1 }, { "indicator": "https://github.com/Kaylynhusbandly717/cursor-2api/raw/refs/heads/main/app/core/api_cursor_v1.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-21 22:21:10 UTC", "last_seen": "2026-03-21 22:21:10 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Bri20-ctrl/laravel-starter-kit-inertia-react/refs/heads/main/resources/js/pages/user-password-confirmation/laravel_react_starter_inertia_kit_1.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-21 22:21:10 UTC", "last_seen": "2026-03-21 22:21:10 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/TeamDark07/tracker/refs/heads/main/risibility/Software_v1.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-21 22:21:10 UTC", "last_seen": "2026-03-21 22:21:10 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/ZakwanShah16/LeetBuddy/refs/heads/main/backend/extension/routes/Buddy_Leet_1.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-21 22:21:10 UTC", "last_seen": "2026-03-21 22:21:10 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/msopu/mawari-node-setup/refs/heads/main/pygmyship/mawari-setup-node-3.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-21 22:21:09 UTC", "last_seen": "2026-03-21 22:21:09 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/TeamDark07/PCH-PoP/refs/heads/main/examples/3_resource_contention/P-PC-Po-2.6.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-21 22:21:09 UTC", "last_seen": "2026-03-21 22:21:09 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/JJYT12/jjyt12.github.io/refs/heads/main/overfreely/jjyt-github-io-3.9-beta.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-21 22:21:09 UTC", "last_seen": "2026-03-21 22:21:09 UTC", "sightings": 1 }, { "indicator": "https://github.com/TeamDark07/PCH-PoP/raw/refs/heads/main/examples/3_resource_contention/P-PC-Po-2.6.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-21 22:21:09 UTC", "last_seen": "2026-03-21 22:21:09 UTC", "sightings": 1 }, { "indicator": "https://github.com/TeamDark07/tracker/raw/refs/heads/main/risibility/Software_v1.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-21 22:21:09 UTC", "last_seen": "2026-03-21 22:21:09 UTC", "sightings": 1 }, { "indicator": "https://int4link.networkresourcebuffer.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 22:20:08 UTC", "last_seen": "2026-03-21 22:20:08 UTC", "sightings": 1 }, { "indicator": "http://117.214.80.108:47249/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-21 22:18:19 UTC", "last_seen": "2026-03-21 22:18:19 UTC", "sightings": 1 }, { "indicator": "http://59.95.81.121:37164/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 22:18:18 UTC", "last_seen": "2026-03-21 22:18:18 UTC", "sightings": 1 }, { "indicator": "http://117.241.204.71:37529/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-21 22:16:12 UTC", "last_seen": "2026-03-21 22:16:12 UTC", "sightings": 1 }, { "indicator": "https://int3dev.networkresourcebuffer.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 22:14:08 UTC", "last_seen": "2026-03-21 22:14:08 UTC", "sightings": 1 }, { "indicator": "http://59.182.76.100:36888/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 22:13:18 UTC", "last_seen": "2026-03-21 22:13:18 UTC", "sightings": 1 }, { "indicator": "http://218.24.99.3:46916/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 22:13:18 UTC", "last_seen": "2026-03-21 22:13:18 UTC", "sightings": 1 }, { "indicator": "https://github.com/JJYT12/trying/raw/refs/heads/main/blanda/Software-3.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-21 22:13:07 UTC", "last_seen": "2026-03-21 22:13:07 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/JJYT12/trying/refs/heads/main/blanda/Software-3.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-21 22:13:06 UTC", "last_seen": "2026-03-21 22:13:06 UTC", "sightings": 1 }, { "indicator": "https://github.com/Marzit36/marzit36.github.io/raw/refs/heads/main/energy/github_marzit_io_3.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-21 22:12:06 UTC", "last_seen": "2026-03-21 22:12:06 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Marzit36/marzit36.github.io/refs/heads/main/energy/github_marzit_io_3.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-21 22:12:06 UTC", "last_seen": "2026-03-21 22:12:06 UTC", "sightings": 1 }, { "indicator": "https://int2remote.networkresourcebuffer.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 22:08:06 UTC", "last_seen": "2026-03-21 22:08:06 UTC", "sightings": 1 }, { "indicator": "http://39.165.57.48:39868/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 22:07:16 UTC", "last_seen": "2026-03-21 22:07:16 UTC", "sightings": 1 }, { "indicator": "http://182.117.123.178:36486/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-21 22:07:07 UTC", "last_seen": "2026-03-21 22:07:07 UTC", "sightings": 1 }, { "indicator": "http://39.165.57.48:39868/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 22:04:16 UTC", "last_seen": "2026-03-21 22:04:16 UTC", "sightings": 1 }, { "indicator": "http://115.50.231.16:50498/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 22:04:15 UTC", "last_seen": "2026-03-21 22:04:15 UTC", "sightings": 1 }, { "indicator": "http://115.59.90.112:50623/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 22:04:15 UTC", "last_seen": "2026-03-21 22:04:15 UTC", "sightings": 1 }, { "indicator": "https://int1store.networkresourcebuffer.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 22:02:14 UTC", "last_seen": "2026-03-21 22:02:14 UTC", "sightings": 1 }, { "indicator": "https://ext4sync.securityaccessgateway.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 21:57:14 UTC", "last_seen": "2026-03-21 21:57:14 UTC", "sightings": 1 }, { "indicator": "http://117.214.80.108:47249/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-21 21:52:28 UTC", "last_seen": "2026-03-21 21:52:28 UTC", "sightings": 1 }, { "indicator": "https://ext3gate.securityaccessgateway.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 21:51:08 UTC", "last_seen": "2026-03-21 21:51:08 UTC", "sightings": 1 }, { "indicator": "http://117.241.204.71:37529/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-21 21:49:24 UTC", "last_seen": "2026-03-21 21:49:24 UTC", "sightings": 1 }, { "indicator": "http://42.85.48.108:45098/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 21:47:17 UTC", "last_seen": "2026-03-21 21:47:17 UTC", "sightings": 1 }, { "indicator": "http://27.215.178.97:59301/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 21:47:17 UTC", "last_seen": "2026-03-21 21:47:17 UTC", "sightings": 1 }, { "indicator": "https://ext2proc.securityaccessgateway.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 21:47:08 UTC", "last_seen": "2026-03-21 21:47:08 UTC", "sightings": 1 }, { "indicator": "http://115.59.90.112:50623/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 21:42:19 UTC", "last_seen": "2026-03-21 21:42:19 UTC", "sightings": 1 }, { "indicator": "http://27.215.178.42:49988/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 21:40:18 UTC", "last_seen": "2026-03-21 21:40:18 UTC", "sightings": 1 }, { "indicator": "https://ext1meta.securityaccessgateway.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 21:40:08 UTC", "last_seen": "2026-03-21 21:40:08 UTC", "sightings": 1 }, { "indicator": "http://182.117.123.178:36486/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-21 21:37:08 UTC", "last_seen": "2026-03-21 21:37:08 UTC", "sightings": 1 }, { "indicator": "http://115.55.81.35:56490/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-21 21:37:07 UTC", "last_seen": "2026-03-21 21:37:07 UTC", "sightings": 1 }, { "indicator": "https://hub4static.terminaldataprocessor.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 21:35:09 UTC", "last_seen": "2026-03-21 21:35:09 UTC", "sightings": 1 }, { "indicator": "http://182.126.112.204:55784/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-21 21:32:06 UTC", "last_seen": "2026-03-21 21:32:06 UTC", "sightings": 1 }, { "indicator": "https://hub2data.terminaldataprocessor.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 21:24:07 UTC", "last_seen": "2026-03-21 21:24:07 UTC", "sightings": 1 }, { "indicator": "https://hub1sync.terminaldataprocessor.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 21:21:12 UTC", "last_seen": "2026-03-21 21:21:12 UTC", "sightings": 1 }, { "indicator": "http://222.141.43.126:41697/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-21 21:12:05 UTC", "last_seen": "2026-03-21 21:12:05 UTC", "sightings": 1 }, { "indicator": "http://27.37.89.169:52268/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 21:00:22 UTC", "last_seen": "2026-03-21 21:00:22 UTC", "sightings": 1 }, { "indicator": "http://117.248.25.152:54286/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 20:58:23 UTC", "last_seen": "2026-03-21 20:58:23 UTC", "sightings": 1 }, { "indicator": "http://182.114.252.38:38866/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-21 20:57:06 UTC", "last_seen": "2026-03-21 20:57:06 UTC", "sightings": 1 }, { "indicator": "http://182.126.112.204:55784/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-21 20:47:07 UTC", "last_seen": "2026-03-21 20:47:07 UTC", "sightings": 1 }, { "indicator": "http://110.37.14.231:47165/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-21 20:47:06 UTC", "last_seen": "2026-03-21 20:47:06 UTC", "sightings": 1 }, { "indicator": "http://123.9.34.118:58224/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 20:43:19 UTC", "last_seen": "2026-03-21 20:43:19 UTC", "sightings": 1 }, { "indicator": "http://115.62.157.112:56872/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 20:40:22 UTC", "last_seen": "2026-03-21 20:40:22 UTC", "sightings": 1 }, { "indicator": "http://182.114.252.38:38866/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-21 20:37:05 UTC", "last_seen": "2026-03-21 20:37:05 UTC", "sightings": 1 }, { "indicator": "http://61.52.139.22:56638/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 20:30:09 UTC", "last_seen": "2026-03-21 20:30:09 UTC", "sightings": 1 }, { "indicator": "http://222.141.43.126:41697/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-21 20:26:07 UTC", "last_seen": "2026-03-21 20:26:07 UTC", "sightings": 1 }, { "indicator": "http://123.9.34.118:58224/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 20:23:21 UTC", "last_seen": "2026-03-21 20:23:21 UTC", "sightings": 1 }, { "indicator": "http://110.37.14.231:47165/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-21 20:22:06 UTC", "last_seen": "2026-03-21 20:22:06 UTC", "sightings": 1 }, { "indicator": "http://115.55.245.180:43935/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 20:19:12 UTC", "last_seen": "2026-03-21 20:19:12 UTC", "sightings": 1 }, { "indicator": "http://115.62.157.112:56872/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 20:18:14 UTC", "last_seen": "2026-03-21 20:18:14 UTC", "sightings": 1 }, { "indicator": "http://113.228.104.140:46504/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 20:16:15 UTC", "last_seen": "2026-03-21 20:16:15 UTC", "sightings": 1 }, { "indicator": "http://182.123.254.229:48910/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 20:06:16 UTC", "last_seen": "2026-03-21 20:06:16 UTC", "sightings": 1 }, { "indicator": "http://61.52.139.22:56638/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 20:01:12 UTC", "last_seen": "2026-03-21 20:01:12 UTC", "sightings": 1 }, { "indicator": "http://115.55.245.180:43935/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 19:58:18 UTC", "last_seen": "2026-03-21 19:58:18 UTC", "sightings": 1 }, { "indicator": "http://42.56.167.182:49208/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 19:55:19 UTC", "last_seen": "2026-03-21 19:55:19 UTC", "sightings": 1 }, { "indicator": "http://77.120.123.166:8080/rev", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "opendir", "ua-wget", "x86" ], "first_seen": "2026-03-21 19:54:26 UTC", "last_seen": "2026-03-21 19:54:26 UTC", "sightings": 1 }, { "indicator": "http://222.127.55.224:53844/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-21 19:50:18 UTC", "last_seen": "2026-03-21 19:50:18 UTC", "sightings": 1 }, { "indicator": "http://27.215.178.191:55349/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 19:47:15 UTC", "last_seen": "2026-03-21 19:47:15 UTC", "sightings": 1 }, { "indicator": "https://loc4point.analyticspipeline.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 19:40:10 UTC", "last_seen": "2026-03-21 19:40:10 UTC", "sightings": 1 }, { "indicator": "http://182.123.254.229:48910/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 19:38:23 UTC", "last_seen": "2026-03-21 19:38:23 UTC", "sightings": 1 }, { "indicator": "http://222.140.160.8:42782/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 19:36:16 UTC", "last_seen": "2026-03-21 19:36:16 UTC", "sightings": 1 }, { "indicator": "https://loc3data.analyticspipeline.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 19:35:09 UTC", "last_seen": "2026-03-21 19:35:09 UTC", "sightings": 1 }, { "indicator": "http://222.127.55.224:53844/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-21 19:29:18 UTC", "last_seen": "2026-03-21 19:29:18 UTC", "sightings": 1 }, { "indicator": "https://loc2proxy.analyticspipeline.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 19:29:08 UTC", "last_seen": "2026-03-21 19:29:08 UTC", "sightings": 1 }, { "indicator": "https://loc1infra.analyticspipeline.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 19:23:08 UTC", "last_seen": "2026-03-21 19:23:08 UTC", "sightings": 1 }, { "indicator": "http://117.241.59.29:53429/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 19:22:12 UTC", "last_seen": "2026-03-21 19:22:12 UTC", "sightings": 1 }, { "indicator": "http://110.37.120.17:53383/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 19:22:11 UTC", "last_seen": "2026-03-21 19:22:11 UTC", "sightings": 1 }, { "indicator": "http://112.239.127.137:53527/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-21 19:22:07 UTC", "last_seen": "2026-03-21 19:22:07 UTC", "sightings": 1 }, { "indicator": "https://node4sat.remotemanagement.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 19:20:08 UTC", "last_seen": "2026-03-21 19:20:08 UTC", "sightings": 1 }, { "indicator": "https://node3core.remotemanagement.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 19:16:06 UTC", "last_seen": "2026-03-21 19:16:06 UTC", "sightings": 1 }, { "indicator": "http://93.157.253.209:45024/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 19:15:17 UTC", "last_seen": "2026-03-21 19:15:17 UTC", "sightings": 1 }, { "indicator": "http://222.140.160.8:42782/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 19:09:18 UTC", "last_seen": "2026-03-21 19:09:18 UTC", "sightings": 1 }, { "indicator": "http://110.37.38.176:49714/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-21 19:07:06 UTC", "last_seen": "2026-03-21 19:07:06 UTC", "sightings": 1 }, { "indicator": "http://110.38.211.48:50358/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 19:06:15 UTC", "last_seen": "2026-03-21 19:06:15 UTC", "sightings": 1 }, { "indicator": "https://node2steel.remotemanagement.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 19:06:08 UTC", "last_seen": "2026-03-21 19:06:08 UTC", "sightings": 1 }, { "indicator": "https://node1proc.remotemanagement.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 19:02:08 UTC", "last_seen": "2026-03-21 19:02:08 UTC", "sightings": 1 }, { "indicator": "http://200.6.91.47:54535/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-21 18:57:05 UTC", "last_seen": "2026-03-21 18:57:05 UTC", "sightings": 1 }, { "indicator": "http://112.239.127.137:53527/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 18:56:17 UTC", "last_seen": "2026-03-21 18:56:17 UTC", "sightings": 1 }, { "indicator": "http://110.37.120.17:53383/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 18:56:16 UTC", "last_seen": "2026-03-21 18:56:16 UTC", "sightings": 1 }, { "indicator": "https://srv4space.virtualenvironment.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 18:55:08 UTC", "last_seen": "2026-03-21 18:55:08 UTC", "sightings": 1 }, { "indicator": "http://117.241.59.29:53429/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 18:53:24 UTC", "last_seen": "2026-03-21 18:53:24 UTC", "sightings": 1 }, { "indicator": "https://srv3field.virtualenvironment.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 18:49:07 UTC", "last_seen": "2026-03-21 18:49:07 UTC", "sightings": 1 }, { "indicator": "http://42.5.66.188:46861/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 18:48:11 UTC", "last_seen": "2026-03-21 18:48:11 UTC", "sightings": 1 }, { "indicator": "https://srv2outer.virtualenvironment.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 18:44:10 UTC", "last_seen": "2026-03-21 18:44:10 UTC", "sightings": 1 }, { "indicator": "https://srv1proc.virtualenvironment.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 18:38:06 UTC", "last_seen": "2026-03-21 18:38:06 UTC", "sightings": 1 }, { "indicator": "http://219.157.20.194:49636/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-21 18:37:06 UTC", "last_seen": "2026-03-21 18:37:06 UTC", "sightings": 1 }, { "indicator": "https://loc4path.systemintegration.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 18:33:06 UTC", "last_seen": "2026-03-21 18:33:06 UTC", "sightings": 1 }, { "indicator": "http://110.38.211.48:50358/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 18:31:25 UTC", "last_seen": "2026-03-21 18:31:25 UTC", "sightings": 1 }, { "indicator": "https://loc3view.systemintegration.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 18:27:06 UTC", "last_seen": "2026-03-21 18:27:06 UTC", "sightings": 1 }, { "indicator": "http://42.5.66.188:46861/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 18:26:18 UTC", "last_seen": "2026-03-21 18:26:18 UTC", "sightings": 1 }, { "indicator": "http://110.37.5.60:59271/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-21 18:22:53 UTC", "last_seen": "2026-03-21 18:22:53 UTC", "sightings": 1 }, { "indicator": "https://loc2point.systemintegration.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 18:21:10 UTC", "last_seen": "2026-03-21 18:21:10 UTC", "sightings": 1 }, { "indicator": "http://118.34.109.121:46807/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 18:19:14 UTC", "last_seen": "2026-03-21 18:19:14 UTC", "sightings": 1 }, { "indicator": "https://loc1proc.systemintegration.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 18:17:08 UTC", "last_seen": "2026-03-21 18:17:08 UTC", "sightings": 1 }, { "indicator": "http://219.157.20.194:49636/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-21 18:17:06 UTC", "last_seen": "2026-03-21 18:17:06 UTC", "sightings": 1 }, { "indicator": "http://219.157.37.45:55376/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-21 18:16:18 UTC", "last_seen": "2026-03-21 18:16:18 UTC", "sightings": 1 }, { "indicator": "http://60.162.211.159:34526/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-21 18:10:21 UTC", "last_seen": "2026-03-21 18:10:21 UTC", "sightings": 1 }, { "indicator": "https://node4view.databaseintegrity.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 18:10:09 UTC", "last_seen": "2026-03-21 18:10:09 UTC", "sightings": 1 }, { "indicator": "http://110.37.37.232:42284/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 18:08:18 UTC", "last_seen": "2026-03-21 18:08:18 UTC", "sightings": 1 }, { "indicator": "https://node3ghost.databaseintegrity.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 18:05:07 UTC", "last_seen": "2026-03-21 18:05:07 UTC", "sightings": 1 }, { "indicator": "http://118.34.109.121:46807/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 18:02:19 UTC", "last_seen": "2026-03-21 18:02:19 UTC", "sightings": 1 }, { "indicator": "http://188.137.182.115/1.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543", "Vidar" ], "first_seen": "2026-03-21 18:00:14 UTC", "last_seen": "2026-03-21 18:00:14 UTC", "sightings": 1 }, { "indicator": "https://node2core.databaseintegrity.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 17:59:06 UTC", "last_seen": "2026-03-21 17:59:06 UTC", "sightings": 1 }, { "indicator": "http://27.215.178.191:55349/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 17:54:13 UTC", "last_seen": "2026-03-21 17:54:13 UTC", "sightings": 1 }, { "indicator": "http://221.15.94.7:55597/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 17:54:12 UTC", "last_seen": "2026-03-21 17:54:12 UTC", "sightings": 1 }, { "indicator": "https://node1proc.databaseintegrity.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 17:54:08 UTC", "last_seen": "2026-03-21 17:54:08 UTC", "sightings": 1 }, { "indicator": "http://115.63.201.44:51262/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 17:49:17 UTC", "last_seen": "2026-03-21 17:49:17 UTC", "sightings": 1 }, { "indicator": "https://srv4link.resourcevalidator.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 17:49:07 UTC", "last_seen": "2026-03-21 17:49:07 UTC", "sightings": 1 }, { "indicator": "http://221.15.94.7:55597/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 17:48:11 UTC", "last_seen": "2026-03-21 17:48:11 UTC", "sightings": 1 }, { "indicator": "http://110.37.37.232:42284/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 17:46:07 UTC", "last_seen": "2026-03-21 17:46:07 UTC", "sightings": 1 }, { "indicator": "http://115.55.249.24:52692/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 17:45:16 UTC", "last_seen": "2026-03-21 17:45:16 UTC", "sightings": 1 }, { "indicator": "http://123.4.160.23:45431/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 17:43:15 UTC", "last_seen": "2026-03-21 17:43:15 UTC", "sightings": 1 }, { "indicator": "https://srv3user.resourcevalidator.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 17:42:09 UTC", "last_seen": "2026-03-21 17:42:09 UTC", "sightings": 1 }, { "indicator": "http://115.49.65.160:39860/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 17:37:31 UTC", "last_seen": "2026-03-21 17:37:31 UTC", "sightings": 1 }, { "indicator": "https://srv2base.resourcevalidator.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 17:36:09 UTC", "last_seen": "2026-03-21 17:36:09 UTC", "sightings": 1 }, { "indicator": "http://110.37.14.251:33800/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-21 17:35:14 UTC", "last_seen": "2026-03-21 17:35:14 UTC", "sightings": 1 }, { "indicator": "http://115.63.201.44:51262/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 17:32:16 UTC", "last_seen": "2026-03-21 17:32:16 UTC", "sightings": 1 }, { "indicator": "https://srv1infra.resourcevalidator.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 17:31:06 UTC", "last_seen": "2026-03-21 17:31:06 UTC", "sightings": 1 }, { "indicator": "http://110.37.5.60:59271/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-21 17:27:41 UTC", "last_seen": "2026-03-21 17:27:41 UTC", "sightings": 1 }, { "indicator": "http://110.38.217.97:39653/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-21 17:27:05 UTC", "last_seen": "2026-03-21 17:27:05 UTC", "sightings": 1 }, { "indicator": "https://loc4work.networkcontroller.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 17:26:06 UTC", "last_seen": "2026-03-21 17:26:06 UTC", "sightings": 1 }, { "indicator": "http://110.37.27.164:60299/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 17:24:22 UTC", "last_seen": "2026-03-21 17:24:22 UTC", "sightings": 1 }, { "indicator": "http://115.55.249.24:52692/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 17:20:21 UTC", "last_seen": "2026-03-21 17:20:21 UTC", "sightings": 1 }, { "indicator": "https://loc3local.networkcontroller.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 17:20:09 UTC", "last_seen": "2026-03-21 17:20:09 UTC", "sightings": 1 }, { "indicator": "http://123.4.160.23:45431/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 17:19:19 UTC", "last_seen": "2026-03-21 17:19:19 UTC", "sightings": 1 }, { "indicator": "http://112.238.194.174:52033/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 17:19:18 UTC", "last_seen": "2026-03-21 17:19:18 UTC", "sightings": 1 }, { "indicator": "http://77.245.107.223:51228/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 17:18:16 UTC", "last_seen": "2026-03-21 17:18:16 UTC", "sightings": 1 }, { "indicator": "https://loc2power.networkcontroller.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 17:15:08 UTC", "last_seen": "2026-03-21 17:15:08 UTC", "sightings": 1 }, { "indicator": "https://loc1proc.networkcontroller.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 17:10:09 UTC", "last_seen": "2026-03-21 17:10:09 UTC", "sightings": 1 }, { "indicator": "http://110.38.217.97:39653/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-21 17:07:07 UTC", "last_seen": "2026-03-21 17:07:07 UTC", "sightings": 1 }, { "indicator": "https://node4link.securityframework.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 17:03:08 UTC", "last_seen": "2026-03-21 17:03:08 UTC", "sightings": 1 }, { "indicator": "https://node3dev.securityframework.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 16:57:05 UTC", "last_seen": "2026-03-21 16:57:05 UTC", "sightings": 1 }, { "indicator": "http://112.238.194.174:52033/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 16:53:38 UTC", "last_seen": "2026-03-21 16:53:38 UTC", "sightings": 1 }, { "indicator": "https://node2remote.securityframework.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 16:52:06 UTC", "last_seen": "2026-03-21 16:52:06 UTC", "sightings": 1 }, { "indicator": "http://124.94.223.111:51933/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 16:49:17 UTC", "last_seen": "2026-03-21 16:49:17 UTC", "sightings": 1 }, { "indicator": "https://node1store.securityframework.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 16:47:06 UTC", "last_seen": "2026-03-21 16:47:06 UTC", "sightings": 1 }, { "indicator": "http://221.200.217.85:57547/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 16:45:35 UTC", "last_seen": "2026-03-21 16:45:35 UTC", "sightings": 1 }, { "indicator": "http://110.39.244.189:39756/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 16:44:17 UTC", "last_seen": "2026-03-21 16:44:17 UTC", "sightings": 1 }, { "indicator": "http://115.54.165.197:42272/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 16:44:17 UTC", "last_seen": "2026-03-21 16:44:17 UTC", "sightings": 1 }, { "indicator": "https://github.com/Marzit36/SlipStreamGUI/raw/refs/heads/main/assets/Slip_GUI_Stream_2.7.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-21 16:44:06 UTC", "last_seen": "2026-03-21 16:44:06 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Marzit36/SlipStreamGUI/refs/heads/main/assets/Slip_GUI_Stream_2.7.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-21 16:44:06 UTC", "last_seen": "2026-03-21 16:44:06 UTC", "sightings": 1 }, { "indicator": "https://srv4sync.cloudinfrastructure.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 16:41:06 UTC", "last_seen": "2026-03-21 16:41:06 UTC", "sightings": 1 }, { "indicator": "http://115.49.65.160:39860/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 16:37:08 UTC", "last_seen": "2026-03-21 16:37:08 UTC", "sightings": 1 }, { "indicator": "http://123.188.65.34:38168/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-21 16:37:07 UTC", "last_seen": "2026-03-21 16:37:07 UTC", "sightings": 1 }, { "indicator": "https://srv3gate.cloudinfrastructure.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 16:35:10 UTC", "last_seen": "2026-03-21 16:35:10 UTC", "sightings": 1 }, { "indicator": "http://221.200.217.85:57547/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 16:34:10 UTC", "last_seen": "2026-03-21 16:34:10 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.7/files/7115306239/Qub5kf3.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-03-21 16:33:07 UTC", "last_seen": "2026-03-21 16:33:07 UTC", "sightings": 1 }, { "indicator": "http://112.251.85.192:34475/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-21 16:27:17 UTC", "last_seen": "2026-03-21 16:27:17 UTC", "sightings": 1 }, { "indicator": "https://srv1meta.cloudinfrastructure.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 16:24:07 UTC", "last_seen": "2026-03-21 16:24:07 UTC", "sightings": 1 }, { "indicator": "https://loc4static.streamdatahandler.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 16:19:10 UTC", "last_seen": "2026-03-21 16:19:10 UTC", "sightings": 1 }, { "indicator": "http://117.208.235.224:49882/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 16:17:08 UTC", "last_seen": "2026-03-21 16:17:08 UTC", "sightings": 1 }, { "indicator": "https://loc3edge.streamdatahandler.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 16:13:06 UTC", "last_seen": "2026-03-21 16:13:06 UTC", "sightings": 1 }, { "indicator": "http://110.36.20.111:45296/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-21 16:12:05 UTC", "last_seen": "2026-03-21 16:12:05 UTC", "sightings": 1 }, { "indicator": "https://loc2data.streamdatahandler.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 16:08:08 UTC", "last_seen": "2026-03-21 16:08:08 UTC", "sightings": 1 }, { "indicator": "http://182.112.215.31:54039/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 16:03:16 UTC", "last_seen": "2026-03-21 16:03:16 UTC", "sightings": 1 }, { "indicator": "http://221.13.149.244:44568/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-21 16:02:07 UTC", "last_seen": "2026-03-21 16:02:07 UTC", "sightings": 1 }, { "indicator": "http://112.251.85.192:34475/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-21 16:01:42 UTC", "last_seen": "2026-03-21 16:01:42 UTC", "sightings": 1 }, { "indicator": "https://loc1sync.streamdatahandler.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 16:01:08 UTC", "last_seen": "2026-03-21 16:01:08 UTC", "sightings": 1 }, { "indicator": "http://115.59.13.220:51214/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-21 15:57:06 UTC", "last_seen": "2026-03-21 15:57:06 UTC", "sightings": 1 }, { "indicator": "https://partne2-field.grovopen.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 15:56:08 UTC", "last_seen": "2026-03-21 15:56:08 UTC", "sightings": 1 }, { "indicator": "http://110.37.16.57:58507/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-21 15:52:07 UTC", "last_seen": "2026-03-21 15:52:07 UTC", "sightings": 1 }, { "indicator": "http://117.208.235.224:49882/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 15:51:20 UTC", "last_seen": "2026-03-21 15:51:20 UTC", "sightings": 1 }, { "indicator": "https://bhkpzpne.grovopen.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 15:50:08 UTC", "last_seen": "2026-03-21 15:50:08 UTC", "sightings": 1 }, { "indicator": "http://222.137.94.97:38494/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 15:48:21 UTC", "last_seen": "2026-03-21 15:48:21 UTC", "sightings": 1 }, { "indicator": "http://27.215.178.42:49988/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-21 15:47:07 UTC", "last_seen": "2026-03-21 15:47:07 UTC", "sightings": 1 }, { "indicator": "https://5p4r-node.grovopen.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 15:45:09 UTC", "last_seen": "2026-03-21 15:45:09 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.7/files/neo/random.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-03-21 15:43:07 UTC", "last_seen": "2026-03-21 15:43:07 UTC", "sightings": 1 }, { "indicator": "http://117.195.116.247:51333/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 15:42:20 UTC", "last_seen": "2026-03-21 15:42:20 UTC", "sightings": 1 }, { "indicator": "http://110.36.20.111:45296/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-21 15:42:07 UTC", "last_seen": "2026-03-21 15:42:07 UTC", "sightings": 1 }, { "indicator": "http://110.36.95.252:53364/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 15:40:28 UTC", "last_seen": "2026-03-21 15:40:28 UTC", "sightings": 1 }, { "indicator": "https://z5odl9.grovopen.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 15:40:11 UTC", "last_seen": "2026-03-21 15:40:11 UTC", "sightings": 1 }, { "indicator": "http://222.137.94.97:38494/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 15:39:21 UTC", "last_seen": "2026-03-21 15:39:21 UTC", "sightings": 1 }, { "indicator": "http://110.36.15.42:42859/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 15:36:12 UTC", "last_seen": "2026-03-21 15:36:12 UTC", "sightings": 1 }, { "indicator": "https://abhd27da.grovopen.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 15:33:08 UTC", "last_seen": "2026-03-21 15:33:08 UTC", "sightings": 1 }, { "indicator": "http://182.112.215.31:54039/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 15:32:15 UTC", "last_seen": "2026-03-21 15:32:15 UTC", "sightings": 1 }, { "indicator": "http://115.59.13.220:51214/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-21 15:32:07 UTC", "last_seen": "2026-03-21 15:32:07 UTC", "sightings": 1 }, { "indicator": "http://219.157.66.185:43377/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-21 15:32:07 UTC", "last_seen": "2026-03-21 15:32:07 UTC", "sightings": 1 }, { "indicator": "http://123.14.219.90:39951/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 15:31:15 UTC", "last_seen": "2026-03-21 15:31:15 UTC", "sightings": 1 }, { "indicator": "http://123.14.219.90:39951/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 15:29:35 UTC", "last_seen": "2026-03-21 15:29:35 UTC", "sightings": 1 }, { "indicator": "http://110.37.16.57:58507/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-21 15:27:14 UTC", "last_seen": "2026-03-21 15:27:14 UTC", "sightings": 1 }, { "indicator": "https://spectrumdaemon.deepglom.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 15:27:07 UTC", "last_seen": "2026-03-21 15:27:07 UTC", "sightings": 1 }, { "indicator": "https://xpm713mg.deepglom.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 15:24:15 UTC", "last_seen": "2026-03-21 15:24:15 UTC", "sightings": 1 }, { "indicator": "http://219.157.66.185:43377/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-21 15:22:07 UTC", "last_seen": "2026-03-21 15:22:07 UTC", "sightings": 1 }, { "indicator": "http://117.195.116.247:51333/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 15:15:23 UTC", "last_seen": "2026-03-21 15:15:23 UTC", "sightings": 1 }, { "indicator": "http://110.36.15.42:42859/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 15:15:20 UTC", "last_seen": "2026-03-21 15:15:20 UTC", "sightings": 1 }, { "indicator": "http://110.36.80.163:60166/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 15:14:25 UTC", "last_seen": "2026-03-21 15:14:25 UTC", "sightings": 1 }, { "indicator": "https://9uhve7s.deepglom.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 15:12:07 UTC", "last_seen": "2026-03-21 15:12:07 UTC", "sightings": 1 }, { "indicator": "http://119.184.48.189:38418/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-21 15:12:05 UTC", "last_seen": "2026-03-21 15:12:05 UTC", "sightings": 1 }, { "indicator": "https://silenparser.deepglom.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 15:05:10 UTC", "last_seen": "2026-03-21 15:05:10 UTC", "sightings": 1 }, { "indicator": "https://sxiy.deepglom.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 15:01:05 UTC", "last_seen": "2026-03-21 15:01:05 UTC", "sightings": 1 }, { "indicator": "http://110.36.30.37:55687/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 14:58:22 UTC", "last_seen": "2026-03-21 14:58:22 UTC", "sightings": 1 }, { "indicator": "http://115.55.81.35:56490/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-21 14:57:06 UTC", "last_seen": "2026-03-21 14:57:06 UTC", "sightings": 1 }, { "indicator": "http://59.95.92.221:46078/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-21 14:57:04 UTC", "last_seen": "2026-03-21 14:57:04 UTC", "sightings": 1 }, { "indicator": "http://27.194.147.68:52548/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 14:53:17 UTC", "last_seen": "2026-03-21 14:53:17 UTC", "sightings": 1 }, { "indicator": "http://117.209.91.228:52941/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-21 14:52:11 UTC", "last_seen": "2026-03-21 14:52:11 UTC", "sightings": 1 }, { "indicator": "http://110.36.77.34:57074/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-21 14:52:06 UTC", "last_seen": "2026-03-21 14:52:06 UTC", "sightings": 1 }, { "indicator": "http://110.38.199.36:57598/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 14:51:20 UTC", "last_seen": "2026-03-21 14:51:20 UTC", "sightings": 1 }, { "indicator": "https://formaass.sleepbut.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 14:49:07 UTC", "last_seen": "2026-03-21 14:49:07 UTC", "sightings": 1 }, { "indicator": "http://119.184.48.189:38418/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-21 14:47:08 UTC", "last_seen": "2026-03-21 14:47:08 UTC", "sightings": 1 }, { "indicator": "http://59.95.92.221:46078/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-21 14:42:07 UTC", "last_seen": "2026-03-21 14:42:07 UTC", "sightings": 1 }, { "indicator": "https://str3-scope.sleepbut.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 14:42:07 UTC", "last_seen": "2026-03-21 14:42:07 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/overcovde/overcovde.github.io/refs/heads/main/hypnologist/github_io_overcovde_1.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-21 14:42:06 UTC", "last_seen": "2026-03-21 14:42:06 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/overcovde/cloud-code/refs/heads/master/.vscode/cloud_code_1.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-21 14:41:10 UTC", "last_seen": "2026-03-21 14:41:10 UTC", "sightings": 1 }, { "indicator": "https://github.com/overcovde/cloud-code/raw/refs/heads/master/.vscode/code-cloud-v1.4-alpha.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-21 14:41:08 UTC", "last_seen": "2026-03-21 14:41:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/overcovde/cloud-code/raw/refs/heads/master/.vscode/cloud_code_1.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-21 14:41:08 UTC", "last_seen": "2026-03-21 14:41:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/overcovde/all-working-quest-mods/refs/heads/main/keelboatman/working-quest-all-mods-v1.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-21 14:41:07 UTC", "last_seen": "2026-03-21 14:41:07 UTC", "sightings": 1 }, { "indicator": "https://github.com/overcovde/all-working-quest-mods/raw/refs/heads/main/keelboatman/working-quest-all-mods-v1.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-21 14:41:06 UTC", "last_seen": "2026-03-21 14:41:06 UTC", "sightings": 1 }, { "indicator": "https://github.com/overcovde/overcovde.github.io/raw/refs/heads/main/hypnologist/github_io_overcovde_1.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-21 14:41:06 UTC", "last_seen": "2026-03-21 14:41:06 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/overcovde/cloud-code/refs/heads/master/.vscode/code-cloud-v1.4-alpha.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-21 14:41:05 UTC", "last_seen": "2026-03-21 14:41:05 UTC", "sightings": 1 }, { "indicator": "http://110.36.30.37:55687/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 14:38:22 UTC", "last_seen": "2026-03-21 14:38:22 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/aofkachi/react-native-template-app/refs/heads/main/android/app/src/main/res/native-react-app-template-1.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-21 14:38:08 UTC", "last_seen": "2026-03-21 14:38:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/aofkachi/aofkachi.github.io/refs/heads/main/laryngemphraxis/github_io_aofkachi_v2.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-21 14:38:07 UTC", "last_seen": "2026-03-21 14:38:07 UTC", "sightings": 1 }, { "indicator": "https://github.com/aofkachi/aofkachi.github.io/raw/refs/heads/main/laryngemphraxis/github_io_aofkachi_v2.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-21 14:38:06 UTC", "last_seen": "2026-03-21 14:38:06 UTC", "sightings": 1 }, { "indicator": "https://github.com/aofkachi/react-native-template-app/raw/refs/heads/main/android/app/src/main/res/native-react-app-template-1.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-21 14:38:06 UTC", "last_seen": "2026-03-21 14:38:06 UTC", "sightings": 1 }, { "indicator": "http://110.37.11.215:40149/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-21 14:37:06 UTC", "last_seen": "2026-03-21 14:37:06 UTC", "sightings": 1 }, { "indicator": "https://quorcoreet.sleepbut.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 14:36:07 UTC", "last_seen": "2026-03-21 14:36:07 UTC", "sightings": 1 }, { "indicator": "http://27.194.147.68:52548/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 14:33:18 UTC", "last_seen": "2026-03-21 14:33:18 UTC", "sightings": 1 }, { "indicator": "http://113.12.255.0:58626/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-21 14:32:08 UTC", "last_seen": "2026-03-21 14:32:08 UTC", "sightings": 1 }, { "indicator": "https://riv3r-sheet.sleepbut.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 14:29:06 UTC", "last_seen": "2026-03-21 14:29:06 UTC", "sightings": 1 }, { "indicator": "http://110.36.77.34:57074/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-21 14:27:08 UTC", "last_seen": "2026-03-21 14:27:08 UTC", "sightings": 1 }, { "indicator": "https://labquick.hugeflow.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 14:23:14 UTC", "last_seen": "2026-03-21 14:23:14 UTC", "sightings": 1 }, { "indicator": "http://110.37.116.127:38623/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-21 14:19:19 UTC", "last_seen": "2026-03-21 14:19:19 UTC", "sightings": 1 }, { "indicator": "http://59.88.14.84:36428/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 14:13:15 UTC", "last_seen": "2026-03-21 14:13:15 UTC", "sightings": 1 }, { "indicator": "https://horbusten.com/2jYoFsuhVe.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-03-21 14:11:05 UTC", "last_seen": "2026-03-21 14:11:05 UTC", "sightings": 1 }, { "indicator": "http://125.47.91.145:50712/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 14:08:11 UTC", "last_seen": "2026-03-21 14:08:11 UTC", "sightings": 1 }, { "indicator": "http://113.12.255.0:58626/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-21 14:07:07 UTC", "last_seen": "2026-03-21 14:07:07 UTC", "sightings": 1 }, { "indicator": "http://110.37.116.127:38623/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-21 14:00:15 UTC", "last_seen": "2026-03-21 14:00:15 UTC", "sightings": 1 }, { "indicator": "http://113.221.76.94:59470/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-21 13:51:12 UTC", "last_seen": "2026-03-21 13:51:12 UTC", "sightings": 1 }, { "indicator": "http://117.209.91.17:39399/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 13:49:13 UTC", "last_seen": "2026-03-21 13:49:13 UTC", "sightings": 1 }, { "indicator": "http://59.88.14.84:36428/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 13:48:16 UTC", "last_seen": "2026-03-21 13:48:16 UTC", "sightings": 1 }, { "indicator": "http://125.47.91.145:50712/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 13:45:25 UTC", "last_seen": "2026-03-21 13:45:25 UTC", "sightings": 1 }, { "indicator": "http://36.158.74.30:34451/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-21 13:42:16 UTC", "last_seen": "2026-03-21 13:42:16 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.7/files/8531638373/QWFfVk7.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543", "Vidar" ], "first_seen": "2026-03-21 13:42:07 UTC", "last_seen": "2026-03-21 13:42:07 UTC", "sightings": 1 }, { "indicator": "http://115.56.154.230:36356/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 13:35:17 UTC", "last_seen": "2026-03-21 13:35:17 UTC", "sightings": 1 }, { "indicator": "http://42.235.52.140:57679/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 13:33:16 UTC", "last_seen": "2026-03-21 13:33:16 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.7/files/1781548144/JKon0XP.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543", "xworm" ], "first_seen": "2026-03-21 13:32:07 UTC", "last_seen": "2026-03-21 13:32:07 UTC", "sightings": 1 }, { "indicator": "http://117.209.91.17:39399/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 13:31:18 UTC", "last_seen": "2026-03-21 13:31:18 UTC", "sightings": 1 }, { "indicator": "http://110.37.36.89:53263/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-21 13:23:20 UTC", "last_seen": "2026-03-21 13:23:20 UTC", "sightings": 1 }, { "indicator": "http://36.158.74.30:34451/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-21 13:18:12 UTC", "last_seen": "2026-03-21 13:18:12 UTC", "sightings": 1 }, { "indicator": "https://mingloria.com/6xbiXvE9b8.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-21 13:18:06 UTC", "last_seen": "2026-03-21 13:18:06 UTC", "sightings": 1 }, { "indicator": "https://p2pdany.com/80fXtpKVFi.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-21 13:17:05 UTC", "last_seen": "2026-03-21 13:17:05 UTC", "sightings": 1 }, { "indicator": "http://113.221.76.94:59470/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-21 13:16:15 UTC", "last_seen": "2026-03-21 13:16:15 UTC", "sightings": 1 }, { "indicator": "https://677jb7co.goldsys.digital/?=check&&actmn=KhQyOtBACJsezVQW", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-21 13:15:08 UTC", "last_seen": "2026-03-21 13:15:08 UTC", "sightings": 1 }, { "indicator": "http://58.255.42.57:36801/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 13:12:18 UTC", "last_seen": "2026-03-21 13:12:18 UTC", "sightings": 1 }, { "indicator": "http://115.56.154.230:36356/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 13:10:23 UTC", "last_seen": "2026-03-21 13:10:23 UTC", "sightings": 1 }, { "indicator": "http://115.53.223.191:33247/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-21 13:07:06 UTC", "last_seen": "2026-03-21 13:07:06 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.7/files/8531638373/ELPdXJY.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543", "Stealc" ], "first_seen": "2026-03-21 12:58:07 UTC", "last_seen": "2026-03-21 12:58:07 UTC", "sightings": 1 }, { "indicator": "http://110.37.36.89:53263/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-21 12:57:19 UTC", "last_seen": "2026-03-21 12:57:19 UTC", "sightings": 1 }, { "indicator": "http://60.19.11.29:54382/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-21 12:57:08 UTC", "last_seen": "2026-03-21 12:57:08 UTC", "sightings": 1 }, { "indicator": "http://180.190.186.97:54679/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-21 12:57:06 UTC", "last_seen": "2026-03-21 12:57:06 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.7/files/8520831842/YKvV4YH.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-03-21 12:56:08 UTC", "last_seen": "2026-03-21 12:56:08 UTC", "sightings": 1 }, { "indicator": "http://110.37.59.113:50050/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 12:52:14 UTC", "last_seen": "2026-03-21 12:52:14 UTC", "sightings": 1 }, { "indicator": "http://123.188.65.34:38168/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 12:37:29 UTC", "last_seen": "2026-03-21 12:37:29 UTC", "sightings": 1 }, { "indicator": "http://115.53.245.106:40160/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 12:30:11 UTC", "last_seen": "2026-03-21 12:30:11 UTC", "sightings": 1 }, { "indicator": "http://110.37.59.113:50050/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 12:24:11 UTC", "last_seen": "2026-03-21 12:24:11 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Gaelonchas/gaelonchas.github.io/refs/heads/main/holdable/gaelonchas-github-io-v1.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-21 12:24:09 UTC", "last_seen": "2026-03-21 12:24:09 UTC", "sightings": 1 }, { "indicator": "https://github.com/Gaelonchas/producthunt-skills/raw/refs/heads/main/skills/analytics/ph-analytics-setup/skills_producthunt_v1.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-21 12:24:09 UTC", "last_seen": "2026-03-21 12:24:09 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Gaelonchas/producthunt-skills/refs/heads/main/skills/analytics/ph-analytics-setup/skills_producthunt_v1.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-21 12:24:09 UTC", "last_seen": "2026-03-21 12:24:09 UTC", "sightings": 1 }, { "indicator": "https://github.com/Gaelonchas/gaelonchas.github.io/raw/refs/heads/main/holdable/gaelonchas-github-io-v1.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-21 12:24:08 UTC", "last_seen": "2026-03-21 12:24:08 UTC", "sightings": 1 }, { "indicator": "http://115.53.245.106:40160/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 12:22:11 UTC", "last_seen": "2026-03-21 12:22:11 UTC", "sightings": 1 }, { "indicator": "https://github.com/Benbi123/benbi123.github.io/raw/refs/heads/main/obeisantly/benbi-github-io-Mesosauria.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-21 12:19:11 UTC", "last_seen": "2026-03-21 12:19:11 UTC", "sightings": 1 }, { "indicator": "https://github.com/rickyrakasiwi/rickyrakasiwi.github.io/raw/refs/heads/main/dispersity/github_io_rickyrakasiwi_v2.4-alpha.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-21 12:19:10 UTC", "last_seen": "2026-03-21 12:19:10 UTC", "sightings": 1 }, { "indicator": "https://github.com/rickyrakasiwi/bazzite-deck-plasma-mobile/raw/refs/heads/main/recipes/plasma_mobile_deck_bazzite_v1.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-21 12:19:08 UTC", "last_seen": "2026-03-21 12:19:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/Benbi123/dev-dotfiles/raw/refs/heads/main/src/pages/dotfiles_dev_v1.5-alpha.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-21 12:19:07 UTC", "last_seen": "2026-03-21 12:19:07 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Benbi123/benbi123.github.io/refs/heads/main/obeisantly/benbi-github-io-Mesosauria.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-21 12:19:07 UTC", "last_seen": "2026-03-21 12:19:07 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Benbi123/dev-dotfiles/refs/heads/main/src/pages/dotfiles_dev_v1.5-alpha.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-21 12:19:07 UTC", "last_seen": "2026-03-21 12:19:07 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/rickyrakasiwi/bazzite-deck-plasma-mobile/refs/heads/main/recipes/plasma_mobile_deck_bazzite_v1.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-21 12:19:07 UTC", "last_seen": "2026-03-21 12:19:07 UTC", "sightings": 1 }, { "indicator": "https://github.com/Benbi123/benbi123.github.io/raw/refs/heads/main/obeisantly/github-benbi-io-v3.1-beta.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-21 12:19:07 UTC", "last_seen": "2026-03-21 12:19:07 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Benbi123/benbi123.github.io/refs/heads/main/obeisantly/github-benbi-io-v3.1-beta.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-21 12:19:07 UTC", "last_seen": "2026-03-21 12:19:07 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/rickyrakasiwi/rickyrakasiwi.github.io/refs/heads/main/dispersity/github_io_rickyrakasiwi_v2.4-alpha.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-21 12:19:07 UTC", "last_seen": "2026-03-21 12:19:07 UTC", "sightings": 1 }, { "indicator": "http://110.37.19.215:34107/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-21 12:17:06 UTC", "last_seen": "2026-03-21 12:17:06 UTC", "sightings": 1 }, { "indicator": "http://110.36.70.112:44694/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 12:15:14 UTC", "last_seen": "2026-03-21 12:15:14 UTC", "sightings": 1 }, { "indicator": "http://110.36.27.124:48380/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 11:59:19 UTC", "last_seen": "2026-03-21 11:59:19 UTC", "sightings": 1 }, { "indicator": "http://42.231.91.127:55448/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 11:57:18 UTC", "last_seen": "2026-03-21 11:57:18 UTC", "sightings": 1 }, { "indicator": "http://110.37.19.215:34107/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-21 11:57:07 UTC", "last_seen": "2026-03-21 11:57:07 UTC", "sightings": 1 }, { "indicator": "http://42.85.48.108:45098/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-21 11:52:07 UTC", "last_seen": "2026-03-21 11:52:07 UTC", "sightings": 1 }, { "indicator": "https://forgeledg.clocknet.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 11:51:07 UTC", "last_seen": "2026-03-21 11:51:07 UTC", "sightings": 1 }, { "indicator": "https://compr-hinge.getverif.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 11:44:06 UTC", "last_seen": "2026-03-21 11:44:06 UTC", "sightings": 1 }, { "indicator": "http://117.209.85.61:44889/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 11:40:21 UTC", "last_seen": "2026-03-21 11:40:21 UTC", "sightings": 1 }, { "indicator": "http://42.231.91.127:55448/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 11:40:21 UTC", "last_seen": "2026-03-21 11:40:21 UTC", "sightings": 1 }, { "indicator": "https://unl25bit.getverif.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 11:39:09 UTC", "last_seen": "2026-03-21 11:39:09 UTC", "sightings": 1 }, { "indicator": "http://123.245.98.152:45905/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-21 11:36:25 UTC", "last_seen": "2026-03-21 11:36:25 UTC", "sightings": 1 }, { "indicator": "https://kelvenum.getverif.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 11:32:07 UTC", "last_seen": "2026-03-21 11:32:07 UTC", "sightings": 1 }, { "indicator": "http://124.94.205.151:53859/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 11:27:18 UTC", "last_seen": "2026-03-21 11:27:18 UTC", "sightings": 1 }, { "indicator": "http://110.36.27.124:48380/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 11:27:17 UTC", "last_seen": "2026-03-21 11:27:17 UTC", "sightings": 1 }, { "indicator": "http://125.41.224.112:39115/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 11:26:21 UTC", "last_seen": "2026-03-21 11:26:21 UTC", "sightings": 1 }, { "indicator": "https://runwa1-path.getverif.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 11:26:05 UTC", "last_seen": "2026-03-21 11:26:05 UTC", "sightings": 1 }, { "indicator": "http://110.36.70.112:44694/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 11:24:19 UTC", "last_seen": "2026-03-21 11:24:19 UTC", "sightings": 1 }, { "indicator": "https://shad-wave.temprock.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 11:19:06 UTC", "last_seen": "2026-03-21 11:19:06 UTC", "sightings": 1 }, { "indicator": "http://123.245.98.152:45905/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-21 11:18:13 UTC", "last_seen": "2026-03-21 11:18:13 UTC", "sightings": 1 }, { "indicator": "http://59.176.102.170:40067/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-21 11:17:07 UTC", "last_seen": "2026-03-21 11:17:07 UTC", "sightings": 1 }, { "indicator": "https://ijl3voy.temprock.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 11:13:08 UTC", "last_seen": "2026-03-21 11:13:08 UTC", "sightings": 1 }, { "indicator": "http://117.209.84.191:40245/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 11:07:19 UTC", "last_seen": "2026-03-21 11:07:19 UTC", "sightings": 1 }, { "indicator": "https://gwqs23ca.temprock.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 11:05:09 UTC", "last_seen": "2026-03-21 11:05:09 UTC", "sightings": 1 }, { "indicator": "https://xxkvm5.temprock.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 10:59:06 UTC", "last_seen": "2026-03-21 10:59:06 UTC", "sightings": 1 }, { "indicator": "http://222.140.161.250:37416/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 10:58:07 UTC", "last_seen": "2026-03-21 10:58:07 UTC", "sightings": 1 }, { "indicator": "http://42.232.229.198:35585/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-21 10:57:06 UTC", "last_seen": "2026-03-21 10:57:06 UTC", "sightings": 1 }, { "indicator": "http://124.94.205.151:53859/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 10:54:18 UTC", "last_seen": "2026-03-21 10:54:18 UTC", "sightings": 1 }, { "indicator": "https://0ak-plate.fileost.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 10:52:09 UTC", "last_seen": "2026-03-21 10:52:09 UTC", "sightings": 1 }, { "indicator": "https://sbstorage.club/012378DS.VDW", "indicator_type": "url", "source": "URLhaus", "tags": [ "encrypted", "Loda" ], "first_seen": "2026-03-21 10:46:08 UTC", "last_seen": "2026-03-21 10:46:08 UTC", "sightings": 1 }, { "indicator": "https://reportobserve.fileost.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 10:46:06 UTC", "last_seen": "2026-03-21 10:46:06 UTC", "sightings": 1 }, { "indicator": "http://59.176.102.170:40067/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-21 10:42:11 UTC", "last_seen": "2026-03-21 10:42:11 UTC", "sightings": 1 }, { "indicator": "https://p4st-logic.fileost.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 10:40:08 UTC", "last_seen": "2026-03-21 10:40:08 UTC", "sightings": 1 }, { "indicator": "https://qu3ry-glow.fileost.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 10:32:07 UTC", "last_seen": "2026-03-21 10:32:07 UTC", "sightings": 1 }, { "indicator": "http://111.50.70.34:52892/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 10:31:17 UTC", "last_seen": "2026-03-21 10:31:17 UTC", "sightings": 1 }, { "indicator": "http://sbstorage.club/z/abandonedly.vmp.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "Loda" ], "first_seen": "2026-03-21 10:31:09 UTC", "last_seen": "2026-03-21 10:31:09 UTC", "sightings": 1 }, { "indicator": "https://cl1nic3-point.officeco.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 10:26:10 UTC", "last_seen": "2026-03-21 10:26:10 UTC", "sightings": 1 }, { "indicator": "http://110.36.88.237:44893/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 10:25:21 UTC", "last_seen": "2026-03-21 10:25:21 UTC", "sightings": 1 }, { "indicator": "http://111.50.70.34:52892/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 10:24:21 UTC", "last_seen": "2026-03-21 10:24:21 UTC", "sightings": 1 }, { "indicator": "http://222.140.161.250:37416/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 10:23:17 UTC", "last_seen": "2026-03-21 10:23:17 UTC", "sightings": 1 }, { "indicator": "https://quickstep.fluxobase.info/culpableheadache", "indicator_type": "url", "source": "URLhaus", "tags": [ "ascii", "dropped-by-ACRStealer" ], "first_seen": "2026-03-21 10:21:06 UTC", "last_seen": "2026-03-21 10:21:06 UTC", "sightings": 1 }, { "indicator": "http://117.209.84.191:40245/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 10:19:14 UTC", "last_seen": "2026-03-21 10:19:14 UTC", "sightings": 1 }, { "indicator": "http://59.91.246.6:55087/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 10:19:14 UTC", "last_seen": "2026-03-21 10:19:14 UTC", "sightings": 1 }, { "indicator": "https://repost.punto-viva.info/firewall_policy.conf", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-ACRStealer", "NetSupport", "rat", "zip" ], "first_seen": "2026-03-21 10:19:06 UTC", "last_seen": "2026-03-21 10:19:06 UTC", "sightings": 1 }, { "indicator": "https://layer-graph.officeco.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 10:18:06 UTC", "last_seen": "2026-03-21 10:18:06 UTC", "sightings": 1 }, { "indicator": "http://42.232.229.198:35585/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-21 10:17:07 UTC", "last_seen": "2026-03-21 10:17:07 UTC", "sightings": 1 }, { "indicator": "https://ts9qv.officeco.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 10:13:10 UTC", "last_seen": "2026-03-21 10:13:10 UTC", "sightings": 1 }, { "indicator": "http://222.141.82.221:60243/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-21 10:07:07 UTC", "last_seen": "2026-03-21 10:07:07 UTC", "sightings": 1 }, { "indicator": "https://by42.officeco.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 10:07:07 UTC", "last_seen": "2026-03-21 10:07:07 UTC", "sightings": 1 }, { "indicator": "https://trivaleum7.worldcla.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 10:04:06 UTC", "last_seen": "2026-03-21 10:04:06 UTC", "sightings": 1 }, { "indicator": "http://115.58.161.127:49625/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 10:03:22 UTC", "last_seen": "2026-03-21 10:03:22 UTC", "sightings": 1 }, { "indicator": "https://zeftasarim.com/lefter", "indicator_type": "url", "source": "URLhaus", "tags": [ "ascii", "KongTuke", "powershell", "ps1" ], "first_seen": "2026-03-21 10:03:21 UTC", "last_seen": "2026-03-21 10:03:21 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.7/files/8531638373/9Hbhrms.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543", "Stealc" ], "first_seen": "2026-03-21 10:03:07 UTC", "last_seen": "2026-03-21 10:03:07 UTC", "sightings": 1 }, { "indicator": "http://110.36.88.237:44893/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 09:59:23 UTC", "last_seen": "2026-03-21 09:59:23 UTC", "sightings": 1 }, { "indicator": "http://110.37.3.227:56419/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-21 09:57:05 UTC", "last_seen": "2026-03-21 09:57:05 UTC", "sightings": 1 }, { "indicator": "https://www.dropbox.com/scl/fi/yltrmpfsxc2jyxxm84ncc/18c695e53103a5b1.exe?rlkey=110pap7hysyafcov26l8z20lw&st=yhqy3ufv&dl=1", "indicator_type": "url", "source": "URLhaus", "tags": [ "exe", "StealitStealer" ], "first_seen": "2026-03-21 09:57:05 UTC", "last_seen": "2026-03-21 09:57:05 UTC", "sightings": 1 }, { "indicator": "https://discovership.worldcla.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 09:53:08 UTC", "last_seen": "2026-03-21 09:53:08 UTC", "sightings": 1 }, { "indicator": "http://110.37.31.90:55723/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-21 09:50:23 UTC", "last_seen": "2026-03-21 09:50:23 UTC", "sightings": 1 }, { "indicator": "http://5.252.155.246/1", "indicator_type": "url", "source": "URLhaus", "tags": [ "64-bit", "elf", "x86-64" ], "first_seen": "2026-03-21 09:49:20 UTC", "last_seen": "2026-03-21 09:49:20 UTC", "sightings": 1 }, { "indicator": "https://trail1-grid.worldcla.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 09:46:08 UTC", "last_seen": "2026-03-21 09:46:08 UTC", "sightings": 1 }, { "indicator": "http://110.38.198.81:34477/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 09:44:16 UTC", "last_seen": "2026-03-21 09:44:16 UTC", "sightings": 1 }, { "indicator": "http://110.38.198.81:34477/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 09:43:16 UTC", "last_seen": "2026-03-21 09:43:16 UTC", "sightings": 1 }, { "indicator": "http://59.97.182.213:55068/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 09:43:16 UTC", "last_seen": "2026-03-21 09:43:16 UTC", "sightings": 1 }, { "indicator": "http://222.141.82.221:60243/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-21 09:42:08 UTC", "last_seen": "2026-03-21 09:42:08 UTC", "sightings": 1 }, { "indicator": "https://xmr14.worldcla.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 09:39:08 UTC", "last_seen": "2026-03-21 09:39:08 UTC", "sightings": 1 }, { "indicator": "https://gfdrj.bravevro.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 09:32:07 UTC", "last_seen": "2026-03-21 09:32:07 UTC", "sightings": 1 }, { "indicator": "http://27.207.246.1:50277/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-21 09:32:07 UTC", "last_seen": "2026-03-21 09:32:07 UTC", "sightings": 1 }, { "indicator": "http://115.58.161.127:49625/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 09:28:21 UTC", "last_seen": "2026-03-21 09:28:21 UTC", "sightings": 1 }, { "indicator": "https://firmwarevale.bravevro.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 09:26:10 UTC", "last_seen": "2026-03-21 09:26:10 UTC", "sightings": 1 }, { "indicator": "http://117.235.110.135:57372/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 09:22:27 UTC", "last_seen": "2026-03-21 09:22:27 UTC", "sightings": 1 }, { "indicator": "http://110.37.31.90:55723/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-21 09:20:23 UTC", "last_seen": "2026-03-21 09:20:23 UTC", "sightings": 1 }, { "indicator": "https://zen-lineis.bravevro.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 09:20:09 UTC", "last_seen": "2026-03-21 09:20:09 UTC", "sightings": 1 }, { "indicator": "http://59.97.182.213:55068/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 09:16:15 UTC", "last_seen": "2026-03-21 09:16:15 UTC", "sightings": 1 }, { "indicator": "https://convertdri.bravevro.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 09:12:08 UTC", "last_seen": "2026-03-21 09:12:08 UTC", "sightings": 1 }, { "indicator": "https://sollithal.respecti.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 09:06:07 UTC", "last_seen": "2026-03-21 09:06:07 UTC", "sightings": 1 }, { "indicator": "http://113.221.57.113:52552/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-21 09:05:32 UTC", "last_seen": "2026-03-21 09:05:32 UTC", "sightings": 1 }, { "indicator": "http://27.207.246.1:50277/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-21 09:02:06 UTC", "last_seen": "2026-03-21 09:02:06 UTC", "sightings": 1 }, { "indicator": "http://61.53.86.0:46923/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 09:00:22 UTC", "last_seen": "2026-03-21 09:00:22 UTC", "sightings": 1 }, { "indicator": "https://secureswift.respecti.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 09:00:10 UTC", "last_seen": "2026-03-21 09:00:10 UTC", "sightings": 1 }, { "indicator": "http://110.36.73.21:54529/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-21 08:57:07 UTC", "last_seen": "2026-03-21 08:57:07 UTC", "sightings": 1 }, { "indicator": "http://115.55.251.41:56710/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-21 08:57:06 UTC", "last_seen": "2026-03-21 08:57:06 UTC", "sightings": 1 }, { "indicator": "http://222.127.63.144:59050/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-21 08:52:27 UTC", "last_seen": "2026-03-21 08:52:27 UTC", "sightings": 1 }, { "indicator": "https://umhbryzn.respecti.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 08:52:07 UTC", "last_seen": "2026-03-21 08:52:07 UTC", "sightings": 1 }, { "indicator": "http://61.53.86.0:46923/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 08:50:29 UTC", "last_seen": "2026-03-21 08:50:29 UTC", "sightings": 1 }, { "indicator": "http://110.36.89.45:43153/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-21 08:50:29 UTC", "last_seen": "2026-03-21 08:50:29 UTC", "sightings": 1 }, { "indicator": "https://needlegene.respecti.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 08:50:15 UTC", "last_seen": "2026-03-21 08:50:15 UTC", "sightings": 1 }, { "indicator": "http://115.55.251.41:56710/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-21 08:50:11 UTC", "last_seen": "2026-03-21 08:50:11 UTC", "sightings": 1 }, { "indicator": "https://thairefaruq.com/surionimyeaqa.zip", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-21 08:50:11 UTC", "last_seen": "2026-03-21 08:50:11 UTC", "sightings": 1 }, { "indicator": "https://cpz2.way2dot.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 08:50:10 UTC", "last_seen": "2026-03-21 08:50:10 UTC", "sightings": 1 }, { "indicator": "http://88.214.20.143/sshbins.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-21 08:35:30 UTC", "last_seen": "2026-03-21 08:35:30 UTC", "sightings": 1 }, { "indicator": "https://unwitting.fluxobase.info/avoidsynthetic", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-21 08:35:28 UTC", "last_seen": "2026-03-21 08:35:28 UTC", "sightings": 1 }, { "indicator": "https://orbit2steel.terminalvariable.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-21 08:35:28 UTC", "last_seen": "2026-03-21 08:35:28 UTC", "sightings": 1 }, { "indicator": "http://opticsval.withregw.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-21 08:35:27 UTC", "last_seen": "2026-03-21 08:35:27 UTC", "sightings": 1 }, { "indicator": "http://normarkal9.gothrough.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-21 08:35:27 UTC", "last_seen": "2026-03-21 08:35:27 UTC", "sightings": 1 }, { "indicator": "http://trilineix.doabove.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-21 08:35:27 UTC", "last_seen": "2026-03-21 08:35:27 UTC", "sightings": 1 }, { "indicator": "http://iwug.gothrough.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-21 08:35:27 UTC", "last_seen": "2026-03-21 08:35:27 UTC", "sightings": 1 }, { "indicator": "http://delivergolden.gothrough.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-21 08:35:26 UTC", "last_seen": "2026-03-21 08:35:26 UTC", "sightings": 1 }, { "indicator": "http://frozenlayout.currvers.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-21 08:35:26 UTC", "last_seen": "2026-03-21 08:35:26 UTC", "sightings": 1 }, { "indicator": "http://kel-nexis.currvers.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-21 08:35:26 UTC", "last_seen": "2026-03-21 08:35:26 UTC", "sightings": 1 }, { "indicator": "http://fsrwr05.dombove.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-21 08:35:26 UTC", "last_seen": "2026-03-21 08:35:26 UTC", "sightings": 1 }, { "indicator": "http://110.36.18.167:41452/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 08:35:26 UTC", "last_seen": "2026-03-21 08:35:26 UTC", "sightings": 1 }, { "indicator": "http://arktideix1.dombove.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-21 08:35:26 UTC", "last_seen": "2026-03-21 08:35:26 UTC", "sightings": 1 }, { "indicator": "http://file-herunterladen.site/1.php?s=E09129DF-23E3-416A-82E8-F1D276733DDC", "indicator_type": "url", "source": "URLhaus", "tags": [ "boxter", "ClickFix" ], "first_seen": "2026-03-21 08:35:25 UTC", "last_seen": "2026-03-21 08:35:25 UTC", "sightings": 1 }, { "indicator": "http://streamnoble.gothrough.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-21 08:35:25 UTC", "last_seen": "2026-03-21 08:35:25 UTC", "sightings": 1 }, { "indicator": "https://orbit3core.terminalvariable.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-21 08:35:25 UTC", "last_seen": "2026-03-21 08:35:25 UTC", "sightings": 1 }, { "indicator": "http://dusdyna.dombove.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-21 08:35:25 UTC", "last_seen": "2026-03-21 08:35:25 UTC", "sightings": 1 }, { "indicator": "http://reef-dat.doabove.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-21 08:35:24 UTC", "last_seen": "2026-03-21 08:35:24 UTC", "sightings": 1 }, { "indicator": "http://ndakntj.currvers.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-21 08:35:24 UTC", "last_seen": "2026-03-21 08:35:24 UTC", "sightings": 1 }, { "indicator": "http://proto-h4ul.withregw.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-21 08:35:22 UTC", "last_seen": "2026-03-21 08:35:22 UTC", "sightings": 1 }, { "indicator": "https://main1infra.metrichandler.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-21 08:35:22 UTC", "last_seen": "2026-03-21 08:35:22 UTC", "sightings": 1 }, { "indicator": "http://neo-rnount.withregw.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-21 08:35:22 UTC", "last_seen": "2026-03-21 08:35:22 UTC", "sightings": 1 }, { "indicator": "https://main3data.metrichandler.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-21 08:35:21 UTC", "last_seen": "2026-03-21 08:35:21 UTC", "sightings": 1 }, { "indicator": "http://visualfier.dombove.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-21 08:35:21 UTC", "last_seen": "2026-03-21 08:35:21 UTC", "sightings": 1 }, { "indicator": "https://orbit4sat.terminalvariable.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-21 08:35:20 UTC", "last_seen": "2026-03-21 08:35:20 UTC", "sightings": 1 }, { "indicator": "http://rav3n-span.gothrough.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-21 08:35:20 UTC", "last_seen": "2026-03-21 08:35:20 UTC", "sightings": 1 }, { "indicator": "http://ravenreview.currvers.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-21 08:35:19 UTC", "last_seen": "2026-03-21 08:35:19 UTC", "sightings": 1 }, { "indicator": "https://main4point.metrichandler.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-21 08:35:19 UTC", "last_seen": "2026-03-21 08:35:19 UTC", "sightings": 1 }, { "indicator": "http://mercoreet5.doabove.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-21 08:35:19 UTC", "last_seen": "2026-03-21 08:35:19 UTC", "sightings": 1 }, { "indicator": "https://main2proxy.metrichandler.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-21 08:35:19 UTC", "last_seen": "2026-03-21 08:35:19 UTC", "sightings": 1 }, { "indicator": "http://harvestedit.doabove.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-21 08:35:18 UTC", "last_seen": "2026-03-21 08:35:18 UTC", "sightings": 1 }, { "indicator": "http://anch0-bridge.withregw.in.net/verification.google/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-21 08:35:18 UTC", "last_seen": "2026-03-21 08:35:18 UTC", "sightings": 1 }, { "indicator": "http://174.138.43.79/cat.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "script" ], "first_seen": "2026-03-21 08:35:16 UTC", "last_seen": "2026-03-21 08:35:16 UTC", "sightings": 1 }, { "indicator": "http://110.37.52.120:59254/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-21 08:35:06 UTC", "last_seen": "2026-03-21 08:35:06 UTC", "sightings": 1 }, { "indicator": "https://gr4n-spool.way2dot.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 08:33:09 UTC", "last_seen": "2026-03-21 08:33:09 UTC", "sightings": 1 }, { "indicator": "http://175.150.114.213:53561/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-21 08:32:10 UTC", "last_seen": "2026-03-21 08:32:10 UTC", "sightings": 1 }, { "indicator": "http://118.232.137.101:46747/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-21 08:30:19 UTC", "last_seen": "2026-03-21 08:30:19 UTC", "sightings": 1 }, { "indicator": "http://36.92.154.218:34909/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-21 08:29:12 UTC", "last_seen": "2026-03-21 08:29:12 UTC", "sightings": 1 }, { "indicator": "https://f1am3-sheet.way2dot.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 08:26:06 UTC", "last_seen": "2026-03-21 08:26:06 UTC", "sightings": 1 }, { "indicator": "http://110.36.89.45:43153/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-21 08:22:17 UTC", "last_seen": "2026-03-21 08:22:17 UTC", "sightings": 1 }, { "indicator": "https://xpj5ocpo.way2dot.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 08:21:07 UTC", "last_seen": "2026-03-21 08:21:07 UTC", "sightings": 1 }, { "indicator": "http://42.7.126.126:57736/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 08:19:17 UTC", "last_seen": "2026-03-21 08:19:17 UTC", "sightings": 1 }, { "indicator": "http://110.36.18.167:41452/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 08:14:14 UTC", "last_seen": "2026-03-21 08:14:14 UTC", "sightings": 1 }, { "indicator": "https://laneserv.protdast.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 08:13:06 UTC", "last_seen": "2026-03-21 08:13:06 UTC", "sightings": 1 }, { "indicator": "http://110.37.13.149:51717/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-21 08:12:06 UTC", "last_seen": "2026-03-21 08:12:06 UTC", "sightings": 1 }, { "indicator": "http://182.119.225.143:41420/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 08:07:15 UTC", "last_seen": "2026-03-21 08:07:15 UTC", "sightings": 1 }, { "indicator": "http://175.150.114.213:53561/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-21 08:07:08 UTC", "last_seen": "2026-03-21 08:07:08 UTC", "sightings": 1 }, { "indicator": "http://182.124.64.129:48625/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 08:04:08 UTC", "last_seen": "2026-03-21 08:04:08 UTC", "sightings": 1 }, { "indicator": "https://quot-hidd.protdast.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 08:04:07 UTC", "last_seen": "2026-03-21 08:04:07 UTC", "sightings": 1 }, { "indicator": "https://rela-labe.protdast.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 08:01:07 UTC", "last_seen": "2026-03-21 08:01:07 UTC", "sightings": 1 }, { "indicator": "http://36.92.154.218:34909/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-21 07:59:15 UTC", "last_seen": "2026-03-21 07:59:15 UTC", "sightings": 1 }, { "indicator": "https://freshbuil.protdast.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 07:56:07 UTC", "last_seen": "2026-03-21 07:56:07 UTC", "sightings": 1 }, { "indicator": "http://42.7.126.126:57736/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 07:50:08 UTC", "last_seen": "2026-03-21 07:50:08 UTC", "sightings": 1 }, { "indicator": "https://p01nt.logicflowmanager.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 07:50:07 UTC", "last_seen": "2026-03-21 07:50:07 UTC", "sightings": 1 }, { "indicator": "http://110.37.13.149:51717/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-21 07:47:06 UTC", "last_seen": "2026-03-21 07:47:06 UTC", "sightings": 1 }, { "indicator": "https://proc.networkoptimizer.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 07:46:07 UTC", "last_seen": "2026-03-21 07:46:07 UTC", "sightings": 1 }, { "indicator": "http://117.241.54.121:37529/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-21 07:44:11 UTC", "last_seen": "2026-03-21 07:44:11 UTC", "sightings": 1 }, { "indicator": "http://182.119.225.143:41420/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 07:43:07 UTC", "last_seen": "2026-03-21 07:43:07 UTC", "sightings": 1 }, { "indicator": "https://byte-ster.tatneft.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 07:42:07 UTC", "last_seen": "2026-03-21 07:42:07 UTC", "sightings": 1 }, { "indicator": "https://xgj9.fotestat.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 07:39:07 UTC", "last_seen": "2026-03-21 07:39:07 UTC", "sightings": 1 }, { "indicator": "http://110.36.77.17:46916/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 07:36:12 UTC", "last_seen": "2026-03-21 07:36:12 UTC", "sightings": 1 }, { "indicator": "http://182.124.64.129:48625/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 07:35:18 UTC", "last_seen": "2026-03-21 07:35:18 UTC", "sightings": 1 }, { "indicator": "http://221.0.102.113:54445/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-21 07:27:06 UTC", "last_seen": "2026-03-21 07:27:06 UTC", "sightings": 1 }, { "indicator": "http://42.224.124.46:60213/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 07:26:09 UTC", "last_seen": "2026-03-21 07:26:09 UTC", "sightings": 1 }, { "indicator": "http://117.216.16.123:36010/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-21 07:22:07 UTC", "last_seen": "2026-03-21 07:22:07 UTC", "sightings": 1 }, { "indicator": "http://125.40.44.36:55035/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 07:21:09 UTC", "last_seen": "2026-03-21 07:21:09 UTC", "sightings": 1 }, { "indicator": "http://110.37.39.234:58715/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-21 07:19:19 UTC", "last_seen": "2026-03-21 07:19:19 UTC", "sightings": 1 }, { "indicator": "http://59.92.167.107:47221/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 07:12:18 UTC", "last_seen": "2026-03-21 07:12:18 UTC", "sightings": 1 }, { "indicator": "http://110.36.77.17:46916/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 07:08:16 UTC", "last_seen": "2026-03-21 07:08:16 UTC", "sightings": 1 }, { "indicator": "http://221.0.102.113:54445/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-21 07:07:07 UTC", "last_seen": "2026-03-21 07:07:07 UTC", "sightings": 1 }, { "indicator": "http://125.40.44.36:55035/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 06:59:19 UTC", "last_seen": "2026-03-21 06:59:19 UTC", "sightings": 1 }, { "indicator": "http://110.37.39.234:58715/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-21 06:53:16 UTC", "last_seen": "2026-03-21 06:53:16 UTC", "sightings": 1 }, { "indicator": "http://117.216.16.123:36010/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-21 06:52:07 UTC", "last_seen": "2026-03-21 06:52:07 UTC", "sightings": 1 }, { "indicator": "http://59.176.66.109:40467/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-21 06:47:15 UTC", "last_seen": "2026-03-21 06:47:15 UTC", "sightings": 1 }, { "indicator": "http://59.92.167.107:47221/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 06:46:11 UTC", "last_seen": "2026-03-21 06:46:11 UTC", "sightings": 1 }, { "indicator": "http://175.165.85.206:49456/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-21 06:42:07 UTC", "last_seen": "2026-03-21 06:42:07 UTC", "sightings": 1 }, { "indicator": "http://42.224.124.46:60213/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 06:38:11 UTC", "last_seen": "2026-03-21 06:38:11 UTC", "sightings": 1 }, { "indicator": "http://61.54.253.143:42587/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-21 06:37:06 UTC", "last_seen": "2026-03-21 06:37:06 UTC", "sightings": 1 }, { "indicator": "http://117.209.23.243:59105/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 06:26:16 UTC", "last_seen": "2026-03-21 06:26:16 UTC", "sightings": 1 }, { "indicator": "http://110.37.42.62:37164/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "mirai" ], "first_seen": "2026-03-21 06:24:15 UTC", "last_seen": "2026-03-21 06:24:15 UTC", "sightings": 1 }, { "indicator": "http://117.212.17.77:54608/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 06:20:25 UTC", "last_seen": "2026-03-21 06:20:25 UTC", "sightings": 1 }, { "indicator": "https://uf0t.scrollnft.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 06:14:06 UTC", "last_seen": "2026-03-21 06:14:06 UTC", "sightings": 1 }, { "indicator": "http://61.3.138.83:38165/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-21 06:12:08 UTC", "last_seen": "2026-03-21 06:12:08 UTC", "sightings": 1 }, { "indicator": "http://110.36.72.131:56098/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 06:11:19 UTC", "last_seen": "2026-03-21 06:11:19 UTC", "sightings": 1 }, { "indicator": "https://validat-gri.tatneft.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 06:09:07 UTC", "last_seen": "2026-03-21 06:09:07 UTC", "sightings": 1 }, { "indicator": "http://119.179.237.29:51625/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 06:05:10 UTC", "last_seen": "2026-03-21 06:05:10 UTC", "sightings": 1 }, { "indicator": "http://175.149.95.200:40270/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 06:04:20 UTC", "last_seen": "2026-03-21 06:04:20 UTC", "sightings": 1 }, { "indicator": "http://110.37.42.62:37164/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "mirai" ], "first_seen": "2026-03-21 06:04:19 UTC", "last_seen": "2026-03-21 06:04:19 UTC", "sightings": 1 }, { "indicator": "https://ytp1swow.fotestat.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 06:03:07 UTC", "last_seen": "2026-03-21 06:03:07 UTC", "sightings": 1 }, { "indicator": "http://182.46.19.104:50607/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-21 06:02:23 UTC", "last_seen": "2026-03-21 06:02:23 UTC", "sightings": 1 }, { "indicator": "http://196.189.98.77:57401/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-21 06:02:07 UTC", "last_seen": "2026-03-21 06:02:07 UTC", "sightings": 1 }, { "indicator": "http://117.209.23.243:59105/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 06:00:10 UTC", "last_seen": "2026-03-21 06:00:10 UTC", "sightings": 1 }, { "indicator": "http://110.37.103.213:39852/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-21 06:00:10 UTC", "last_seen": "2026-03-21 06:00:10 UTC", "sightings": 1 }, { "indicator": "https://web3.terminalobserver.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-21 05:57:06 UTC", "last_seen": "2026-03-21 05:57:06 UTC", "sightings": 1 }, { "indicator": "http://162.219.216.183:55240/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 05:55:12 UTC", "last_seen": "2026-03-21 05:55:12 UTC", "sightings": 1 }, { "indicator": "http://110.36.72.131:56098/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 05:53:08 UTC", "last_seen": "2026-03-21 05:53:08 UTC", "sightings": 1 }, { "indicator": "https://our.datacenterstream.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-21 05:51:06 UTC", "last_seen": "2026-03-21 05:51:06 UTC", "sightings": 1 }, { "indicator": "http://61.54.253.143:42587/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-21 05:47:06 UTC", "last_seen": "2026-03-21 05:47:06 UTC", "sightings": 1 }, { "indicator": "http://117.209.18.18:54085/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 05:46:12 UTC", "last_seen": "2026-03-21 05:46:12 UTC", "sightings": 1 }, { "indicator": "http://182.176.116.4:55008/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 05:45:13 UTC", "last_seen": "2026-03-21 05:45:13 UTC", "sightings": 1 }, { "indicator": "http://61.3.138.83:38165/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-21 05:42:07 UTC", "last_seen": "2026-03-21 05:42:07 UTC", "sightings": 1 }, { "indicator": "https://msk4point.datacenterstream.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-21 05:36:09 UTC", "last_seen": "2026-03-21 05:36:09 UTC", "sightings": 1 }, { "indicator": "http://186.123.145.110:35050/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-21 05:32:08 UTC", "last_seen": "2026-03-21 05:32:08 UTC", "sightings": 1 }, { "indicator": "http://117.209.25.13:47351/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-21 05:32:08 UTC", "last_seen": "2026-03-21 05:32:08 UTC", "sightings": 1 }, { "indicator": "http://196.189.98.77:57401/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-21 05:32:07 UTC", "last_seen": "2026-03-21 05:32:07 UTC", "sightings": 1 }, { "indicator": "https://msk3data.datacenterstream.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-21 05:32:07 UTC", "last_seen": "2026-03-21 05:32:07 UTC", "sightings": 1 }, { "indicator": "http://222.140.196.214:50177/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-21 05:27:06 UTC", "last_seen": "2026-03-21 05:27:06 UTC", "sightings": 1 }, { "indicator": "https://msk2proxy.datacenterstream.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-21 05:26:07 UTC", "last_seen": "2026-03-21 05:26:07 UTC", "sightings": 1 }, { "indicator": "http://117.209.18.18:54085/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 05:24:21 UTC", "last_seen": "2026-03-21 05:24:21 UTC", "sightings": 1 }, { "indicator": "http://182.126.212.176:46170/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-21 05:22:06 UTC", "last_seen": "2026-03-21 05:22:06 UTC", "sightings": 1 }, { "indicator": "http://182.176.116.4:55008/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 05:21:23 UTC", "last_seen": "2026-03-21 05:21:23 UTC", "sightings": 1 }, { "indicator": "https://msk1infra.datacenterstream.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-21 05:20:07 UTC", "last_seen": "2026-03-21 05:20:07 UTC", "sightings": 1 }, { "indicator": "http://27.153.152.117:41069/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-21 05:15:18 UTC", "last_seen": "2026-03-21 05:15:18 UTC", "sightings": 1 }, { "indicator": "https://cfg4sat.networkoptimizer.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-21 05:15:09 UTC", "last_seen": "2026-03-21 05:15:09 UTC", "sightings": 1 }, { "indicator": "https://cfg3core.networkoptimizer.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-21 05:09:13 UTC", "last_seen": "2026-03-21 05:09:13 UTC", "sightings": 1 }, { "indicator": "http://186.123.145.110:35050/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-21 05:07:07 UTC", "last_seen": "2026-03-21 05:07:07 UTC", "sightings": 1 }, { "indicator": "https://cfg2steel.networkoptimizer.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-21 05:06:08 UTC", "last_seen": "2026-03-21 05:06:08 UTC", "sightings": 1 }, { "indicator": "http://222.140.196.214:50177/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-21 05:02:08 UTC", "last_seen": "2026-03-21 05:02:08 UTC", "sightings": 1 }, { "indicator": "https://cfg1proc.networkoptimizer.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-21 05:02:06 UTC", "last_seen": "2026-03-21 05:02:06 UTC", "sightings": 1 }, { "indicator": "https://rt4space.terminalobserver.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-21 04:52:07 UTC", "last_seen": "2026-03-21 04:52:07 UTC", "sightings": 1 }, { "indicator": "http://27.153.152.117:41069/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-21 04:49:20 UTC", "last_seen": "2026-03-21 04:49:20 UTC", "sightings": 1 }, { "indicator": "https://rt3field.terminalobserver.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-21 04:49:06 UTC", "last_seen": "2026-03-21 04:49:06 UTC", "sightings": 1 }, { "indicator": "https://rt2outer.terminalobserver.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-21 04:46:06 UTC", "last_seen": "2026-03-21 04:46:06 UTC", "sightings": 1 }, { "indicator": "http://117.209.10.135:52715/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 04:45:10 UTC", "last_seen": "2026-03-21 04:45:10 UTC", "sightings": 1 }, { "indicator": "http://117.216.187.183:43278/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-21 04:42:11 UTC", "last_seen": "2026-03-21 04:42:11 UTC", "sightings": 1 }, { "indicator": "http://117.209.10.135:52715/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 04:39:14 UTC", "last_seen": "2026-03-21 04:39:14 UTC", "sightings": 1 }, { "indicator": "http://162.219.216.183:55240/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 04:38:17 UTC", "last_seen": "2026-03-21 04:38:17 UTC", "sightings": 1 }, { "indicator": "https://rt1proc.terminalobserver.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-21 04:38:06 UTC", "last_seen": "2026-03-21 04:38:06 UTC", "sightings": 1 }, { "indicator": "https://msk4path.gatewayprocessor.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-21 04:34:08 UTC", "last_seen": "2026-03-21 04:34:08 UTC", "sightings": 1 }, { "indicator": "http://182.127.103.71:60901/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 04:33:16 UTC", "last_seen": "2026-03-21 04:33:16 UTC", "sightings": 1 }, { "indicator": "http://196.190.69.149:58315/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-21 04:32:06 UTC", "last_seen": "2026-03-21 04:32:06 UTC", "sightings": 1 }, { "indicator": "http://125.41.137.93:37789/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-21 04:32:06 UTC", "last_seen": "2026-03-21 04:32:06 UTC", "sightings": 1 }, { "indicator": "http://117.209.95.158:50594/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-21 04:27:08 UTC", "last_seen": "2026-03-21 04:27:08 UTC", "sightings": 1 }, { "indicator": "http://182.126.212.176:46170/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-21 04:27:06 UTC", "last_seen": "2026-03-21 04:27:06 UTC", "sightings": 1 }, { "indicator": "http://59.182.67.248:45134/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "mirai" ], "first_seen": "2026-03-21 04:23:19 UTC", "last_seen": "2026-03-21 04:23:19 UTC", "sightings": 1 }, { "indicator": "http://113.225.35.233:46688/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 04:23:18 UTC", "last_seen": "2026-03-21 04:23:18 UTC", "sightings": 1 }, { "indicator": "http://59.182.67.248:45134/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "mirai" ], "first_seen": "2026-03-21 04:17:26 UTC", "last_seen": "2026-03-21 04:17:26 UTC", "sightings": 1 }, { "indicator": "http://182.127.103.71:60901/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 04:17:24 UTC", "last_seen": "2026-03-21 04:17:24 UTC", "sightings": 1 }, { "indicator": "https://msk2point.gatewayprocessor.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-21 04:16:11 UTC", "last_seen": "2026-03-21 04:16:11 UTC", "sightings": 1 }, { "indicator": "http://110.36.23.65:38850/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 04:12:08 UTC", "last_seen": "2026-03-21 04:12:08 UTC", "sightings": 1 }, { "indicator": "https://msk1proc.gatewayprocessor.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-21 04:12:06 UTC", "last_seen": "2026-03-21 04:12:06 UTC", "sightings": 1 }, { "indicator": "http://125.41.137.93:37789/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-21 04:07:07 UTC", "last_seen": "2026-03-21 04:07:07 UTC", "sightings": 1 }, { "indicator": "http://196.190.69.149:58315/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-21 04:07:06 UTC", "last_seen": "2026-03-21 04:07:06 UTC", "sightings": 1 }, { "indicator": "https://cfg4view.interfacehandler.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-21 04:05:07 UTC", "last_seen": "2026-03-21 04:05:07 UTC", "sightings": 1 }, { "indicator": "http://77.45.186.63:42009/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-21 04:02:06 UTC", "last_seen": "2026-03-21 04:02:06 UTC", "sightings": 1 }, { "indicator": "http://110.39.249.68:36462/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 03:59:19 UTC", "last_seen": "2026-03-21 03:59:19 UTC", "sightings": 1 }, { "indicator": "http://110.36.28.45:33188/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 03:54:17 UTC", "last_seen": "2026-03-21 03:54:17 UTC", "sightings": 1 }, { "indicator": "https://cfg2core.interfacehandler.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-21 03:54:06 UTC", "last_seen": "2026-03-21 03:54:06 UTC", "sightings": 1 }, { "indicator": "https://cfg1proc.interfacehandler.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-21 03:49:07 UTC", "last_seen": "2026-03-21 03:49:07 UTC", "sightings": 1 }, { "indicator": "http://110.39.249.68:36462/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 03:48:20 UTC", "last_seen": "2026-03-21 03:48:20 UTC", "sightings": 1 }, { "indicator": "http://221.15.88.42:34819/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 03:48:20 UTC", "last_seen": "2026-03-21 03:48:20 UTC", "sightings": 1 }, { "indicator": "http://176.226.183.136:45041/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-21 03:47:06 UTC", "last_seen": "2026-03-21 03:47:06 UTC", "sightings": 1 }, { "indicator": "https://rt4link.protocolanalyzer.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-21 03:43:06 UTC", "last_seen": "2026-03-21 03:43:06 UTC", "sightings": 1 }, { "indicator": "http://176.226.183.136:45041/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-21 03:42:07 UTC", "last_seen": "2026-03-21 03:42:07 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.7/files/7776573655/sTOae3E.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543", "gcleaner" ], "first_seen": "2026-03-21 03:40:07 UTC", "last_seen": "2026-03-21 03:40:07 UTC", "sightings": 1 }, { "indicator": "http://175.148.44.4:34819/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 03:38:11 UTC", "last_seen": "2026-03-21 03:38:11 UTC", "sightings": 1 }, { "indicator": "http://110.36.28.45:33188/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-21 03:37:06 UTC", "last_seen": "2026-03-21 03:37:06 UTC", "sightings": 1 }, { "indicator": "https://rt3user.protocolanalyzer.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-21 03:37:06 UTC", "last_seen": "2026-03-21 03:37:06 UTC", "sightings": 1 }, { "indicator": "http://219.156.29.237:59059/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-21 03:37:06 UTC", "last_seen": "2026-03-21 03:37:06 UTC", "sightings": 1 }, { "indicator": "https://rt2base.protocolanalyzer.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-21 03:32:08 UTC", "last_seen": "2026-03-21 03:32:08 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.7/files/7556497175/vDnC6Bk.ps1", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-03-21 03:31:06 UTC", "last_seen": "2026-03-21 03:31:06 UTC", "sightings": 1 }, { "indicator": "https://rt1infra.protocolanalyzer.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-21 03:26:07 UTC", "last_seen": "2026-03-21 03:26:07 UTC", "sightings": 1 }, { "indicator": "http://117.223.140.96:53562/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-21 03:22:08 UTC", "last_seen": "2026-03-21 03:22:08 UTC", "sightings": 1 }, { "indicator": "http://36.70.102.2:47908/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-21 03:22:07 UTC", "last_seen": "2026-03-21 03:22:07 UTC", "sightings": 1 }, { "indicator": "https://msk4work.endpointvalidator.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-21 03:21:07 UTC", "last_seen": "2026-03-21 03:21:07 UTC", "sightings": 1 }, { "indicator": "http://123.9.240.76:37354/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 03:17:22 UTC", "last_seen": "2026-03-21 03:17:22 UTC", "sightings": 1 }, { "indicator": "https://msk3local.endpointvalidator.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-21 03:15:08 UTC", "last_seen": "2026-03-21 03:15:08 UTC", "sightings": 1 }, { "indicator": "http://219.156.29.237:59059/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-21 03:12:07 UTC", "last_seen": "2026-03-21 03:12:07 UTC", "sightings": 1 }, { "indicator": "https://msk2power.endpointvalidator.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-21 03:10:07 UTC", "last_seen": "2026-03-21 03:10:07 UTC", "sightings": 1 }, { "indicator": "https://msk1proc.endpointvalidator.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-21 03:03:07 UTC", "last_seen": "2026-03-21 03:03:07 UTC", "sightings": 1 }, { "indicator": "https://cfg4link.resourcebalancer.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-21 02:58:06 UTC", "last_seen": "2026-03-21 02:58:06 UTC", "sightings": 1 }, { "indicator": "http://123.9.240.76:37354/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 02:54:21 UTC", "last_seen": "2026-03-21 02:54:21 UTC", "sightings": 1 }, { "indicator": "https://cfg3dev.resourcebalancer.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-21 02:53:06 UTC", "last_seen": "2026-03-21 02:53:06 UTC", "sightings": 1 }, { "indicator": "http://117.223.140.96:53562/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-21 02:52:10 UTC", "last_seen": "2026-03-21 02:52:10 UTC", "sightings": 1 }, { "indicator": "https://cfg2remote.resourcebalancer.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-21 02:47:07 UTC", "last_seen": "2026-03-21 02:47:07 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.7/files/8717422379/VMa1dJb.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-03-21 02:45:09 UTC", "last_seen": "2026-03-21 02:45:09 UTC", "sightings": 1 }, { "indicator": "http://36.70.102.2:47908/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-21 02:42:11 UTC", "last_seen": "2026-03-21 02:42:11 UTC", "sightings": 1 }, { "indicator": "http://110.36.77.15:34218/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-21 02:42:06 UTC", "last_seen": "2026-03-21 02:42:06 UTC", "sightings": 1 }, { "indicator": "https://cfg1store.resourcebalancer.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-21 02:41:10 UTC", "last_seen": "2026-03-21 02:41:10 UTC", "sightings": 1 }, { "indicator": "http://110.38.192.30:56363/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 02:38:17 UTC", "last_seen": "2026-03-21 02:38:17 UTC", "sightings": 1 }, { "indicator": "http://115.63.201.44:47196/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-21 02:37:07 UTC", "last_seen": "2026-03-21 02:37:07 UTC", "sightings": 1 }, { "indicator": "http://221.203.147.241:39678/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 02:36:25 UTC", "last_seen": "2026-03-21 02:36:25 UTC", "sightings": 1 }, { "indicator": "https://rt4sync.integritychecker.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-21 02:36:05 UTC", "last_seen": "2026-03-21 02:36:05 UTC", "sightings": 1 }, { "indicator": "https://rt3gate.integritychecker.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-21 02:30:10 UTC", "last_seen": "2026-03-21 02:30:10 UTC", "sightings": 1 }, { "indicator": "https://rt2proc.integritychecker.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 02:25:08 UTC", "last_seen": "2026-03-21 02:25:08 UTC", "sightings": 1 }, { "indicator": "http://110.38.192.30:56363/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 02:23:18 UTC", "last_seen": "2026-03-21 02:23:18 UTC", "sightings": 1 }, { "indicator": "https://rt1meta.integritychecker.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 02:19:06 UTC", "last_seen": "2026-03-21 02:19:06 UTC", "sightings": 1 }, { "indicator": "http://221.15.184.233:53468/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-21 02:17:06 UTC", "last_seen": "2026-03-21 02:17:06 UTC", "sightings": 1 }, { "indicator": "https://msk4static.distributedledger.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 02:14:07 UTC", "last_seen": "2026-03-21 02:14:07 UTC", "sightings": 1 }, { "indicator": "http://36.64.184.26:51331/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-21 02:12:07 UTC", "last_seen": "2026-03-21 02:12:07 UTC", "sightings": 1 }, { "indicator": "http://110.38.208.89:43379/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-21 02:12:06 UTC", "last_seen": "2026-03-21 02:12:06 UTC", "sightings": 1 }, { "indicator": "https://msk3edge.distributedledger.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 02:07:07 UTC", "last_seen": "2026-03-21 02:07:07 UTC", "sightings": 1 }, { "indicator": "http://115.63.243.237:49390/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-21 02:07:06 UTC", "last_seen": "2026-03-21 02:07:06 UTC", "sightings": 1 }, { "indicator": "https://msk2data.distributedledger.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 02:03:07 UTC", "last_seen": "2026-03-21 02:03:07 UTC", "sightings": 1 }, { "indicator": "http://221.15.184.233:53468/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-21 01:57:06 UTC", "last_seen": "2026-03-21 01:57:06 UTC", "sightings": 1 }, { "indicator": "https://msk1sync.distributedledger.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 01:53:07 UTC", "last_seen": "2026-03-21 01:53:07 UTC", "sightings": 1 }, { "indicator": "http://115.63.243.237:49390/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-21 01:47:07 UTC", "last_seen": "2026-03-21 01:47:07 UTC", "sightings": 1 }, { "indicator": "http://36.64.184.26:51331/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-21 01:47:06 UTC", "last_seen": "2026-03-21 01:47:06 UTC", "sightings": 1 }, { "indicator": "https://vld4point.logicflowmanager.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 01:33:06 UTC", "last_seen": "2026-03-21 01:33:06 UTC", "sightings": 1 }, { "indicator": "http://117.254.183.28:56025/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-21 01:27:07 UTC", "last_seen": "2026-03-21 01:27:07 UTC", "sightings": 1 }, { "indicator": "https://vld3data.logicflowmanager.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 01:27:05 UTC", "last_seen": "2026-03-21 01:27:05 UTC", "sightings": 1 }, { "indicator": "http://27.215.86.122:35733/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-21 01:22:06 UTC", "last_seen": "2026-03-21 01:22:06 UTC", "sightings": 1 }, { "indicator": "https://vld2proxy.logicflowmanager.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 01:21:07 UTC", "last_seen": "2026-03-21 01:21:07 UTC", "sightings": 1 }, { "indicator": "https://vld1infra.logicflowmanager.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 01:16:08 UTC", "last_seen": "2026-03-21 01:16:08 UTC", "sightings": 1 }, { "indicator": "http://117.241.187.132:42128/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 01:13:13 UTC", "last_seen": "2026-03-21 01:13:13 UTC", "sightings": 1 }, { "indicator": "https://int4sat.systemicvalidator.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 01:10:07 UTC", "last_seen": "2026-03-21 01:10:07 UTC", "sightings": 1 }, { "indicator": "http://117.216.191.141:34399/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-21 01:07:14 UTC", "last_seen": "2026-03-21 01:07:14 UTC", "sightings": 1 }, { "indicator": "http://117.216.191.141:34399/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-21 01:07:12 UTC", "last_seen": "2026-03-21 01:07:12 UTC", "sightings": 1 }, { "indicator": "http://196.191.231.12:38885/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-21 01:07:05 UTC", "last_seen": "2026-03-21 01:07:05 UTC", "sightings": 1 }, { "indicator": "https://int3core.systemicvalidator.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 01:04:07 UTC", "last_seen": "2026-03-21 01:04:07 UTC", "sightings": 1 }, { "indicator": "https://int2steel.systemicvalidator.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 00:59:06 UTC", "last_seen": "2026-03-21 00:59:06 UTC", "sightings": 1 }, { "indicator": "https://int1proc.systemicvalidator.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 00:54:08 UTC", "last_seen": "2026-03-21 00:54:08 UTC", "sightings": 1 }, { "indicator": "http://82.60.49.228:56310/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-21 00:52:14 UTC", "last_seen": "2026-03-21 00:52:14 UTC", "sightings": 1 }, { "indicator": "http://80.67.33.209:58531/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-21 00:48:09 UTC", "last_seen": "2026-03-21 00:48:09 UTC", "sightings": 1 }, { "indicator": "https://ext4space.coreconnectivity.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 00:48:06 UTC", "last_seen": "2026-03-21 00:48:06 UTC", "sightings": 1 }, { "indicator": "http://110.37.106.206:48057/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-21 00:47:07 UTC", "last_seen": "2026-03-21 00:47:07 UTC", "sightings": 1 }, { "indicator": "https://ext3field.coreconnectivity.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 00:42:10 UTC", "last_seen": "2026-03-21 00:42:10 UTC", "sightings": 1 }, { "indicator": "https://ext2outer.coreconnectivity.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 00:36:08 UTC", "last_seen": "2026-03-21 00:36:08 UTC", "sightings": 1 }, { "indicator": "http://117.216.26.133:45183/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-21 00:32:07 UTC", "last_seen": "2026-03-21 00:32:07 UTC", "sightings": 1 }, { "indicator": "https://ext1proc.coreconnectivity.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 00:31:06 UTC", "last_seen": "2026-03-21 00:31:06 UTC", "sightings": 1 }, { "indicator": "https://vld4path.dynamictelemetry.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 00:25:11 UTC", "last_seen": "2026-03-21 00:25:11 UTC", "sightings": 1 }, { "indicator": "http://82.60.49.228:56310/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-21 00:22:22 UTC", "last_seen": "2026-03-21 00:22:22 UTC", "sightings": 1 }, { "indicator": "https://vld3view.dynamictelemetry.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 00:20:07 UTC", "last_seen": "2026-03-21 00:20:07 UTC", "sightings": 1 }, { "indicator": "http://182.127.69.99:43722/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 00:16:09 UTC", "last_seen": "2026-03-21 00:16:09 UTC", "sightings": 1 }, { "indicator": "https://vld2point.dynamictelemetry.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 00:14:07 UTC", "last_seen": "2026-03-21 00:14:07 UTC", "sightings": 1 }, { "indicator": "http://115.59.79.225:42661/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 00:11:10 UTC", "last_seen": "2026-03-21 00:11:10 UTC", "sightings": 1 }, { "indicator": "https://vld1proc.dynamictelemetry.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 00:08:08 UTC", "last_seen": "2026-03-21 00:08:08 UTC", "sightings": 1 }, { "indicator": "http://117.216.26.133:45183/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-21 00:07:08 UTC", "last_seen": "2026-03-21 00:07:08 UTC", "sightings": 1 }, { "indicator": "http://115.63.49.9:44374/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 00:06:17 UTC", "last_seen": "2026-03-21 00:06:17 UTC", "sightings": 1 }, { "indicator": "http://219.154.36.142:37299/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 00:04:16 UTC", "last_seen": "2026-03-21 00:04:16 UTC", "sightings": 1 }, { "indicator": "http://27.37.119.62:56572/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-21 00:04:16 UTC", "last_seen": "2026-03-21 00:04:16 UTC", "sightings": 1 }, { "indicator": "https://int4view.virtualgatekeeper.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-21 00:03:08 UTC", "last_seen": "2026-03-21 00:03:08 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.7/files/8434554557/X8cqVrA.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543", "PureHVNC", "rustystealer" ], "first_seen": "2026-03-20 23:59:06 UTC", "last_seen": "2026-03-20 23:59:06 UTC", "sightings": 1 }, { "indicator": "https://int3ghost.virtualgatekeeper.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-20 23:57:07 UTC", "last_seen": "2026-03-20 23:57:07 UTC", "sightings": 1 }, { "indicator": "http://182.127.69.99:43722/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 23:54:18 UTC", "last_seen": "2026-03-20 23:54:18 UTC", "sightings": 1 }, { "indicator": "http://110.37.67.68:34932/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 23:48:16 UTC", "last_seen": "2026-03-20 23:48:16 UTC", "sightings": 1 }, { "indicator": "https://int1proc.virtualgatekeeper.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-20 23:46:07 UTC", "last_seen": "2026-03-20 23:46:07 UTC", "sightings": 1 }, { "indicator": "http://115.63.49.9:44374/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 23:43:17 UTC", "last_seen": "2026-03-20 23:43:17 UTC", "sightings": 1 }, { "indicator": "http://117.215.48.81:42778/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 23:40:22 UTC", "last_seen": "2026-03-20 23:40:22 UTC", "sightings": 1 }, { "indicator": "https://ext3user.operationalmatrix.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-20 23:34:06 UTC", "last_seen": "2026-03-20 23:34:06 UTC", "sightings": 1 }, { "indicator": "http://123.9.243.62:37787/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 23:30:15 UTC", "last_seen": "2026-03-20 23:30:15 UTC", "sightings": 1 }, { "indicator": "https://ext2base.operationalmatrix.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-20 23:29:06 UTC", "last_seen": "2026-03-20 23:29:06 UTC", "sightings": 1 }, { "indicator": "https://ext1infra.operationalmatrix.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-20 23:24:08 UTC", "last_seen": "2026-03-20 23:24:08 UTC", "sightings": 1 }, { "indicator": "http://110.38.215.152:53334/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-20 23:22:06 UTC", "last_seen": "2026-03-20 23:22:06 UTC", "sightings": 1 }, { "indicator": "https://vld4work.dataintegritynet.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-20 23:20:08 UTC", "last_seen": "2026-03-20 23:20:08 UTC", "sightings": 1 }, { "indicator": "http://117.213.120.224:44258/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 23:19:17 UTC", "last_seen": "2026-03-20 23:19:17 UTC", "sightings": 1 }, { "indicator": "https://vld3local.dataintegritynet.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-20 23:17:06 UTC", "last_seen": "2026-03-20 23:17:06 UTC", "sightings": 1 }, { "indicator": "http://110.38.215.152:53334/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-20 23:12:06 UTC", "last_seen": "2026-03-20 23:12:06 UTC", "sightings": 1 }, { "indicator": "http://123.9.243.62:37787/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 23:09:07 UTC", "last_seen": "2026-03-20 23:09:07 UTC", "sightings": 1 }, { "indicator": "https://vld1proc.dataintegritynet.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-20 23:03:08 UTC", "last_seen": "2026-03-20 23:03:08 UTC", "sightings": 1 }, { "indicator": "https://int4link.securitybackbone.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-20 23:01:06 UTC", "last_seen": "2026-03-20 23:01:06 UTC", "sightings": 1 }, { "indicator": "http://59.183.96.197:51129/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 22:59:22 UTC", "last_seen": "2026-03-20 22:59:22 UTC", "sightings": 1 }, { "indicator": "http://110.37.39.230:50132/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-20 22:58:10 UTC", "last_seen": "2026-03-20 22:58:10 UTC", "sightings": 1 }, { "indicator": "https://int3dev.securitybackbone.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-20 22:51:07 UTC", "last_seen": "2026-03-20 22:51:07 UTC", "sightings": 1 }, { "indicator": "https://int2remote.securitybackbone.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-20 22:45:09 UTC", "last_seen": "2026-03-20 22:45:09 UTC", "sightings": 1 }, { "indicator": "http://117.213.120.224:44258/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 22:43:13 UTC", "last_seen": "2026-03-20 22:43:13 UTC", "sightings": 1 }, { "indicator": "http://117.215.48.81:42778/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 22:42:19 UTC", "last_seen": "2026-03-20 22:42:19 UTC", "sightings": 1 }, { "indicator": "https://int1store.securitybackbone.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-20 22:39:08 UTC", "last_seen": "2026-03-20 22:39:08 UTC", "sightings": 1 }, { "indicator": "http://110.37.39.230:50132/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-20 22:34:09 UTC", "last_seen": "2026-03-20 22:34:09 UTC", "sightings": 1 }, { "indicator": "https://ext4sync.analyticalhubnode.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-20 22:33:06 UTC", "last_seen": "2026-03-20 22:33:06 UTC", "sightings": 1 }, { "indicator": "http://27.215.86.122:35733/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-20 22:32:07 UTC", "last_seen": "2026-03-20 22:32:07 UTC", "sightings": 1 }, { "indicator": "https://ext3gate.analyticalhubnode.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-20 22:28:07 UTC", "last_seen": "2026-03-20 22:28:07 UTC", "sightings": 1 }, { "indicator": "http://42.233.162.221:35569/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 22:25:11 UTC", "last_seen": "2026-03-20 22:25:11 UTC", "sightings": 1 }, { "indicator": "http://42.233.162.221:35569/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 22:24:15 UTC", "last_seen": "2026-03-20 22:24:15 UTC", "sightings": 1 }, { "indicator": "http://125.41.224.97:55095/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 22:18:19 UTC", "last_seen": "2026-03-20 22:18:19 UTC", "sightings": 1 }, { "indicator": "https://ext1meta.analyticalhubnode.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-20 22:17:08 UTC", "last_seen": "2026-03-20 22:17:08 UTC", "sightings": 1 }, { "indicator": "https://vld4static.cyberneticsystems.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-20 22:12:06 UTC", "last_seen": "2026-03-20 22:12:06 UTC", "sightings": 1 }, { "indicator": "http://42.226.67.155:43515/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 22:11:09 UTC", "last_seen": "2026-03-20 22:11:09 UTC", "sightings": 1 }, { "indicator": "https://vld3edge.cyberneticsystems.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-20 22:05:07 UTC", "last_seen": "2026-03-20 22:05:07 UTC", "sightings": 1 }, { "indicator": "https://vld2data.cyberneticsystems.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-20 22:00:09 UTC", "last_seen": "2026-03-20 22:00:09 UTC", "sightings": 1 }, { "indicator": "https://vld1sync.cyberneticsystems.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-20 21:54:07 UTC", "last_seen": "2026-03-20 21:54:07 UTC", "sightings": 1 }, { "indicator": "http://125.41.224.97:55095/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 21:53:23 UTC", "last_seen": "2026-03-20 21:53:23 UTC", "sightings": 1 }, { "indicator": "http://115.48.36.18:55606/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 21:51:16 UTC", "last_seen": "2026-03-20 21:51:16 UTC", "sightings": 1 }, { "indicator": "http://42.226.67.155:43515/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 21:46:25 UTC", "last_seen": "2026-03-20 21:46:25 UTC", "sightings": 1 }, { "indicator": "https://github.com/UmarMoin22/SQL-PowerBI-Projects/raw/refs/heads/main/herbivore/B-Power-SQ-Projects-v1.6.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-20 21:41:14 UTC", "last_seen": "2026-03-20 21:41:14 UTC", "sightings": 1 }, { "indicator": "https://github.com/UmarMoin22/SQL-PowerBI-Projects/raw/refs/heads/main/herbivore/Projects_SQ_Power_B_v3.4.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-20 21:41:14 UTC", "last_seen": "2026-03-20 21:41:14 UTC", "sightings": 1 }, { "indicator": "https://github.com/UmarMoin22/umarmoin22.github.io/raw/refs/heads/main/palpableness/umarmoin_github_io_2.6.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-20 21:41:09 UTC", "last_seen": "2026-03-20 21:41:09 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/UmarMoin22/SQL-PowerBI-Projects/refs/heads/main/herbivore/Projects_SQ_Power_B_v3.4.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-20 21:41:08 UTC", "last_seen": "2026-03-20 21:41:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/UmarMoin22/claude-code-startup-skills/refs/heads/main/skills/compress-images/skills_claude_code_startup_v1.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-20 21:41:07 UTC", "last_seen": "2026-03-20 21:41:07 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/UmarMoin22/umarmoin22.github.io/refs/heads/main/palpableness/io_github_umarmoin_3.0.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-20 21:41:07 UTC", "last_seen": "2026-03-20 21:41:07 UTC", "sightings": 1 }, { "indicator": "https://github.com/UmarMoin22/claude-code-startup-skills/raw/refs/heads/main/skills/compress-images/skills_claude_code_startup_v1.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-20 21:41:07 UTC", "last_seen": "2026-03-20 21:41:07 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/UmarMoin22/umarmoin22.github.io/refs/heads/main/palpableness/umarmoin_github_io_2.6.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-20 21:41:07 UTC", "last_seen": "2026-03-20 21:41:07 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/UmarMoin22/SQL-PowerBI-Projects/refs/heads/main/herbivore/B-Power-SQ-Projects-v1.6.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-20 21:41:07 UTC", "last_seen": "2026-03-20 21:41:07 UTC", "sightings": 1 }, { "indicator": "https://github.com/UmarMoin22/umarmoin22.github.io/raw/refs/heads/main/palpableness/io_github_umarmoin_3.0.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-20 21:41:07 UTC", "last_seen": "2026-03-20 21:41:07 UTC", "sightings": 1 }, { "indicator": "https://res3data.applicationservice.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-20 21:39:06 UTC", "last_seen": "2026-03-20 21:39:06 UTC", "sightings": 1 }, { "indicator": "http://42.230.24.253:39150/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 21:36:30 UTC", "last_seen": "2026-03-20 21:36:30 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/XrecentX/vllm-skills/refs/heads/main/skills/skills_vllm_2.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-20 21:34:06 UTC", "last_seen": "2026-03-20 21:34:06 UTC", "sightings": 1 }, { "indicator": "https://res2proxy.applicationservice.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-20 21:34:06 UTC", "last_seen": "2026-03-20 21:34:06 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/davirenner88-rgb/LR-S/refs/heads/master/gamesv/src/logic/Level/S_L_1.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-20 21:33:09 UTC", "last_seen": "2026-03-20 21:33:09 UTC", "sightings": 1 }, { "indicator": "https://github.com/davirenner88-rgb/LR-S/raw/refs/heads/master/gamesv/src/logic/Level/S_L_1.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-20 21:33:09 UTC", "last_seen": "2026-03-20 21:33:09 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/XrecentX/xrecentx.github.io/refs/heads/main/carpentry/io-github-xrecentx-v2.7.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-20 21:33:08 UTC", "last_seen": "2026-03-20 21:33:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/davirenner88-rgb/davirenner88-rgb.github.io/refs/heads/main/telewriter/io-davirenner-rgb-github-v2.6-alpha.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-20 21:33:08 UTC", "last_seen": "2026-03-20 21:33:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/XrecentX/xrecentx.github.io/refs/heads/main/carpentry/github_xrecentx_io_burnisher.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-20 21:33:08 UTC", "last_seen": "2026-03-20 21:33:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/davirenner88-rgb/davirenner88-rgb.github.io/refs/heads/main/telewriter/io_davirenner_rgb_github_2.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-20 21:33:08 UTC", "last_seen": "2026-03-20 21:33:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/davirenner88-rgb/davirenner88-rgb.github.io/raw/refs/heads/main/telewriter/io_davirenner_rgb_github_2.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-20 21:33:08 UTC", "last_seen": "2026-03-20 21:33:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/XrecentX/xrecentx.github.io/raw/refs/heads/main/carpentry/github_xrecentx_io_burnisher.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-20 21:33:08 UTC", "last_seen": "2026-03-20 21:33:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/XrecentX/xrecentx.github.io/raw/refs/heads/main/carpentry/io-github-xrecentx-v2.7.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-20 21:33:08 UTC", "last_seen": "2026-03-20 21:33:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/XrecentX/vllm-skills/raw/refs/heads/main/skills/skills_vllm_2.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-20 21:33:08 UTC", "last_seen": "2026-03-20 21:33:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/davirenner88-rgb/davirenner88-rgb.github.io/raw/refs/heads/main/telewriter/io-davirenner-rgb-github-v2.6-alpha.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-20 21:33:07 UTC", "last_seen": "2026-03-20 21:33:07 UTC", "sightings": 1 }, { "indicator": "http://27.204.252.240:50788/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-20 21:32:06 UTC", "last_seen": "2026-03-20 21:32:06 UTC", "sightings": 1 }, { "indicator": "https://res1infra.applicationservice.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-20 21:27:06 UTC", "last_seen": "2026-03-20 21:27:06 UTC", "sightings": 1 }, { "indicator": "http://115.48.36.18:55606/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 21:23:23 UTC", "last_seen": "2026-03-20 21:23:23 UTC", "sightings": 1 }, { "indicator": "https://loc4sat.distributednetwork.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-20 21:22:11 UTC", "last_seen": "2026-03-20 21:22:11 UTC", "sightings": 1 }, { "indicator": "http://222.142.93.65:57143/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-20 21:21:23 UTC", "last_seen": "2026-03-20 21:21:23 UTC", "sightings": 1 }, { "indicator": "http://42.230.24.253:39150/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 21:21:22 UTC", "last_seen": "2026-03-20 21:21:22 UTC", "sightings": 1 }, { "indicator": "https://loc1proc.distributednetwork.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-20 21:21:12 UTC", "last_seen": "2026-03-20 21:21:12 UTC", "sightings": 1 }, { "indicator": "https://github.com/KontolKambings/kontolkambings.github.io/raw/refs/heads/main/drawfiling/io_kontolkambings_github_2.7.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-20 21:21:11 UTC", "last_seen": "2026-03-20 21:21:11 UTC", "sightings": 1 }, { "indicator": "https://github.com/sablive25/sablive25.github.io/raw/refs/heads/main/tumor/io-github-sablive-1.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-20 21:21:10 UTC", "last_seen": "2026-03-20 21:21:10 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/sablive25/sablive25.github.io/refs/heads/main/tumor/io-github-sablive-1.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-20 21:21:10 UTC", "last_seen": "2026-03-20 21:21:10 UTC", "sightings": 1 }, { "indicator": "https://github.com/KontolKambings/ai-inference-resources/raw/refs/heads/main/android/app/src/profile/resources_inference_ai_1.0.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-20 21:21:10 UTC", "last_seen": "2026-03-20 21:21:10 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/longtengsiha/arbitrum-dapp-skill/refs/heads/main/references/arbitrum_dapp_skill_2.7-beta.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-20 21:21:09 UTC", "last_seen": "2026-03-20 21:21:09 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/KontolKambings/kontolkambings.github.io/refs/heads/main/drawfiling/io_kontolkambings_github_2.7.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-20 21:21:09 UTC", "last_seen": "2026-03-20 21:21:09 UTC", "sightings": 1 }, { "indicator": "https://github.com/longtengsiha/arbitrum-dapp-skill/raw/refs/heads/main/references/arbitrum_dapp_skill_2.7-beta.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-20 21:21:09 UTC", "last_seen": "2026-03-20 21:21:09 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/KontolKambings/ai-inference-resources/refs/heads/main/android/app/src/profile/resources_inference_ai_1.0.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-20 21:21:09 UTC", "last_seen": "2026-03-20 21:21:09 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/sablive25/IranPipFix/refs/heads/main/spangled/Fix-Pip-Iran-1.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-20 21:21:09 UTC", "last_seen": "2026-03-20 21:21:09 UTC", "sightings": 1 }, { "indicator": "https://github.com/sablive25/IranPipFix/raw/refs/heads/main/spangled/Fix-Pip-Iran-1.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-20 21:21:09 UTC", "last_seen": "2026-03-20 21:21:09 UTC", "sightings": 1 }, { "indicator": "http://120.84.213.31:43364/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-20 21:21:09 UTC", "last_seen": "2026-03-20 21:21:09 UTC", "sightings": 1 }, { "indicator": "https://loc3core.distributednetwork.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-20 21:21:09 UTC", "last_seen": "2026-03-20 21:21:09 UTC", "sightings": 1 }, { "indicator": "https://loc2steel.distributednetwork.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "NetSupport" ], "first_seen": "2026-03-20 21:21:09 UTC", "last_seen": "2026-03-20 21:21:09 UTC", "sightings": 1 }, { "indicator": "http://27.204.252.240:50788/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-20 21:21:08 UTC", "last_seen": "2026-03-20 21:21:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/2332245/2332245.github.io/refs/heads/main/endlichite/github_io_v3.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-20 21:05:10 UTC", "last_seen": "2026-03-20 21:05:10 UTC", "sightings": 1 }, { "indicator": "https://github.com/2332245/starspring/raw/refs/heads/main/starspring/decorators/Software-v3.8-beta.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-20 21:05:10 UTC", "last_seen": "2026-03-20 21:05:10 UTC", "sightings": 1 }, { "indicator": "https://github.com/2332245/2332245.github.io/raw/refs/heads/main/endlichite/github_io_v3.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-20 21:05:10 UTC", "last_seen": "2026-03-20 21:05:10 UTC", "sightings": 1 }, { "indicator": "https://github.com/69IR/OpenSem/raw/refs/heads/main/configs/Sem_Open_v2.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-20 21:05:10 UTC", "last_seen": "2026-03-20 21:05:10 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/69IR/OpenSem/refs/heads/main/configs/Sem_Open_v2.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-20 21:05:10 UTC", "last_seen": "2026-03-20 21:05:10 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/69IR/69ir.github.io/refs/heads/main/outbring/io_github_ir_v3.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-20 21:05:10 UTC", "last_seen": "2026-03-20 21:05:10 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/2332245/starspring/refs/heads/main/starspring/decorators/Software-v3.8-beta.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-20 21:05:10 UTC", "last_seen": "2026-03-20 21:05:10 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/arkaih/VPS_BOT_X/refs/heads/main/vps_bot-x/modules/X_BO_VP_pitying.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-20 21:05:10 UTC", "last_seen": "2026-03-20 21:05:10 UTC", "sightings": 1 }, { "indicator": "https://github.com/arkaih/arkaih.github.io/raw/refs/heads/main/untractably/github-io-arkaih-v1.4.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-20 21:05:10 UTC", "last_seen": "2026-03-20 21:05:10 UTC", "sightings": 1 }, { "indicator": "https://github.com/69IR/69ir.github.io/raw/refs/heads/main/outbring/io_github_ir_v3.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-20 21:05:10 UTC", "last_seen": "2026-03-20 21:05:10 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/arkaih/arkaih.github.io/refs/heads/main/untractably/github-io-arkaih-v1.4.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-20 21:05:09 UTC", "last_seen": "2026-03-20 21:05:09 UTC", "sightings": 1 }, { "indicator": "https://pnt4space.connectivitybuffer.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 21:00:08 UTC", "last_seen": "2026-03-20 21:00:08 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.7/files/7776573655/8RPb9TK.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543", "gcleaner" ], "first_seen": "2026-03-20 20:59:07 UTC", "last_seen": "2026-03-20 20:59:07 UTC", "sightings": 1 }, { "indicator": "https://pnt3field.connectivitybuffer.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 20:53:07 UTC", "last_seen": "2026-03-20 20:53:07 UTC", "sightings": 1 }, { "indicator": "https://pnt2outer.connectivitybuffer.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 20:51:06 UTC", "last_seen": "2026-03-20 20:51:06 UTC", "sightings": 1 }, { "indicator": "https://pnt1proc.connectivitybuffer.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 20:48:07 UTC", "last_seen": "2026-03-20 20:48:07 UTC", "sightings": 1 }, { "indicator": "http://222.142.93.65:57143/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-20 20:46:14 UTC", "last_seen": "2026-03-20 20:46:14 UTC", "sightings": 1 }, { "indicator": "https://res4path.operationalgateway.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 20:38:08 UTC", "last_seen": "2026-03-20 20:38:08 UTC", "sightings": 1 }, { "indicator": "http://46.163.134.250:42543/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 20:36:23 UTC", "last_seen": "2026-03-20 20:36:23 UTC", "sightings": 1 }, { "indicator": "http://182.116.118.124:48559/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-20 20:32:07 UTC", "last_seen": "2026-03-20 20:32:07 UTC", "sightings": 1 }, { "indicator": "http://182.116.118.124:48559/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-20 20:32:06 UTC", "last_seen": "2026-03-20 20:32:06 UTC", "sightings": 1 }, { "indicator": "https://res3view.operationalgateway.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 20:31:05 UTC", "last_seen": "2026-03-20 20:31:05 UTC", "sightings": 1 }, { "indicator": "http://222.137.40.50:38654/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 20:29:18 UTC", "last_seen": "2026-03-20 20:29:18 UTC", "sightings": 1 }, { "indicator": "https://res2point.operationalgateway.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 20:27:07 UTC", "last_seen": "2026-03-20 20:27:07 UTC", "sightings": 1 }, { "indicator": "https://res1proc.operationalgateway.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 20:22:13 UTC", "last_seen": "2026-03-20 20:22:13 UTC", "sightings": 1 }, { "indicator": "https://loc4view.managementresource.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 20:15:08 UTC", "last_seen": "2026-03-20 20:15:08 UTC", "sightings": 1 }, { "indicator": "http://46.163.134.250:42543/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 20:07:17 UTC", "last_seen": "2026-03-20 20:07:17 UTC", "sightings": 1 }, { "indicator": "https://loc2core.managementresource.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 20:04:06 UTC", "last_seen": "2026-03-20 20:04:06 UTC", "sightings": 1 }, { "indicator": "http://222.137.40.50:38654/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 20:01:20 UTC", "last_seen": "2026-03-20 20:01:20 UTC", "sightings": 1 }, { "indicator": "https://loc1proc.managementresource.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 19:58:09 UTC", "last_seen": "2026-03-20 19:58:09 UTC", "sightings": 1 }, { "indicator": "https://pnt4link.diagnosticendpoint.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 19:52:13 UTC", "last_seen": "2026-03-20 19:52:13 UTC", "sightings": 1 }, { "indicator": "https://pnt3user.diagnosticendpoint.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 19:48:06 UTC", "last_seen": "2026-03-20 19:48:06 UTC", "sightings": 1 }, { "indicator": "http://221.214.191.18:54341/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-20 19:47:12 UTC", "last_seen": "2026-03-20 19:47:12 UTC", "sightings": 1 }, { "indicator": "http://61.53.74.105:41436/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 19:46:17 UTC", "last_seen": "2026-03-20 19:46:17 UTC", "sightings": 1 }, { "indicator": "http://110.37.114.50:51629/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-20 19:42:06 UTC", "last_seen": "2026-03-20 19:42:06 UTC", "sightings": 1 }, { "indicator": "https://pnt2base.diagnosticendpoint.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 19:41:08 UTC", "last_seen": "2026-03-20 19:41:08 UTC", "sightings": 1 }, { "indicator": "http://42.225.241.22:55500/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 19:35:18 UTC", "last_seen": "2026-03-20 19:35:18 UTC", "sightings": 1 }, { "indicator": "https://pnt1infra.diagnosticendpoint.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 19:35:11 UTC", "last_seen": "2026-03-20 19:35:11 UTC", "sightings": 1 }, { "indicator": "http://112.240.253.55:48881/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 19:34:06 UTC", "last_seen": "2026-03-20 19:34:06 UTC", "sightings": 1 }, { "indicator": "http://110.37.118.66:40554/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-20 19:33:10 UTC", "last_seen": "2026-03-20 19:33:10 UTC", "sightings": 1 }, { "indicator": "http://222.127.49.161:49392/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-20 19:32:06 UTC", "last_seen": "2026-03-20 19:32:06 UTC", "sightings": 1 }, { "indicator": "https://res4work.platformcontroller.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 19:31:06 UTC", "last_seen": "2026-03-20 19:31:06 UTC", "sightings": 1 }, { "indicator": "http://59.180.187.212:33650/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 19:25:27 UTC", "last_seen": "2026-03-20 19:25:27 UTC", "sightings": 1 }, { "indicator": "https://res3local.platformcontroller.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 19:24:06 UTC", "last_seen": "2026-03-20 19:24:06 UTC", "sightings": 1 }, { "indicator": "http://110.37.118.66:40554/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-20 19:23:22 UTC", "last_seen": "2026-03-20 19:23:22 UTC", "sightings": 1 }, { "indicator": "http://110.39.246.84:47528/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 19:19:17 UTC", "last_seen": "2026-03-20 19:19:17 UTC", "sightings": 1 }, { "indicator": "https://res2power.platformcontroller.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 19:19:07 UTC", "last_seen": "2026-03-20 19:19:07 UTC", "sightings": 1 }, { "indicator": "https://res1proc.platformcontroller.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 19:17:19 UTC", "last_seen": "2026-03-20 19:17:19 UTC", "sightings": 1 }, { "indicator": "http://113.230.127.196:36861/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 19:17:18 UTC", "last_seen": "2026-03-20 19:17:18 UTC", "sightings": 1 }, { "indicator": "https://loc3dev.telemetryinterface.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 19:17:11 UTC", "last_seen": "2026-03-20 19:17:11 UTC", "sightings": 1 }, { "indicator": "https://loc4link.telemetryinterface.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 19:17:10 UTC", "last_seen": "2026-03-20 19:17:10 UTC", "sightings": 1 }, { "indicator": "http://125.47.69.236:39999/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-20 19:17:07 UTC", "last_seen": "2026-03-20 19:17:07 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/arpan02/assignment/refs/heads/main/pluricipital/Software_v1.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-20 19:17:07 UTC", "last_seen": "2026-03-20 19:17:07 UTC", "sightings": 1 }, { "indicator": "http://59.89.13.91:60566/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-20 19:17:07 UTC", "last_seen": "2026-03-20 19:17:07 UTC", "sightings": 1 }, { "indicator": "https://github.com/arpan02/ecommerce_backend/raw/refs/heads/main/controllers/backend-ecommerce-1.4-beta.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-20 19:17:07 UTC", "last_seen": "2026-03-20 19:17:07 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/arpan02/ecommerce_backend/refs/heads/main/controllers/backend-ecommerce-1.4-beta.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-20 19:17:07 UTC", "last_seen": "2026-03-20 19:17:07 UTC", "sightings": 1 }, { "indicator": "https://github.com/Players123/soenneker.gen.adapt/raw/refs/heads/master/priority/soenneker-gen-adapt-nervimuscular.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-20 19:02:09 UTC", "last_seen": "2026-03-20 19:02:09 UTC", "sightings": 1 }, { "indicator": "https://github.com/arpan02/assignment/raw/refs/heads/main/pluricipital/Software_v1.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-20 19:02:09 UTC", "last_seen": "2026-03-20 19:02:09 UTC", "sightings": 1 }, { "indicator": "https://github.com/arpan02/ecommerce_frontend/raw/refs/heads/main/src/pages/CollectionPage/CollectionPageMenu/frontend-ecommerce-v1.0.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-20 19:02:09 UTC", "last_seen": "2026-03-20 19:02:09 UTC", "sightings": 1 }, { "indicator": "https://github.com/arpan02/pwskills_assignment/raw/refs/heads/main/bucolic/assignment-pwskills-v1.6.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-20 19:02:08 UTC", "last_seen": "2026-03-20 19:02:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/DaniloRasovic/powersub-demo-1807/refs/heads/main/Smilax/demo-powersub-v2.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-20 19:02:08 UTC", "last_seen": "2026-03-20 19:02:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/arpan02/pwskills_assignment/refs/heads/main/bucolic/assignment-pwskills-v1.6.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-20 19:02:08 UTC", "last_seen": "2026-03-20 19:02:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/arpan02/ecommerce_frontend/refs/heads/main/src/pages/CollectionPage/CollectionPageMenu/frontend-ecommerce-v1.0.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-20 19:02:08 UTC", "last_seen": "2026-03-20 19:02:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Players123/soenneker.gen.adapt/refs/heads/master/priority/soenneker-gen-adapt-nervimuscular.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-20 19:02:08 UTC", "last_seen": "2026-03-20 19:02:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/arpan02/open-webui-rust/refs/heads/main/static/assets/fonts/open_rust_webui_1.4-beta.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-20 19:02:08 UTC", "last_seen": "2026-03-20 19:02:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/arpan02/open-webui-rust/raw/refs/heads/main/static/assets/fonts/open_rust_webui_1.4-beta.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-20 19:02:08 UTC", "last_seen": "2026-03-20 19:02:08 UTC", "sightings": 1 }, { "indicator": "http://59.180.187.212:33650/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 19:01:20 UTC", "last_seen": "2026-03-20 19:01:20 UTC", "sightings": 1 }, { "indicator": "https://github.com/DaniloRasovic/powersub-demo-1807/raw/refs/heads/main/Smilax/demo-powersub-v2.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-20 19:01:07 UTC", "last_seen": "2026-03-20 19:01:07 UTC", "sightings": 1 }, { "indicator": "http://42.225.241.22:55500/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 18:59:24 UTC", "last_seen": "2026-03-20 18:59:24 UTC", "sightings": 1 }, { "indicator": "http://123.190.25.220:51243/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 18:57:13 UTC", "last_seen": "2026-03-20 18:57:13 UTC", "sightings": 1 }, { "indicator": "https://loc2remote.telemetryinterface.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 18:56:13 UTC", "last_seen": "2026-03-20 18:56:13 UTC", "sightings": 1 }, { "indicator": "http://110.37.107.41:52389/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-20 18:54:18 UTC", "last_seen": "2026-03-20 18:54:18 UTC", "sightings": 1 }, { "indicator": "http://110.39.246.84:47528/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 18:52:20 UTC", "last_seen": "2026-03-20 18:52:20 UTC", "sightings": 1 }, { "indicator": "https://loc1store.telemetryinterface.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 18:51:10 UTC", "last_seen": "2026-03-20 18:51:10 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.7/files/8074464496/Fu4sGxz.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543", "MassLogger", "SalatStealer" ], "first_seen": "2026-03-20 18:51:08 UTC", "last_seen": "2026-03-20 18:51:08 UTC", "sightings": 1 }, { "indicator": "https://pnt4sync.infrastructurecloud.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 18:46:06 UTC", "last_seen": "2026-03-20 18:46:06 UTC", "sightings": 1 }, { "indicator": "http://125.41.8.167:37698/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 18:43:16 UTC", "last_seen": "2026-03-20 18:43:16 UTC", "sightings": 1 }, { "indicator": "http://125.47.69.236:39999/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-20 18:42:06 UTC", "last_seen": "2026-03-20 18:42:06 UTC", "sightings": 1 }, { "indicator": "http://112.98.97.145:34651/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-20 18:40:19 UTC", "last_seen": "2026-03-20 18:40:19 UTC", "sightings": 1 }, { "indicator": "https://pnt3gate.infrastructurecloud.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 18:40:07 UTC", "last_seen": "2026-03-20 18:40:07 UTC", "sightings": 1 }, { "indicator": "https://pnt2proc.infrastructurecloud.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 18:34:08 UTC", "last_seen": "2026-03-20 18:34:08 UTC", "sightings": 1 }, { "indicator": "http://59.89.13.91:60566/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-20 18:32:06 UTC", "last_seen": "2026-03-20 18:32:06 UTC", "sightings": 1 }, { "indicator": "https://pnt1meta.infrastructurecloud.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 18:29:10 UTC", "last_seen": "2026-03-20 18:29:10 UTC", "sightings": 1 }, { "indicator": "http://120.61.77.246:43708/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-20 18:27:18 UTC", "last_seen": "2026-03-20 18:27:18 UTC", "sightings": 1 }, { "indicator": "http://112.98.97.145:34651/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-20 18:24:10 UTC", "last_seen": "2026-03-20 18:24:10 UTC", "sightings": 1 }, { "indicator": "https://res4static.analyticsprocessing.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 18:23:12 UTC", "last_seen": "2026-03-20 18:23:12 UTC", "sightings": 1 }, { "indicator": "https://res3edge.analyticsprocessing.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 18:17:08 UTC", "last_seen": "2026-03-20 18:17:08 UTC", "sightings": 1 }, { "indicator": "http://125.41.8.167:37698/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 18:15:18 UTC", "last_seen": "2026-03-20 18:15:18 UTC", "sightings": 1 }, { "indicator": "http://110.39.229.188:60557/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-20 18:12:06 UTC", "last_seen": "2026-03-20 18:12:06 UTC", "sightings": 1 }, { "indicator": "https://res2data.analyticsprocessing.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 18:11:06 UTC", "last_seen": "2026-03-20 18:11:06 UTC", "sightings": 1 }, { "indicator": "https://res1sync.analyticsprocessing.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 18:06:08 UTC", "last_seen": "2026-03-20 18:06:08 UTC", "sightings": 1 }, { "indicator": "http://123.190.25.220:51243/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 18:01:14 UTC", "last_seen": "2026-03-20 18:01:14 UTC", "sightings": 1 }, { "indicator": "http://110.37.120.234:52713/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-20 17:59:15 UTC", "last_seen": "2026-03-20 17:59:15 UTC", "sightings": 1 }, { "indicator": "https://dc4point.applicationbuffer.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 17:59:07 UTC", "last_seen": "2026-03-20 17:59:07 UTC", "sightings": 1 }, { "indicator": "https://dc3data.applicationbuffer.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 17:54:09 UTC", "last_seen": "2026-03-20 17:54:09 UTC", "sightings": 1 }, { "indicator": "http://110.36.23.65:38850/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-20 17:52:05 UTC", "last_seen": "2026-03-20 17:52:05 UTC", "sightings": 1 }, { "indicator": "http://115.54.101.145:60207/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 17:50:17 UTC", "last_seen": "2026-03-20 17:50:17 UTC", "sightings": 1 }, { "indicator": "https://dc2proxy.applicationbuffer.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 17:49:09 UTC", "last_seen": "2026-03-20 17:49:09 UTC", "sightings": 1 }, { "indicator": "http://125.40.83.201:50550/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-20 17:47:06 UTC", "last_seen": "2026-03-20 17:47:06 UTC", "sightings": 1 }, { "indicator": "https://dgp13ezr.winddev.digital/?=check&&actmn=juwRQGoaJFQJrxaD", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-20 17:45:09 UTC", "last_seen": "2026-03-20 17:45:09 UTC", "sightings": 1 }, { "indicator": "https://dc1infra.applicationbuffer.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 17:44:08 UTC", "last_seen": "2026-03-20 17:44:08 UTC", "sightings": 1 }, { "indicator": "http://59.97.253.48:38620/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 17:38:11 UTC", "last_seen": "2026-03-20 17:38:11 UTC", "sightings": 1 }, { "indicator": "https://app4sat.distributedmatrix.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 17:37:07 UTC", "last_seen": "2026-03-20 17:37:07 UTC", "sightings": 1 }, { "indicator": "http://110.37.120.234:52713/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-20 17:34:18 UTC", "last_seen": "2026-03-20 17:34:18 UTC", "sightings": 1 }, { "indicator": "https://app3core.distributedmatrix.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 17:32:06 UTC", "last_seen": "2026-03-20 17:32:06 UTC", "sightings": 1 }, { "indicator": "http://115.54.101.145:60207/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 17:25:21 UTC", "last_seen": "2026-03-20 17:25:21 UTC", "sightings": 1 }, { "indicator": "https://app2steel.distributedmatrix.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 17:25:11 UTC", "last_seen": "2026-03-20 17:25:11 UTC", "sightings": 1 }, { "indicator": "http://219.155.222.14:53357/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 17:24:20 UTC", "last_seen": "2026-03-20 17:24:20 UTC", "sightings": 1 }, { "indicator": "http://221.15.1.175:52131/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 17:23:11 UTC", "last_seen": "2026-03-20 17:23:11 UTC", "sightings": 1 }, { "indicator": "https://app1proc.distributedmatrix.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 17:21:07 UTC", "last_seen": "2026-03-20 17:21:07 UTC", "sightings": 1 }, { "indicator": "https://vol4space.connectivitynode.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 17:14:06 UTC", "last_seen": "2026-03-20 17:14:06 UTC", "sightings": 1 }, { "indicator": "https://vol3field.connectivitynode.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 17:09:08 UTC", "last_seen": "2026-03-20 17:09:08 UTC", "sightings": 1 }, { "indicator": "https://vol2outer.connectivitynode.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 17:04:06 UTC", "last_seen": "2026-03-20 17:04:06 UTC", "sightings": 1 }, { "indicator": "https://vol1proc.connectivitynode.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 16:58:07 UTC", "last_seen": "2026-03-20 16:58:07 UTC", "sightings": 1 }, { "indicator": "https://dc4path.operationalsystem.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 16:52:06 UTC", "last_seen": "2026-03-20 16:52:06 UTC", "sightings": 1 }, { "indicator": "http://182.120.160.228:54183/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 16:48:18 UTC", "last_seen": "2026-03-20 16:48:18 UTC", "sightings": 1 }, { "indicator": "http://219.155.222.14:53357/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 16:45:18 UTC", "last_seen": "2026-03-20 16:45:18 UTC", "sightings": 1 }, { "indicator": "http://182.113.31.224:40470/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-20 16:42:08 UTC", "last_seen": "2026-03-20 16:42:08 UTC", "sightings": 1 }, { "indicator": "https://dc2point.operationalsystem.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 16:41:06 UTC", "last_seen": "2026-03-20 16:41:06 UTC", "sightings": 1 }, { "indicator": "http://175.174.106.223:44857/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 16:36:19 UTC", "last_seen": "2026-03-20 16:36:19 UTC", "sightings": 1 }, { "indicator": "https://dc1proc.operationalsystem.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 16:36:07 UTC", "last_seen": "2026-03-20 16:36:07 UTC", "sightings": 1 }, { "indicator": "http://42.230.54.240:56556/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-20 16:32:06 UTC", "last_seen": "2026-03-20 16:32:06 UTC", "sightings": 1 }, { "indicator": "http://59.182.84.142:39669/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 16:31:13 UTC", "last_seen": "2026-03-20 16:31:13 UTC", "sightings": 1 }, { "indicator": "http://119.179.251.214:49768/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 16:30:18 UTC", "last_seen": "2026-03-20 16:30:18 UTC", "sightings": 1 }, { "indicator": "https://app4view.managementgateway.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 16:30:12 UTC", "last_seen": "2026-03-20 16:30:12 UTC", "sightings": 1 }, { "indicator": "http://182.120.160.228:54183/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 16:26:25 UTC", "last_seen": "2026-03-20 16:26:25 UTC", "sightings": 1 }, { "indicator": "https://app3ghost.managementgateway.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 16:24:10 UTC", "last_seen": "2026-03-20 16:24:10 UTC", "sightings": 1 }, { "indicator": "http://123.10.8.128:53522/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-20 16:22:07 UTC", "last_seen": "2026-03-20 16:22:07 UTC", "sightings": 1 }, { "indicator": "http://1.43.5.24:45030/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 16:18:18 UTC", "last_seen": "2026-03-20 16:18:18 UTC", "sightings": 1 }, { "indicator": "https://app2core.managementgateway.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 16:18:09 UTC", "last_seen": "2026-03-20 16:18:09 UTC", "sightings": 1 }, { "indicator": "https://app1proc.managementgateway.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 16:13:10 UTC", "last_seen": "2026-03-20 16:13:10 UTC", "sightings": 1 }, { "indicator": "http://175.174.106.223:44857/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 16:10:22 UTC", "last_seen": "2026-03-20 16:10:22 UTC", "sightings": 1 }, { "indicator": "https://vol4link.diagnosticresource.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 16:07:13 UTC", "last_seen": "2026-03-20 16:07:13 UTC", "sightings": 1 }, { "indicator": "http://42.230.54.240:56556/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-20 16:07:09 UTC", "last_seen": "2026-03-20 16:07:09 UTC", "sightings": 1 }, { "indicator": "http://59.182.84.142:39669/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 16:03:23 UTC", "last_seen": "2026-03-20 16:03:23 UTC", "sightings": 1 }, { "indicator": "https://vol3user.diagnosticresource.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 16:03:08 UTC", "last_seen": "2026-03-20 16:03:08 UTC", "sightings": 1 }, { "indicator": "http://123.10.8.128:53522/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-20 15:57:08 UTC", "last_seen": "2026-03-20 15:57:08 UTC", "sightings": 1 }, { "indicator": "https://vol2base.diagnosticresource.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 15:56:10 UTC", "last_seen": "2026-03-20 15:56:10 UTC", "sightings": 1 }, { "indicator": "https://vol1infra.diagnosticresource.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 15:53:11 UTC", "last_seen": "2026-03-20 15:53:11 UTC", "sightings": 1 }, { "indicator": "http://59.97.253.250:51979/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-20 15:52:06 UTC", "last_seen": "2026-03-20 15:52:06 UTC", "sightings": 1 }, { "indicator": "http://1.43.5.24:45030/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 15:50:18 UTC", "last_seen": "2026-03-20 15:50:18 UTC", "sightings": 1 }, { "indicator": "http://117.26.226.171:52208/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-20 15:48:19 UTC", "last_seen": "2026-03-20 15:48:19 UTC", "sightings": 1 }, { "indicator": "http://59.97.253.250:51979/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-20 15:47:07 UTC", "last_seen": "2026-03-20 15:47:07 UTC", "sightings": 1 }, { "indicator": "http://80.89.237.112/1.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543", "Vidar" ], "first_seen": "2026-03-20 15:45:18 UTC", "last_seen": "2026-03-20 15:45:18 UTC", "sightings": 1 }, { "indicator": "https://dc4work.platformendpoint.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 15:45:09 UTC", "last_seen": "2026-03-20 15:45:09 UTC", "sightings": 1 }, { "indicator": "https://dc3local.platformendpoint.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 15:40:11 UTC", "last_seen": "2026-03-20 15:40:11 UTC", "sightings": 1 }, { "indicator": "https://dc2power.platformendpoint.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 15:34:07 UTC", "last_seen": "2026-03-20 15:34:07 UTC", "sightings": 1 }, { "indicator": "http://115.55.131.250:55513/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 15:30:22 UTC", "last_seen": "2026-03-20 15:30:22 UTC", "sightings": 1 }, { "indicator": "http://222.140.237.78:47344/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-20 15:29:14 UTC", "last_seen": "2026-03-20 15:29:14 UTC", "sightings": 1 }, { "indicator": "https://dc1proc.platformendpoint.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 15:29:09 UTC", "last_seen": "2026-03-20 15:29:09 UTC", "sightings": 1 }, { "indicator": "https://app4link.telemetryservice.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 15:23:10 UTC", "last_seen": "2026-03-20 15:23:10 UTC", "sightings": 1 }, { "indicator": "https://app3dev.telemetryservice.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 15:17:07 UTC", "last_seen": "2026-03-20 15:17:07 UTC", "sightings": 1 }, { "indicator": "http://112.78.191.254:57162/.i", "indicator_type": "url", "source": "URLhaus", "tags": [ "hajime" ], "first_seen": "2026-03-20 15:12:10 UTC", "last_seen": "2026-03-20 15:12:10 UTC", "sightings": 1 }, { "indicator": "http://59.97.252.211:53634/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-20 15:12:07 UTC", "last_seen": "2026-03-20 15:12:07 UTC", "sightings": 1 }, { "indicator": "https://app2remote.telemetryservice.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 15:11:07 UTC", "last_seen": "2026-03-20 15:11:07 UTC", "sightings": 1 }, { "indicator": "https://app1store.telemetryservice.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 15:06:07 UTC", "last_seen": "2026-03-20 15:06:07 UTC", "sightings": 1 }, { "indicator": "http://110.36.29.195:57588/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 15:05:19 UTC", "last_seen": "2026-03-20 15:05:19 UTC", "sightings": 1 }, { "indicator": "http://115.55.131.250:55513/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 15:03:23 UTC", "last_seen": "2026-03-20 15:03:23 UTC", "sightings": 1 }, { "indicator": "https://vol4sync.infrastructurebase.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 15:00:09 UTC", "last_seen": "2026-03-20 15:00:09 UTC", "sightings": 1 }, { "indicator": "http://175.147.198.141:55413/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 14:58:09 UTC", "last_seen": "2026-03-20 14:58:09 UTC", "sightings": 1 }, { "indicator": "http://59.177.107.90:46573/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-20 14:57:13 UTC", "last_seen": "2026-03-20 14:57:13 UTC", "sightings": 1 }, { "indicator": "https://vol3gate.infrastructurebase.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 14:55:09 UTC", "last_seen": "2026-03-20 14:55:09 UTC", "sightings": 1 }, { "indicator": "http://59.180.183.121:37835/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-20 14:52:10 UTC", "last_seen": "2026-03-20 14:52:10 UTC", "sightings": 1 }, { "indicator": "http://110.36.76.249:54431/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-20 14:49:22 UTC", "last_seen": "2026-03-20 14:49:22 UTC", "sightings": 1 }, { "indicator": "https://vol2proc.infrastructurebase.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 14:49:07 UTC", "last_seen": "2026-03-20 14:49:07 UTC", "sightings": 1 }, { "indicator": "https://vol1meta.infrastructurebase.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 14:44:09 UTC", "last_seen": "2026-03-20 14:44:09 UTC", "sightings": 1 }, { "indicator": "https://dc4static.analyticspoint.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 14:37:10 UTC", "last_seen": "2026-03-20 14:37:10 UTC", "sightings": 1 }, { "indicator": "http://104.168.5.54/img/optimized_MSI.png", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-20 14:37:10 UTC", "last_seen": "2026-03-20 14:37:10 UTC", "sightings": 1 }, { "indicator": "http://59.97.176.97:38114/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-20 14:37:08 UTC", "last_seen": "2026-03-20 14:37:08 UTC", "sightings": 1 }, { "indicator": "http://198.12.83.68/321/goodforeveryonetogetit.hta", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-20 14:37:07 UTC", "last_seen": "2026-03-20 14:37:07 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.7/files/7782139129/1fz7hzL.bat", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-20 14:35:08 UTC", "last_seen": "2026-03-20 14:35:08 UTC", "sightings": 1 }, { "indicator": "http://175.147.198.141:55413/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 14:30:34 UTC", "last_seen": "2026-03-20 14:30:34 UTC", "sightings": 1 }, { "indicator": "https://dc2data.analyticspoint.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 14:26:08 UTC", "last_seen": "2026-03-20 14:26:08 UTC", "sightings": 1 }, { "indicator": "http://182.113.3.223:37239/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 14:25:22 UTC", "last_seen": "2026-03-20 14:25:22 UTC", "sightings": 1 }, { "indicator": "http://61.53.74.105:41436/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 14:22:09 UTC", "last_seen": "2026-03-20 14:22:09 UTC", "sightings": 1 }, { "indicator": "https://dc1sync.analyticspoint.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 14:21:07 UTC", "last_seen": "2026-03-20 14:21:07 UTC", "sightings": 1 }, { "indicator": "https://s1gna1-track.plotsafe.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 14:16:07 UTC", "last_seen": "2026-03-20 14:16:07 UTC", "sightings": 1 }, { "indicator": "https://d3fen-cache.infosafe.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 14:11:07 UTC", "last_seen": "2026-03-20 14:11:07 UTC", "sightings": 1 }, { "indicator": "http://115.50.231.36:60213/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 14:10:18 UTC", "last_seen": "2026-03-20 14:10:18 UTC", "sightings": 1 }, { "indicator": "https://illumewholes.capslock.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 14:08:10 UTC", "last_seen": "2026-03-20 14:08:10 UTC", "sightings": 1 }, { "indicator": "http://59.97.176.97:38114/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-20 14:07:08 UTC", "last_seen": "2026-03-20 14:07:08 UTC", "sightings": 1 }, { "indicator": "http://42.238.118.156:40791/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 14:06:19 UTC", "last_seen": "2026-03-20 14:06:19 UTC", "sightings": 1 }, { "indicator": "http://182.113.3.223:37239/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 13:58:20 UTC", "last_seen": "2026-03-20 13:58:20 UTC", "sightings": 1 }, { "indicator": "http://124.162.223.228:34429/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-20 13:58:19 UTC", "last_seen": "2026-03-20 13:58:19 UTC", "sightings": 1 }, { "indicator": "https://mewmm.trueflow.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 13:57:09 UTC", "last_seen": "2026-03-20 13:57:09 UTC", "sightings": 1 }, { "indicator": "http://196.189.3.1:36234/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-20 13:57:07 UTC", "last_seen": "2026-03-20 13:57:07 UTC", "sightings": 1 }, { "indicator": "https://sensorsupp.trueslak.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 13:52:08 UTC", "last_seen": "2026-03-20 13:52:08 UTC", "sightings": 1 }, { "indicator": "http://123.9.194.23:51772/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-20 13:52:08 UTC", "last_seen": "2026-03-20 13:52:08 UTC", "sightings": 1 }, { "indicator": "https://nlcygd.withregw.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake", "NetSupport" ], "first_seen": "2026-03-20 13:49:10 UTC", "last_seen": "2026-03-20 13:49:10 UTC", "sightings": 1 }, { "indicator": "http://115.50.231.36:60213/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 13:46:17 UTC", "last_seen": "2026-03-20 13:46:17 UTC", "sightings": 1 }, { "indicator": "http://118.34.109.121:49345/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-20 13:42:08 UTC", "last_seen": "2026-03-20 13:42:08 UTC", "sightings": 1 }, { "indicator": "https://arkcrest7is.currvers.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 13:37:07 UTC", "last_seen": "2026-03-20 13:37:07 UTC", "sightings": 1 }, { "indicator": "http://115.49.27.208:36681/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 13:35:18 UTC", "last_seen": "2026-03-20 13:35:18 UTC", "sightings": 1 }, { "indicator": "https://trac-glade.doabove.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 13:32:07 UTC", "last_seen": "2026-03-20 13:32:07 UTC", "sightings": 1 }, { "indicator": "http://110.37.123.210:55914/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-20 13:32:07 UTC", "last_seen": "2026-03-20 13:32:07 UTC", "sightings": 1 }, { "indicator": "http://42.228.188.200:51937/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 13:29:19 UTC", "last_seen": "2026-03-20 13:29:19 UTC", "sightings": 1 }, { "indicator": "https://flerai.dombove.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 13:29:07 UTC", "last_seen": "2026-03-20 13:29:07 UTC", "sightings": 1 }, { "indicator": "http://124.162.223.228:34429/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-20 13:28:10 UTC", "last_seen": "2026-03-20 13:28:10 UTC", "sightings": 1 }, { "indicator": "http://117.91.63.194:36568/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-20 13:27:06 UTC", "last_seen": "2026-03-20 13:27:06 UTC", "sightings": 1 }, { "indicator": "http://119.179.237.29:51625/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 13:23:17 UTC", "last_seen": "2026-03-20 13:23:17 UTC", "sightings": 1 }, { "indicator": "http://110.186.228.165:49909/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-20 13:22:08 UTC", "last_seen": "2026-03-20 13:22:08 UTC", "sightings": 1 }, { "indicator": "http://42.7.203.201:55599/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 13:20:23 UTC", "last_seen": "2026-03-20 13:20:23 UTC", "sightings": 1 }, { "indicator": "http://42.228.188.200:51937/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 13:19:14 UTC", "last_seen": "2026-03-20 13:19:14 UTC", "sightings": 1 }, { "indicator": "http://117.91.63.194:36568/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-20 13:17:11 UTC", "last_seen": "2026-03-20 13:17:11 UTC", "sightings": 1 }, { "indicator": "http://110.37.78.200:56363/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 13:17:10 UTC", "last_seen": "2026-03-20 13:17:10 UTC", "sightings": 1 }, { "indicator": "https://normarkal9.gothrough.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 13:16:07 UTC", "last_seen": "2026-03-20 13:16:07 UTC", "sightings": 1 }, { "indicator": "https://proto-h4ul.withregw.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake", "NetSupport" ], "first_seen": "2026-03-20 13:11:09 UTC", "last_seen": "2026-03-20 13:11:09 UTC", "sightings": 1 }, { "indicator": "http://110.37.123.210:55914/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-20 13:07:07 UTC", "last_seen": "2026-03-20 13:07:07 UTC", "sightings": 1 }, { "indicator": "https://neo-rnount.withregw.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake", "NetSupport" ], "first_seen": "2026-03-20 13:04:09 UTC", "last_seen": "2026-03-20 13:04:09 UTC", "sightings": 1 }, { "indicator": "http://112.249.78.255:38086/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-20 13:02:06 UTC", "last_seen": "2026-03-20 13:02:06 UTC", "sightings": 1 }, { "indicator": "https://anch0-bridge.withregw.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake", "NetSupport" ], "first_seen": "2026-03-20 12:57:07 UTC", "last_seen": "2026-03-20 12:57:07 UTC", "sightings": 1 }, { "indicator": "https://opticsval.withregw.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake", "NetSupport" ], "first_seen": "2026-03-20 12:53:07 UTC", "last_seen": "2026-03-20 12:53:07 UTC", "sightings": 1 }, { "indicator": "http://110.37.78.200:56363/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 12:52:08 UTC", "last_seen": "2026-03-20 12:52:08 UTC", "sightings": 1 }, { "indicator": "https://ravenreview.currvers.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 12:49:08 UTC", "last_seen": "2026-03-20 12:49:08 UTC", "sightings": 1 }, { "indicator": "http://119.114.59.22:54479/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 12:48:20 UTC", "last_seen": "2026-03-20 12:48:20 UTC", "sightings": 1 }, { "indicator": "http://123.190.28.195:58680/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-20 12:47:06 UTC", "last_seen": "2026-03-20 12:47:06 UTC", "sightings": 1 }, { "indicator": "http://110.36.1.168:49421/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 12:40:16 UTC", "last_seen": "2026-03-20 12:40:16 UTC", "sightings": 1 }, { "indicator": "https://ndakntj.currvers.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 12:38:07 UTC", "last_seen": "2026-03-20 12:38:07 UTC", "sightings": 1 }, { "indicator": "http://112.249.78.255:38086/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-20 12:37:07 UTC", "last_seen": "2026-03-20 12:37:07 UTC", "sightings": 1 }, { "indicator": "http://42.239.191.80:57983/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 12:36:15 UTC", "last_seen": "2026-03-20 12:36:15 UTC", "sightings": 1 }, { "indicator": "https://frozenlayout.currvers.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 12:31:05 UTC", "last_seen": "2026-03-20 12:31:05 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.7/files/1781548144/nKZgdKm.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543", "xworm" ], "first_seen": "2026-03-20 12:28:09 UTC", "last_seen": "2026-03-20 12:28:09 UTC", "sightings": 1 }, { "indicator": "http://123.190.28.195:58680/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-20 12:27:07 UTC", "last_seen": "2026-03-20 12:27:07 UTC", "sightings": 1 }, { "indicator": "http://119.114.59.22:54479/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 12:26:16 UTC", "last_seen": "2026-03-20 12:26:16 UTC", "sightings": 1 }, { "indicator": "https://kel-nexis.currvers.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 12:24:11 UTC", "last_seen": "2026-03-20 12:24:11 UTC", "sightings": 1 }, { "indicator": "https://trilineix.doabove.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 12:18:07 UTC", "last_seen": "2026-03-20 12:18:07 UTC", "sightings": 1 }, { "indicator": "http://196.190.0.118:47266/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-20 12:15:18 UTC", "last_seen": "2026-03-20 12:15:18 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/MannKalariya/Portfoilio/refs/heads/main/.vscode/Software-1.9.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-20 12:15:10 UTC", "last_seen": "2026-03-20 12:15:10 UTC", "sightings": 1 }, { "indicator": "https://github.com/MannKalariya/BO6-SecretLoadouts/raw/refs/heads/main/stepbrother/B-Secret-Loadouts-1.7.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-20 12:15:10 UTC", "last_seen": "2026-03-20 12:15:10 UTC", "sightings": 1 }, { "indicator": "https://github.com/MannKalariya/Digital-Resume-Builder/raw/refs/heads/main/public/Digital-Builder-Resume-predramatic.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-20 12:15:09 UTC", "last_seen": "2026-03-20 12:15:09 UTC", "sightings": 1 }, { "indicator": "https://github.com/MannKalariya/Portfoilio/raw/refs/heads/main/.vscode/Software-1.9.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-20 12:15:09 UTC", "last_seen": "2026-03-20 12:15:09 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/MannKalariya/Digital-Resume-Builder/refs/heads/main/public/Digital-Builder-Resume-predramatic.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-20 12:15:09 UTC", "last_seen": "2026-03-20 12:15:09 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/MannKalariya/BO6-SecretLoadouts/refs/heads/main/stepbrother/B-Secret-Loadouts-1.7.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-20 12:15:09 UTC", "last_seen": "2026-03-20 12:15:09 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/MannKalariya/powersub-demo-1078/refs/heads/main/shufflingly/demo_powersub_v2.0.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-20 12:15:08 UTC", "last_seen": "2026-03-20 12:15:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/MannKalariya/powersub-demo-1078/raw/refs/heads/main/shufflingly/demo_powersub_v2.0.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-20 12:15:08 UTC", "last_seen": "2026-03-20 12:15:08 UTC", "sightings": 1 }, { "indicator": "http://110.36.1.168:49421/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 12:13:16 UTC", "last_seen": "2026-03-20 12:13:16 UTC", "sightings": 1 }, { "indicator": "https://mercoreet5.doabove.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 12:10:15 UTC", "last_seen": "2026-03-20 12:10:15 UTC", "sightings": 1 }, { "indicator": "http://42.238.118.156:40791/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 12:07:07 UTC", "last_seen": "2026-03-20 12:07:07 UTC", "sightings": 1 }, { "indicator": "http://110.37.100.99:46128/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-20 12:07:06 UTC", "last_seen": "2026-03-20 12:07:06 UTC", "sightings": 1 }, { "indicator": "http://196.190.0.118:47266/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-20 12:05:18 UTC", "last_seen": "2026-03-20 12:05:18 UTC", "sightings": 1 }, { "indicator": "https://reef-dat.doabove.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 12:03:06 UTC", "last_seen": "2026-03-20 12:03:06 UTC", "sightings": 1 }, { "indicator": "https://harvestedit.doabove.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 11:58:06 UTC", "last_seen": "2026-03-20 11:58:06 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/dellarwalter/ThrottleAI/refs/heads/main/examples/AI_Throttle_2.2-beta.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-20 11:55:11 UTC", "last_seen": "2026-03-20 11:55:11 UTC", "sightings": 1 }, { "indicator": "https://github.com/charlieallen16/vibeshell/raw/refs/heads/master/src/components/EditServerDialog/Software_v3.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-20 11:55:10 UTC", "last_seen": "2026-03-20 11:55:10 UTC", "sightings": 1 }, { "indicator": "https://github.com/dellarwalter/ThrottleAI/raw/refs/heads/main/examples/AI_Throttle_2.2-beta.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-20 11:55:10 UTC", "last_seen": "2026-03-20 11:55:10 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/charlieallen16/vibeshell/refs/heads/master/src/components/EditServerDialog/Software_v3.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-20 11:55:09 UTC", "last_seen": "2026-03-20 11:55:09 UTC", "sightings": 1 }, { "indicator": "https://visualfier.dombove.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 11:51:09 UTC", "last_seen": "2026-03-20 11:51:09 UTC", "sightings": 1 }, { "indicator": "http://115.63.151.65:38339/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 11:50:08 UTC", "last_seen": "2026-03-20 11:50:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/danieltulus/bookshelf-api-submission/raw/refs/heads/master/robustiously/submission_bookshelf_api_1.0.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-20 11:47:09 UTC", "last_seen": "2026-03-20 11:47:09 UTC", "sightings": 1 }, { "indicator": "https://github.com/danieltulus/Bit-of-Business-OS/raw/refs/heads/master/images/OS_Bit_of_Business_v2.9.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-20 11:47:09 UTC", "last_seen": "2026-03-20 11:47:09 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/danieltulus/bookshelf-api-submission/refs/heads/master/robustiously/submission_bookshelf_api_1.0.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-20 11:47:09 UTC", "last_seen": "2026-03-20 11:47:09 UTC", "sightings": 1 }, { "indicator": "https://github.com/danieltulus/rest-api-app/raw/refs/heads/main/flaskr/rest_app_api_2.7.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-20 11:47:09 UTC", "last_seen": "2026-03-20 11:47:09 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/danieltulus/notes-app-back-end/refs/heads/master/node_modules/nopt/notes-end-app-back-2.4.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-20 11:47:09 UTC", "last_seen": "2026-03-20 11:47:09 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/danieltulus/rest-api-app/refs/heads/main/flaskr/rest_app_api_2.7.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-20 11:47:09 UTC", "last_seen": "2026-03-20 11:47:09 UTC", "sightings": 1 }, { "indicator": "https://github.com/BramSkiee/fishxcode/raw/refs/heads/main/es/Software_v2.9.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-20 11:47:08 UTC", "last_seen": "2026-03-20 11:47:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/BramSkiee/fishxcode/refs/heads/main/es/Software_v2.9.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-20 11:47:08 UTC", "last_seen": "2026-03-20 11:47:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/kattimatti22/vibecode-playground/refs/heads/main/hooks/playground_vibecode_2.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-20 11:47:08 UTC", "last_seen": "2026-03-20 11:47:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/danieltulus/Bit-of-Business-OS/refs/heads/master/images/OS_Bit_of_Business_v2.9.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-20 11:47:08 UTC", "last_seen": "2026-03-20 11:47:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/kattimatti22/vibecode-playground/raw/refs/heads/main/hooks/playground_vibecode_2.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-20 11:47:08 UTC", "last_seen": "2026-03-20 11:47:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/danieltulus/010-020-022_datamining_polibatam/refs/heads/master/scaturient/polibatam-datamining-v2.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-20 11:47:08 UTC", "last_seen": "2026-03-20 11:47:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/danieltulus/010-020-022_datamining_polibatam/raw/refs/heads/master/scaturient/polibatam-datamining-v2.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-20 11:47:08 UTC", "last_seen": "2026-03-20 11:47:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/danieltulus/notes-app-back-end/raw/refs/heads/master/node_modules/nopt/notes-end-app-back-2.4.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-20 11:47:08 UTC", "last_seen": "2026-03-20 11:47:08 UTC", "sightings": 1 }, { "indicator": "http://27.215.137.51:33799/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 11:45:19 UTC", "last_seen": "2026-03-20 11:45:19 UTC", "sightings": 1 }, { "indicator": "https://fsrwr05.dombove.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 11:43:06 UTC", "last_seen": "2026-03-20 11:43:06 UTC", "sightings": 1 }, { "indicator": "http://110.37.100.99:46128/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-20 11:42:11 UTC", "last_seen": "2026-03-20 11:42:11 UTC", "sightings": 1 }, { "indicator": "https://dusdyna.dombove.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 11:37:10 UTC", "last_seen": "2026-03-20 11:37:10 UTC", "sightings": 1 }, { "indicator": "http://110.38.201.196:36728/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-20 11:37:08 UTC", "last_seen": "2026-03-20 11:37:08 UTC", "sightings": 1 }, { "indicator": "http://115.50.231.176:49841/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 11:35:17 UTC", "last_seen": "2026-03-20 11:35:17 UTC", "sightings": 1 }, { "indicator": "https://arktideix1.dombove.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 11:31:08 UTC", "last_seen": "2026-03-20 11:31:08 UTC", "sightings": 1 }, { "indicator": "https://iwug.gothrough.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 11:23:06 UTC", "last_seen": "2026-03-20 11:23:06 UTC", "sightings": 1 }, { "indicator": "http://115.63.151.65:38339/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 11:21:20 UTC", "last_seen": "2026-03-20 11:21:20 UTC", "sightings": 1 }, { "indicator": "https://uwor76f8.oaknet.digital/?=check&&actmn=drvTptepxZwxHxGJ", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-20 11:20:11 UTC", "last_seen": "2026-03-20 11:20:11 UTC", "sightings": 1 }, { "indicator": "http://112.248.112.243:41561/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 11:17:22 UTC", "last_seen": "2026-03-20 11:17:22 UTC", "sightings": 1 }, { "indicator": "http://27.215.137.51:33799/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 11:17:20 UTC", "last_seen": "2026-03-20 11:17:20 UTC", "sightings": 1 }, { "indicator": "https://rav3n-span.gothrough.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 11:17:07 UTC", "last_seen": "2026-03-20 11:17:07 UTC", "sightings": 1 }, { "indicator": "http://115.50.231.176:49841/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 11:13:17 UTC", "last_seen": "2026-03-20 11:13:17 UTC", "sightings": 1 }, { "indicator": "https://delivergolden.gothrough.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 11:09:07 UTC", "last_seen": "2026-03-20 11:09:07 UTC", "sightings": 1 }, { "indicator": "http://175.165.82.206:38670/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 11:08:15 UTC", "last_seen": "2026-03-20 11:08:15 UTC", "sightings": 1 }, { "indicator": "https://streamnoble.gothrough.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 11:07:08 UTC", "last_seen": "2026-03-20 11:07:08 UTC", "sightings": 1 }, { "indicator": "http://110.38.197.49:44787/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-20 11:07:07 UTC", "last_seen": "2026-03-20 11:07:07 UTC", "sightings": 1 }, { "indicator": "http://110.38.201.196:36728/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-20 11:07:07 UTC", "last_seen": "2026-03-20 11:07:07 UTC", "sightings": 1 }, { "indicator": "https://streamglo.plotsafe.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 10:54:07 UTC", "last_seen": "2026-03-20 10:54:07 UTC", "sightings": 1 }, { "indicator": "http://110.37.32.228:45526/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-20 10:52:08 UTC", "last_seen": "2026-03-20 10:52:08 UTC", "sightings": 1 }, { "indicator": "https://dynfluxon.plotsafe.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 10:47:10 UTC", "last_seen": "2026-03-20 10:47:10 UTC", "sightings": 1 }, { "indicator": "http://132.145.235.110:2/agent.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "Ligolo", "opendir" ], "first_seen": "2026-03-20 10:44:08 UTC", "last_seen": "2026-03-20 10:44:08 UTC", "sightings": 1 }, { "indicator": "http://175.165.82.206:38670/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 10:42:17 UTC", "last_seen": "2026-03-20 10:42:17 UTC", "sightings": 1 }, { "indicator": "http://110.38.197.49:44787/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-20 10:42:06 UTC", "last_seen": "2026-03-20 10:42:06 UTC", "sightings": 1 }, { "indicator": "http://117.217.18.48:44270/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 10:41:22 UTC", "last_seen": "2026-03-20 10:41:22 UTC", "sightings": 1 }, { "indicator": "https://innultra.plotsafe.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 10:40:10 UTC", "last_seen": "2026-03-20 10:40:10 UTC", "sightings": 1 }, { "indicator": "http://110.39.237.16:34350/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 10:38:18 UTC", "last_seen": "2026-03-20 10:38:18 UTC", "sightings": 1 }, { "indicator": "https://qczcgd.plotsafe.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 10:32:09 UTC", "last_seen": "2026-03-20 10:32:09 UTC", "sightings": 1 }, { "indicator": "https://soltideis9.infosafe.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 10:25:10 UTC", "last_seen": "2026-03-20 10:25:10 UTC", "sightings": 1 }, { "indicator": "https://proto-patt3r.infosafe.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 10:16:05 UTC", "last_seen": "2026-03-20 10:16:05 UTC", "sightings": 1 }, { "indicator": "http://42.238.170.24:49093/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 10:15:12 UTC", "last_seen": "2026-03-20 10:15:12 UTC", "sightings": 1 }, { "indicator": "https://nefnpr.infosafe.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 10:09:06 UTC", "last_seen": "2026-03-20 10:09:06 UTC", "sightings": 1 }, { "indicator": "http://110.37.32.228:45526/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-20 10:02:20 UTC", "last_seen": "2026-03-20 10:02:20 UTC", "sightings": 1 }, { "indicator": "http://110.37.65.64:33635/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 10:01:19 UTC", "last_seen": "2026-03-20 10:01:19 UTC", "sightings": 1 }, { "indicator": "https://hxfpc.infosafe.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 10:01:19 UTC", "last_seen": "2026-03-20 10:01:19 UTC", "sightings": 1 }, { "indicator": "https://arkcrestex4.capslock.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 09:54:07 UTC", "last_seen": "2026-03-20 09:54:07 UTC", "sightings": 1 }, { "indicator": "http://121.37.40.52/r", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai" ], "first_seen": "2026-03-20 09:52:32 UTC", "last_seen": "2026-03-20 09:52:32 UTC", "sightings": 1 }, { "indicator": "http://121.37.40.52/d", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "gafgyt", "mirai" ], "first_seen": "2026-03-20 09:52:26 UTC", "last_seen": "2026-03-20 09:52:26 UTC", "sightings": 1 }, { "indicator": "http://42.238.170.24:49093/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 09:52:25 UTC", "last_seen": "2026-03-20 09:52:25 UTC", "sightings": 1 }, { "indicator": "http://121.37.40.52/t", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai" ], "first_seen": "2026-03-20 09:52:25 UTC", "last_seen": "2026-03-20 09:52:25 UTC", "sightings": 1 }, { "indicator": "http://121.37.40.52/a", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai" ], "first_seen": "2026-03-20 09:52:24 UTC", "last_seen": "2026-03-20 09:52:24 UTC", "sightings": 1 }, { "indicator": "http://121.37.40.52/w", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai" ], "first_seen": "2026-03-20 09:52:24 UTC", "last_seen": "2026-03-20 09:52:24 UTC", "sightings": 1 }, { "indicator": "http://121.37.40.52/s", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "gafgyt", "mirai" ], "first_seen": "2026-03-20 09:52:24 UTC", "last_seen": "2026-03-20 09:52:24 UTC", "sightings": 1 }, { "indicator": "http://121.37.40.52/j", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai" ], "first_seen": "2026-03-20 09:52:24 UTC", "last_seen": "2026-03-20 09:52:24 UTC", "sightings": 1 }, { "indicator": "http://121.37.40.52/q", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai" ], "first_seen": "2026-03-20 09:52:22 UTC", "last_seen": "2026-03-20 09:52:22 UTC", "sightings": 1 }, { "indicator": "http://121.37.40.52/f", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai" ], "first_seen": "2026-03-20 09:52:21 UTC", "last_seen": "2026-03-20 09:52:21 UTC", "sightings": 1 }, { "indicator": "http://121.37.40.52/e", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai" ], "first_seen": "2026-03-20 09:52:21 UTC", "last_seen": "2026-03-20 09:52:21 UTC", "sightings": 1 }, { "indicator": "http://121.37.40.52/g", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai" ], "first_seen": "2026-03-20 09:52:21 UTC", "last_seen": "2026-03-20 09:52:21 UTC", "sightings": 1 }, { "indicator": "http://121.37.40.52/k", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai" ], "first_seen": "2026-03-20 09:52:21 UTC", "last_seen": "2026-03-20 09:52:21 UTC", "sightings": 1 }, { "indicator": "http://121.37.40.52/h", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai" ], "first_seen": "2026-03-20 09:52:14 UTC", "last_seen": "2026-03-20 09:52:14 UTC", "sightings": 1 }, { "indicator": "http://121.37.40.52/l", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai" ], "first_seen": "2026-03-20 09:52:13 UTC", "last_seen": "2026-03-20 09:52:13 UTC", "sightings": 1 }, { "indicator": "http://110.39.229.188:60557/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-20 09:52:07 UTC", "last_seen": "2026-03-20 09:52:07 UTC", "sightings": 1 }, { "indicator": "https://embdark.capslock.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 09:45:08 UTC", "last_seen": "2026-03-20 09:45:08 UTC", "sightings": 1 }, { "indicator": "http://110.37.65.64:33635/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 09:44:19 UTC", "last_seen": "2026-03-20 09:44:19 UTC", "sightings": 1 }, { "indicator": "https://arkspire4ex.capslock.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 09:37:14 UTC", "last_seen": "2026-03-20 09:37:14 UTC", "sightings": 1 }, { "indicator": "http://27.216.110.222:45252/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-20 09:37:07 UTC", "last_seen": "2026-03-20 09:37:07 UTC", "sightings": 1 }, { "indicator": "http://59.180.162.174:42524/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 09:34:16 UTC", "last_seen": "2026-03-20 09:34:16 UTC", "sightings": 1 }, { "indicator": "https://opt1c8-core.capslock.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 09:30:10 UTC", "last_seen": "2026-03-20 09:30:10 UTC", "sightings": 1 }, { "indicator": "http://59.42.88.121:56735/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-20 09:27:08 UTC", "last_seen": "2026-03-20 09:27:08 UTC", "sightings": 1 }, { "indicator": "http://110.37.80.62:49186/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 09:24:16 UTC", "last_seen": "2026-03-20 09:24:16 UTC", "sightings": 1 }, { "indicator": "http://220.201.64.178:45797/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-20 09:22:21 UTC", "last_seen": "2026-03-20 09:22:21 UTC", "sightings": 1 }, { "indicator": "https://meta-sh0re.trueflow.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 09:22:12 UTC", "last_seen": "2026-03-20 09:22:12 UTC", "sightings": 1 }, { "indicator": "https://summeinn.trueflow.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 09:16:11 UTC", "last_seen": "2026-03-20 09:16:11 UTC", "sightings": 1 }, { "indicator": "http://59.180.162.174:42524/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 09:14:34 UTC", "last_seen": "2026-03-20 09:14:34 UTC", "sightings": 1 }, { "indicator": "http://110.36.29.195:57588/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 09:14:24 UTC", "last_seen": "2026-03-20 09:14:24 UTC", "sightings": 1 }, { "indicator": "https://solcorea.trueflow.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 09:08:09 UTC", "last_seen": "2026-03-20 09:08:09 UTC", "sightings": 1 }, { "indicator": "http://196.189.3.1:36234/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-20 09:07:21 UTC", "last_seen": "2026-03-20 09:07:21 UTC", "sightings": 1 }, { "indicator": "http://110.37.80.62:49186/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 09:00:30 UTC", "last_seen": "2026-03-20 09:00:30 UTC", "sightings": 1 }, { "indicator": "https://taldraen.trueflow.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 09:00:09 UTC", "last_seen": "2026-03-20 09:00:09 UTC", "sightings": 1 }, { "indicator": "http://221.15.206.248:47286/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 08:59:12 UTC", "last_seen": "2026-03-20 08:59:12 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.7/files/7341834371/BgAtGH0.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543", "Stealc" ], "first_seen": "2026-03-20 08:57:07 UTC", "last_seen": "2026-03-20 08:57:07 UTC", "sightings": 1 }, { "indicator": "https://za7lvsc.trueslak.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 08:52:12 UTC", "last_seen": "2026-03-20 08:52:12 UTC", "sightings": 1 }, { "indicator": "http://27.215.180.134:53621/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 08:51:09 UTC", "last_seen": "2026-03-20 08:51:09 UTC", "sightings": 1 }, { "indicator": "http://219.155.202.167:51648/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 08:49:21 UTC", "last_seen": "2026-03-20 08:49:21 UTC", "sightings": 1 }, { "indicator": "https://neo-c1iff.trueslak.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 08:45:06 UTC", "last_seen": "2026-03-20 08:45:06 UTC", "sightings": 1 }, { "indicator": "http://110.37.118.101:49747/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-20 08:42:07 UTC", "last_seen": "2026-03-20 08:42:07 UTC", "sightings": 1 }, { "indicator": "http://221.15.206.248:47286/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 08:38:25 UTC", "last_seen": "2026-03-20 08:38:25 UTC", "sightings": 1 }, { "indicator": "https://merlithar1.trueslak.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 08:38:09 UTC", "last_seen": "2026-03-20 08:38:09 UTC", "sightings": 1 }, { "indicator": "http://222.137.118.218:39419/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-20 08:32:06 UTC", "last_seen": "2026-03-20 08:32:06 UTC", "sightings": 1 }, { "indicator": "https://adzpzg.trueslak.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 08:30:10 UTC", "last_seen": "2026-03-20 08:30:10 UTC", "sightings": 1 }, { "indicator": "http://219.155.202.167:51648/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 08:25:21 UTC", "last_seen": "2026-03-20 08:25:21 UTC", "sightings": 1 }, { "indicator": "http://27.215.180.134:53621/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 08:23:13 UTC", "last_seen": "2026-03-20 08:23:13 UTC", "sightings": 1 }, { "indicator": "https://main4point.metrichandler.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 08:22:11 UTC", "last_seen": "2026-03-20 08:22:11 UTC", "sightings": 1 }, { "indicator": "https://main3data.metrichandler.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 08:14:07 UTC", "last_seen": "2026-03-20 08:14:07 UTC", "sightings": 1 }, { "indicator": "http://94.230.141.123:47229/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 08:10:14 UTC", "last_seen": "2026-03-20 08:10:14 UTC", "sightings": 1 }, { "indicator": "http://117.209.5.15:57613/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 08:09:17 UTC", "last_seen": "2026-03-20 08:09:17 UTC", "sightings": 1 }, { "indicator": "https://main2proxy.metrichandler.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 08:07:06 UTC", "last_seen": "2026-03-20 08:07:06 UTC", "sightings": 1 }, { "indicator": "http://222.137.118.218:39419/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-20 08:02:07 UTC", "last_seen": "2026-03-20 08:02:07 UTC", "sightings": 1 }, { "indicator": "http://27.207.161.85:36289/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 07:59:10 UTC", "last_seen": "2026-03-20 07:59:10 UTC", "sightings": 1 }, { "indicator": "https://main1infra.metrichandler.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 07:59:07 UTC", "last_seen": "2026-03-20 07:59:07 UTC", "sightings": 1 }, { "indicator": "http://91.92.242.3:7777/noesisllc.online/wealt1818/wealtt/nerdfwiqtwqhdgfrwt6fntdwrgonht.js", "indicator_type": "url", "source": "URLhaus", "tags": [ "ascii", "js", "MassLogger", "SnakeKeylogger" ], "first_seen": "2026-03-20 07:59:06 UTC", "last_seen": "2026-03-20 07:59:06 UTC", "sightings": 1 }, { "indicator": "http://110.37.23.183:41229/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-20 07:57:16 UTC", "last_seen": "2026-03-20 07:57:16 UTC", "sightings": 1 }, { "indicator": "https://repost.optico-voda.info/denyexorcist", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ascii" ], "first_seen": "2026-03-20 07:54:07 UTC", "last_seen": "2026-03-20 07:54:07 UTC", "sightings": 1 }, { "indicator": "http://117.26.226.171:52208/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-20 07:52:14 UTC", "last_seen": "2026-03-20 07:52:14 UTC", "sightings": 1 }, { "indicator": "https://orbit4sat.terminalvariable.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 07:51:07 UTC", "last_seen": "2026-03-20 07:51:07 UTC", "sightings": 1 }, { "indicator": "http://117.198.205.219:42306/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 07:49:10 UTC", "last_seen": "2026-03-20 07:49:10 UTC", "sightings": 1 }, { "indicator": "http://125.65.146.195:40018/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-20 07:47:07 UTC", "last_seen": "2026-03-20 07:47:07 UTC", "sightings": 1 }, { "indicator": "http://110.37.44.158:57158/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-20 07:45:18 UTC", "last_seen": "2026-03-20 07:45:18 UTC", "sightings": 1 }, { "indicator": "https://orbit3core.terminalvariable.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 07:44:07 UTC", "last_seen": "2026-03-20 07:44:07 UTC", "sightings": 1 }, { "indicator": "http://110.39.237.16:34350/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 07:41:19 UTC", "last_seen": "2026-03-20 07:41:19 UTC", "sightings": 1 }, { "indicator": "http://94.230.141.123:47229/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 07:41:18 UTC", "last_seen": "2026-03-20 07:41:18 UTC", "sightings": 1 }, { "indicator": "http://196.189.101.82:39180/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-20 07:37:07 UTC", "last_seen": "2026-03-20 07:37:07 UTC", "sightings": 1 }, { "indicator": "https://orbit2steel.terminalvariable.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 07:35:09 UTC", "last_seen": "2026-03-20 07:35:09 UTC", "sightings": 1 }, { "indicator": "https://orbit1proc.terminalvariable.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 07:28:07 UTC", "last_seen": "2026-03-20 07:28:07 UTC", "sightings": 1 }, { "indicator": "http://110.37.23.183:41229/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-20 07:27:10 UTC", "last_seen": "2026-03-20 07:27:10 UTC", "sightings": 1 }, { "indicator": "http://60.23.237.114:46886/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-20 07:27:05 UTC", "last_seen": "2026-03-20 07:27:05 UTC", "sightings": 1 }, { "indicator": "http://119.117.252.250:51652/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 07:25:23 UTC", "last_seen": "2026-03-20 07:25:23 UTC", "sightings": 1 }, { "indicator": "http://110.37.65.231:56094/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 07:24:13 UTC", "last_seen": "2026-03-20 07:24:13 UTC", "sightings": 1 }, { "indicator": "http://62.94.13.193:56217/.i", "indicator_type": "url", "source": "URLhaus", "tags": [ "hajime" ], "first_seen": "2026-03-20 07:22:09 UTC", "last_seen": "2026-03-20 07:22:09 UTC", "sightings": 1 }, { "indicator": "https://area4space.boundarygateway.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 07:20:08 UTC", "last_seen": "2026-03-20 07:20:08 UTC", "sightings": 1 }, { "indicator": "http://125.65.146.195:40018/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-20 07:17:07 UTC", "last_seen": "2026-03-20 07:17:07 UTC", "sightings": 1 }, { "indicator": "http://42.232.86.2:50926/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 07:16:10 UTC", "last_seen": "2026-03-20 07:16:10 UTC", "sightings": 1 }, { "indicator": "https://area3field.boundarygateway.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 07:12:06 UTC", "last_seen": "2026-03-20 07:12:06 UTC", "sightings": 1 }, { "indicator": "https://area2outer.boundarygateway.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 07:06:07 UTC", "last_seen": "2026-03-20 07:06:07 UTC", "sightings": 1 }, { "indicator": "https://area1proc.boundarygateway.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 06:58:09 UTC", "last_seen": "2026-03-20 06:58:09 UTC", "sightings": 1 }, { "indicator": "http://115.48.38.160:60343/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 06:57:21 UTC", "last_seen": "2026-03-20 06:57:21 UTC", "sightings": 1 }, { "indicator": "http://117.211.230.223:35819/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 06:56:29 UTC", "last_seen": "2026-03-20 06:56:29 UTC", "sightings": 1 }, { "indicator": "http://42.232.86.2:50926/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 06:56:29 UTC", "last_seen": "2026-03-20 06:56:29 UTC", "sightings": 1 }, { "indicator": "http://110.37.115.90:40870/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 06:56:28 UTC", "last_seen": "2026-03-20 06:56:28 UTC", "sightings": 1 }, { "indicator": "http://61.176.118.72:55943/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 06:52:15 UTC", "last_seen": "2026-03-20 06:52:15 UTC", "sightings": 1 }, { "indicator": "http://110.39.249.140:58144/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-20 06:52:07 UTC", "last_seen": "2026-03-20 06:52:07 UTC", "sightings": 1 }, { "indicator": "http://110.37.72.176:58766/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-20 06:52:07 UTC", "last_seen": "2026-03-20 06:52:07 UTC", "sightings": 1 }, { "indicator": "http://117.205.165.178:37567/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 06:51:13 UTC", "last_seen": "2026-03-20 06:51:13 UTC", "sightings": 1 }, { "indicator": "https://dark4path.remotediagnostic.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 06:51:06 UTC", "last_seen": "2026-03-20 06:51:06 UTC", "sightings": 1 }, { "indicator": "http://117.198.205.219:42306/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 06:48:22 UTC", "last_seen": "2026-03-20 06:48:22 UTC", "sightings": 1 }, { "indicator": "http://125.44.52.160:50276/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 06:48:21 UTC", "last_seen": "2026-03-20 06:48:21 UTC", "sightings": 1 }, { "indicator": "https://dark3view.remotediagnostic.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 06:42:07 UTC", "last_seen": "2026-03-20 06:42:07 UTC", "sightings": 1 }, { "indicator": "http://119.117.252.250:51652/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 06:41:21 UTC", "last_seen": "2026-03-20 06:41:21 UTC", "sightings": 1 }, { "indicator": "http://60.23.237.114:46886/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-20 06:37:07 UTC", "last_seen": "2026-03-20 06:37:07 UTC", "sightings": 1 }, { "indicator": "http://196.189.101.82:39180/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-20 06:37:07 UTC", "last_seen": "2026-03-20 06:37:07 UTC", "sightings": 1 }, { "indicator": "http://110.37.72.176:58766/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-20 06:37:07 UTC", "last_seen": "2026-03-20 06:37:07 UTC", "sightings": 1 }, { "indicator": "https://dark2point.remotediagnostic.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 06:34:06 UTC", "last_seen": "2026-03-20 06:34:06 UTC", "sightings": 1 }, { "indicator": "https://dark1proc.remotediagnostic.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 06:28:08 UTC", "last_seen": "2026-03-20 06:28:08 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.62/bins/parm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-20 06:23:07 UTC", "last_seen": "2026-03-20 06:23:07 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.62/bins/parm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-20 06:23:07 UTC", "last_seen": "2026-03-20 06:23:07 UTC", "sightings": 1 }, { "indicator": "http://61.176.118.72:55943/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 06:21:14 UTC", "last_seen": "2026-03-20 06:21:14 UTC", "sightings": 1 }, { "indicator": "http://27.37.103.152:37596/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 06:21:13 UTC", "last_seen": "2026-03-20 06:21:13 UTC", "sightings": 1 }, { "indicator": "https://alpha4view.cloudfoundation.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 06:20:08 UTC", "last_seen": "2026-03-20 06:20:08 UTC", "sightings": 1 }, { "indicator": "http://115.50.40.10:41244/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-20 06:20:08 UTC", "last_seen": "2026-03-20 06:20:08 UTC", "sightings": 1 }, { "indicator": "http://27.37.103.152:37596/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 06:19:25 UTC", "last_seen": "2026-03-20 06:19:25 UTC", "sightings": 1 }, { "indicator": "http://182.121.158.254:49572/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 06:19:24 UTC", "last_seen": "2026-03-20 06:19:24 UTC", "sightings": 1 }, { "indicator": "http://124.44.114.162:33887/.i", "indicator_type": "url", "source": "URLhaus", "tags": [ "hajime" ], "first_seen": "2026-03-20 06:19:10 UTC", "last_seen": "2026-03-20 06:19:10 UTC", "sightings": 1 }, { "indicator": "http://115.50.40.10:41244/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-20 06:19:08 UTC", "last_seen": "2026-03-20 06:19:08 UTC", "sightings": 1 }, { "indicator": "http://176.165.146.103:56824/.i", "indicator_type": "url", "source": "URLhaus", "tags": [ "hajime" ], "first_seen": "2026-03-20 06:19:07 UTC", "last_seen": "2026-03-20 06:19:07 UTC", "sightings": 1 }, { "indicator": "http://123.8.10.125:46066/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 06:16:21 UTC", "last_seen": "2026-03-20 06:16:21 UTC", "sightings": 1 }, { "indicator": "http://59.182.122.220:38105/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 06:12:23 UTC", "last_seen": "2026-03-20 06:12:23 UTC", "sightings": 1 }, { "indicator": "http://203.99.180.141:38652/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-20 06:12:15 UTC", "last_seen": "2026-03-20 06:12:15 UTC", "sightings": 1 }, { "indicator": "https://alpha3ghost.cloudfoundation.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 06:12:08 UTC", "last_seen": "2026-03-20 06:12:08 UTC", "sightings": 1 }, { "indicator": "http://59.88.23.132:50680/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-20 06:12:07 UTC", "last_seen": "2026-03-20 06:12:07 UTC", "sightings": 1 }, { "indicator": "http://117.245.142.221:58074/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 06:08:21 UTC", "last_seen": "2026-03-20 06:08:21 UTC", "sightings": 1 }, { "indicator": "https://alpha2core.cloudfoundation.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 06:04:08 UTC", "last_seen": "2026-03-20 06:04:08 UTC", "sightings": 1 }, { "indicator": "http://182.121.158.254:49572/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 05:58:14 UTC", "last_seen": "2026-03-20 05:58:14 UTC", "sightings": 1 }, { "indicator": "http://117.206.102.97:39853/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-20 05:57:11 UTC", "last_seen": "2026-03-20 05:57:11 UTC", "sightings": 1 }, { "indicator": "http://183.92.204.242:33985/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-20 05:57:07 UTC", "last_seen": "2026-03-20 05:57:07 UTC", "sightings": 1 }, { "indicator": "http://175.9.135.215:39420/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-20 05:56:16 UTC", "last_seen": "2026-03-20 05:56:16 UTC", "sightings": 1 }, { "indicator": "https://alpha1proc.cloudfoundation.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 05:56:11 UTC", "last_seen": "2026-03-20 05:56:11 UTC", "sightings": 1 }, { "indicator": "https://core4link.systeminterface.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 05:48:06 UTC", "last_seen": "2026-03-20 05:48:06 UTC", "sightings": 1 }, { "indicator": "http://110.37.114.13:38681/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 05:47:17 UTC", "last_seen": "2026-03-20 05:47:17 UTC", "sightings": 1 }, { "indicator": "http://196.189.35.226:52496/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-20 05:47:06 UTC", "last_seen": "2026-03-20 05:47:06 UTC", "sightings": 1 }, { "indicator": "https://core3user.systeminterface.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 05:42:06 UTC", "last_seen": "2026-03-20 05:42:06 UTC", "sightings": 1 }, { "indicator": "http://110.39.237.192:33821/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 05:38:15 UTC", "last_seen": "2026-03-20 05:38:15 UTC", "sightings": 1 }, { "indicator": "http://203.99.180.141:38652/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-20 05:37:11 UTC", "last_seen": "2026-03-20 05:37:11 UTC", "sightings": 1 }, { "indicator": "https://core2base.systeminterface.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 05:34:06 UTC", "last_seen": "2026-03-20 05:34:06 UTC", "sightings": 1 }, { "indicator": "http://183.92.204.242:33985/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-20 05:32:08 UTC", "last_seen": "2026-03-20 05:32:08 UTC", "sightings": 1 }, { "indicator": "http://110.37.14.231:46134/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 05:25:19 UTC", "last_seen": "2026-03-20 05:25:19 UTC", "sightings": 1 }, { "indicator": "https://core1infra.systeminterface.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 05:25:08 UTC", "last_seen": "2026-03-20 05:25:08 UTC", "sightings": 1 }, { "indicator": "http://110.37.114.13:38681/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 05:22:17 UTC", "last_seen": "2026-03-20 05:22:17 UTC", "sightings": 1 }, { "indicator": "http://110.36.65.9:54792/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 05:18:20 UTC", "last_seen": "2026-03-20 05:18:20 UTC", "sightings": 1 }, { "indicator": "https://point4work.virtualresource.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 05:18:06 UTC", "last_seen": "2026-03-20 05:18:06 UTC", "sightings": 1 }, { "indicator": "http://196.189.35.226:52496/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-20 05:17:06 UTC", "last_seen": "2026-03-20 05:17:06 UTC", "sightings": 1 }, { "indicator": "http://42.180.12.36:45414/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 05:16:13 UTC", "last_seen": "2026-03-20 05:16:13 UTC", "sightings": 1 }, { "indicator": "https://point3local.virtualresource.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 05:10:06 UTC", "last_seen": "2026-03-20 05:10:06 UTC", "sightings": 1 }, { "indicator": "https://point2power.virtualresource.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 05:04:08 UTC", "last_seen": "2026-03-20 05:04:08 UTC", "sightings": 1 }, { "indicator": "http://175.9.135.215:39420/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-20 04:59:17 UTC", "last_seen": "2026-03-20 04:59:17 UTC", "sightings": 1 }, { "indicator": "https://point1proc.virtualresource.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 04:56:07 UTC", "last_seen": "2026-03-20 04:56:07 UTC", "sightings": 1 }, { "indicator": "http://117.244.79.58:58644/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 04:52:18 UTC", "last_seen": "2026-03-20 04:52:18 UTC", "sightings": 1 }, { "indicator": "http://110.39.237.192:33821/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 04:50:16 UTC", "last_seen": "2026-03-20 04:50:16 UTC", "sightings": 1 }, { "indicator": "http://110.36.65.9:54792/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 04:49:15 UTC", "last_seen": "2026-03-20 04:49:15 UTC", "sightings": 1 }, { "indicator": "https://host4link.datacentricnode.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 04:48:08 UTC", "last_seen": "2026-03-20 04:48:08 UTC", "sightings": 1 }, { "indicator": "http://117.215.223.236:57188/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 04:47:19 UTC", "last_seen": "2026-03-20 04:47:19 UTC", "sightings": 1 }, { "indicator": "http://110.37.96.168:54171/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 04:46:07 UTC", "last_seen": "2026-03-20 04:46:07 UTC", "sightings": 1 }, { "indicator": "http://222.141.46.237:43466/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 04:46:07 UTC", "last_seen": "2026-03-20 04:46:07 UTC", "sightings": 1 }, { "indicator": "http://222.140.156.184:35242/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-20 04:42:07 UTC", "last_seen": "2026-03-20 04:42:07 UTC", "sightings": 1 }, { "indicator": "https://host3dev.datacentricnode.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 04:41:05 UTC", "last_seen": "2026-03-20 04:41:05 UTC", "sightings": 1 }, { "indicator": "https://host2remote.datacentricnode.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 04:38:09 UTC", "last_seen": "2026-03-20 04:38:09 UTC", "sightings": 1 }, { "indicator": "http://59.184.240.136:46370/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-20 04:37:07 UTC", "last_seen": "2026-03-20 04:37:07 UTC", "sightings": 1 }, { "indicator": "http://59.176.109.85:52320/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-20 04:32:06 UTC", "last_seen": "2026-03-20 04:32:06 UTC", "sightings": 1 }, { "indicator": "http://42.239.191.80:57983/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-20 04:32:06 UTC", "last_seen": "2026-03-20 04:32:06 UTC", "sightings": 1 }, { "indicator": "http://117.215.223.236:57188/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 04:26:09 UTC", "last_seen": "2026-03-20 04:26:09 UTC", "sightings": 1 }, { "indicator": "https://host1store.datacentricnode.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 04:26:06 UTC", "last_seen": "2026-03-20 04:26:06 UTC", "sightings": 1 }, { "indicator": "http://182.119.35.21:34311/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 04:23:12 UTC", "last_seen": "2026-03-20 04:23:12 UTC", "sightings": 1 }, { "indicator": "http://110.37.86.252:59240/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 04:22:13 UTC", "last_seen": "2026-03-20 04:22:13 UTC", "sightings": 1 }, { "indicator": "http://110.36.93.182:43833/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 04:21:16 UTC", "last_seen": "2026-03-20 04:21:16 UTC", "sightings": 1 }, { "indicator": "http://115.49.27.208:36681/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 04:20:13 UTC", "last_seen": "2026-03-20 04:20:13 UTC", "sightings": 1 }, { "indicator": "http://110.37.86.252:59240/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 04:18:18 UTC", "last_seen": "2026-03-20 04:18:18 UTC", "sightings": 1 }, { "indicator": "http://59.176.109.85:52320/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-20 04:17:26 UTC", "last_seen": "2026-03-20 04:17:26 UTC", "sightings": 1 }, { "indicator": "https://unit4sync.securityprotocol.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 04:17:06 UTC", "last_seen": "2026-03-20 04:17:06 UTC", "sightings": 1 }, { "indicator": "https://unit3gate.securityprotocol.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 04:09:06 UTC", "last_seen": "2026-03-20 04:09:06 UTC", "sightings": 1 }, { "indicator": "http://110.37.39.88:52045/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-20 04:08:24 UTC", "last_seen": "2026-03-20 04:08:24 UTC", "sightings": 1 }, { "indicator": "http://110.39.238.26:39255/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 04:06:16 UTC", "last_seen": "2026-03-20 04:06:16 UTC", "sightings": 1 }, { "indicator": "http://120.28.219.218:35516/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-20 04:02:12 UTC", "last_seen": "2026-03-20 04:02:12 UTC", "sightings": 1 }, { "indicator": "https://unit2proc.securityprotocol.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 04:01:09 UTC", "last_seen": "2026-03-20 04:01:09 UTC", "sightings": 1 }, { "indicator": "http://196.191.231.12:53473/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-20 04:00:10 UTC", "last_seen": "2026-03-20 04:00:10 UTC", "sightings": 1 }, { "indicator": "http://110.39.238.29:46404/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-20 03:57:06 UTC", "last_seen": "2026-03-20 03:57:06 UTC", "sightings": 1 }, { "indicator": "https://unit1meta.securityprotocol.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 03:55:07 UTC", "last_seen": "2026-03-20 03:55:07 UTC", "sightings": 1 }, { "indicator": "http://117.215.221.18:53437/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 03:54:22 UTC", "last_seen": "2026-03-20 03:54:22 UTC", "sightings": 1 }, { "indicator": "http://59.177.96.245:46573/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-20 03:52:16 UTC", "last_seen": "2026-03-20 03:52:16 UTC", "sightings": 1 }, { "indicator": "http://110.37.39.88:52045/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-20 03:49:11 UTC", "last_seen": "2026-03-20 03:49:11 UTC", "sightings": 1 }, { "indicator": "http://93.190.19.101:35901/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-20 03:47:18 UTC", "last_seen": "2026-03-20 03:47:18 UTC", "sightings": 1 }, { "indicator": "https://node4static.networkobserver.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 03:46:05 UTC", "last_seen": "2026-03-20 03:46:05 UTC", "sightings": 1 }, { "indicator": "http://222.140.156.184:35242/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-20 03:42:07 UTC", "last_seen": "2026-03-20 03:42:07 UTC", "sightings": 1 }, { "indicator": "http://196.191.231.12:53473/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-20 03:39:11 UTC", "last_seen": "2026-03-20 03:39:11 UTC", "sightings": 1 }, { "indicator": "https://node3edge.networkobserver.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 03:39:06 UTC", "last_seen": "2026-03-20 03:39:06 UTC", "sightings": 1 }, { "indicator": "http://110.39.238.29:46404/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-20 03:37:06 UTC", "last_seen": "2026-03-20 03:37:06 UTC", "sightings": 1 }, { "indicator": "http://117.215.221.18:53437/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 03:34:29 UTC", "last_seen": "2026-03-20 03:34:29 UTC", "sightings": 1 }, { "indicator": "https://node2data.networkobserver.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 03:31:06 UTC", "last_seen": "2026-03-20 03:31:06 UTC", "sightings": 1 }, { "indicator": "http://110.37.95.229:58769/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 03:30:22 UTC", "last_seen": "2026-03-20 03:30:22 UTC", "sightings": 1 }, { "indicator": "https://node1sync.networkobserver.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 03:24:07 UTC", "last_seen": "2026-03-20 03:24:07 UTC", "sightings": 1 }, { "indicator": "http://93.190.19.101:35901/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-20 03:20:20 UTC", "last_seen": "2026-03-20 03:20:20 UTC", "sightings": 1 }, { "indicator": "http://120.28.219.218:35516/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-20 03:18:23 UTC", "last_seen": "2026-03-20 03:18:23 UTC", "sightings": 1 }, { "indicator": "http://110.36.93.182:43833/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 03:16:09 UTC", "last_seen": "2026-03-20 03:16:09 UTC", "sightings": 1 }, { "indicator": "https://main4point.secureterminal.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 03:16:07 UTC", "last_seen": "2026-03-20 03:16:07 UTC", "sightings": 1 }, { "indicator": "http://110.37.95.229:58769/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 03:09:24 UTC", "last_seen": "2026-03-20 03:09:24 UTC", "sightings": 1 }, { "indicator": "https://load3data.secureterminal.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 03:08:06 UTC", "last_seen": "2026-03-20 03:08:06 UTC", "sightings": 1 }, { "indicator": "http://113.221.57.13:35843/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-20 03:02:12 UTC", "last_seen": "2026-03-20 03:02:12 UTC", "sightings": 1 }, { "indicator": "http://117.211.32.248:56596/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-20 03:02:08 UTC", "last_seen": "2026-03-20 03:02:08 UTC", "sightings": 1 }, { "indicator": "https://entry2proxy.secureterminal.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 03:00:08 UTC", "last_seen": "2026-03-20 03:00:08 UTC", "sightings": 1 }, { "indicator": "http://182.117.78.128:52043/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 02:53:23 UTC", "last_seen": "2026-03-20 02:53:23 UTC", "sightings": 1 }, { "indicator": "https://proc1infra.secureterminal.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 02:53:06 UTC", "last_seen": "2026-03-20 02:53:06 UTC", "sightings": 1 }, { "indicator": "http://59.88.155.38:53043/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 02:52:09 UTC", "last_seen": "2026-03-20 02:52:09 UTC", "sightings": 1 }, { "indicator": "http://113.221.57.13:35843/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-20 02:47:08 UTC", "last_seen": "2026-03-20 02:47:08 UTC", "sightings": 1 }, { "indicator": "https://sat4link.infravariable.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 02:46:06 UTC", "last_seen": "2026-03-20 02:46:06 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.7/files/7776573655/uVFeyUy.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey", "gcleaner" ], "first_seen": "2026-03-20 02:46:06 UTC", "last_seen": "2026-03-20 02:46:06 UTC", "sightings": 1 }, { "indicator": "http://36.70.231.171:46755/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-20 02:42:18 UTC", "last_seen": "2026-03-20 02:42:18 UTC", "sightings": 1 }, { "indicator": "https://load3core.infravariable.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 02:38:07 UTC", "last_seen": "2026-03-20 02:38:07 UTC", "sightings": 1 }, { "indicator": "http://117.211.32.248:56596/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-20 02:37:08 UTC", "last_seen": "2026-03-20 02:37:08 UTC", "sightings": 1 }, { "indicator": "https://entry2steel.infravariable.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 02:30:08 UTC", "last_seen": "2026-03-20 02:30:08 UTC", "sightings": 1 }, { "indicator": "http://117.223.142.202:32776/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-20 02:27:06 UTC", "last_seen": "2026-03-20 02:27:06 UTC", "sightings": 1 }, { "indicator": "http://117.216.49.193:59477/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 02:24:28 UTC", "last_seen": "2026-03-20 02:24:28 UTC", "sightings": 1 }, { "indicator": "http://182.117.78.128:52043/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 02:22:17 UTC", "last_seen": "2026-03-20 02:22:17 UTC", "sightings": 1 }, { "indicator": "https://proc1orbit.infravariable.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 02:22:11 UTC", "last_seen": "2026-03-20 02:22:11 UTC", "sightings": 1 }, { "indicator": "http://59.182.212.75:42755/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 02:20:24 UTC", "last_seen": "2026-03-20 02:20:24 UTC", "sightings": 1 }, { "indicator": "http://120.84.214.66:36834/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 02:20:20 UTC", "last_seen": "2026-03-20 02:20:20 UTC", "sightings": 1 }, { "indicator": "http://182.119.35.21:34311/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 02:16:13 UTC", "last_seen": "2026-03-20 02:16:13 UTC", "sightings": 1 }, { "indicator": "http://110.37.27.87:52895/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 02:15:16 UTC", "last_seen": "2026-03-20 02:15:16 UTC", "sightings": 1 }, { "indicator": "http://36.70.231.171:46755/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-20 02:14:19 UTC", "last_seen": "2026-03-20 02:14:19 UTC", "sightings": 1 }, { "indicator": "https://open4space.staticboundary.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 02:14:05 UTC", "last_seen": "2026-03-20 02:14:05 UTC", "sightings": 1 }, { "indicator": "http://110.36.88.208:51624/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-20 02:12:05 UTC", "last_seen": "2026-03-20 02:12:05 UTC", "sightings": 1 }, { "indicator": "https://load3field.staticboundary.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 02:07:06 UTC", "last_seen": "2026-03-20 02:07:06 UTC", "sightings": 1 }, { "indicator": "http://117.223.142.202:32776/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-20 02:02:14 UTC", "last_seen": "2026-03-20 02:02:14 UTC", "sightings": 1 }, { "indicator": "https://entry2area.staticboundary.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 02:00:08 UTC", "last_seen": "2026-03-20 02:00:08 UTC", "sightings": 1 }, { "indicator": "http://110.37.52.225:49564/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-20 01:57:06 UTC", "last_seen": "2026-03-20 01:57:06 UTC", "sightings": 1 }, { "indicator": "http://114.228.189.130:54987/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-20 01:54:17 UTC", "last_seen": "2026-03-20 01:54:17 UTC", "sightings": 1 }, { "indicator": "http://182.117.49.50:41340/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 01:52:21 UTC", "last_seen": "2026-03-20 01:52:21 UTC", "sightings": 1 }, { "indicator": "https://proc1outer.staticboundary.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 01:52:11 UTC", "last_seen": "2026-03-20 01:52:11 UTC", "sightings": 1 }, { "indicator": "http://101.108.13.91:39609/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-20 01:50:13 UTC", "last_seen": "2026-03-20 01:50:13 UTC", "sightings": 1 }, { "indicator": "http://182.123.208.45:44408/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 01:47:17 UTC", "last_seen": "2026-03-20 01:47:17 UTC", "sightings": 1 }, { "indicator": "http://117.251.162.40:37060/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 01:47:17 UTC", "last_seen": "2026-03-20 01:47:17 UTC", "sightings": 1 }, { "indicator": "http://110.36.88.208:51624/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-20 01:47:06 UTC", "last_seen": "2026-03-20 01:47:06 UTC", "sightings": 1 }, { "indicator": "http://110.37.27.87:52895/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 01:45:07 UTC", "last_seen": "2026-03-20 01:45:07 UTC", "sightings": 1 }, { "indicator": "http://120.84.214.66:36834/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 01:44:18 UTC", "last_seen": "2026-03-20 01:44:18 UTC", "sightings": 1 }, { "indicator": "https://gate4path.remotenetwork.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 01:44:05 UTC", "last_seen": "2026-03-20 01:44:05 UTC", "sightings": 1 }, { "indicator": "http://110.39.226.242:34980/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 01:40:27 UTC", "last_seen": "2026-03-20 01:40:27 UTC", "sightings": 1 }, { "indicator": "https://load3view.remotenetwork.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 01:38:06 UTC", "last_seen": "2026-03-20 01:38:06 UTC", "sightings": 1 }, { "indicator": "http://110.36.70.238:38299/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 01:34:11 UTC", "last_seen": "2026-03-20 01:34:11 UTC", "sightings": 1 }, { "indicator": "http://175.148.149.239:51797/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 01:32:19 UTC", "last_seen": "2026-03-20 01:32:19 UTC", "sightings": 1 }, { "indicator": "http://117.251.162.40:37060/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 01:30:26 UTC", "last_seen": "2026-03-20 01:30:26 UTC", "sightings": 1 }, { "indicator": "https://entry2point.remotenetwork.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 01:29:06 UTC", "last_seen": "2026-03-20 01:29:06 UTC", "sightings": 1 }, { "indicator": "http://101.108.13.91:39609/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-20 01:27:08 UTC", "last_seen": "2026-03-20 01:27:08 UTC", "sightings": 1 }, { "indicator": "http://117.241.181.182:59416/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-20 01:27:07 UTC", "last_seen": "2026-03-20 01:27:07 UTC", "sightings": 1 }, { "indicator": "http://110.37.30.130:48440/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 01:26:11 UTC", "last_seen": "2026-03-20 01:26:11 UTC", "sightings": 1 }, { "indicator": "http://182.117.49.50:41340/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 01:25:19 UTC", "last_seen": "2026-03-20 01:25:19 UTC", "sightings": 1 }, { "indicator": "http://59.97.181.147:35624/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 01:24:17 UTC", "last_seen": "2026-03-20 01:24:17 UTC", "sightings": 1 }, { "indicator": "https://proc1dark.remotenetwork.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 01:22:11 UTC", "last_seen": "2026-03-20 01:22:11 UTC", "sightings": 1 }, { "indicator": "http://110.38.199.162:48139/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-20 01:22:05 UTC", "last_seen": "2026-03-20 01:22:05 UTC", "sightings": 1 }, { "indicator": "http://110.39.226.242:34980/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 01:16:14 UTC", "last_seen": "2026-03-20 01:16:14 UTC", "sightings": 1 }, { "indicator": "http://182.123.208.45:44408/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 01:16:14 UTC", "last_seen": "2026-03-20 01:16:14 UTC", "sightings": 1 }, { "indicator": "https://view4sync.activegateway.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 01:15:08 UTC", "last_seen": "2026-03-20 01:15:08 UTC", "sightings": 1 }, { "indicator": "http://117.241.181.182:59416/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-20 01:12:16 UTC", "last_seen": "2026-03-20 01:12:16 UTC", "sightings": 1 }, { "indicator": "https://load3ghost.activegateway.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 01:10:09 UTC", "last_seen": "2026-03-20 01:10:09 UTC", "sightings": 1 }, { "indicator": "http://117.198.8.122:40534/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 01:09:16 UTC", "last_seen": "2026-03-20 01:09:16 UTC", "sightings": 1 }, { "indicator": "http://110.37.115.90:40870/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 01:09:16 UTC", "last_seen": "2026-03-20 01:09:16 UTC", "sightings": 1 }, { "indicator": "http://110.37.61.34:45132/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 01:08:14 UTC", "last_seen": "2026-03-20 01:08:14 UTC", "sightings": 1 }, { "indicator": "https://entry2core.activegateway.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 01:05:07 UTC", "last_seen": "2026-03-20 01:05:07 UTC", "sightings": 1 }, { "indicator": "http://110.37.111.110:50545/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 01:00:16 UTC", "last_seen": "2026-03-20 01:00:16 UTC", "sightings": 1 }, { "indicator": "http://110.37.30.130:48440/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 00:59:19 UTC", "last_seen": "2026-03-20 00:59:19 UTC", "sightings": 1 }, { "indicator": "http://42.231.40.62:37098/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 00:59:12 UTC", "last_seen": "2026-03-20 00:59:12 UTC", "sightings": 1 }, { "indicator": "https://proc1alpha.activegateway.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 00:59:07 UTC", "last_seen": "2026-03-20 00:59:07 UTC", "sightings": 1 }, { "indicator": "http://110.38.199.162:48139/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-20 00:57:09 UTC", "last_seen": "2026-03-20 00:57:09 UTC", "sightings": 1 }, { "indicator": "http://175.148.149.239:51797/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 00:56:16 UTC", "last_seen": "2026-03-20 00:56:16 UTC", "sightings": 1 }, { "indicator": "http://222.142.210.224:40567/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 00:56:15 UTC", "last_seen": "2026-03-20 00:56:15 UTC", "sightings": 1 }, { "indicator": "http://110.37.111.110:50545/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 00:56:14 UTC", "last_seen": "2026-03-20 00:56:14 UTC", "sightings": 1 }, { "indicator": "https://access4link.digitalfoundry.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 00:56:07 UTC", "last_seen": "2026-03-20 00:56:07 UTC", "sightings": 1 }, { "indicator": "https://entry2base.digitalfoundry.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 00:56:07 UTC", "last_seen": "2026-03-20 00:56:07 UTC", "sightings": 1 }, { "indicator": "https://load3user.digitalfoundry.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 00:56:07 UTC", "last_seen": "2026-03-20 00:56:07 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Eskarlet78/terraform-aws-3tier-architecture/refs/heads/main/modules/alb/aws-tier-architecture-terraform-potentness.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-20 00:56:06 UTC", "last_seen": "2026-03-20 00:56:06 UTC", "sightings": 1 }, { "indicator": "http://117.215.92.202:41414/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 00:41:23 UTC", "last_seen": "2026-03-20 00:41:23 UTC", "sightings": 1 }, { "indicator": "http://42.180.249.27:35476/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 00:41:18 UTC", "last_seen": "2026-03-20 00:41:18 UTC", "sightings": 1 }, { "indicator": "http://42.235.91.183:42894/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 00:41:14 UTC", "last_seen": "2026-03-20 00:41:14 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Ongbinlong/HospitalBedManagementSystem/refs/heads/main/node_modules/date-fns/fp/getWeekOfMonthWithOptions/Hospital_System_Bed_Management_v2.5-alpha.4.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-20 00:41:11 UTC", "last_seen": "2026-03-20 00:41:11 UTC", "sightings": 1 }, { "indicator": "https://github.com/Ongbinlong/HospitalBedManagementSystem/raw/refs/heads/main/node_modules/date-fns/fp/getWeekOfMonthWithOptions/Hospital_System_Bed_Management_v2.5-alpha.4.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-20 00:41:09 UTC", "last_seen": "2026-03-20 00:41:09 UTC", "sightings": 1 }, { "indicator": "https://github.com/eduxxhdfgfd/react-view-import/raw/refs/heads/main/src/import-react-view-tristiloquy.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-20 00:41:08 UTC", "last_seen": "2026-03-20 00:41:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Ongbinlong/StarGate/refs/heads/main/demography/Star_Gate_v3.4.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-20 00:41:08 UTC", "last_seen": "2026-03-20 00:41:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/anjdjWjf/fastuator/refs/heads/main/examples/Software-1.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-20 00:41:08 UTC", "last_seen": "2026-03-20 00:41:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/Ongbinlong/StarGate/raw/refs/heads/main/demography/Star_Gate_v3.4.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-20 00:41:08 UTC", "last_seen": "2026-03-20 00:41:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/anjdjWjf/fastuator/raw/refs/heads/main/examples/Software-1.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-20 00:41:08 UTC", "last_seen": "2026-03-20 00:41:08 UTC", "sightings": 1 }, { "indicator": "https://work4flow.systemresource.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 00:41:07 UTC", "last_seen": "2026-03-20 00:41:07 UTC", "sightings": 1 }, { "indicator": "http://27.23.65.216:54800/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-20 00:41:07 UTC", "last_seen": "2026-03-20 00:41:07 UTC", "sightings": 1 }, { "indicator": "https://proc1infra.digitalfoundry.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 00:41:07 UTC", "last_seen": "2026-03-20 00:41:07 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Ongbinlong/tts/refs/heads/master/sugarless/Software-2.2-beta.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-20 00:41:07 UTC", "last_seen": "2026-03-20 00:41:07 UTC", "sightings": 1 }, { "indicator": "https://github.com/Ongbinlong/tts/raw/refs/heads/master/sugarless/Software-2.2-beta.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-20 00:41:07 UTC", "last_seen": "2026-03-20 00:41:07 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/eduxxhdfgfd/react-view-import/refs/heads/main/src/import-react-view-tristiloquy.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-20 00:41:07 UTC", "last_seen": "2026-03-20 00:41:07 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/okesing/neergz-web-app/refs/heads/main/canel/app-neergz-web-v2.9.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-20 00:41:07 UTC", "last_seen": "2026-03-20 00:41:07 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/kasjan2137/azure-ml-pipeline/refs/heads/main/components/pipeline-azure-ml-3.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-20 00:41:07 UTC", "last_seen": "2026-03-20 00:41:07 UTC", "sightings": 1 }, { "indicator": "https://github.com/okesing/neergz-web-app/raw/refs/heads/main/canel/app-neergz-web-v2.9.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-20 00:41:07 UTC", "last_seen": "2026-03-20 00:41:07 UTC", "sightings": 1 }, { "indicator": "https://github.com/kasjan2137/azure-ml-pipeline/raw/refs/heads/main/components/pipeline-azure-ml-3.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-20 00:41:07 UTC", "last_seen": "2026-03-20 00:41:07 UTC", "sightings": 1 }, { "indicator": "https://github.com/Eskarlet78/terraform-aws-3tier-architecture/raw/refs/heads/main/modules/alb/aws-tier-architecture-terraform-potentness.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-20 00:25:10 UTC", "last_seen": "2026-03-20 00:25:10 UTC", "sightings": 1 }, { "indicator": "https://load3local.systemresource.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 00:25:10 UTC", "last_seen": "2026-03-20 00:25:10 UTC", "sightings": 1 }, { "indicator": "http://59.182.152.19:51782/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 00:19:28 UTC", "last_seen": "2026-03-20 00:19:28 UTC", "sightings": 1 }, { "indicator": "https://entry2power.systemresource.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 00:19:06 UTC", "last_seen": "2026-03-20 00:19:06 UTC", "sightings": 1 }, { "indicator": "http://115.52.30.38:34750/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-20 00:17:07 UTC", "last_seen": "2026-03-20 00:17:07 UTC", "sightings": 1 }, { "indicator": "http://42.180.249.27:35476/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 00:16:21 UTC", "last_seen": "2026-03-20 00:16:21 UTC", "sightings": 1 }, { "indicator": "http://42.235.91.183:42894/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-20 00:16:19 UTC", "last_seen": "2026-03-20 00:16:19 UTC", "sightings": 1 }, { "indicator": "https://proc1point.systemresource.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 00:16:10 UTC", "last_seen": "2026-03-20 00:16:10 UTC", "sightings": 1 }, { "indicator": "https://github.com/RainMeriloo/cf-browser-cdp/raw/refs/heads/master/src/cdp-browser-cf-1.2-beta.4.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-20 00:16:09 UTC", "last_seen": "2026-03-20 00:16:09 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Hahbibiali/Ad-Astra/refs/heads/main/phosphoreous/Astra_Ad_1.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-20 00:16:09 UTC", "last_seen": "2026-03-20 00:16:09 UTC", "sightings": 1 }, { "indicator": "https://load3host.vectorstorage.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 00:16:08 UTC", "last_seen": "2026-03-20 00:16:08 UTC", "sightings": 1 }, { "indicator": "https://link4entry.vectorstorage.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-20 00:16:08 UTC", "last_seen": "2026-03-20 00:16:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/ArmanMX77/ZeroGrav.dev/raw/refs/heads/main/assets/dev-Zero-Grav-v2.9-alpha.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-20 00:00:20 UTC", "last_seen": "2026-03-20 00:00:20 UTC", "sightings": 1 }, { "indicator": "https://github.com/FurkanGuwen/nats-server/raw/refs/heads/main/outbellow/server-nats-3.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-20 00:00:13 UTC", "last_seen": "2026-03-20 00:00:13 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/RainMeriloo/cf-browser-cdp/refs/heads/master/src/cdp-browser-cf-1.2-beta.4.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-20 00:00:13 UTC", "last_seen": "2026-03-20 00:00:13 UTC", "sightings": 1 }, { "indicator": "https://github.com/Hahbibiali/Ad-Astra/raw/refs/heads/main/phosphoreous/Astra_Ad_1.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-20 00:00:11 UTC", "last_seen": "2026-03-20 00:00:11 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/ArmanMX77/ZeroGrav.dev/refs/heads/main/assets/dev-Zero-Grav-v2.9-alpha.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-20 00:00:09 UTC", "last_seen": "2026-03-20 00:00:09 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/FurkanGuwen/nats-server/refs/heads/main/outbellow/server-nats-3.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-20 00:00:09 UTC", "last_seen": "2026-03-20 00:00:09 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/dineshkumarfandon12/powersub-demo-2936/refs/heads/main/epileptology/powersub_demo_1.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 23:58:07 UTC", "last_seen": "2026-03-19 23:58:07 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/xMemories-Juan/WebTest/refs/heads/main/anallantoic/Web-Test-v3.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 23:58:07 UTC", "last_seen": "2026-03-19 23:58:07 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/xMemories-Juan/powersub-demo-5950/refs/heads/main/biostratigraphy/powersub-demo-1.4-beta.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 23:58:07 UTC", "last_seen": "2026-03-19 23:58:07 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/wanzy0560/nvme2k/refs/heads/main/carabao/nvme_k_3.9-beta.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 23:58:07 UTC", "last_seen": "2026-03-19 23:58:07 UTC", "sightings": 1 }, { "indicator": "https://github.com/xMemories-Juan/WebTest/raw/refs/heads/main/anallantoic/Web-Test-v3.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 23:58:07 UTC", "last_seen": "2026-03-19 23:58:07 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/xMemories-Juan/Tp-FinalHtmlCss/refs/heads/main/lustfulness/Tp-Css-Html-Final-2.4.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 23:58:07 UTC", "last_seen": "2026-03-19 23:58:07 UTC", "sightings": 1 }, { "indicator": "https://github.com/dineshkumarfandon12/powersub-demo-2936/raw/refs/heads/main/epileptology/powersub_demo_1.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 23:58:07 UTC", "last_seen": "2026-03-19 23:58:07 UTC", "sightings": 1 }, { "indicator": "https://github.com/xMemories-Juan/Tp-FinalHtmlCss/raw/refs/heads/main/lustfulness/Tp-Css-Html-Final-2.4.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 23:58:07 UTC", "last_seen": "2026-03-19 23:58:07 UTC", "sightings": 1 }, { "indicator": "https://github.com/xMemories-Juan/powersub-demo-5950/raw/refs/heads/main/biostratigraphy/powersub-demo-1.4-beta.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 23:58:07 UTC", "last_seen": "2026-03-19 23:58:07 UTC", "sightings": 1 }, { "indicator": "https://github.com/wanzy0560/nvme2k/raw/refs/heads/main/carabao/nvme_k_3.9-beta.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 23:58:07 UTC", "last_seen": "2026-03-19 23:58:07 UTC", "sightings": 1 }, { "indicator": "https://entry2remote.vectorstorage.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 23:57:06 UTC", "last_seen": "2026-03-19 23:57:06 UTC", "sightings": 1 }, { "indicator": "http://27.23.65.216:54800/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-19 23:57:06 UTC", "last_seen": "2026-03-19 23:57:06 UTC", "sightings": 1 }, { "indicator": "http://115.52.30.38:34750/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-19 23:52:07 UTC", "last_seen": "2026-03-19 23:52:07 UTC", "sightings": 1 }, { "indicator": "http://222.142.210.224:40567/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 23:51:12 UTC", "last_seen": "2026-03-19 23:51:12 UTC", "sightings": 1 }, { "indicator": "https://proc1store.vectorstorage.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 23:51:10 UTC", "last_seen": "2026-03-19 23:51:10 UTC", "sightings": 1 }, { "indicator": "http://110.37.92.149:49424/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 23:50:21 UTC", "last_seen": "2026-03-19 23:50:21 UTC", "sightings": 1 }, { "indicator": "https://gate4sync.globalprotocol.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 23:45:08 UTC", "last_seen": "2026-03-19 23:45:08 UTC", "sightings": 1 }, { "indicator": "https://load3proxy.globalprotocol.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 23:41:06 UTC", "last_seen": "2026-03-19 23:41:06 UTC", "sightings": 1 }, { "indicator": "http://113.53.125.151:57904/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-19 23:40:07 UTC", "last_seen": "2026-03-19 23:40:07 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.7/files/8036065901/ggGms6j.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543", "OffLoader" ], "first_seen": "2026-03-19 23:39:09 UTC", "last_seen": "2026-03-19 23:39:09 UTC", "sightings": 1 }, { "indicator": "https://entry2data.globalprotocol.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 23:35:07 UTC", "last_seen": "2026-03-19 23:35:07 UTC", "sightings": 1 }, { "indicator": "https://proc1meta.globalprotocol.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 23:30:10 UTC", "last_seen": "2026-03-19 23:30:10 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/UdhayaPriyan/Library-priyan/refs/heads/main/devoutlessly/Library_priyan_livableness.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 23:27:08 UTC", "last_seen": "2026-03-19 23:27:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/UdhayaPriyan/week3project/refs/heads/main/peridinian/week_project_3.9.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 23:26:10 UTC", "last_seen": "2026-03-19 23:26:10 UTC", "sightings": 1 }, { "indicator": "https://github.com/UdhayaPriyan/CTL/raw/refs/heads/main/src/Software-2.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 23:26:10 UTC", "last_seen": "2026-03-19 23:26:10 UTC", "sightings": 1 }, { "indicator": "https://github.com/UdhayaPriyan/powersub-demo-5543/raw/refs/heads/main/champagne/demo_powersub_v1.4-beta.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 23:26:09 UTC", "last_seen": "2026-03-19 23:26:09 UTC", "sightings": 1 }, { "indicator": "https://github.com/UdhayaPriyan/week3project/raw/refs/heads/main/peridinian/week_project_3.9.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 23:26:09 UTC", "last_seen": "2026-03-19 23:26:09 UTC", "sightings": 1 }, { "indicator": "https://github.com/UdhayaPriyan/Javascript-web/raw/refs/heads/main/Cheilostomata/web-Javascript-v1.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 23:26:08 UTC", "last_seen": "2026-03-19 23:26:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/UdhayaPriyan/CTL/refs/heads/main/src/Software-2.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 23:26:08 UTC", "last_seen": "2026-03-19 23:26:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/UdhayaPriyan/Quiz-app/refs/heads/main/emotioned/Quiz-app-2.0.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 23:26:07 UTC", "last_seen": "2026-03-19 23:26:07 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/UdhayaPriyan/powersub-demo-5543/refs/heads/main/champagne/demo_powersub_v1.4-beta.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 23:26:07 UTC", "last_seen": "2026-03-19 23:26:07 UTC", "sightings": 1 }, { "indicator": "https://github.com/UdhayaPriyan/Library-priyan/raw/refs/heads/main/devoutlessly/Library_priyan_livableness.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 23:26:07 UTC", "last_seen": "2026-03-19 23:26:07 UTC", "sightings": 1 }, { "indicator": "https://github.com/UdhayaPriyan/Quiz-app/raw/refs/heads/main/emotioned/Quiz-app-2.0.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 23:26:07 UTC", "last_seen": "2026-03-19 23:26:07 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/UdhayaPriyan/Javascript-web/refs/heads/main/Cheilostomata/web-Javascript-v1.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 23:26:06 UTC", "last_seen": "2026-03-19 23:26:06 UTC", "sightings": 1 }, { "indicator": "http://113.191.207.19:56331/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 23:24:10 UTC", "last_seen": "2026-03-19 23:24:10 UTC", "sightings": 1 }, { "indicator": "https://data4static.centralmetric.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 23:24:06 UTC", "last_seen": "2026-03-19 23:24:06 UTC", "sightings": 1 }, { "indicator": "http://27.8.9.245:40811/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-19 23:22:07 UTC", "last_seen": "2026-03-19 23:22:07 UTC", "sightings": 1 }, { "indicator": "https://load3edge.centralmetric.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 23:19:08 UTC", "last_seen": "2026-03-19 23:19:08 UTC", "sightings": 1 }, { "indicator": "http://113.53.125.151:57904/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-19 23:18:08 UTC", "last_seen": "2026-03-19 23:18:08 UTC", "sightings": 1 }, { "indicator": "http://221.15.1.175:52131/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 23:13:09 UTC", "last_seen": "2026-03-19 23:13:09 UTC", "sightings": 1 }, { "indicator": "https://entry2sync.centralmetric.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 23:13:05 UTC", "last_seen": "2026-03-19 23:13:05 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.7/files/7776573655/5xOR1kH.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543", "gcleaner" ], "first_seen": "2026-03-19 23:11:05 UTC", "last_seen": "2026-03-19 23:11:05 UTC", "sightings": 1 }, { "indicator": "https://proc1node.centralmetric.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 23:07:06 UTC", "last_seen": "2026-03-19 23:07:06 UTC", "sightings": 1 }, { "indicator": "https://main4point.boreasync.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 23:02:06 UTC", "last_seen": "2026-03-19 23:02:06 UTC", "sightings": 1 }, { "indicator": "http://39.88.124.23:54602/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-19 23:02:06 UTC", "last_seen": "2026-03-19 23:02:06 UTC", "sightings": 1 }, { "indicator": "https://data3sync.boreasync.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 22:55:08 UTC", "last_seen": "2026-03-19 22:55:08 UTC", "sightings": 1 }, { "indicator": "http://219.157.20.35:36954/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 22:51:15 UTC", "last_seen": "2026-03-19 22:51:15 UTC", "sightings": 1 }, { "indicator": "https://lb2proxy.boreasync.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 22:50:07 UTC", "last_seen": "2026-03-19 22:50:07 UTC", "sightings": 1 }, { "indicator": "http://219.157.20.35:36954/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 22:49:17 UTC", "last_seen": "2026-03-19 22:49:17 UTC", "sightings": 1 }, { "indicator": "http://59.96.143.99:50155/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 22:47:17 UTC", "last_seen": "2026-03-19 22:47:17 UTC", "sightings": 1 }, { "indicator": "http://117.241.198.35:37421/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 22:46:17 UTC", "last_seen": "2026-03-19 22:46:17 UTC", "sightings": 1 }, { "indicator": "http://117.241.198.35:37421/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 22:44:20 UTC", "last_seen": "2026-03-19 22:44:20 UTC", "sightings": 1 }, { "indicator": "https://rack1infra.boreasync.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 22:44:06 UTC", "last_seen": "2026-03-19 22:44:06 UTC", "sightings": 1 }, { "indicator": "https://github.com/odahpen/claude-code-hub/raw/refs/heads/main/src/app/dashboard/_components/user/claude-hub-code-2.6.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 22:43:09 UTC", "last_seen": "2026-03-19 22:43:09 UTC", "sightings": 1 }, { "indicator": "https://github.com/jahanllol/kotlin-fpv/raw/refs/heads/main/radiotherapeutist/kotlin-fpv-2.6.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 22:43:08 UTC", "last_seen": "2026-03-19 22:43:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/odahpen/claude-code-hub/refs/heads/main/src/app/dashboard/_components/user/claude-hub-code-2.6.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 22:43:08 UTC", "last_seen": "2026-03-19 22:43:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/jahanllol/kotlin-fpv/refs/heads/main/radiotherapeutist/kotlin-fpv-2.6.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 22:43:06 UTC", "last_seen": "2026-03-19 22:43:06 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/tameembhoi/Chatify-App-Frontend/refs/heads/main/src/assets/App_Chatify_Frontend_1.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 22:43:06 UTC", "last_seen": "2026-03-19 22:43:06 UTC", "sightings": 1 }, { "indicator": "https://github.com/tameembhoi/Chatify-App-Frontend/raw/refs/heads/main/src/assets/App_Chatify_Frontend_1.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 22:43:06 UTC", "last_seen": "2026-03-19 22:43:06 UTC", "sightings": 1 }, { "indicator": "http://46.163.174.199:53381/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-19 22:42:12 UTC", "last_seen": "2026-03-19 22:42:12 UTC", "sightings": 1 }, { "indicator": "http://110.38.198.81:55547/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-19 22:42:06 UTC", "last_seen": "2026-03-19 22:42:06 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Cayden77/agency-kit-site/refs/heads/main/hooks/site_agency_kit_1.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 22:37:08 UTC", "last_seen": "2026-03-19 22:37:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/ARGROB2023/MAPO/refs/heads/main/code/verl/single_controller/base/Software-1.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 22:37:08 UTC", "last_seen": "2026-03-19 22:37:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/samibenameur/jam-py-v7/raw/refs/heads/main/benzophenoxazine/jam_py_v_1.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 22:37:08 UTC", "last_seen": "2026-03-19 22:37:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/ARGROB2023/MAPO/raw/refs/heads/main/code/verl/single_controller/base/Software-1.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 22:37:08 UTC", "last_seen": "2026-03-19 22:37:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/samibenameur/jam-py-v7/refs/heads/main/benzophenoxazine/jam_py_v_1.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 22:37:08 UTC", "last_seen": "2026-03-19 22:37:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/Cayden77/agency-kit-site/raw/refs/heads/main/hooks/site_agency_kit_1.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 22:37:08 UTC", "last_seen": "2026-03-19 22:37:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/samibenameur/mypetdiary/raw/refs/heads/main/precomparison/Software_v3.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 22:37:08 UTC", "last_seen": "2026-03-19 22:37:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/samibenameur/mypetdiary/refs/heads/main/precomparison/Software_v3.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 22:37:07 UTC", "last_seen": "2026-03-19 22:37:07 UTC", "sightings": 1 }, { "indicator": "https://core3rock.muralink.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 22:33:06 UTC", "last_seen": "2026-03-19 22:33:06 UTC", "sightings": 1 }, { "indicator": "http://111.164.254.108:36273/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-19 22:32:07 UTC", "last_seen": "2026-03-19 22:32:07 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Ifroj/meta-bean-ui-project/refs/heads/main/js/utils/meta-ui-bean-project-3.6.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 22:31:07 UTC", "last_seen": "2026-03-19 22:31:07 UTC", "sightings": 1 }, { "indicator": "https://github.com/Ifroj/meta-bean-ui-project/raw/refs/heads/main/js/utils/meta-ui-bean-project-3.6.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 22:31:07 UTC", "last_seen": "2026-03-19 22:31:07 UTC", "sightings": 1 }, { "indicator": "https://github.com/Ifroj/js-components-main/raw/refs/heads/main/controls/control-3/components-main-js-1.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 22:31:07 UTC", "last_seen": "2026-03-19 22:31:07 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Ifroj/Trust-Wallet-Core-Keystore-Monorepo-Web3-Connect-Integration-React-Blockhain/refs/heads/main/Zylo-Trust-Wallet/Form11/obj/Trust-React-Blockhain-Keystore-Monorepo-Web-Integration-Wallet-Connect-Core-3.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 22:31:07 UTC", "last_seen": "2026-03-19 22:31:07 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Ifroj/js-components-main/refs/heads/main/controls/control-3/components-main-js-1.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 22:31:07 UTC", "last_seen": "2026-03-19 22:31:07 UTC", "sightings": 1 }, { "indicator": "https://github.com/Ifroj/Trust-Wallet-Core-Keystore-Monorepo-Web3-Connect-Integration-React-Blockhain/raw/refs/heads/main/Zylo-Trust-Wallet/Form11/obj/Trust-React-Blockhain-Keystore-Monorepo-Web-Integration-Wallet-Connect-Core-3.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 22:31:07 UTC", "last_seen": "2026-03-19 22:31:07 UTC", "sightings": 1 }, { "indicator": "https://github.com/hannx86/adonisjs-react-starter-kit/raw/refs/heads/master/resources/css/adonisjs_react_kit_starter_v2.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 22:31:07 UTC", "last_seen": "2026-03-19 22:31:07 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/hannx86/adonisjs-react-starter-kit/refs/heads/master/resources/css/adonisjs_react_kit_starter_v2.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 22:31:07 UTC", "last_seen": "2026-03-19 22:31:07 UTC", "sightings": 1 }, { "indicator": "https://lb2steel.muralink.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 22:28:07 UTC", "last_seen": "2026-03-19 22:28:07 UTC", "sightings": 1 }, { "indicator": "http://221.15.7.247:45575/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 22:27:07 UTC", "last_seen": "2026-03-19 22:27:07 UTC", "sightings": 1 }, { "indicator": "https://rack1orbit.muralink.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 22:24:07 UTC", "last_seen": "2026-03-19 22:24:07 UTC", "sightings": 1 }, { "indicator": "http://59.96.143.99:50155/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 22:22:09 UTC", "last_seen": "2026-03-19 22:22:09 UTC", "sightings": 1 }, { "indicator": "https://open4space.silicanet.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 22:21:05 UTC", "last_seen": "2026-03-19 22:21:05 UTC", "sightings": 1 }, { "indicator": "http://110.38.198.81:55547/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-19 22:17:08 UTC", "last_seen": "2026-03-19 22:17:08 UTC", "sightings": 1 }, { "indicator": "http://111.164.254.108:36273/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-19 22:17:07 UTC", "last_seen": "2026-03-19 22:17:07 UTC", "sightings": 1 }, { "indicator": "http://27.37.118.69:53155/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 22:15:18 UTC", "last_seen": "2026-03-19 22:15:18 UTC", "sightings": 1 }, { "indicator": "https://vast3field.silicanet.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 22:11:06 UTC", "last_seen": "2026-03-19 22:11:06 UTC", "sightings": 1 }, { "indicator": "http://39.77.69.233:46070/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-19 22:07:06 UTC", "last_seen": "2026-03-19 22:07:06 UTC", "sightings": 1 }, { "indicator": "https://lb2area.silicanet.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 22:06:08 UTC", "last_seen": "2026-03-19 22:06:08 UTC", "sightings": 1 }, { "indicator": "http://221.15.7.247:45575/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 22:03:09 UTC", "last_seen": "2026-03-19 22:03:09 UTC", "sightings": 1 }, { "indicator": "https://rack1outer.silicanet.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 22:00:07 UTC", "last_seen": "2026-03-19 22:00:07 UTC", "sightings": 1 }, { "indicator": "http://175.165.81.178:47425/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 21:59:17 UTC", "last_seen": "2026-03-19 21:59:17 UTC", "sightings": 1 }, { "indicator": "http://110.36.93.217:47824/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 21:57:14 UTC", "last_seen": "2026-03-19 21:57:14 UTC", "sightings": 1 }, { "indicator": "http://110.37.14.251:37774/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-19 21:57:06 UTC", "last_seen": "2026-03-19 21:57:06 UTC", "sightings": 1 }, { "indicator": "https://gate4path.cryptasol.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 21:54:06 UTC", "last_seen": "2026-03-19 21:54:06 UTC", "sightings": 1 }, { "indicator": "http://110.36.80.171:37929/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 21:53:24 UTC", "last_seen": "2026-03-19 21:53:24 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/JGH001/UIDock/refs/heads/main/redeify/UI_Dock_v1.9.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 21:49:08 UTC", "last_seen": "2026-03-19 21:49:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/JGH001/UIDock/raw/refs/heads/main/redeify/UI_Dock_v1.9.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 21:49:07 UTC", "last_seen": "2026-03-19 21:49:07 UTC", "sightings": 1 }, { "indicator": "https://sync3view.cryptasol.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 21:48:06 UTC", "last_seen": "2026-03-19 21:48:06 UTC", "sightings": 1 }, { "indicator": "http://73.248.79.93:39079/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-19 21:47:06 UTC", "last_seen": "2026-03-19 21:47:06 UTC", "sightings": 1 }, { "indicator": "http://39.77.69.233:46070/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-19 21:47:06 UTC", "last_seen": "2026-03-19 21:47:06 UTC", "sightings": 1 }, { "indicator": "https://lb2point.cryptasol.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 21:44:06 UTC", "last_seen": "2026-03-19 21:44:06 UTC", "sightings": 1 }, { "indicator": "http://59.96.143.224:52051/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-19 21:42:08 UTC", "last_seen": "2026-03-19 21:42:08 UTC", "sightings": 1 }, { "indicator": "https://rack1dark.cryptasol.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 21:37:06 UTC", "last_seen": "2026-03-19 21:37:06 UTC", "sightings": 1 }, { "indicator": "http://182.119.57.66:59989/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 21:35:24 UTC", "last_seen": "2026-03-19 21:35:24 UTC", "sightings": 1 }, { "indicator": "http://200.59.83.67:52922/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 21:34:23 UTC", "last_seen": "2026-03-19 21:34:23 UTC", "sightings": 1 }, { "indicator": "https://vis4sync.ventaserv.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 21:32:06 UTC", "last_seen": "2026-03-19 21:32:06 UTC", "sightings": 1 }, { "indicator": "http://115.48.38.160:60343/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 21:28:22 UTC", "last_seen": "2026-03-19 21:28:22 UTC", "sightings": 1 }, { "indicator": "http://110.36.93.217:47824/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 21:28:21 UTC", "last_seen": "2026-03-19 21:28:21 UTC", "sightings": 1 }, { "indicator": "http://73.248.79.93:39079/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-19 21:27:07 UTC", "last_seen": "2026-03-19 21:27:07 UTC", "sightings": 1 }, { "indicator": "http://110.37.14.251:37774/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-19 21:27:06 UTC", "last_seen": "2026-03-19 21:27:06 UTC", "sightings": 1 }, { "indicator": "https://node3ghost.ventaserv.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake", "NetSupport" ], "first_seen": "2026-03-19 21:26:04 UTC", "last_seen": "2026-03-19 21:26:04 UTC", "sightings": 1 }, { "indicator": "http://libs.9tb.org/linux_386", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget", "x86" ], "first_seen": "2026-03-19 21:25:24 UTC", "last_seen": "2026-03-19 21:25:24 UTC", "sightings": 1 }, { "indicator": "http://libs.9tb.org/linux_arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "arm", "elf", "gafgyt", "mirai", "ua-wget" ], "first_seen": "2026-03-19 21:25:24 UTC", "last_seen": "2026-03-19 21:25:24 UTC", "sightings": 1 }, { "indicator": "http://libs.9tb.org/linux_amd64", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget", "x86" ], "first_seen": "2026-03-19 21:25:24 UTC", "last_seen": "2026-03-19 21:25:24 UTC", "sightings": 1 }, { "indicator": "http://46.163.174.199:53381/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-19 21:25:10 UTC", "last_seen": "2026-03-19 21:25:10 UTC", "sightings": 1 }, { "indicator": "https://lb2core.ventaserv.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 21:25:09 UTC", "last_seen": "2026-03-19 21:25:09 UTC", "sightings": 1 }, { "indicator": "https://rack1alpha.ventaserv.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake", "NetSupport" ], "first_seen": "2026-03-19 21:25:09 UTC", "last_seen": "2026-03-19 21:25:09 UTC", "sightings": 1 }, { "indicator": "http://46.147.44.81:54456/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-19 21:25:07 UTC", "last_seen": "2026-03-19 21:25:07 UTC", "sightings": 1 }, { "indicator": "http://libs.9tb.org/linux_ppc64el", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "PowerPC", "ua-wget" ], "first_seen": "2026-03-19 21:09:27 UTC", "last_seen": "2026-03-19 21:09:27 UTC", "sightings": 1 }, { "indicator": "http://libs.9tb.org/linux_aarch64", "indicator_type": "url", "source": "URLhaus", "tags": [ "arm", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-19 21:09:27 UTC", "last_seen": "2026-03-19 21:09:27 UTC", "sightings": 1 }, { "indicator": "http://libs.9tb.org/linux_mips_hardfloat", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mips", "mirai", "ua-wget" ], "first_seen": "2026-03-19 21:09:27 UTC", "last_seen": "2026-03-19 21:09:27 UTC", "sightings": 1 }, { "indicator": "http://libs.9tb.org/linux_mipsel_softfloat", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mips", "mirai", "ua-wget" ], "first_seen": "2026-03-19 21:09:27 UTC", "last_seen": "2026-03-19 21:09:27 UTC", "sightings": 1 }, { "indicator": "http://libs.9tb.org/linux_mipsel_hardfloat", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mips", "mirai", "ua-wget" ], "first_seen": "2026-03-19 21:09:27 UTC", "last_seen": "2026-03-19 21:09:27 UTC", "sightings": 1 }, { "indicator": "http://libs.9tb.org/linux_arm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "arm", "elf", "gafgyt", "mirai", "ua-wget" ], "first_seen": "2026-03-19 21:09:27 UTC", "last_seen": "2026-03-19 21:09:27 UTC", "sightings": 1 }, { "indicator": "http://libs.9tb.org/linux_arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "arm", "elf", "gafgyt", "mirai", "ua-wget" ], "first_seen": "2026-03-19 21:09:27 UTC", "last_seen": "2026-03-19 21:09:27 UTC", "sightings": 1 }, { "indicator": "http://libs.9tb.org/linux_mips64", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mips", "mirai", "ua-wget" ], "first_seen": "2026-03-19 21:09:27 UTC", "last_seen": "2026-03-19 21:09:27 UTC", "sightings": 1 }, { "indicator": "http://libs.9tb.org/linux_mips64el", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mips", "mirai", "ua-wget" ], "first_seen": "2026-03-19 21:09:27 UTC", "last_seen": "2026-03-19 21:09:27 UTC", "sightings": 1 }, { "indicator": "http://libs.9tb.org/linux_ppc64", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "PowerPC", "ua-wget" ], "first_seen": "2026-03-19 21:09:27 UTC", "last_seen": "2026-03-19 21:09:27 UTC", "sightings": 1 }, { "indicator": "http://libs.9tb.org/linux_mips_softfloat", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mips", "mirai", "ua-wget" ], "first_seen": "2026-03-19 21:09:22 UTC", "last_seen": "2026-03-19 21:09:22 UTC", "sightings": 1 }, { "indicator": "http://libs.9tb.org/dddd.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai", "sh", "ua-wget" ], "first_seen": "2026-03-19 21:09:21 UTC", "last_seen": "2026-03-19 21:09:21 UTC", "sightings": 1 }, { "indicator": "https://acc4link.fondoviva.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 21:09:06 UTC", "last_seen": "2026-03-19 21:09:06 UTC", "sightings": 1 }, { "indicator": "http://1.181.227.68:56308/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-19 21:05:22 UTC", "last_seen": "2026-03-19 21:05:22 UTC", "sightings": 1 }, { "indicator": "https://auth3user.fondoviva.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 21:04:06 UTC", "last_seen": "2026-03-19 21:04:06 UTC", "sightings": 1 }, { "indicator": "https://lb2base.fondoviva.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 20:58:06 UTC", "last_seen": "2026-03-19 20:58:06 UTC", "sightings": 1 }, { "indicator": "http://119.189.136.148:42355/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 20:55:23 UTC", "last_seen": "2026-03-19 20:55:23 UTC", "sightings": 1 }, { "indicator": "http://200.59.83.67:52922/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 20:55:23 UTC", "last_seen": "2026-03-19 20:55:23 UTC", "sightings": 1 }, { "indicator": "http://222.141.46.237:43466/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 20:52:22 UTC", "last_seen": "2026-03-19 20:52:22 UTC", "sightings": 1 }, { "indicator": "https://rack1infra.fondoviva.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 20:52:13 UTC", "last_seen": "2026-03-19 20:52:13 UTC", "sightings": 1 }, { "indicator": "http://117.215.57.95:56998/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-19 20:52:10 UTC", "last_seen": "2026-03-19 20:52:10 UTC", "sightings": 1 }, { "indicator": "http://119.189.136.148:42355/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 20:51:17 UTC", "last_seen": "2026-03-19 20:51:17 UTC", "sightings": 1 }, { "indicator": "http://27.37.118.69:53155/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 20:49:23 UTC", "last_seen": "2026-03-19 20:49:23 UTC", "sightings": 1 }, { "indicator": "https://work4flow.orbitunit.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 20:47:06 UTC", "last_seen": "2026-03-19 20:47:06 UTC", "sightings": 1 }, { "indicator": "http://182.119.57.66:59989/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 20:41:23 UTC", "last_seen": "2026-03-19 20:41:23 UTC", "sightings": 1 }, { "indicator": "https://loc3net.orbitunit.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 20:41:05 UTC", "last_seen": "2026-03-19 20:41:05 UTC", "sightings": 1 }, { "indicator": "https://lb2power.orbitunit.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 20:36:06 UTC", "last_seen": "2026-03-19 20:36:06 UTC", "sightings": 1 }, { "indicator": "http://42.235.85.89:43694/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 20:35:21 UTC", "last_seen": "2026-03-19 20:35:21 UTC", "sightings": 1 }, { "indicator": "https://rack1point.orbitunit.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 20:30:07 UTC", "last_seen": "2026-03-19 20:30:07 UTC", "sightings": 1 }, { "indicator": "https://link4entry.quarzbase.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 20:24:05 UTC", "last_seen": "2026-03-19 20:24:05 UTC", "sightings": 1 }, { "indicator": "http://123.11.131.80:51038/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 20:16:10 UTC", "last_seen": "2026-03-19 20:16:10 UTC", "sightings": 1 }, { "indicator": "https://lb2remote.quarzbase.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 20:14:08 UTC", "last_seen": "2026-03-19 20:14:08 UTC", "sightings": 1 }, { "indicator": "http://42.235.85.89:43694/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 20:11:15 UTC", "last_seen": "2026-03-19 20:11:15 UTC", "sightings": 1 }, { "indicator": "https://rack1store.quarzbase.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 20:07:06 UTC", "last_seen": "2026-03-19 20:07:06 UTC", "sightings": 1 }, { "indicator": "https://hub4sync.marisnode.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 20:02:07 UTC", "last_seen": "2026-03-19 20:02:07 UTC", "sightings": 1 }, { "indicator": "http://117.216.179.122:52356/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 19:59:17 UTC", "last_seen": "2026-03-19 19:59:17 UTC", "sightings": 1 }, { "indicator": "https://prox3gate.marisnode.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 19:56:06 UTC", "last_seen": "2026-03-19 19:56:06 UTC", "sightings": 1 }, { "indicator": "https://lb2data.marisnode.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 19:51:05 UTC", "last_seen": "2026-03-19 19:51:05 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.7/files/6195522554/DdiWHAQ.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-19 19:48:05 UTC", "last_seen": "2026-03-19 19:48:05 UTC", "sightings": 1 }, { "indicator": "http://42.227.203.243:34216/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 19:47:08 UTC", "last_seen": "2026-03-19 19:47:08 UTC", "sightings": 1 }, { "indicator": "https://rack1meta.marisnode.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 19:45:08 UTC", "last_seen": "2026-03-19 19:45:08 UTC", "sightings": 1 }, { "indicator": "https://stor4static.astropoint.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 19:39:05 UTC", "last_seen": "2026-03-19 19:39:05 UTC", "sightings": 1 }, { "indicator": "http://117.216.179.122:52356/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 19:37:22 UTC", "last_seen": "2026-03-19 19:37:22 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/aydem45/todo/refs/heads/main/folder/9.log", "indicator_type": "url", "source": "URLhaus", "tags": [ "lua", "SmartLoader" ], "first_seen": "2026-03-19 19:33:07 UTC", "last_seen": "2026-03-19 19:33:07 UTC", "sightings": 1 }, { "indicator": "https://github.com/aydem45/todo/raw/refs/heads/main/folder/9.log", "indicator_type": "url", "source": "URLhaus", "tags": [ "lua", "SmartLoader" ], "first_seen": "2026-03-19 19:33:07 UTC", "last_seen": "2026-03-19 19:33:07 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/aydem45/todo/refs/heads/main/folder/6.txt", "indicator_type": "url", "source": "URLhaus", "tags": [ "lua", "SmartLoader" ], "first_seen": "2026-03-19 19:33:06 UTC", "last_seen": "2026-03-19 19:33:06 UTC", "sightings": 1 }, { "indicator": "https://github.com/aydem45/todo/raw/refs/heads/main/folder/6.txt", "indicator_type": "url", "source": "URLhaus", "tags": [ "lua", "SmartLoader" ], "first_seen": "2026-03-19 19:33:06 UTC", "last_seen": "2026-03-19 19:33:06 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.7/files/8180653200/8bg1lmE.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "donutloader", "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-19 19:32:07 UTC", "last_seen": "2026-03-19 19:32:07 UTC", "sightings": 1 }, { "indicator": "http://182.121.194.203:52297/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-19 19:32:06 UTC", "last_seen": "2026-03-19 19:32:06 UTC", "sightings": 1 }, { "indicator": "https://lb2sync.astropoint.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 19:29:06 UTC", "last_seen": "2026-03-19 19:29:06 UTC", "sightings": 1 }, { "indicator": "http://59.93.21.174:32912/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-19 19:27:07 UTC", "last_seen": "2026-03-19 19:27:07 UTC", "sightings": 1 }, { "indicator": "https://rack1node.astropoint.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 19:23:09 UTC", "last_seen": "2026-03-19 19:23:09 UTC", "sightings": 1 }, { "indicator": "http://42.227.203.243:34216/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 19:19:20 UTC", "last_seen": "2026-03-19 19:19:20 UTC", "sightings": 1 }, { "indicator": "http://110.39.238.26:39255/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 19:19:16 UTC", "last_seen": "2026-03-19 19:19:16 UTC", "sightings": 1 }, { "indicator": "http://182.121.194.203:52297/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-19 19:19:08 UTC", "last_seen": "2026-03-19 19:19:08 UTC", "sightings": 1 }, { "indicator": "https://data3sync.lumenlabs.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 19:19:07 UTC", "last_seen": "2026-03-19 19:19:07 UTC", "sightings": 1 }, { "indicator": "https://main4point.lumenlabs.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 19:19:07 UTC", "last_seen": "2026-03-19 19:19:07 UTC", "sightings": 1 }, { "indicator": "https://gate2proxy.lumenlabs.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 19:19:06 UTC", "last_seen": "2026-03-19 19:19:06 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/PolakLeRajel/NoCat/refs/heads/master/ectoparasitic/Cat_No_2.9.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 19:19:05 UTC", "last_seen": "2026-03-19 19:19:05 UTC", "sightings": 1 }, { "indicator": "http://222.141.113.234:34093/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-19 19:19:05 UTC", "last_seen": "2026-03-19 19:19:05 UTC", "sightings": 1 }, { "indicator": "https://github.com/arbolescontract/codex-mcp-go/raw/refs/heads/main/npm/codex_mcp_go_v2.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 19:03:06 UTC", "last_seen": "2026-03-19 19:03:06 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/arbolescontract/codex-mcp-go/refs/heads/main/npm/codex_mcp_go_v2.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 19:03:06 UTC", "last_seen": "2026-03-19 19:03:06 UTC", "sightings": 1 }, { "indicator": "https://github.com/PolakLeRajel/NoCat/raw/refs/heads/master/ectoparasitic/Cat_No_2.9.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 19:03:06 UTC", "last_seen": "2026-03-19 19:03:06 UTC", "sightings": 1 }, { "indicator": "https://web1infra.lumenlabs.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 18:59:07 UTC", "last_seen": "2026-03-19 18:59:07 UTC", "sightings": 1 }, { "indicator": "http://222.141.113.234:34093/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-19 18:57:07 UTC", "last_seen": "2026-03-19 18:57:07 UTC", "sightings": 1 }, { "indicator": "http://110.37.107.41:52389/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-19 18:55:32 UTC", "last_seen": "2026-03-19 18:55:32 UTC", "sightings": 1 }, { "indicator": "https://sat4link.terracore.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 18:52:12 UTC", "last_seen": "2026-03-19 18:52:12 UTC", "sightings": 1 }, { "indicator": "http://61.2.149.79:35067/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-19 18:52:06 UTC", "last_seen": "2026-03-19 18:52:06 UTC", "sightings": 1 }, { "indicator": "http://113.237.246.78:59702/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 18:51:18 UTC", "last_seen": "2026-03-19 18:51:18 UTC", "sightings": 1 }, { "indicator": "https://rock3core.terracore.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 18:47:06 UTC", "last_seen": "2026-03-19 18:47:06 UTC", "sightings": 1 }, { "indicator": "https://moon1orbit.terracore.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 18:36:07 UTC", "last_seen": "2026-03-19 18:36:07 UTC", "sightings": 1 }, { "indicator": "http://42.229.145.206:58743/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 18:34:16 UTC", "last_seen": "2026-03-19 18:34:16 UTC", "sightings": 1 }, { "indicator": "http://219.154.183.120:35121/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 18:32:16 UTC", "last_seen": "2026-03-19 18:32:16 UTC", "sightings": 1 }, { "indicator": "https://open4space.nuxflow.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 18:31:08 UTC", "last_seen": "2026-03-19 18:31:08 UTC", "sightings": 1 }, { "indicator": "http://59.96.141.82:46669/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 18:29:06 UTC", "last_seen": "2026-03-19 18:29:06 UTC", "sightings": 1 }, { "indicator": "http://123.8.89.143:58800/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 18:28:09 UTC", "last_seen": "2026-03-19 18:28:09 UTC", "sightings": 1 }, { "indicator": "http://39.81.183.157:44447/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 18:26:12 UTC", "last_seen": "2026-03-19 18:26:12 UTC", "sightings": 1 }, { "indicator": "https://vast3field.nuxflow.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 18:25:06 UTC", "last_seen": "2026-03-19 18:25:06 UTC", "sightings": 1 }, { "indicator": "https://zone2area.nuxflow.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 18:19:06 UTC", "last_seen": "2026-03-19 18:19:06 UTC", "sightings": 1 }, { "indicator": "http://115.58.9.26:59125/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 18:17:17 UTC", "last_seen": "2026-03-19 18:17:17 UTC", "sightings": 1 }, { "indicator": "http://219.157.202.80:33981/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 18:15:20 UTC", "last_seen": "2026-03-19 18:15:20 UTC", "sightings": 1 }, { "indicator": "http://219.154.183.120:35121/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 18:13:23 UTC", "last_seen": "2026-03-19 18:13:23 UTC", "sightings": 1 }, { "indicator": "https://rim1outer.nuxflow.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 18:13:05 UTC", "last_seen": "2026-03-19 18:13:05 UTC", "sightings": 1 }, { "indicator": "http://110.37.123.237:48934/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-19 18:12:06 UTC", "last_seen": "2026-03-19 18:12:06 UTC", "sightings": 1 }, { "indicator": "http://42.229.145.206:58743/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 18:11:11 UTC", "last_seen": "2026-03-19 18:11:11 UTC", "sightings": 1 }, { "indicator": "https://path4gate.altopoint.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 18:08:06 UTC", "last_seen": "2026-03-19 18:08:06 UTC", "sightings": 1 }, { "indicator": "http://59.96.141.82:46669/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 18:06:18 UTC", "last_seen": "2026-03-19 18:06:18 UTC", "sightings": 1 }, { "indicator": "https://view3sync.altopoint.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 18:03:06 UTC", "last_seen": "2026-03-19 18:03:06 UTC", "sightings": 1 }, { "indicator": "http://123.8.89.143:58800/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 18:02:11 UTC", "last_seen": "2026-03-19 18:02:11 UTC", "sightings": 1 }, { "indicator": "http://39.81.183.157:44447/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 17:59:21 UTC", "last_seen": "2026-03-19 17:59:21 UTC", "sightings": 1 }, { "indicator": "http://219.157.202.80:33981/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 17:58:21 UTC", "last_seen": "2026-03-19 17:58:21 UTC", "sightings": 1 }, { "indicator": "http://219.157.169.95:52913/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 17:58:17 UTC", "last_seen": "2026-03-19 17:58:17 UTC", "sightings": 1 }, { "indicator": "http://115.58.9.26:59125/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 17:58:17 UTC", "last_seen": "2026-03-19 17:58:17 UTC", "sightings": 1 }, { "indicator": "https://github.com/GimmyCH/keepurl/raw/refs/heads/main/heptarch/Software_v3.6-alpha.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 17:58:10 UTC", "last_seen": "2026-03-19 17:58:10 UTC", "sightings": 1 }, { "indicator": "https://github.com/f959/rematch-open-source-release/raw/refs/heads/branch/phrynoid/source-open-release-rematch-1.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 17:58:08 UTC", "last_seen": "2026-03-19 17:58:08 UTC", "sightings": 1 }, { "indicator": "https://room1dark.altopoint.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 17:58:08 UTC", "last_seen": "2026-03-19 17:58:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/f959/rematch-open-source-release/refs/heads/branch/phrynoid/source-open-release-rematch-1.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 17:58:08 UTC", "last_seen": "2026-03-19 17:58:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/f959/Python-Group-2/raw/refs/heads/master/data/Group-Python-notidanian.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 17:58:08 UTC", "last_seen": "2026-03-19 17:58:08 UTC", "sightings": 1 }, { "indicator": "https://scan2point.altopoint.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 17:58:08 UTC", "last_seen": "2026-03-19 17:58:08 UTC", "sightings": 1 }, { "indicator": "https://jdx5tnr0.sunbit.digital/?=check&&actmn=vhTbAesCsIGTHUZP", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-19 17:58:07 UTC", "last_seen": "2026-03-19 17:58:07 UTC", "sightings": 1 }, { "indicator": "https://github.com/ChristianJames1101/mean-devops-assignment/raw/refs/heads/master/My%20Project/devops-mean-assignment-2.2-beta.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 17:58:07 UTC", "last_seen": "2026-03-19 17:58:07 UTC", "sightings": 1 }, { "indicator": "https://sync4vision.veloxsite.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 17:58:07 UTC", "last_seen": "2026-03-19 17:58:07 UTC", "sightings": 1 }, { "indicator": "https://github.com/f959/f959.github.io/raw/refs/heads/main/coelomesoblast/github_f_io_2.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 17:58:07 UTC", "last_seen": "2026-03-19 17:58:07 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/GimmyCH/keepurl/refs/heads/main/heptarch/Software_v3.6-alpha.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 17:58:07 UTC", "last_seen": "2026-03-19 17:58:07 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/f959/f959.github.io/refs/heads/main/coelomesoblast/github_f_io_2.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 17:58:07 UTC", "last_seen": "2026-03-19 17:58:07 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/f959/Python-Group-2/refs/heads/master/data/Group-Python-notidanian.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 17:58:07 UTC", "last_seen": "2026-03-19 17:58:07 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/ChristianJames1101/mean-devops-assignment/refs/heads/master/My%20Project/devops-mean-assignment-2.2-beta.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 17:43:10 UTC", "last_seen": "2026-03-19 17:43:10 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/palakchoudhary062/The-Simson-Game/refs/heads/main/Simon%20Game%20Challenge%20Files/__MACOSX/Simon%20Game%20Challenge%20Starting%20Files/sounds/Simson_Game_The_1.5-alpha.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 17:43:10 UTC", "last_seen": "2026-03-19 17:43:10 UTC", "sightings": 1 }, { "indicator": "https://github.com/ChristianJames1101/farmers-brew/raw/refs/heads/main/painful/farmers_brew_v3.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 17:43:10 UTC", "last_seen": "2026-03-19 17:43:10 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/palakchoudhary062/Web/refs/heads/main/Dicee%20Challenge%20Completed/__MACOSX/Software_3.1-alpha.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 17:43:10 UTC", "last_seen": "2026-03-19 17:43:10 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/ChristianJames1101/farmers-brew/refs/heads/main/painful/farmers_brew_v3.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 17:43:10 UTC", "last_seen": "2026-03-19 17:43:10 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/ChristianJames1101/lyneths-garden/refs/heads/main/uploads/garden-lyneths-v2.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 17:43:10 UTC", "last_seen": "2026-03-19 17:43:10 UTC", "sightings": 1 }, { "indicator": "https://github.com/ChristianJames1101/ADT313/raw/refs/heads/main/ADT313-IT3C/AD_v3.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 17:43:10 UTC", "last_seen": "2026-03-19 17:43:10 UTC", "sightings": 1 }, { "indicator": "https://github.com/NexDan/jreactive/raw/refs/heads/main/src/examples/java/com/reactive/Software-v2.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 17:43:10 UTC", "last_seen": "2026-03-19 17:43:10 UTC", "sightings": 1 }, { "indicator": "https://github.com/palakchoudhary062/Drum-kit-website/raw/refs/heads/main/Drum%20Kit%20Website/__MACOSX/Drum%20Kit%20Completed/sounds/kit_Drum_website_v2.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 17:43:10 UTC", "last_seen": "2026-03-19 17:43:10 UTC", "sightings": 1 }, { "indicator": "https://github.com/palakchoudhary062/Web/raw/refs/heads/main/Dicee%20Challenge%20Completed/__MACOSX/Software_3.1-alpha.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 17:43:10 UTC", "last_seen": "2026-03-19 17:43:10 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/palakchoudhary062/MrandmrssmithScrapping/refs/heads/master/preduplication/Mrandmrssmith_Scrapping_2.6-beta.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 17:43:10 UTC", "last_seen": "2026-03-19 17:43:10 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/ChristianJames1101/cj-org/refs/heads/main/images/cj_org_v2.6.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 17:43:10 UTC", "last_seen": "2026-03-19 17:43:10 UTC", "sightings": 1 }, { "indicator": "https://github.com/ChristianJames1101/lyneths-garden/raw/refs/heads/main/uploads/garden-lyneths-v2.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 17:43:10 UTC", "last_seen": "2026-03-19 17:43:10 UTC", "sightings": 1 }, { "indicator": "https://github.com/palakchoudhary062/The-Simson-Game/raw/refs/heads/main/Simon%20Game%20Challenge%20Files/__MACOSX/Simon%20Game%20Challenge%20Starting%20Files/sounds/Simson_Game_The_1.5-alpha.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 17:43:10 UTC", "last_seen": "2026-03-19 17:43:10 UTC", "sightings": 1 }, { "indicator": "https://github.com/palakchoudhary062/space-game/raw/refs/heads/main/lemming/space_game_v3.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 17:43:10 UTC", "last_seen": "2026-03-19 17:43:10 UTC", "sightings": 1 }, { "indicator": "https://github.com/ChristianJames1101/cj-org/raw/refs/heads/main/images/cj_org_v2.6.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 17:43:10 UTC", "last_seen": "2026-03-19 17:43:10 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/palakchoudhary062/Drum-kit-website/refs/heads/main/Drum%20Kit%20Website/__MACOSX/Drum%20Kit%20Completed/sounds/kit_Drum_website_v2.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 17:43:10 UTC", "last_seen": "2026-03-19 17:43:10 UTC", "sightings": 1 }, { "indicator": "https://github.com/palakchoudhary062/MrandmrssmithScrapping/raw/refs/heads/master/preduplication/Mrandmrssmith_Scrapping_2.6-beta.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 17:43:10 UTC", "last_seen": "2026-03-19 17:43:10 UTC", "sightings": 1 }, { "indicator": "https://github.com/palakchoudhary062/project2/raw/refs/heads/main/unoriginately/project_3.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 17:43:10 UTC", "last_seen": "2026-03-19 17:43:10 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/palakchoudhary062/project2/refs/heads/main/unoriginately/project_3.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 17:43:10 UTC", "last_seen": "2026-03-19 17:43:10 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/NexDan/jreactive/refs/heads/main/src/examples/java/com/reactive/Software-v2.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 17:43:10 UTC", "last_seen": "2026-03-19 17:43:10 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/palakchoudhary062/space-game/refs/heads/main/lemming/space_game_v3.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 17:43:10 UTC", "last_seen": "2026-03-19 17:43:10 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/ChristianJames1101/ADT313/refs/heads/main/ADT313-IT3C/AD_v3.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 17:43:10 UTC", "last_seen": "2026-03-19 17:43:10 UTC", "sightings": 1 }, { "indicator": "http://110.37.123.237:48934/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-19 17:42:06 UTC", "last_seen": "2026-03-19 17:42:06 UTC", "sightings": 1 }, { "indicator": "https://ghost3node.veloxsite.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 17:41:08 UTC", "last_seen": "2026-03-19 17:41:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/GenevaMa/NEXUS-AI/raw/refs/heads/main/framework/NEXU-AI-v3.7.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 17:36:09 UTC", "last_seen": "2026-03-19 17:36:09 UTC", "sightings": 1 }, { "indicator": "https://github.com/bekatcho90/pumpswap-migration-sniper/raw/refs/heads/main/src/models/sniper-migration-pumpswap-3.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 17:36:08 UTC", "last_seen": "2026-03-19 17:36:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/eunaldi/panoptic-aimbot-suite/raw/refs/heads/branch/tweedy/aimbot-suite-panoptic-1.7-beta.4.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 17:36:08 UTC", "last_seen": "2026-03-19 17:36:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/eunaldi/Audit-de-performance/refs/heads/main/components/Audit_performance_de_1.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 17:36:08 UTC", "last_seen": "2026-03-19 17:36:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/bekatcho90/pumpswap-migration-sniper/refs/heads/main/src/models/sniper-migration-pumpswap-3.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 17:36:08 UTC", "last_seen": "2026-03-19 17:36:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/corabelbrachiate350/jupiter-launchpad-LFG/refs/heads/master/backend/jupiter-LFG-launchpad-v3.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 17:36:08 UTC", "last_seen": "2026-03-19 17:36:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/GenevaMa/lms-backend/refs/heads/main/src/utils/backend-lms-v3.7.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 17:36:08 UTC", "last_seen": "2026-03-19 17:36:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Aramkachaturiansandman198/idc/refs/heads/main/npins/Software-v2.9-alpha.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 17:36:08 UTC", "last_seen": "2026-03-19 17:36:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/corabelbrachiate350/jupiter-launchpad-LFG/raw/refs/heads/master/backend/jupiter-LFG-launchpad-v3.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 17:36:08 UTC", "last_seen": "2026-03-19 17:36:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/GenevaMa/lms-backend/raw/refs/heads/main/src/utils/backend-lms-v3.7.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 17:36:08 UTC", "last_seen": "2026-03-19 17:36:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/Aramkachaturiansandman198/idc/raw/refs/heads/main/npins/Software-v2.9-alpha.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 17:36:08 UTC", "last_seen": "2026-03-19 17:36:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/eunaldi/Audit-de-performance/raw/refs/heads/main/components/Audit_performance_de_1.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 17:36:08 UTC", "last_seen": "2026-03-19 17:36:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/BreezeAllen/aidevops/raw/refs/heads/main/templates/home/.agent/Software-v3.5-beta.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 17:36:07 UTC", "last_seen": "2026-03-19 17:36:07 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/BreezeAllen/aidevops/refs/heads/main/templates/home/.agent/Software-v3.5-beta.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 17:36:07 UTC", "last_seen": "2026-03-19 17:36:07 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/eunaldi/panoptic-aimbot-suite/refs/heads/branch/tweedy/aimbot-suite-panoptic-1.7-beta.4.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 17:36:07 UTC", "last_seen": "2026-03-19 17:36:07 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/GenevaMa/NEXUS-AI/refs/heads/main/framework/NEXU-AI-v3.7.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 17:36:07 UTC", "last_seen": "2026-03-19 17:36:07 UTC", "sightings": 1 }, { "indicator": "https://shell2core.veloxsite.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 17:34:07 UTC", "last_seen": "2026-03-19 17:34:07 UTC", "sightings": 1 }, { "indicator": "https://github.com/techop9045/Azure-Data-Factory-and-Databricks-End-to-End-Project/raw/refs/heads/main/Gold%20Zone/End_to_Databricks_Data_Factory_Project_and_Azure_2.4.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 17:28:10 UTC", "last_seen": "2026-03-19 17:28:10 UTC", "sightings": 1 }, { "indicator": "https://github.com/Limbo22/DexScreener-Rocket-Analyzer/raw/refs/heads/master/images/Dex-Rocket-Analyzer-Screener-v1.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 17:28:10 UTC", "last_seen": "2026-03-19 17:28:10 UTC", "sightings": 1 }, { "indicator": "https://github.com/KanderZamora/percolator-testnet/raw/refs/heads/main/Lepisma/testnet-percolator-1.0-alpha.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 17:28:10 UTC", "last_seen": "2026-03-19 17:28:10 UTC", "sightings": 1 }, { "indicator": "https://github.com/mrnsambas/rescuestream/raw/refs/heads/main/frontend/src/lib/Software_v3.4.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 17:28:10 UTC", "last_seen": "2026-03-19 17:28:10 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Limbo22/DexScreener-Rocket-Analyzer/refs/heads/master/images/Dex-Rocket-Analyzer-Screener-v1.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 17:28:10 UTC", "last_seen": "2026-03-19 17:28:10 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/KanderZamora/percolator-testnet/refs/heads/main/Lepisma/testnet-percolator-1.0-alpha.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 17:28:10 UTC", "last_seen": "2026-03-19 17:28:10 UTC", "sightings": 1 }, { "indicator": "https://trace1alpha.veloxsite.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 17:28:10 UTC", "last_seen": "2026-03-19 17:28:10 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/mrnsambas/rescuestream/refs/heads/main/frontend/src/lib/Software_v3.4.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 17:28:10 UTC", "last_seen": "2026-03-19 17:28:10 UTC", "sightings": 1 }, { "indicator": "https://github.com/sjjsjj2554/SitecoreMCP/raw/refs/heads/main/scripts/tests/Terminal.Gui/lib/net8.0/pt-PT/Sitecore_MCP_v3.9.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 17:28:10 UTC", "last_seen": "2026-03-19 17:28:10 UTC", "sightings": 1 }, { "indicator": "https://github.com/kowsheennya/PIC18-Assembly-VSC-Extension/raw/refs/heads/main/src/resource/include/Extension_Assembly_PI_VS_2.0-beta.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 17:28:09 UTC", "last_seen": "2026-03-19 17:28:09 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/taejina/acemcp/refs/heads/main/src/acemcp/tools/Software-v3.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 17:28:09 UTC", "last_seen": "2026-03-19 17:28:09 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/kowsheennya/PIC18-Assembly-VSC-Extension/refs/heads/main/src/resource/include/Extension_Assembly_PI_VS_2.0-beta.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 17:28:09 UTC", "last_seen": "2026-03-19 17:28:09 UTC", "sightings": 1 }, { "indicator": "https://github.com/BlueFireVe/awesome-tiny-crates/raw/refs/heads/main/aspalathus/tiny-crates-awesome-v2.0.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 17:28:09 UTC", "last_seen": "2026-03-19 17:28:09 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/BlueFireVe/awesome-tiny-crates/refs/heads/main/aspalathus/tiny-crates-awesome-v2.0.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 17:28:09 UTC", "last_seen": "2026-03-19 17:28:09 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/sjjsjj2554/SitecoreMCP/refs/heads/main/scripts/tests/Terminal.Gui/lib/net8.0/pt-PT/Sitecore_MCP_v3.9.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 17:28:09 UTC", "last_seen": "2026-03-19 17:28:09 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/techop9045/Azure-Data-Factory-and-Databricks-End-to-End-Project/refs/heads/main/Gold%20Zone/End_to_Databricks_Data_Factory_Project_and_Azure_2.4.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 17:28:09 UTC", "last_seen": "2026-03-19 17:28:09 UTC", "sightings": 1 }, { "indicator": "https://github.com/taejina/acemcp/raw/refs/heads/main/src/acemcp/tools/Software-v3.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 17:28:09 UTC", "last_seen": "2026-03-19 17:28:09 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/mortenulterior585/Telegram-Auto-Mass-Dms/refs/heads/main/cephalosome/Mass-Telegram-Auto-Dms-1.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 17:28:08 UTC", "last_seen": "2026-03-19 17:28:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/mortenulterior585/Telegram-Auto-Mass-Dms/raw/refs/heads/main/cephalosome/Mass-Telegram-Auto-Dms-1.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 17:28:08 UTC", "last_seen": "2026-03-19 17:28:08 UTC", "sightings": 1 }, { "indicator": "http://59.97.255.117:37836/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 17:26:10 UTC", "last_seen": "2026-03-19 17:26:10 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/botTsunami/mrl1/refs/heads/main/tinful/mrl_2.0.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 17:22:11 UTC", "last_seen": "2026-03-19 17:22:11 UTC", "sightings": 1 }, { "indicator": "https://link4access.durogrid.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 17:22:11 UTC", "last_seen": "2026-03-19 17:22:11 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/botTsunami/Telegram-AutoReports-Done-Easy/refs/heads/main/gangdom/Auto-Reports-Telegram-Done-Easy-v2.7.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 17:21:08 UTC", "last_seen": "2026-03-19 17:21:08 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.7/files/7850695435/gpaMBVQ.msi", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey", "EternalRocks" ], "first_seen": "2026-03-19 17:21:08 UTC", "last_seen": "2026-03-19 17:21:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/botTsunami/Telegram-AutoReports-Done-Easy/raw/refs/heads/main/gangdom/Auto-Reports-Telegram-Done-Easy-v2.7.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 17:21:08 UTC", "last_seen": "2026-03-19 17:21:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/botTsunami/programe-lenguage/raw/refs/heads/main/bilharzic/programe-lenguage-2.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 17:21:08 UTC", "last_seen": "2026-03-19 17:21:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/botTsunami/onlineCalculator/refs/heads/main/hematozoan/online_Calculator_corporally.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 17:21:08 UTC", "last_seen": "2026-03-19 17:21:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/botTsunami/programe-lenguage/refs/heads/main/bilharzic/programe-lenguage-2.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 17:21:08 UTC", "last_seen": "2026-03-19 17:21:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/botTsunami/mrl1/raw/refs/heads/main/tinful/mrl_2.0.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 17:21:08 UTC", "last_seen": "2026-03-19 17:21:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/botTsunami/onlineCalculator/raw/refs/heads/main/hematozoan/online_Calculator_corporally.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 17:21:08 UTC", "last_seen": "2026-03-19 17:21:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/botTsunami/arcadia/refs/heads/main/slugged/Software-v1.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 17:21:07 UTC", "last_seen": "2026-03-19 17:21:07 UTC", "sightings": 1 }, { "indicator": "https://github.com/botTsunami/arcadia/raw/refs/heads/main/slugged/Software-v1.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 17:21:07 UTC", "last_seen": "2026-03-19 17:21:07 UTC", "sightings": 1 }, { "indicator": "https://github.com/Marcosmvli/gitfetch/raw/refs/heads/main/src/Software_2.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 17:18:11 UTC", "last_seen": "2026-03-19 17:18:11 UTC", "sightings": 1 }, { "indicator": "https://github.com/hudayf6261/TradeConnector/raw/refs/heads/main/src/Trade-Connector-v2.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 17:18:08 UTC", "last_seen": "2026-03-19 17:18:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/hudayf6261/TradeConnector/refs/heads/main/src/Trade-Connector-v2.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 17:18:08 UTC", "last_seen": "2026-03-19 17:18:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Marcosmvli/gitfetch/refs/heads/main/src/Software_2.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 17:18:07 UTC", "last_seen": "2026-03-19 17:18:07 UTC", "sightings": 1 }, { "indicator": "https://github.com/Jaredvazquez/ruby-nrp/raw/refs/heads/main/anarthric/ruby-nrp-v1.0-beta.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 17:18:07 UTC", "last_seen": "2026-03-19 17:18:07 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/LGBullet23/actionscript-0mj/refs/heads/main/Shantung/mj-actionscript-madship.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 17:18:07 UTC", "last_seen": "2026-03-19 17:18:07 UTC", "sightings": 1 }, { "indicator": "https://github.com/LGBullet23/actionscript-0mj/raw/refs/heads/main/Shantung/mj-actionscript-madship.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 17:18:07 UTC", "last_seen": "2026-03-19 17:18:07 UTC", "sightings": 1 }, { "indicator": "https://auth3user.durogrid.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 17:18:06 UTC", "last_seen": "2026-03-19 17:18:06 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Jaredvazquez/ruby-nrp/refs/heads/main/anarthric/ruby-nrp-v1.0-beta.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 17:18:06 UTC", "last_seen": "2026-03-19 17:18:06 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/saicrazysai/n8n-workflows/refs/heads/main/retrovaccination/n_workflows_3.9-alpha.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 17:15:12 UTC", "last_seen": "2026-03-19 17:15:12 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/aminedeluxe/harperdb-hwm/refs/heads/main/Hunchakist/hwm_harperdb_v3.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 17:15:12 UTC", "last_seen": "2026-03-19 17:15:12 UTC", "sightings": 1 }, { "indicator": "https://github.com/PirateShadow/NAN111DE/raw/refs/heads/main/spiketop/NA_DE_presentably.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 17:15:10 UTC", "last_seen": "2026-03-19 17:15:10 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/PirateShadow/NAN111DE/refs/heads/main/spiketop/NA_DE_presentably.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 17:15:10 UTC", "last_seen": "2026-03-19 17:15:10 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Wannatayon21/shell-zef/refs/heads/main/parrhesiastic/zef_shell_v3.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 17:15:09 UTC", "last_seen": "2026-03-19 17:15:09 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/PUNGAY/RND1/refs/heads/main/assets/RN-3.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 17:15:08 UTC", "last_seen": "2026-03-19 17:15:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/ChillMonk0001/servflow/refs/heads/main/pkg/engine/actions/executables/fetchvector/Software_3.7.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 17:15:08 UTC", "last_seen": "2026-03-19 17:15:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/aminedeluxe/harperdb-hwm/raw/refs/heads/main/Hunchakist/hwm_harperdb_v3.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 17:15:08 UTC", "last_seen": "2026-03-19 17:15:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/PUNGAY/RND1/raw/refs/heads/main/assets/RN-3.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 17:15:08 UTC", "last_seen": "2026-03-19 17:15:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/Wannatayon21/shell-zef/raw/refs/heads/main/parrhesiastic/zef_shell_v3.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 17:15:08 UTC", "last_seen": "2026-03-19 17:15:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/ChillMonk0001/servflow/raw/refs/heads/main/pkg/engine/actions/executables/fetchvector/Software_3.7.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 17:15:08 UTC", "last_seen": "2026-03-19 17:15:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/saicrazysai/n8n-workflows/raw/refs/heads/main/retrovaccination/n_workflows_3.9-alpha.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 17:15:08 UTC", "last_seen": "2026-03-19 17:15:08 UTC", "sightings": 1 }, { "indicator": "https://base2point.durogrid.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 17:12:08 UTC", "last_seen": "2026-03-19 17:12:08 UTC", "sightings": 1 }, { "indicator": "http://110.37.65.205:33894/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-19 17:12:05 UTC", "last_seen": "2026-03-19 17:12:05 UTC", "sightings": 1 }, { "indicator": "https://github.com/robinroysics/launchlens/raw/refs/heads/main/poltergeist/Software_2.6.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 17:09:06 UTC", "last_seen": "2026-03-19 17:09:06 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/robinroysics/launchlens/refs/heads/main/poltergeist/Software_2.6.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 17:09:06 UTC", "last_seen": "2026-03-19 17:09:06 UTC", "sightings": 1 }, { "indicator": "http://112.248.83.48:50525/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-19 17:07:06 UTC", "last_seen": "2026-03-19 17:07:06 UTC", "sightings": 1 }, { "indicator": "https://glob1infra.durogrid.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 17:06:06 UTC", "last_seen": "2026-03-19 17:06:06 UTC", "sightings": 1 }, { "indicator": "https://github.com/iugiugo/java-developer-roadmap/raw/refs/heads/master/chebog/roadmap-developer-java-v3.4.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 17:06:06 UTC", "last_seen": "2026-03-19 17:06:06 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/iugiugo/java-developer-roadmap/refs/heads/master/chebog/roadmap-developer-java-v3.4.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 17:06:06 UTC", "last_seen": "2026-03-19 17:06:06 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/iugiugo/DayZ-Underground-Toolkit/refs/heads/main/uneffigiated/Day-Underground-Toolkit-2.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 17:06:06 UTC", "last_seen": "2026-03-19 17:06:06 UTC", "sightings": 1 }, { "indicator": "https://github.com/iugiugo/DayZ-Underground-Toolkit/raw/refs/heads/main/uneffigiated/Day-Underground-Toolkit-2.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 17:06:06 UTC", "last_seen": "2026-03-19 17:06:06 UTC", "sightings": 1 }, { "indicator": "http://110.37.35.89:48769/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 17:05:22 UTC", "last_seen": "2026-03-19 17:05:22 UTC", "sightings": 1 }, { "indicator": "http://125.43.227.15:45255/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-19 17:02:06 UTC", "last_seen": "2026-03-19 17:02:06 UTC", "sightings": 1 }, { "indicator": "http://59.97.255.117:37836/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 17:00:10 UTC", "last_seen": "2026-03-19 17:00:10 UTC", "sightings": 1 }, { "indicator": "http://110.39.252.138:46786/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 17:00:09 UTC", "last_seen": "2026-03-19 17:00:09 UTC", "sightings": 1 }, { "indicator": "https://flow4work.sinapsov.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 17:00:07 UTC", "last_seen": "2026-03-19 17:00:07 UTC", "sightings": 1 }, { "indicator": "http://110.37.65.205:33894/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-19 16:57:06 UTC", "last_seen": "2026-03-19 16:57:06 UTC", "sightings": 1 }, { "indicator": "http://114.228.228.75:53699/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-19 16:55:18 UTC", "last_seen": "2026-03-19 16:55:18 UTC", "sightings": 1 }, { "indicator": "https://net3local.sinapsov.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 16:54:08 UTC", "last_seen": "2026-03-19 16:54:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/FezAreCool/mcp-claude-hackernews/raw/refs/heads/master/entach/hackernews_mcp_claude_v1.9.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 16:52:13 UTC", "last_seen": "2026-03-19 16:52:13 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/mohame524Z/bagsfun-bundler-dbc/refs/heads/main/joola/bagsfun-bundler-dbc-1.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 16:52:12 UTC", "last_seen": "2026-03-19 16:52:12 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/FezAreCool/mcp-claude-hackernews/refs/heads/master/entach/hackernews_mcp_claude_v1.9.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 16:52:12 UTC", "last_seen": "2026-03-19 16:52:12 UTC", "sightings": 1 }, { "indicator": "https://github.com/mohame524Z/bagsfun-bundler-dbc/raw/refs/heads/main/joola/bagsfun-bundler-dbc-1.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 16:52:07 UTC", "last_seen": "2026-03-19 16:52:07 UTC", "sightings": 1 }, { "indicator": "https://github.com/leozin143/Ai-Terminal-X/raw/refs/heads/main/img/X-Terminal-Ai-v2.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 16:51:12 UTC", "last_seen": "2026-03-19 16:51:12 UTC", "sightings": 1 }, { "indicator": "https://github.com/Muturi-Kelvin/free-algorithm-learning/raw/refs/heads/master/archpresbyter/free_algorithm_learning_2.0.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 16:51:09 UTC", "last_seen": "2026-03-19 16:51:09 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Muturi-Kelvin/free-algorithm-learning/refs/heads/master/archpresbyter/free_algorithm_learning_2.0.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 16:51:08 UTC", "last_seen": "2026-03-19 16:51:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/leozin143/Ai-Terminal-X/refs/heads/main/img/X-Terminal-Ai-v2.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 16:51:08 UTC", "last_seen": "2026-03-19 16:51:08 UTC", "sightings": 1 }, { "indicator": "https://sys2power.sinapsov.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 16:50:07 UTC", "last_seen": "2026-03-19 16:50:07 UTC", "sightings": 1 }, { "indicator": "http://110.37.35.89:48769/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 16:49:20 UTC", "last_seen": "2026-03-19 16:49:20 UTC", "sightings": 1 }, { "indicator": "https://github.com/lennor-tan/openrouter-free-model/raw/refs/heads/main/messages/free_openrouter_model_1.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 16:48:09 UTC", "last_seen": "2026-03-19 16:48:09 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/lennor-tan/openrouter-free-model/refs/heads/main/messages/free_openrouter_model_1.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 16:48:08 UTC", "last_seen": "2026-03-19 16:48:08 UTC", "sightings": 1 }, { "indicator": "http://42.87.220.152:48618/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-19 16:47:06 UTC", "last_seen": "2026-03-19 16:47:06 UTC", "sightings": 1 }, { "indicator": "https://mon1point.sinapsov.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 16:45:09 UTC", "last_seen": "2026-03-19 16:45:09 UTC", "sightings": 1 }, { "indicator": "https://github.com/Jarrenstyle/InfiniteRunnerGame/raw/refs/heads/master/ungenerate/Infinite_Game_Runner_3.4.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 16:44:16 UTC", "last_seen": "2026-03-19 16:44:16 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Jarrenstyle/InfiniteRunnerGame/refs/heads/master/ungenerate/Infinite_Game_Runner_3.4.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 16:44:11 UTC", "last_seen": "2026-03-19 16:44:11 UTC", "sightings": 1 }, { "indicator": "https://github.com/Jarrenstyle/les-moders/raw/refs/heads/main/les-modern/les_moders_v2.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 16:44:09 UTC", "last_seen": "2026-03-19 16:44:09 UTC", "sightings": 1 }, { "indicator": "https://github.com/Jarrenstyle/Pong/raw/refs/heads/master/pong_game/Software-v2.0.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 16:44:09 UTC", "last_seen": "2026-03-19 16:44:09 UTC", "sightings": 1 }, { "indicator": "https://github.com/Jarrenstyle/Homework/raw/refs/heads/master/heteroeciousness/Software-1.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 16:44:09 UTC", "last_seen": "2026-03-19 16:44:09 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Jarrenstyle/Pong/refs/heads/master/pong_game/Software-v2.0.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 16:44:08 UTC", "last_seen": "2026-03-19 16:44:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Jarrenstyle/les-moders/refs/heads/main/les-modern/les_moders_v2.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 16:44:07 UTC", "last_seen": "2026-03-19 16:44:07 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Jarrenstyle/Classwork-/refs/heads/master/Classwork%202019-03-10/Classwork%202019-03-10/Debug/Classwor.929CE1FA.tlog/Classwork_v1.4-alpha.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 16:44:07 UTC", "last_seen": "2026-03-19 16:44:07 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Jarrenstyle/Homework/refs/heads/master/heteroeciousness/Software-1.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 16:44:07 UTC", "last_seen": "2026-03-19 16:44:07 UTC", "sightings": 1 }, { "indicator": "https://github.com/Jarrenstyle/Classwork-/raw/refs/heads/master/Classwork%202019-03-10/Classwork%202019-03-10/Debug/Classwor.929CE1FA.tlog/Classwork_v1.4-alpha.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 16:44:07 UTC", "last_seen": "2026-03-19 16:44:07 UTC", "sightings": 1 }, { "indicator": "http://123.12.191.89:37709/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 16:38:07 UTC", "last_seen": "2026-03-19 16:38:07 UTC", "sightings": 1 }, { "indicator": "http://125.43.227.15:45255/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-19 16:37:08 UTC", "last_seen": "2026-03-19 16:37:08 UTC", "sightings": 1 }, { "indicator": "http://117.247.27.99:50383/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-19 16:37:08 UTC", "last_seen": "2026-03-19 16:37:08 UTC", "sightings": 1 }, { "indicator": "https://entry4link.metravolta.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 16:37:07 UTC", "last_seen": "2026-03-19 16:37:07 UTC", "sightings": 1 }, { "indicator": "https://whrc.ru/static/plugins/plugin3.plg", "indicator_type": "url", "source": "URLhaus", "tags": [ "WeedHack" ], "first_seen": "2026-03-19 16:33:09 UTC", "last_seen": "2026-03-19 16:33:09 UTC", "sightings": 1 }, { "indicator": "http://soliq-smart.com/api/NSM.lic", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-19 16:33:07 UTC", "last_seen": "2026-03-19 16:33:07 UTC", "sightings": 1 }, { "indicator": "http://soliq-smart.com/api/client32.ini", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-19 16:33:07 UTC", "last_seen": "2026-03-19 16:33:07 UTC", "sightings": 1 }, { "indicator": "https://dev3host.metravolta.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 16:32:07 UTC", "last_seen": "2026-03-19 16:32:07 UTC", "sightings": 1 }, { "indicator": "http://123.10.235.245:57600/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-19 16:27:20 UTC", "last_seen": "2026-03-19 16:27:20 UTC", "sightings": 1 }, { "indicator": "http://106.4.101.215:37637/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-19 16:27:10 UTC", "last_seen": "2026-03-19 16:27:10 UTC", "sightings": 1 }, { "indicator": "https://rpc2remote.metravolta.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 16:27:06 UTC", "last_seen": "2026-03-19 16:27:06 UTC", "sightings": 1 }, { "indicator": "https://cloud1store.metravolta.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 16:21:10 UTC", "last_seen": "2026-03-19 16:21:10 UTC", "sightings": 1 }, { "indicator": "http://61.53.73.127:56838/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 16:19:17 UTC", "last_seen": "2026-03-19 16:19:17 UTC", "sightings": 1 }, { "indicator": "http://59.182.80.214:51011/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-19 16:17:08 UTC", "last_seen": "2026-03-19 16:17:08 UTC", "sightings": 1 }, { "indicator": "http://42.53.2.225:37129/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-19 16:17:06 UTC", "last_seen": "2026-03-19 16:17:06 UTC", "sightings": 1 }, { "indicator": "https://hub4sync.fluxobase.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 16:16:05 UTC", "last_seen": "2026-03-19 16:16:05 UTC", "sightings": 1 }, { "indicator": "http://123.12.191.89:37709/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 16:15:19 UTC", "last_seen": "2026-03-19 16:15:19 UTC", "sightings": 1 }, { "indicator": "http://27.202.230.158:43186/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 16:13:14 UTC", "last_seen": "2026-03-19 16:13:14 UTC", "sightings": 1 }, { "indicator": "http://42.87.220.152:48618/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-19 16:12:08 UTC", "last_seen": "2026-03-19 16:12:08 UTC", "sightings": 1 }, { "indicator": "https://gate3proxy.fluxobase.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 16:10:10 UTC", "last_seen": "2026-03-19 16:10:10 UTC", "sightings": 1 }, { "indicator": "http://27.202.230.158:43186/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 16:08:18 UTC", "last_seen": "2026-03-19 16:08:18 UTC", "sightings": 1 }, { "indicator": "https://app2data.fluxobase.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 16:05:08 UTC", "last_seen": "2026-03-19 16:05:08 UTC", "sightings": 1 }, { "indicator": "http://116.54.62.135:46436/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 16:02:10 UTC", "last_seen": "2026-03-19 16:02:10 UTC", "sightings": 1 }, { "indicator": "https://web1meta.fluxobase.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 16:00:08 UTC", "last_seen": "2026-03-19 16:00:08 UTC", "sightings": 1 }, { "indicator": "http://106.4.101.215:37637/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-19 15:59:24 UTC", "last_seen": "2026-03-19 15:59:24 UTC", "sightings": 1 }, { "indicator": "http://61.53.73.127:56838/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 15:53:21 UTC", "last_seen": "2026-03-19 15:53:21 UTC", "sightings": 1 }, { "indicator": "https://db4static.primanode.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 15:53:11 UTC", "last_seen": "2026-03-19 15:53:11 UTC", "sightings": 1 }, { "indicator": "http://42.53.2.225:37129/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-19 15:52:07 UTC", "last_seen": "2026-03-19 15:52:07 UTC", "sightings": 1 }, { "indicator": "https://cdn3dist.primanode.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 15:50:07 UTC", "last_seen": "2026-03-19 15:50:07 UTC", "sightings": 1 }, { "indicator": "https://api2edge.primanode.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 15:47:07 UTC", "last_seen": "2026-03-19 15:47:07 UTC", "sightings": 1 }, { "indicator": "http://27.215.215.125:54146/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 15:39:19 UTC", "last_seen": "2026-03-19 15:39:19 UTC", "sightings": 1 }, { "indicator": "http://117.209.81.176:41514/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 15:37:23 UTC", "last_seen": "2026-03-19 15:37:23 UTC", "sightings": 1 }, { "indicator": "https://ryv5wl.dashcloud.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 15:34:06 UTC", "last_seen": "2026-03-19 15:34:06 UTC", "sightings": 1 }, { "indicator": "https://m0pfvcb.dashcloud.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 15:27:06 UTC", "last_seen": "2026-03-19 15:27:06 UTC", "sightings": 1 }, { "indicator": "http://27.215.215.125:54146/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 15:18:18 UTC", "last_seen": "2026-03-19 15:18:18 UTC", "sightings": 1 }, { "indicator": "https://azurpri.dashcloud.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 15:18:06 UTC", "last_seen": "2026-03-19 15:18:06 UTC", "sightings": 1 }, { "indicator": "http://116.54.62.135:46436/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 15:08:24 UTC", "last_seen": "2026-03-19 15:08:24 UTC", "sightings": 1 }, { "indicator": "https://talxpn.closell.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 15:06:08 UTC", "last_seen": "2026-03-19 15:06:08 UTC", "sightings": 1 }, { "indicator": "http://59.96.136.45:56936/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-19 15:02:07 UTC", "last_seen": "2026-03-19 15:02:07 UTC", "sightings": 1 }, { "indicator": "https://trust-deep.closell.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 15:00:11 UTC", "last_seen": "2026-03-19 15:00:11 UTC", "sightings": 1 }, { "indicator": "https://r4v3-beam.closell.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 14:54:06 UTC", "last_seen": "2026-03-19 14:54:06 UTC", "sightings": 1 }, { "indicator": "http://42.56.132.60:53447/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 14:52:18 UTC", "last_seen": "2026-03-19 14:52:18 UTC", "sightings": 1 }, { "indicator": "https://alt-dyn4m.closell.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 14:50:11 UTC", "last_seen": "2026-03-19 14:50:11 UTC", "sightings": 1 }, { "indicator": "http://221.200.214.87:54591/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 14:49:13 UTC", "last_seen": "2026-03-19 14:49:13 UTC", "sightings": 1 }, { "indicator": "http://42.56.132.60:53447/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 14:44:19 UTC", "last_seen": "2026-03-19 14:44:19 UTC", "sightings": 1 }, { "indicator": "https://extendbuild.gatedale.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 14:44:07 UTC", "last_seen": "2026-03-19 14:44:07 UTC", "sightings": 1 }, { "indicator": "http://59.96.136.45:56936/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-19 14:42:07 UTC", "last_seen": "2026-03-19 14:42:07 UTC", "sightings": 1 }, { "indicator": "http://117.214.239.181:36167/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-19 14:40:24 UTC", "last_seen": "2026-03-19 14:40:24 UTC", "sightings": 1 }, { "indicator": "https://lsjnhprm.gatedale.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 14:38:06 UTC", "last_seen": "2026-03-19 14:38:06 UTC", "sightings": 1 }, { "indicator": "http://61.53.127.249:53048/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-19 14:37:06 UTC", "last_seen": "2026-03-19 14:37:06 UTC", "sightings": 1 }, { "indicator": "http://61.53.127.249:53048/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-19 14:37:06 UTC", "last_seen": "2026-03-19 14:37:06 UTC", "sightings": 1 }, { "indicator": "https://twlbqqt.gatedale.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 14:32:06 UTC", "last_seen": "2026-03-19 14:32:06 UTC", "sightings": 1 }, { "indicator": "http://120.28.216.187:41865/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-19 14:29:27 UTC", "last_seen": "2026-03-19 14:29:27 UTC", "sightings": 1 }, { "indicator": "http://110.39.235.164:34078/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 14:27:20 UTC", "last_seen": "2026-03-19 14:27:20 UTC", "sightings": 1 }, { "indicator": "http://221.200.214.87:54591/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 14:22:16 UTC", "last_seen": "2026-03-19 14:22:16 UTC", "sightings": 1 }, { "indicator": "http://123.11.131.80:51038/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-19 14:22:07 UTC", "last_seen": "2026-03-19 14:22:07 UTC", "sightings": 1 }, { "indicator": "http://61.53.140.216:44016/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 14:21:17 UTC", "last_seen": "2026-03-19 14:21:17 UTC", "sightings": 1 }, { "indicator": "https://jyllmoqw.worldwde.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 14:21:06 UTC", "last_seen": "2026-03-19 14:21:06 UTC", "sightings": 1 }, { "indicator": "http://110.37.40.215:34887/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 14:20:17 UTC", "last_seen": "2026-03-19 14:20:17 UTC", "sightings": 1 }, { "indicator": "http://117.214.239.181:36167/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-19 14:18:11 UTC", "last_seen": "2026-03-19 14:18:11 UTC", "sightings": 1 }, { "indicator": "http://110.37.40.215:34887/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 14:18:08 UTC", "last_seen": "2026-03-19 14:18:08 UTC", "sightings": 1 }, { "indicator": "https://nort-leaf.worldwde.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 14:17:09 UTC", "last_seen": "2026-03-19 14:17:09 UTC", "sightings": 1 }, { "indicator": "http://59.182.80.214:51011/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-19 14:12:07 UTC", "last_seen": "2026-03-19 14:12:07 UTC", "sightings": 1 }, { "indicator": "http://120.28.216.187:41865/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-19 14:10:18 UTC", "last_seen": "2026-03-19 14:10:18 UTC", "sightings": 1 }, { "indicator": "http://110.37.43.128:38221/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-19 14:10:17 UTC", "last_seen": "2026-03-19 14:10:17 UTC", "sightings": 1 }, { "indicator": "https://kellineal.worldwde.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 14:10:06 UTC", "last_seen": "2026-03-19 14:10:06 UTC", "sightings": 1 }, { "indicator": "https://runwayanc.worldwde.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 14:04:06 UTC", "last_seen": "2026-03-19 14:04:06 UTC", "sightings": 1 }, { "indicator": "http://61.2.149.79:35067/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-19 14:02:08 UTC", "last_seen": "2026-03-19 14:02:08 UTC", "sightings": 1 }, { "indicator": "https://ncjajduq.registar.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 13:59:07 UTC", "last_seen": "2026-03-19 13:59:07 UTC", "sightings": 1 }, { "indicator": "http://59.96.137.129:33527/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 13:58:10 UTC", "last_seen": "2026-03-19 13:58:10 UTC", "sightings": 1 }, { "indicator": "http://110.37.43.128:38221/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-19 13:57:09 UTC", "last_seen": "2026-03-19 13:57:09 UTC", "sightings": 1 }, { "indicator": "https://gr1d-dock.registar.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 13:54:06 UTC", "last_seen": "2026-03-19 13:54:06 UTC", "sightings": 1 }, { "indicator": "https://shad6-scope.registar.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 13:48:07 UTC", "last_seen": "2026-03-19 13:48:07 UTC", "sightings": 1 }, { "indicator": "http://117.209.31.11:42428/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-19 13:47:08 UTC", "last_seen": "2026-03-19 13:47:08 UTC", "sightings": 1 }, { "indicator": "https://bc39pv.registar.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 13:43:07 UTC", "last_seen": "2026-03-19 13:43:07 UTC", "sightings": 1 }, { "indicator": "http://110.36.95.246:58033/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-19 13:42:06 UTC", "last_seen": "2026-03-19 13:42:06 UTC", "sightings": 1 }, { "indicator": "https://trail5-trace.domprot.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 13:37:06 UTC", "last_seen": "2026-03-19 13:37:06 UTC", "sightings": 1 }, { "indicator": "https://vellithos5.domprot.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 13:31:06 UTC", "last_seen": "2026-03-19 13:31:06 UTC", "sightings": 1 }, { "indicator": "http://83.219.1.198:60333/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 13:28:10 UTC", "last_seen": "2026-03-19 13:28:10 UTC", "sightings": 1 }, { "indicator": "https://chec-deliv.domprot.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 13:25:08 UTC", "last_seen": "2026-03-19 13:25:08 UTC", "sightings": 1 }, { "indicator": "http://62.60.226.40/public_files/Yk6BRxY.txt", "indicator_type": "url", "source": "URLhaus", "tags": [ "rev-base64-loader" ], "first_seen": "2026-03-19 13:23:14 UTC", "last_seen": "2026-03-19 13:23:14 UTC", "sightings": 1 }, { "indicator": "http://219.157.53.85:55597/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 13:22:17 UTC", "last_seen": "2026-03-19 13:22:17 UTC", "sightings": 1 }, { "indicator": "http://110.37.24.11:36527/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-19 13:22:05 UTC", "last_seen": "2026-03-19 13:22:05 UTC", "sightings": 1 }, { "indicator": "https://sercore9et.domprot.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 13:20:09 UTC", "last_seen": "2026-03-19 13:20:09 UTC", "sightings": 1 }, { "indicator": "https://rend-velve.commonit.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 13:13:05 UTC", "last_seen": "2026-03-19 13:13:05 UTC", "sightings": 1 }, { "indicator": "http://117.209.31.11:42428/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-19 13:12:07 UTC", "last_seen": "2026-03-19 13:12:07 UTC", "sightings": 1 }, { "indicator": "https://5ibfhk.commonit.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 13:09:08 UTC", "last_seen": "2026-03-19 13:09:08 UTC", "sightings": 1 }, { "indicator": "https://zenvale1ex.commonit.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 13:02:06 UTC", "last_seen": "2026-03-19 13:02:06 UTC", "sightings": 1 }, { "indicator": "http://219.157.53.85:55597/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 13:01:18 UTC", "last_seen": "2026-03-19 13:01:18 UTC", "sightings": 1 }, { "indicator": "http://43.228.157.123/oqqqqoa.mp3", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer" ], "first_seen": "2026-03-19 13:00:08 UTC", "last_seen": "2026-03-19 13:00:08 UTC", "sightings": 1 }, { "indicator": "https://meta-co1u.commonit.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 12:58:08 UTC", "last_seen": "2026-03-19 12:58:08 UTC", "sightings": 1 }, { "indicator": "https://dark-stre.dartvar.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 12:52:09 UTC", "last_seen": "2026-03-19 12:52:09 UTC", "sightings": 1 }, { "indicator": "http://110.37.121.43:56724/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 12:51:18 UTC", "last_seen": "2026-03-19 12:51:18 UTC", "sightings": 1 }, { "indicator": "https://tinfre.dartvar.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 12:46:07 UTC", "last_seen": "2026-03-19 12:46:07 UTC", "sightings": 1 }, { "indicator": "https://mernex0or.dartvar.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 12:41:07 UTC", "last_seen": "2026-03-19 12:41:07 UTC", "sightings": 1 }, { "indicator": "https://proto-4dapter.dartvar.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 12:34:10 UTC", "last_seen": "2026-03-19 12:34:10 UTC", "sightings": 1 }, { "indicator": "http://110.37.48.94:41621/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-19 12:32:08 UTC", "last_seen": "2026-03-19 12:32:08 UTC", "sightings": 1 }, { "indicator": "https://adaptver.sanfloor.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 12:29:05 UTC", "last_seen": "2026-03-19 12:29:05 UTC", "sightings": 1 }, { "indicator": "http://110.37.24.11:36527/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-19 12:27:05 UTC", "last_seen": "2026-03-19 12:27:05 UTC", "sightings": 1 }, { "indicator": "http://175.148.156.110:58892/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 12:26:18 UTC", "last_seen": "2026-03-19 12:26:18 UTC", "sightings": 1 }, { "indicator": "https://quot-neu.sanfloor.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 12:24:08 UTC", "last_seen": "2026-03-19 12:24:08 UTC", "sightings": 1 }, { "indicator": "https://archive.org/download/marchwinrump1/marchwinrump1.png", "indicator_type": "url", "source": "URLhaus", "tags": [ " payload", "obfuscated" ], "first_seen": "2026-03-19 12:19:20 UTC", "last_seen": "2026-03-19 12:19:20 UTC", "sightings": 1 }, { "indicator": "https://estudarebomai.com/MSI_081838.png", "indicator_type": "url", "source": "URLhaus", "tags": [ "obfuscated", "payload" ], "first_seen": "2026-03-19 12:19:09 UTC", "last_seen": "2026-03-19 12:19:09 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.34/xd/Space.mips", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-19 12:19:06 UTC", "last_seen": "2026-03-19 12:19:06 UTC", "sightings": 1 }, { "indicator": "https://ahrgh87.sanfloor.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 12:18:07 UTC", "last_seen": "2026-03-19 12:18:07 UTC", "sightings": 1 }, { "indicator": "http://110.37.121.43:56724/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 12:17:21 UTC", "last_seen": "2026-03-19 12:17:21 UTC", "sightings": 1 }, { "indicator": "https://4kz9lzv.sanfloor.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 12:12:09 UTC", "last_seen": "2026-03-19 12:12:09 UTC", "sightings": 1 }, { "indicator": "http://175.148.156.110:58892/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-19 12:07:08 UTC", "last_seen": "2026-03-19 12:07:08 UTC", "sightings": 1 }, { "indicator": "http://222.124.55.79:41399/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-19 12:07:07 UTC", "last_seen": "2026-03-19 12:07:07 UTC", "sightings": 1 }, { "indicator": "https://deepasset.stabletu.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 12:07:07 UTC", "last_seen": "2026-03-19 12:07:07 UTC", "sightings": 1 }, { "indicator": "http://110.37.48.94:41621/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-19 12:07:07 UTC", "last_seen": "2026-03-19 12:07:07 UTC", "sightings": 1 }, { "indicator": "https://arraynimb.stabletu.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 12:01:07 UTC", "last_seen": "2026-03-19 12:01:07 UTC", "sightings": 1 }, { "indicator": "https://5zfv7hdg.ironapp.digital/?=check&&actmn=QrFaivtdUFUcHXAC", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-19 11:58:07 UTC", "last_seen": "2026-03-19 11:58:07 UTC", "sightings": 1 }, { "indicator": "https://breezeraven.stabletu.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 11:54:07 UTC", "last_seen": "2026-03-19 11:54:07 UTC", "sightings": 1 }, { "indicator": "http://182.126.100.48:51440/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 11:51:08 UTC", "last_seen": "2026-03-19 11:51:08 UTC", "sightings": 1 }, { "indicator": "https://s71frp.stabletu.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 11:50:08 UTC", "last_seen": "2026-03-19 11:50:08 UTC", "sightings": 1 }, { "indicator": "http://117.209.1.146:44609/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-19 11:47:11 UTC", "last_seen": "2026-03-19 11:47:11 UTC", "sightings": 1 }, { "indicator": "https://planstoc.cloudhost.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 11:47:07 UTC", "last_seen": "2026-03-19 11:47:07 UTC", "sightings": 1 }, { "indicator": "http://222.124.55.79:41399/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-19 11:37:08 UTC", "last_seen": "2026-03-19 11:37:08 UTC", "sightings": 1 }, { "indicator": "https://pasdusk.cloudhost.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 11:37:07 UTC", "last_seen": "2026-03-19 11:37:07 UTC", "sightings": 1 }, { "indicator": "https://5zfna.cloudhost.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 11:31:09 UTC", "last_seen": "2026-03-19 11:31:09 UTC", "sightings": 1 }, { "indicator": "http://113.237.246.78:59702/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 11:27:15 UTC", "last_seen": "2026-03-19 11:27:15 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.7/files/8520831842/KA1DSAi.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-19 11:27:07 UTC", "last_seen": "2026-03-19 11:27:07 UTC", "sightings": 1 }, { "indicator": "http://175.148.44.4:34819/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 11:26:19 UTC", "last_seen": "2026-03-19 11:26:19 UTC", "sightings": 1 }, { "indicator": "https://testrapid.cloudhost.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 11:26:05 UTC", "last_seen": "2026-03-19 11:26:05 UTC", "sightings": 1 }, { "indicator": "https://3pqw.farjoran.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 11:21:07 UTC", "last_seen": "2026-03-19 11:21:07 UTC", "sightings": 1 }, { "indicator": "http://123.14.20.167:34838/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 11:20:12 UTC", "last_seen": "2026-03-19 11:20:12 UTC", "sightings": 1 }, { "indicator": "http://110.36.1.80:43209/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 11:19:16 UTC", "last_seen": "2026-03-19 11:19:16 UTC", "sightings": 1 }, { "indicator": "http://42.224.174.211:47036/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 11:19:16 UTC", "last_seen": "2026-03-19 11:19:16 UTC", "sightings": 1 }, { "indicator": "http://182.126.100.48:51440/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 11:18:16 UTC", "last_seen": "2026-03-19 11:18:16 UTC", "sightings": 1 }, { "indicator": "http://113.99.201.137:40557/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-19 11:17:07 UTC", "last_seen": "2026-03-19 11:17:07 UTC", "sightings": 1 }, { "indicator": "http://112.248.112.243:41561/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 11:16:34 UTC", "last_seen": "2026-03-19 11:16:34 UTC", "sightings": 1 }, { "indicator": "http://114.228.189.130:54987/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-19 11:15:20 UTC", "last_seen": "2026-03-19 11:15:20 UTC", "sightings": 1 }, { "indicator": "https://dr4vv-forge.farjoran.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 11:14:06 UTC", "last_seen": "2026-03-19 11:14:06 UTC", "sightings": 1 }, { "indicator": "http://191.37.19.74:44034/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-19 11:12:05 UTC", "last_seen": "2026-03-19 11:12:05 UTC", "sightings": 1 }, { "indicator": "http://117.209.26.60:33878/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 11:10:17 UTC", "last_seen": "2026-03-19 11:10:17 UTC", "sightings": 1 }, { "indicator": "https://valebyte.farjoran.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 11:09:06 UTC", "last_seen": "2026-03-19 11:09:06 UTC", "sightings": 1 }, { "indicator": "http://117.209.28.67:47300/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-19 11:07:11 UTC", "last_seen": "2026-03-19 11:07:11 UTC", "sightings": 1 }, { "indicator": "https://rich-vector.farjoran.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 11:04:06 UTC", "last_seen": "2026-03-19 11:04:06 UTC", "sightings": 1 }, { "indicator": "https://yk97w.bejont.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 10:58:08 UTC", "last_seen": "2026-03-19 10:58:08 UTC", "sightings": 1 }, { "indicator": "http://42.232.238.30:42799/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-19 10:57:07 UTC", "last_seen": "2026-03-19 10:57:07 UTC", "sightings": 1 }, { "indicator": "http://113.99.201.137:40557/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-19 10:57:07 UTC", "last_seen": "2026-03-19 10:57:07 UTC", "sightings": 1 }, { "indicator": "http://42.224.174.211:47036/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 10:55:18 UTC", "last_seen": "2026-03-19 10:55:18 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.7/files/8705834433/8njNDcy.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-03-19 10:54:06 UTC", "last_seen": "2026-03-19 10:54:06 UTC", "sightings": 1 }, { "indicator": "http://123.14.20.167:34838/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 10:52:20 UTC", "last_seen": "2026-03-19 10:52:20 UTC", "sightings": 1 }, { "indicator": "https://p4rcel-grid.bejont.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 10:52:12 UTC", "last_seen": "2026-03-19 10:52:12 UTC", "sightings": 1 }, { "indicator": "http://110.36.1.80:43209/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 10:49:09 UTC", "last_seen": "2026-03-19 10:49:09 UTC", "sightings": 1 }, { "indicator": "https://xedbu.bejont.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 10:47:09 UTC", "last_seen": "2026-03-19 10:47:09 UTC", "sightings": 1 }, { "indicator": "http://110.37.40.14:34674/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-19 10:47:09 UTC", "last_seen": "2026-03-19 10:47:09 UTC", "sightings": 1 }, { "indicator": "http://191.37.19.74:44034/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-19 10:47:07 UTC", "last_seen": "2026-03-19 10:47:07 UTC", "sightings": 1 }, { "indicator": "http://113.64.250.2:34789/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 10:45:18 UTC", "last_seen": "2026-03-19 10:45:18 UTC", "sightings": 1 }, { "indicator": "https://qzrxbp.bejont.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 10:41:07 UTC", "last_seen": "2026-03-19 10:41:07 UTC", "sightings": 1 }, { "indicator": "https://lettercompi.aspdos.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 10:36:06 UTC", "last_seen": "2026-03-19 10:36:06 UTC", "sightings": 1 }, { "indicator": "http://42.230.206.51:33180/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-19 10:32:07 UTC", "last_seen": "2026-03-19 10:32:07 UTC", "sightings": 1 }, { "indicator": "https://4lign-mount.aspdos.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 10:30:08 UTC", "last_seen": "2026-03-19 10:30:08 UTC", "sightings": 1 }, { "indicator": "https://hidden-panel.aspdos.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 10:24:07 UTC", "last_seen": "2026-03-19 10:24:07 UTC", "sightings": 1 }, { "indicator": "http://123.7.238.71:37277/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 10:22:17 UTC", "last_seen": "2026-03-19 10:22:17 UTC", "sightings": 1 }, { "indicator": "http://110.37.40.14:34674/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-19 10:22:11 UTC", "last_seen": "2026-03-19 10:22:11 UTC", "sightings": 1 }, { "indicator": "https://memorybay.aspdos.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 10:18:06 UTC", "last_seen": "2026-03-19 10:18:06 UTC", "sightings": 1 }, { "indicator": "http://61.53.140.216:44016/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 10:17:17 UTC", "last_seen": "2026-03-19 10:17:17 UTC", "sightings": 1 }, { "indicator": "http://125.43.17.184:54620/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 10:15:20 UTC", "last_seen": "2026-03-19 10:15:20 UTC", "sightings": 1 }, { "indicator": "https://124vm6or.scrollnft.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 10:12:06 UTC", "last_seen": "2026-03-19 10:12:06 UTC", "sightings": 1 }, { "indicator": "https://solcrest2a.scrollnft.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 10:08:06 UTC", "last_seen": "2026-03-19 10:08:06 UTC", "sightings": 1 }, { "indicator": "https://8lyw.scrollnft.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 10:01:06 UTC", "last_seen": "2026-03-19 10:01:06 UTC", "sightings": 1 }, { "indicator": "https://load-leaf.scrollnft.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 09:55:09 UTC", "last_seen": "2026-03-19 09:55:09 UTC", "sightings": 1 }, { "indicator": "http://123.7.238.71:37277/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 09:53:25 UTC", "last_seen": "2026-03-19 09:53:25 UTC", "sightings": 1 }, { "indicator": "https://dynnexet.tatneft.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 09:50:13 UTC", "last_seen": "2026-03-19 09:50:13 UTC", "sightings": 1 }, { "indicator": "https://alt-qu1c.tatneft.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 09:45:13 UTC", "last_seen": "2026-03-19 09:45:13 UTC", "sightings": 1 }, { "indicator": "https://0v6nu.tatneft.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 09:39:08 UTC", "last_seen": "2026-03-19 09:39:08 UTC", "sightings": 1 }, { "indicator": "http://125.43.17.184:54620/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 09:38:20 UTC", "last_seen": "2026-03-19 09:38:20 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.7/files/7782139129/ZSZfFtn.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543", "SalatStealer" ], "first_seen": "2026-03-19 09:38:08 UTC", "last_seen": "2026-03-19 09:38:08 UTC", "sightings": 1 }, { "indicator": "https://dyncorear9.tatneft.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 09:34:12 UTC", "last_seen": "2026-03-19 09:34:12 UTC", "sightings": 1 }, { "indicator": "http://27.215.102.130:38480/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-19 09:28:17 UTC", "last_seen": "2026-03-19 09:28:17 UTC", "sightings": 1 }, { "indicator": "https://sol-tideor.fotestat.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 09:28:12 UTC", "last_seen": "2026-03-19 09:28:12 UTC", "sightings": 1 }, { "indicator": "https://vorspireum1.fotestat.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 09:22:07 UTC", "last_seen": "2026-03-19 09:22:07 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.7/files/6195522554/LZqEiJA.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-19 09:19:07 UTC", "last_seen": "2026-03-19 09:19:07 UTC", "sightings": 1 }, { "indicator": "http://125.44.52.160:50276/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-19 09:17:07 UTC", "last_seen": "2026-03-19 09:17:07 UTC", "sightings": 1 }, { "indicator": "http://125.42.232.134:43575/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 09:16:14 UTC", "last_seen": "2026-03-19 09:16:14 UTC", "sightings": 1 }, { "indicator": "http://46.147.44.81:54456/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 09:16:13 UTC", "last_seen": "2026-03-19 09:16:13 UTC", "sightings": 1 }, { "indicator": "https://meta-5har.fotestat.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 09:16:06 UTC", "last_seen": "2026-03-19 09:16:06 UTC", "sightings": 1 }, { "indicator": "https://r1ver-mark.fotestat.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 09:11:08 UTC", "last_seen": "2026-03-19 09:11:08 UTC", "sightings": 1 }, { "indicator": "https://70x2ky.veloxunit.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 09:06:07 UTC", "last_seen": "2026-03-19 09:06:07 UTC", "sightings": 1 }, { "indicator": "http://196.189.111.43:36930/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-19 09:02:25 UTC", "last_seen": "2026-03-19 09:02:25 UTC", "sightings": 1 }, { "indicator": "http://110.36.95.252:48244/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 09:00:11 UTC", "last_seen": "2026-03-19 09:00:11 UTC", "sightings": 1 }, { "indicator": "https://nnzyf2.veloxunit.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 09:00:08 UTC", "last_seen": "2026-03-19 09:00:08 UTC", "sightings": 1 }, { "indicator": "http://59.97.178.185:50226/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 08:59:22 UTC", "last_seen": "2026-03-19 08:59:22 UTC", "sightings": 1 }, { "indicator": "http://125.42.232.134:43575/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 08:54:16 UTC", "last_seen": "2026-03-19 08:54:16 UTC", "sightings": 1 }, { "indicator": "https://bloomsilen.veloxunit.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 08:54:06 UTC", "last_seen": "2026-03-19 08:54:06 UTC", "sightings": 1 }, { "indicator": "https://alt-5torag.termocenter.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 08:48:07 UTC", "last_seen": "2026-03-19 08:48:07 UTC", "sightings": 1 }, { "indicator": "http://59.97.178.185:50226/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 08:47:23 UTC", "last_seen": "2026-03-19 08:47:23 UTC", "sightings": 1 }, { "indicator": "https://ju80r.termocenter.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 08:44:05 UTC", "last_seen": "2026-03-19 08:44:05 UTC", "sightings": 1 }, { "indicator": "http://196.189.111.43:36930/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-19 08:42:24 UTC", "last_seen": "2026-03-19 08:42:24 UTC", "sightings": 1 }, { "indicator": "https://loya-cache.termocenter.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 08:38:08 UTC", "last_seen": "2026-03-19 08:38:08 UTC", "sightings": 1 }, { "indicator": "https://specime7-layer.bonflac.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 08:32:07 UTC", "last_seen": "2026-03-19 08:32:07 UTC", "sightings": 1 }, { "indicator": "https://gu1d-phase.bonflac.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 08:27:06 UTC", "last_seen": "2026-03-19 08:27:06 UTC", "sightings": 1 }, { "indicator": "http://119.116.34.193:46111/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-19 08:27:06 UTC", "last_seen": "2026-03-19 08:27:06 UTC", "sightings": 1 }, { "indicator": "http://113.64.250.2:34789/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-19 08:22:06 UTC", "last_seen": "2026-03-19 08:22:06 UTC", "sightings": 1 }, { "indicator": "http://115.54.106.42:50789/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 08:21:17 UTC", "last_seen": "2026-03-19 08:21:17 UTC", "sightings": 1 }, { "indicator": "https://hyper-guid3.botslap.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 08:21:07 UTC", "last_seen": "2026-03-19 08:21:07 UTC", "sightings": 1 }, { "indicator": "http://115.54.106.42:50789/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 08:20:20 UTC", "last_seen": "2026-03-19 08:20:20 UTC", "sightings": 1 }, { "indicator": "https://watc5-field.botslap.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 08:15:08 UTC", "last_seen": "2026-03-19 08:15:08 UTC", "sightings": 1 }, { "indicator": "http://80.89.237.130/1.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543", "Vidar" ], "first_seen": "2026-03-19 08:14:12 UTC", "last_seen": "2026-03-19 08:14:12 UTC", "sightings": 1 }, { "indicator": "http://117.198.22.255:33949/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 08:12:18 UTC", "last_seen": "2026-03-19 08:12:18 UTC", "sightings": 1 }, { "indicator": "https://jijbgf8.regwan.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 08:10:07 UTC", "last_seen": "2026-03-19 08:10:07 UTC", "sightings": 1 }, { "indicator": "https://294asm.regwan.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 08:03:07 UTC", "last_seen": "2026-03-19 08:03:07 UTC", "sightings": 1 }, { "indicator": "http://119.116.34.193:46111/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-19 08:02:08 UTC", "last_seen": "2026-03-19 08:02:08 UTC", "sightings": 1 }, { "indicator": "https://theorfier.yardnext.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 07:58:07 UTC", "last_seen": "2026-03-19 07:58:07 UTC", "sightings": 1 }, { "indicator": "http://95.9.35.137:39997/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-19 07:57:06 UTC", "last_seen": "2026-03-19 07:57:06 UTC", "sightings": 1 }, { "indicator": "https://4agat.yardnext.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 07:52:07 UTC", "last_seen": "2026-03-19 07:52:07 UTC", "sightings": 1 }, { "indicator": "http://185.146.232.224/mipsel", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-19 07:49:27 UTC", "last_seen": "2026-03-19 07:49:27 UTC", "sightings": 1 }, { "indicator": "http://185.146.232.224/aarch64", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-19 07:49:26 UTC", "last_seen": "2026-03-19 07:49:26 UTC", "sightings": 1 }, { "indicator": "http://185.146.232.224/i486", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-19 07:49:26 UTC", "last_seen": "2026-03-19 07:49:26 UTC", "sightings": 1 }, { "indicator": "http://185.146.232.224/armv7l", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-19 07:49:25 UTC", "last_seen": "2026-03-19 07:49:25 UTC", "sightings": 1 }, { "indicator": "http://185.146.232.224/x86", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-19 07:49:25 UTC", "last_seen": "2026-03-19 07:49:25 UTC", "sightings": 1 }, { "indicator": "http://185.146.232.224/spc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-19 07:49:22 UTC", "last_seen": "2026-03-19 07:49:22 UTC", "sightings": 1 }, { "indicator": "http://185.146.232.224/ppc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-19 07:49:22 UTC", "last_seen": "2026-03-19 07:49:22 UTC", "sightings": 1 }, { "indicator": "http://185.146.232.224/mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-19 07:49:21 UTC", "last_seen": "2026-03-19 07:49:21 UTC", "sightings": 1 }, { "indicator": "http://185.146.232.224/sh4", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-19 07:49:20 UTC", "last_seen": "2026-03-19 07:49:20 UTC", "sightings": 1 }, { "indicator": "http://185.146.232.224/x86-64", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-19 07:49:20 UTC", "last_seen": "2026-03-19 07:49:20 UTC", "sightings": 1 }, { "indicator": "http://185.146.232.224/sparc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-19 07:49:18 UTC", "last_seen": "2026-03-19 07:49:18 UTC", "sightings": 1 }, { "indicator": "http://185.146.232.224/arm", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-19 07:49:18 UTC", "last_seen": "2026-03-19 07:49:18 UTC", "sightings": 1 }, { "indicator": "http://185.146.232.224/powerpc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-19 07:49:18 UTC", "last_seen": "2026-03-19 07:49:18 UTC", "sightings": 1 }, { "indicator": "http://185.146.232.224/armv6l", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-19 07:49:18 UTC", "last_seen": "2026-03-19 07:49:18 UTC", "sightings": 1 }, { "indicator": "http://185.146.232.224/m68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-19 07:49:17 UTC", "last_seen": "2026-03-19 07:49:17 UTC", "sightings": 1 }, { "indicator": "http://59.183.132.38:42371/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 07:48:42 UTC", "last_seen": "2026-03-19 07:48:42 UTC", "sightings": 1 }, { "indicator": "http://185.146.232.224/mpsl", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-19 07:48:17 UTC", "last_seen": "2026-03-19 07:48:17 UTC", "sightings": 1 }, { "indicator": "https://mntdtg1.runfast.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 07:47:06 UTC", "last_seen": "2026-03-19 07:47:06 UTC", "sightings": 1 }, { "indicator": "https://geo-d3p1.runfast.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 07:43:08 UTC", "last_seen": "2026-03-19 07:43:08 UTC", "sightings": 1 }, { "indicator": "https://publishbrigh.devopsn.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 07:40:11 UTC", "last_seen": "2026-03-19 07:40:11 UTC", "sightings": 1 }, { "indicator": "http://95.9.35.137:39997/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-19 07:37:06 UTC", "last_seen": "2026-03-19 07:37:06 UTC", "sightings": 1 }, { "indicator": "http://117.205.162.25:56761/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 07:34:11 UTC", "last_seen": "2026-03-19 07:34:11 UTC", "sightings": 1 }, { "indicator": "http://110.39.233.197:52674/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-19 07:32:06 UTC", "last_seen": "2026-03-19 07:32:06 UTC", "sightings": 1 }, { "indicator": "http://27.37.215.92:36113/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 07:25:30 UTC", "last_seen": "2026-03-19 07:25:30 UTC", "sightings": 1 }, { "indicator": "http://110.36.80.163:55613/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 07:25:29 UTC", "last_seen": "2026-03-19 07:25:29 UTC", "sightings": 1 }, { "indicator": "https://teiafnhz.gramsup.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 07:24:10 UTC", "last_seen": "2026-03-19 07:24:10 UTC", "sightings": 1 }, { "indicator": "http://117.209.0.154:52216/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-19 07:22:10 UTC", "last_seen": "2026-03-19 07:22:10 UTC", "sightings": 1 }, { "indicator": "https://trivaleor.gramsup.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 07:20:09 UTC", "last_seen": "2026-03-19 07:20:09 UTC", "sightings": 1 }, { "indicator": "http://182.126.245.79:40631/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 07:18:09 UTC", "last_seen": "2026-03-19 07:18:09 UTC", "sightings": 1 }, { "indicator": "https://pricescene.vouayger.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 07:13:05 UTC", "last_seen": "2026-03-19 07:13:05 UTC", "sightings": 1 }, { "indicator": "https://gladetrusted.vouayger.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 07:08:09 UTC", "last_seen": "2026-03-19 07:08:09 UTC", "sightings": 1 }, { "indicator": "http://117.205.162.25:56761/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 07:07:19 UTC", "last_seen": "2026-03-19 07:07:19 UTC", "sightings": 1 }, { "indicator": "http://110.36.15.1:47111/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 07:07:10 UTC", "last_seen": "2026-03-19 07:07:10 UTC", "sightings": 1 }, { "indicator": "https://4w9jp.checkbro.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 07:03:06 UTC", "last_seen": "2026-03-19 07:03:06 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.7/files/7845402472/x6842I6.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-19 07:02:06 UTC", "last_seen": "2026-03-19 07:02:06 UTC", "sightings": 1 }, { "indicator": "http://87.120.219.222:41292/2/docs.bat", "indicator_type": "url", "source": "URLhaus", "tags": [ "opendir", "RemcosRAT" ], "first_seen": "2026-03-19 07:01:06 UTC", "last_seen": "2026-03-19 07:01:06 UTC", "sightings": 1 }, { "indicator": "http://87.120.219.222:41292/1/flintcloak210.ljy", "indicator_type": "url", "source": "URLhaus", "tags": [ "GuLoader", "opendir" ], "first_seen": "2026-03-19 07:00:10 UTC", "last_seen": "2026-03-19 07:00:10 UTC", "sightings": 1 }, { "indicator": "http://87.120.219.222:41292/1/kaemsjlikeme244.ldv", "indicator_type": "url", "source": "URLhaus", "tags": [ "GuLoader", "opendir" ], "first_seen": "2026-03-19 07:00:10 UTC", "last_seen": "2026-03-19 07:00:10 UTC", "sightings": 1 }, { "indicator": "http://87.120.219.222:41292/1/trucecloak188.dsx", "indicator_type": "url", "source": "URLhaus", "tags": [ "GuLoader", "opendir" ], "first_seen": "2026-03-19 07:00:10 UTC", "last_seen": "2026-03-19 07:00:10 UTC", "sightings": 1 }, { "indicator": "http://87.120.219.222:41292/1/yashegmakguezk495.nxa", "indicator_type": "url", "source": "URLhaus", "tags": [ "GuLoader", "opendir" ], "first_seen": "2026-03-19 07:00:10 UTC", "last_seen": "2026-03-19 07:00:10 UTC", "sightings": 1 }, { "indicator": "http://87.120.219.222:41292/9839572789384/Documents/Shared/Reports/wishlist87231.bat", "indicator_type": "url", "source": "URLhaus", "tags": [ "opendir", "RemcosRAT" ], "first_seen": "2026-03-19 07:00:10 UTC", "last_seen": "2026-03-19 07:00:10 UTC", "sightings": 1 }, { "indicator": "http://87.120.219.222:41292/1/widen676flora.kid", "indicator_type": "url", "source": "URLhaus", "tags": [ "GuLoader", "opendir" ], "first_seen": "2026-03-19 07:00:09 UTC", "last_seen": "2026-03-19 07:00:09 UTC", "sightings": 1 }, { "indicator": "http://87.120.219.222:41292/1/truce596jolly.ips", "indicator_type": "url", "source": "URLhaus", "tags": [ "GuLoader", "opendir" ], "first_seen": "2026-03-19 07:00:09 UTC", "last_seen": "2026-03-19 07:00:09 UTC", "sightings": 1 }, { "indicator": "http://87.120.219.222:41292/1/ridge44ridge.ybe", "indicator_type": "url", "source": "URLhaus", "tags": [ "GuLoader", "opendir" ], "first_seen": "2026-03-19 07:00:09 UTC", "last_seen": "2026-03-19 07:00:09 UTC", "sightings": 1 }, { "indicator": "http://87.120.219.222:41292/1/diemsgqhazoem54.wxq", "indicator_type": "url", "source": "URLhaus", "tags": [ "GuLoader", "opendir" ], "first_seen": "2026-03-19 07:00:09 UTC", "last_seen": "2026-03-19 07:00:09 UTC", "sightings": 1 }, { "indicator": "http://87.120.219.222:41292/1/wristacorn717.hjf", "indicator_type": "url", "source": "URLhaus", "tags": [ "GuLoader", "opendir" ], "first_seen": "2026-03-19 07:00:09 UTC", "last_seen": "2026-03-19 07:00:09 UTC", "sightings": 1 }, { "indicator": "http://87.120.219.222:41292/1/ysahgemaskgezx825.ice", "indicator_type": "url", "source": "URLhaus", "tags": [ "GuLoader", "opendir" ], "first_seen": "2026-03-19 07:00:08 UTC", "last_seen": "2026-03-19 07:00:08 UTC", "sightings": 1 }, { "indicator": "http://87.120.219.222:41292/1/maiejtyraomrf872.tzo", "indicator_type": "url", "source": "URLhaus", "tags": [ "GuLoader", "opendir" ], "first_seen": "2026-03-19 07:00:08 UTC", "last_seen": "2026-03-19 07:00:08 UTC", "sightings": 1 }, { "indicator": "http://87.120.219.222:41292/1/maiejtkameneu178.bcq", "indicator_type": "url", "source": "URLhaus", "tags": [ "GuLoader", "opendir" ], "first_seen": "2026-03-19 07:00:08 UTC", "last_seen": "2026-03-19 07:00:08 UTC", "sightings": 1 }, { "indicator": "http://87.120.219.222:41292/1/oceanlance429.ihp", "indicator_type": "url", "source": "URLhaus", "tags": [ "GuLoader", "opendir" ], "first_seen": "2026-03-19 07:00:08 UTC", "last_seen": "2026-03-19 07:00:08 UTC", "sightings": 1 }, { "indicator": "http://87.120.219.222:41292/1/diemsgqcaopelkf329.emb", "indicator_type": "url", "source": "URLhaus", "tags": [ "GuLoader", "opendir" ], "first_seen": "2026-03-19 07:00:08 UTC", "last_seen": "2026-03-19 07:00:08 UTC", "sightings": 1 }, { "indicator": "http://87.120.219.222:41292/1/terra523peach.uyv", "indicator_type": "url", "source": "URLhaus", "tags": [ "GuLoader", "opendir" ], "first_seen": "2026-03-19 07:00:08 UTC", "last_seen": "2026-03-19 07:00:08 UTC", "sightings": 1 }, { "indicator": "http://87.120.219.222:41292/1/blazecloak699.jpu", "indicator_type": "url", "source": "URLhaus", "tags": [ "GuLoader", "opendir" ], "first_seen": "2026-03-19 07:00:08 UTC", "last_seen": "2026-03-19 07:00:08 UTC", "sightings": 1 }, { "indicator": "http://87.120.219.222:41292/1/charmwrist97.qsa", "indicator_type": "url", "source": "URLhaus", "tags": [ "GuLoader", "opendir" ], "first_seen": "2026-03-19 07:00:07 UTC", "last_seen": "2026-03-19 07:00:07 UTC", "sightings": 1 }, { "indicator": "http://87.120.219.222:41292/1/ayesjqomgesazyt925.xrk", "indicator_type": "url", "source": "URLhaus", "tags": [ "GuLoader", "opendir" ], "first_seen": "2026-03-19 07:00:07 UTC", "last_seen": "2026-03-19 07:00:07 UTC", "sightings": 1 }, { "indicator": "http://87.120.219.222:41292/1/aiasgpe422aiasgpe.fsv", "indicator_type": "url", "source": "URLhaus", "tags": [ "GuLoader", "opendir" ], "first_seen": "2026-03-19 07:00:07 UTC", "last_seen": "2026-03-19 07:00:07 UTC", "sightings": 1 }, { "indicator": "http://87.120.219.222:41292/1/terravinyl495.sgu", "indicator_type": "url", "source": "URLhaus", "tags": [ "GuLoader", "opendir" ], "first_seen": "2026-03-19 07:00:07 UTC", "last_seen": "2026-03-19 07:00:07 UTC", "sightings": 1 }, { "indicator": "http://87.120.219.222:41292/1/mbeirdajryshg135.mjy", "indicator_type": "url", "source": "URLhaus", "tags": [ "GuLoader", "opendir" ], "first_seen": "2026-03-19 07:00:07 UTC", "last_seen": "2026-03-19 07:00:07 UTC", "sightings": 1 }, { "indicator": "http://87.120.219.222:41292/1/ajryshgajryshg251.hfm", "indicator_type": "url", "source": "URLhaus", "tags": [ "GuLoader", "opendir" ], "first_seen": "2026-03-19 07:00:07 UTC", "last_seen": "2026-03-19 07:00:07 UTC", "sightings": 1 }, { "indicator": "http://87.120.219.222:41292/1/florawaltz640.bwg", "indicator_type": "url", "source": "URLhaus", "tags": [ "GuLoader", "opendir" ], "first_seen": "2026-03-19 07:00:07 UTC", "last_seen": "2026-03-19 07:00:07 UTC", "sightings": 1 }, { "indicator": "http://87.120.219.222:41292/1/ayesaherefytasgmki392.qux", "indicator_type": "url", "source": "URLhaus", "tags": [ "GuLoader", "opendir" ], "first_seen": "2026-03-19 07:00:06 UTC", "last_seen": "2026-03-19 07:00:06 UTC", "sightings": 1 }, { "indicator": "http://87.120.219.222:41292/1/gleamgleam377.rgb", "indicator_type": "url", "source": "URLhaus", "tags": [ "GuLoader", "opendir" ], "first_seen": "2026-03-19 07:00:06 UTC", "last_seen": "2026-03-19 07:00:06 UTC", "sightings": 1 }, { "indicator": "http://87.120.219.222:41292/1/zmgrajgtemasg379.itt", "indicator_type": "url", "source": "URLhaus", "tags": [ "GuLoader", "opendir" ], "first_seen": "2026-03-19 07:00:06 UTC", "last_seen": "2026-03-19 07:00:06 UTC", "sightings": 1 }, { "indicator": "http://87.120.219.222:41292/1/esygmheayesjqom157.mcm", "indicator_type": "url", "source": "URLhaus", "tags": [ "GuLoader", "opendir" ], "first_seen": "2026-03-19 07:00:06 UTC", "last_seen": "2026-03-19 07:00:06 UTC", "sightings": 1 }, { "indicator": "http://123.4.163.52:45431/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 06:59:11 UTC", "last_seen": "2026-03-19 06:59:11 UTC", "sightings": 1 }, { "indicator": "http://87.120.219.222:41292/1/wuemasgqkewofm962.pzs", "indicator_type": "url", "source": "URLhaus", "tags": [ "GuLoader", "opendir", "rat", "RemcosRAT" ], "first_seen": "2026-03-19 06:59:06 UTC", "last_seen": "2026-03-19 06:59:06 UTC", "sightings": 1 }, { "indicator": "http://87.120.219.222:41292/1/wuemasgqeyrmasjq793.mli", "indicator_type": "url", "source": "URLhaus", "tags": [ "GuLoader", "opendir", "rat", "RemcosRAT" ], "first_seen": "2026-03-19 06:59:05 UTC", "last_seen": "2026-03-19 06:59:05 UTC", "sightings": 1 }, { "indicator": "https://vcp61.checkbro.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 06:58:06 UTC", "last_seen": "2026-03-19 06:58:06 UTC", "sightings": 1 }, { "indicator": "http://77.83.39.60/cy/ENCRYPTED.ps1", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-19 06:57:05 UTC", "last_seen": "2026-03-19 06:57:05 UTC", "sightings": 1 }, { "indicator": "http://77.83.39.60/cy/CRYPTED.ps1", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-19 06:57:05 UTC", "last_seen": "2026-03-19 06:57:05 UTC", "sightings": 1 }, { "indicator": "http://77.83.39.60/cy/pta.ps1", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-19 06:57:05 UTC", "last_seen": "2026-03-19 06:57:05 UTC", "sightings": 1 }, { "indicator": "http://182.126.245.79:40631/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 06:54:15 UTC", "last_seen": "2026-03-19 06:54:15 UTC", "sightings": 1 }, { "indicator": "https://railcon.woodflo.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 06:51:06 UTC", "last_seen": "2026-03-19 06:51:06 UTC", "sightings": 1 }, { "indicator": "http://182.113.206.110:39458/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 06:46:21 UTC", "last_seen": "2026-03-19 06:46:21 UTC", "sightings": 1 }, { "indicator": "https://learntiny.woodflo.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 06:45:10 UTC", "last_seen": "2026-03-19 06:45:10 UTC", "sightings": 1 }, { "indicator": "http://110.37.95.229:40047/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 06:43:14 UTC", "last_seen": "2026-03-19 06:43:14 UTC", "sightings": 1 }, { "indicator": "https://ternp3-watch.goodwork.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 06:40:08 UTC", "last_seen": "2026-03-19 06:40:08 UTC", "sightings": 1 }, { "indicator": "http://110.36.15.1:47111/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 06:37:16 UTC", "last_seen": "2026-03-19 06:37:16 UTC", "sightings": 1 }, { "indicator": "http://182.113.206.110:39458/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 06:36:18 UTC", "last_seen": "2026-03-19 06:36:18 UTC", "sightings": 1 }, { "indicator": "http://123.4.163.52:45431/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 06:34:08 UTC", "last_seen": "2026-03-19 06:34:08 UTC", "sightings": 1 }, { "indicator": "https://patternpilot.goodwork.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 06:34:06 UTC", "last_seen": "2026-03-19 06:34:06 UTC", "sightings": 1 }, { "indicator": "http://123.190.161.33:45648/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-19 06:32:10 UTC", "last_seen": "2026-03-19 06:32:10 UTC", "sightings": 1 }, { "indicator": "http://110.36.77.162:36755/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-19 06:32:06 UTC", "last_seen": "2026-03-19 06:32:06 UTC", "sightings": 1 }, { "indicator": "https://hyperdrift.besthire.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 06:29:06 UTC", "last_seen": "2026-03-19 06:29:06 UTC", "sightings": 1 }, { "indicator": "https://phantom-mods.cfd/PhantomHack.rar", "indicator_type": "url", "source": "URLhaus", "tags": [ "pw-Phantom" ], "first_seen": "2026-03-19 06:26:43 UTC", "last_seen": "2026-03-19 06:26:43 UTC", "sightings": 1 }, { "indicator": "https://de3.filedwnld.top/lwfdei/copyq-13.0.0.zip", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-19 06:26:13 UTC", "last_seen": "2026-03-19 06:26:13 UTC", "sightings": 1 }, { "indicator": "http://110.36.19.215:58602/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 06:24:07 UTC", "last_seen": "2026-03-19 06:24:07 UTC", "sightings": 1 }, { "indicator": "https://p9vpxaz1.besthire.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 06:23:07 UTC", "last_seen": "2026-03-19 06:23:07 UTC", "sightings": 1 }, { "indicator": "http://42.238.121.214:46236/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-19 06:22:07 UTC", "last_seen": "2026-03-19 06:22:07 UTC", "sightings": 1 }, { "indicator": "http://110.36.20.21:44225/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 06:19:06 UTC", "last_seen": "2026-03-19 06:19:06 UTC", "sightings": 1 }, { "indicator": "https://ips.goodwork.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 06:17:07 UTC", "last_seen": "2026-03-19 06:17:07 UTC", "sightings": 1 }, { "indicator": "https://meta.veloxunit.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 06:12:08 UTC", "last_seen": "2026-03-19 06:12:08 UTC", "sightings": 1 }, { "indicator": "http://103.160.130.7:53618/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-19 06:12:06 UTC", "last_seen": "2026-03-19 06:12:06 UTC", "sightings": 1 }, { "indicator": "http://110.37.90.172:43671/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 06:10:22 UTC", "last_seen": "2026-03-19 06:10:22 UTC", "sightings": 1 }, { "indicator": "http://110.37.119.14:42156/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 06:10:22 UTC", "last_seen": "2026-03-19 06:10:22 UTC", "sightings": 1 }, { "indicator": "http://110.37.55.23:49053/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 06:08:14 UTC", "last_seen": "2026-03-19 06:08:14 UTC", "sightings": 1 }, { "indicator": "http://110.36.77.162:36755/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-19 06:07:06 UTC", "last_seen": "2026-03-19 06:07:06 UTC", "sightings": 1 }, { "indicator": "http://110.37.55.23:49053/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 06:06:14 UTC", "last_seen": "2026-03-19 06:06:14 UTC", "sightings": 1 }, { "indicator": "https://t1me.checkbro.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 06:06:10 UTC", "last_seen": "2026-03-19 06:06:10 UTC", "sightings": 1 }, { "indicator": "https://mona.termocenter.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 06:01:08 UTC", "last_seen": "2026-03-19 06:01:08 UTC", "sightings": 1 }, { "indicator": "http://196.190.69.149:40376/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-19 06:00:14 UTC", "last_seen": "2026-03-19 06:00:14 UTC", "sightings": 1 }, { "indicator": "http://59.42.88.121:56735/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-19 05:57:08 UTC", "last_seen": "2026-03-19 05:57:08 UTC", "sightings": 1 }, { "indicator": "http://42.238.121.214:46236/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-19 05:57:07 UTC", "last_seen": "2026-03-19 05:57:07 UTC", "sightings": 1 }, { "indicator": "http://110.36.20.21:44225/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 05:53:12 UTC", "last_seen": "2026-03-19 05:53:12 UTC", "sightings": 1 }, { "indicator": "http://112.242.61.134:36861/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-19 05:52:20 UTC", "last_seen": "2026-03-19 05:52:20 UTC", "sightings": 1 }, { "indicator": "http://110.37.119.14:42156/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 05:47:16 UTC", "last_seen": "2026-03-19 05:47:16 UTC", "sightings": 1 }, { "indicator": "http://103.160.130.7:53618/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-19 05:47:10 UTC", "last_seen": "2026-03-19 05:47:10 UTC", "sightings": 1 }, { "indicator": "http://222.140.160.89:33524/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 05:43:14 UTC", "last_seen": "2026-03-19 05:43:14 UTC", "sightings": 1 }, { "indicator": "http://112.242.61.134:36861/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-19 05:27:27 UTC", "last_seen": "2026-03-19 05:27:27 UTC", "sightings": 1 }, { "indicator": "http://110.37.98.220:40839/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 05:27:14 UTC", "last_seen": "2026-03-19 05:27:14 UTC", "sightings": 1 }, { "indicator": "http://110.37.28.220:35963/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-19 05:27:06 UTC", "last_seen": "2026-03-19 05:27:06 UTC", "sightings": 1 }, { "indicator": "http://117.193.174.124:53008/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 05:21:15 UTC", "last_seen": "2026-03-19 05:21:15 UTC", "sightings": 1 }, { "indicator": "http://110.39.252.138:46786/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 05:20:11 UTC", "last_seen": "2026-03-19 05:20:11 UTC", "sightings": 1 }, { "indicator": "http://110.37.98.220:40839/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 05:19:10 UTC", "last_seen": "2026-03-19 05:19:10 UTC", "sightings": 1 }, { "indicator": "http://61.52.110.33:46647/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 05:18:08 UTC", "last_seen": "2026-03-19 05:18:08 UTC", "sightings": 1 }, { "indicator": "http://110.37.32.92:33502/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-19 05:12:07 UTC", "last_seen": "2026-03-19 05:12:07 UTC", "sightings": 1 }, { "indicator": "http://77.245.107.223:36547/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 05:11:15 UTC", "last_seen": "2026-03-19 05:11:15 UTC", "sightings": 1 }, { "indicator": "http://117.193.174.124:53008/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 05:02:18 UTC", "last_seen": "2026-03-19 05:02:18 UTC", "sightings": 1 }, { "indicator": "http://61.52.110.33:46647/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 04:56:18 UTC", "last_seen": "2026-03-19 04:56:18 UTC", "sightings": 1 }, { "indicator": "http://110.36.70.238:38299/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-19 04:52:06 UTC", "last_seen": "2026-03-19 04:52:06 UTC", "sightings": 1 }, { "indicator": "http://115.61.40.17:54402/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 04:50:17 UTC", "last_seen": "2026-03-19 04:50:17 UTC", "sightings": 1 }, { "indicator": "http://124.94.244.114:56053/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-19 04:47:20 UTC", "last_seen": "2026-03-19 04:47:20 UTC", "sightings": 1 }, { "indicator": "http://115.61.40.17:54402/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 04:46:11 UTC", "last_seen": "2026-03-19 04:46:11 UTC", "sightings": 1 }, { "indicator": "http://117.198.198.94:57236/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-19 04:32:07 UTC", "last_seen": "2026-03-19 04:32:07 UTC", "sightings": 1 }, { "indicator": "http://59.88.17.25:37471/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-19 04:32:07 UTC", "last_seen": "2026-03-19 04:32:07 UTC", "sightings": 1 }, { "indicator": "http://110.39.245.10:52637/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 04:24:17 UTC", "last_seen": "2026-03-19 04:24:17 UTC", "sightings": 1 }, { "indicator": "http://110.37.39.230:57040/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-19 04:22:16 UTC", "last_seen": "2026-03-19 04:22:16 UTC", "sightings": 1 }, { "indicator": "http://124.94.244.114:56053/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-19 04:17:20 UTC", "last_seen": "2026-03-19 04:17:20 UTC", "sightings": 1 }, { "indicator": "http://59.88.17.25:37471/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-19 04:12:08 UTC", "last_seen": "2026-03-19 04:12:08 UTC", "sightings": 1 }, { "indicator": "https://35x53u.yardnext.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 04:08:06 UTC", "last_seen": "2026-03-19 04:08:06 UTC", "sightings": 1 }, { "indicator": "http://120.61.240.186:56988/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-19 04:07:07 UTC", "last_seen": "2026-03-19 04:07:07 UTC", "sightings": 1 }, { "indicator": "http://196.189.198.193:33315/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-19 04:06:22 UTC", "last_seen": "2026-03-19 04:06:22 UTC", "sightings": 1 }, { "indicator": "http://196.189.198.193:33315/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-19 04:02:26 UTC", "last_seen": "2026-03-19 04:02:26 UTC", "sightings": 1 }, { "indicator": "http://118.251.13.30:49582/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-19 04:02:08 UTC", "last_seen": "2026-03-19 04:02:08 UTC", "sightings": 1 }, { "indicator": "http://117.198.198.94:57236/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-19 04:02:08 UTC", "last_seen": "2026-03-19 04:02:08 UTC", "sightings": 1 }, { "indicator": "http://110.37.28.220:35963/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-19 04:02:07 UTC", "last_seen": "2026-03-19 04:02:07 UTC", "sightings": 1 }, { "indicator": "https://c0mpi-branch.runfast.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 04:01:07 UTC", "last_seen": "2026-03-19 04:01:07 UTC", "sightings": 1 }, { "indicator": "http://110.39.245.10:52637/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 03:58:30 UTC", "last_seen": "2026-03-19 03:58:30 UTC", "sightings": 1 }, { "indicator": "http://118.251.13.30:49582/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-19 03:57:08 UTC", "last_seen": "2026-03-19 03:57:08 UTC", "sightings": 1 }, { "indicator": "https://uwk7hxy.devopsn.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 03:53:05 UTC", "last_seen": "2026-03-19 03:53:05 UTC", "sightings": 1 }, { "indicator": "http://117.205.90.155:57197/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 03:52:18 UTC", "last_seen": "2026-03-19 03:52:18 UTC", "sightings": 1 }, { "indicator": "http://117.254.177.144:55436/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-19 03:47:08 UTC", "last_seen": "2026-03-19 03:47:08 UTC", "sightings": 1 }, { "indicator": "http://42.238.168.132:40874/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-19 03:47:07 UTC", "last_seen": "2026-03-19 03:47:07 UTC", "sightings": 1 }, { "indicator": "http://61.52.158.229:54467/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-19 03:47:07 UTC", "last_seen": "2026-03-19 03:47:07 UTC", "sightings": 1 }, { "indicator": "http://110.37.99.117:41152/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-19 03:46:20 UTC", "last_seen": "2026-03-19 03:46:20 UTC", "sightings": 1 }, { "indicator": "https://trivaleis6.gramsup.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 03:46:07 UTC", "last_seen": "2026-03-19 03:46:07 UTC", "sightings": 1 }, { "indicator": "http://115.55.246.34:48695/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 03:45:27 UTC", "last_seen": "2026-03-19 03:45:27 UTC", "sightings": 1 }, { "indicator": "http://117.223.141.221:39031/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 03:44:18 UTC", "last_seen": "2026-03-19 03:44:18 UTC", "sightings": 1 }, { "indicator": "http://117.223.141.221:39031/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 03:43:29 UTC", "last_seen": "2026-03-19 03:43:29 UTC", "sightings": 1 }, { "indicator": "https://scr14-sync.vouayger.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 03:43:09 UTC", "last_seen": "2026-03-19 03:43:09 UTC", "sightings": 1 }, { "indicator": "http://82.144.86.37:46593/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-19 03:42:22 UTC", "last_seen": "2026-03-19 03:42:22 UTC", "sightings": 1 }, { "indicator": "http://117.235.117.8:40693/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-19 03:37:19 UTC", "last_seen": "2026-03-19 03:37:19 UTC", "sightings": 1 }, { "indicator": "http://120.61.240.186:56988/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-19 03:32:16 UTC", "last_seen": "2026-03-19 03:32:16 UTC", "sightings": 1 }, { "indicator": "http://117.206.66.23:33386/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-19 03:32:08 UTC", "last_seen": "2026-03-19 03:32:08 UTC", "sightings": 1 }, { "indicator": "https://tideruntime.checkbro.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 03:30:08 UTC", "last_seen": "2026-03-19 03:30:08 UTC", "sightings": 1 }, { "indicator": "http://117.223.140.8:39402/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 03:28:25 UTC", "last_seen": "2026-03-19 03:28:25 UTC", "sightings": 1 }, { "indicator": "http://117.205.90.155:57197/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 03:23:24 UTC", "last_seen": "2026-03-19 03:23:24 UTC", "sightings": 1 }, { "indicator": "https://4wm0.woodflo.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 03:23:10 UTC", "last_seen": "2026-03-19 03:23:10 UTC", "sightings": 1 }, { "indicator": "https://unitmed.goodwork.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 03:18:07 UTC", "last_seen": "2026-03-19 03:18:07 UTC", "sightings": 1 }, { "indicator": "http://117.235.117.8:40693/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-19 03:14:25 UTC", "last_seen": "2026-03-19 03:14:25 UTC", "sightings": 1 }, { "indicator": "http://115.55.246.34:48695/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 03:14:21 UTC", "last_seen": "2026-03-19 03:14:21 UTC", "sightings": 1 }, { "indicator": "http://82.144.86.37:46593/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-19 03:12:21 UTC", "last_seen": "2026-03-19 03:12:21 UTC", "sightings": 1 }, { "indicator": "http://103.61.243.11:58596/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-19 03:12:08 UTC", "last_seen": "2026-03-19 03:12:08 UTC", "sightings": 1 }, { "indicator": "https://checkcipher.besthire.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 03:11:10 UTC", "last_seen": "2026-03-19 03:11:10 UTC", "sightings": 1 }, { "indicator": "http://110.37.45.161:38771/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-19 03:06:18 UTC", "last_seen": "2026-03-19 03:06:18 UTC", "sightings": 1 }, { "indicator": "https://serv4base.veloxunit.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 03:06:08 UTC", "last_seen": "2026-03-19 03:06:08 UTC", "sightings": 1 }, { "indicator": "http://117.223.140.8:39402/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 03:03:31 UTC", "last_seen": "2026-03-19 03:03:31 UTC", "sightings": 1 }, { "indicator": "http://117.254.177.144:55436/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-19 03:02:08 UTC", "last_seen": "2026-03-19 03:02:08 UTC", "sightings": 1 }, { "indicator": "http://123.13.103.228:50407/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 03:01:20 UTC", "last_seen": "2026-03-19 03:01:20 UTC", "sightings": 1 }, { "indicator": "https://edge3dist.veloxunit.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 03:00:08 UTC", "last_seen": "2026-03-19 03:00:08 UTC", "sightings": 1 }, { "indicator": "https://node2flow.veloxunit.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 02:55:07 UTC", "last_seen": "2026-03-19 02:55:07 UTC", "sightings": 1 }, { "indicator": "http://175.165.80.253:37123/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 02:54:19 UTC", "last_seen": "2026-03-19 02:54:19 UTC", "sightings": 1 }, { "indicator": "http://115.48.151.224:56650/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 02:53:26 UTC", "last_seen": "2026-03-19 02:53:26 UTC", "sightings": 1 }, { "indicator": "http://175.165.80.253:37123/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 02:49:21 UTC", "last_seen": "2026-03-19 02:49:21 UTC", "sightings": 1 }, { "indicator": "https://unit1meta.veloxunit.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 02:49:06 UTC", "last_seen": "2026-03-19 02:49:06 UTC", "sightings": 1 }, { "indicator": "http://61.1.234.74:40806/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-19 02:47:08 UTC", "last_seen": "2026-03-19 02:47:08 UTC", "sightings": 1 }, { "indicator": "https://main4point.nuxbase.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 02:44:06 UTC", "last_seen": "2026-03-19 02:44:06 UTC", "sightings": 1 }, { "indicator": "http://27.32.255.147:38620/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-19 02:42:07 UTC", "last_seen": "2026-03-19 02:42:07 UTC", "sightings": 1 }, { "indicator": "http://103.61.243.11:58596/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-19 02:42:07 UTC", "last_seen": "2026-03-19 02:42:07 UTC", "sightings": 1 }, { "indicator": "http://77.247.88.72:46687/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-19 02:42:05 UTC", "last_seen": "2026-03-19 02:42:05 UTC", "sightings": 1 }, { "indicator": "http://110.37.45.161:38771/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-19 02:41:23 UTC", "last_seen": "2026-03-19 02:41:23 UTC", "sightings": 1 }, { "indicator": "https://data3sync.nuxbase.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 02:38:07 UTC", "last_seen": "2026-03-19 02:38:07 UTC", "sightings": 1 }, { "indicator": "http://59.183.118.33:50503/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 02:37:24 UTC", "last_seen": "2026-03-19 02:37:24 UTC", "sightings": 1 }, { "indicator": "http://123.13.103.228:50407/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 02:33:24 UTC", "last_seen": "2026-03-19 02:33:24 UTC", "sightings": 1 }, { "indicator": "http://182.117.160.77:41173/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-19 02:33:24 UTC", "last_seen": "2026-03-19 02:33:24 UTC", "sightings": 1 }, { "indicator": "https://gate2proxy.nuxbase.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 02:32:07 UTC", "last_seen": "2026-03-19 02:32:07 UTC", "sightings": 1 }, { "indicator": "http://79.24.141.59:56310/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-19 02:29:24 UTC", "last_seen": "2026-03-19 02:29:24 UTC", "sightings": 1 }, { "indicator": "http://27.37.100.58:59354/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 02:28:13 UTC", "last_seen": "2026-03-19 02:28:13 UTC", "sightings": 1 }, { "indicator": "https://web1infra.nuxbase.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 02:26:08 UTC", "last_seen": "2026-03-19 02:26:08 UTC", "sightings": 1 }, { "indicator": "http://222.140.160.89:33524/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 02:22:22 UTC", "last_seen": "2026-03-19 02:22:22 UTC", "sightings": 1 }, { "indicator": "https://sat4link.termocenter.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 02:21:06 UTC", "last_seen": "2026-03-19 02:21:06 UTC", "sightings": 1 }, { "indicator": "http://115.48.151.224:56650/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 02:19:17 UTC", "last_seen": "2026-03-19 02:19:17 UTC", "sightings": 1 }, { "indicator": "http://110.37.97.71:35298/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-19 02:17:16 UTC", "last_seen": "2026-03-19 02:17:16 UTC", "sightings": 1 }, { "indicator": "http://61.1.234.74:40806/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-19 02:17:11 UTC", "last_seen": "2026-03-19 02:17:11 UTC", "sightings": 1 }, { "indicator": "http://27.32.255.147:38620/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-19 02:17:10 UTC", "last_seen": "2026-03-19 02:17:10 UTC", "sightings": 1 }, { "indicator": "http://110.37.99.117:41152/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-19 02:17:07 UTC", "last_seen": "2026-03-19 02:17:07 UTC", "sightings": 1 }, { "indicator": "https://rock3core.termocenter.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 02:15:08 UTC", "last_seen": "2026-03-19 02:15:08 UTC", "sightings": 1 }, { "indicator": "http://79.24.141.59:56310/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-19 02:14:19 UTC", "last_seen": "2026-03-19 02:14:19 UTC", "sightings": 1 }, { "indicator": "http://110.37.55.92:54086/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 02:11:10 UTC", "last_seen": "2026-03-19 02:11:10 UTC", "sightings": 1 }, { "indicator": "https://base2steel.termocenter.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 02:09:06 UTC", "last_seen": "2026-03-19 02:09:06 UTC", "sightings": 1 }, { "indicator": "http://27.37.100.58:59354/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 02:04:22 UTC", "last_seen": "2026-03-19 02:04:22 UTC", "sightings": 1 }, { "indicator": "https://moon1orbit.termocenter.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 02:04:09 UTC", "last_seen": "2026-03-19 02:04:09 UTC", "sightings": 1 }, { "indicator": "https://open4space.altasync.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 01:58:07 UTC", "last_seen": "2026-03-19 01:58:07 UTC", "sightings": 1 }, { "indicator": "http://59.183.118.33:50503/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 01:57:26 UTC", "last_seen": "2026-03-19 01:57:26 UTC", "sightings": 1 }, { "indicator": "https://vast3field.altasync.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 01:53:09 UTC", "last_seen": "2026-03-19 01:53:09 UTC", "sightings": 1 }, { "indicator": "http://110.37.97.71:35298/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-19 01:50:16 UTC", "last_seen": "2026-03-19 01:50:16 UTC", "sightings": 1 }, { "indicator": "http://222.139.108.152:42245/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 01:49:10 UTC", "last_seen": "2026-03-19 01:49:10 UTC", "sightings": 1 }, { "indicator": "http://110.37.55.92:54086/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 01:48:19 UTC", "last_seen": "2026-03-19 01:48:19 UTC", "sightings": 1 }, { "indicator": "https://zone2area.altasync.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 01:48:06 UTC", "last_seen": "2026-03-19 01:48:06 UTC", "sightings": 1 }, { "indicator": "http://42.234.72.238:48342/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 01:44:11 UTC", "last_seen": "2026-03-19 01:44:11 UTC", "sightings": 1 }, { "indicator": "http://117.241.178.184:44199/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-19 01:42:06 UTC", "last_seen": "2026-03-19 01:42:06 UTC", "sightings": 1 }, { "indicator": "https://rim1outer.altasync.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 01:41:07 UTC", "last_seen": "2026-03-19 01:41:07 UTC", "sightings": 1 }, { "indicator": "http://222.140.179.126:48331/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 01:36:22 UTC", "last_seen": "2026-03-19 01:36:22 UTC", "sightings": 1 }, { "indicator": "http://45.135.194.27/arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-19 01:36:20 UTC", "last_seen": "2026-03-19 01:36:20 UTC", "sightings": 1 }, { "indicator": "https://path4gate.protovoda.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 01:36:06 UTC", "last_seen": "2026-03-19 01:36:06 UTC", "sightings": 1 }, { "indicator": "http://45.135.194.27/mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-19 01:35:14 UTC", "last_seen": "2026-03-19 01:35:14 UTC", "sightings": 1 }, { "indicator": "http://45.135.194.27/arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-19 01:34:08 UTC", "last_seen": "2026-03-19 01:34:08 UTC", "sightings": 1 }, { "indicator": "http://45.135.194.27/mpsl", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-19 01:33:15 UTC", "last_seen": "2026-03-19 01:33:15 UTC", "sightings": 1 }, { "indicator": "http://45.135.194.27/arm4", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-19 01:33:15 UTC", "last_seen": "2026-03-19 01:33:15 UTC", "sightings": 1 }, { "indicator": "https://view3sync.protovoda.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 01:31:07 UTC", "last_seen": "2026-03-19 01:31:07 UTC", "sightings": 1 }, { "indicator": "http://42.227.197.21:32916/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 01:29:09 UTC", "last_seen": "2026-03-19 01:29:09 UTC", "sightings": 1 }, { "indicator": "http://39.74.235.15:56757/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 01:29:09 UTC", "last_seen": "2026-03-19 01:29:09 UTC", "sightings": 1 }, { "indicator": "https://scan2point.protovoda.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 01:25:10 UTC", "last_seen": "2026-03-19 01:25:10 UTC", "sightings": 1 }, { "indicator": "http://27.194.84.206:42931/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 01:22:17 UTC", "last_seen": "2026-03-19 01:22:17 UTC", "sightings": 1 }, { "indicator": "http://110.39.232.190:33800/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 01:19:16 UTC", "last_seen": "2026-03-19 01:19:16 UTC", "sightings": 1 }, { "indicator": "http://110.39.232.190:33800/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 01:19:16 UTC", "last_seen": "2026-03-19 01:19:16 UTC", "sightings": 1 }, { "indicator": "https://room1dark.protovoda.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 01:19:09 UTC", "last_seen": "2026-03-19 01:19:09 UTC", "sightings": 1 }, { "indicator": "http://117.241.178.184:44199/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-19 01:18:15 UTC", "last_seen": "2026-03-19 01:18:15 UTC", "sightings": 1 }, { "indicator": "http://120.56.7.130:38674/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-19 01:17:07 UTC", "last_seen": "2026-03-19 01:17:07 UTC", "sightings": 1 }, { "indicator": "http://59.96.141.146:46669/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-19 01:17:06 UTC", "last_seen": "2026-03-19 01:17:06 UTC", "sightings": 1 }, { "indicator": "https://sync4vision.luxalabs.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 01:14:06 UTC", "last_seen": "2026-03-19 01:14:06 UTC", "sightings": 1 }, { "indicator": "http://27.215.102.130:38480/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-19 01:12:18 UTC", "last_seen": "2026-03-19 01:12:18 UTC", "sightings": 1 }, { "indicator": "http://42.227.197.21:32916/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 01:09:07 UTC", "last_seen": "2026-03-19 01:09:07 UTC", "sightings": 1 }, { "indicator": "http://222.140.179.126:48331/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 01:08:13 UTC", "last_seen": "2026-03-19 01:08:13 UTC", "sightings": 1 }, { "indicator": "http://110.37.66.90:52164/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 01:08:12 UTC", "last_seen": "2026-03-19 01:08:12 UTC", "sightings": 1 }, { "indicator": "https://ghost3node.luxalabs.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 01:08:07 UTC", "last_seen": "2026-03-19 01:08:07 UTC", "sightings": 1 }, { "indicator": "http://110.37.85.16:42240/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 01:07:18 UTC", "last_seen": "2026-03-19 01:07:18 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.7/files/8180653200/0vECPWr.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "donutloader", "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-19 01:06:11 UTC", "last_seen": "2026-03-19 01:06:11 UTC", "sightings": 1 }, { "indicator": "http://39.74.235.15:56757/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 01:04:13 UTC", "last_seen": "2026-03-19 01:04:13 UTC", "sightings": 1 }, { "indicator": "https://shell2core.luxalabs.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 01:03:06 UTC", "last_seen": "2026-03-19 01:03:06 UTC", "sightings": 1 }, { "indicator": "http://117.221.29.167:33296/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 00:59:16 UTC", "last_seen": "2026-03-19 00:59:16 UTC", "sightings": 1 }, { "indicator": "https://trace1alpha.luxalabs.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 00:58:08 UTC", "last_seen": "2026-03-19 00:58:08 UTC", "sightings": 1 }, { "indicator": "https://link4access.optigrid.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 00:52:06 UTC", "last_seen": "2026-03-19 00:52:06 UTC", "sightings": 1 }, { "indicator": "http://222.219.4.21:40926/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-19 00:47:00 UTC", "last_seen": "2026-03-19 00:47:00 UTC", "sightings": 1 }, { "indicator": "http://110.37.66.90:52164/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 00:46:16 UTC", "last_seen": "2026-03-19 00:46:16 UTC", "sightings": 1 }, { "indicator": "https://auth3user.optigrid.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 00:45:09 UTC", "last_seen": "2026-03-19 00:45:09 UTC", "sightings": 1 }, { "indicator": "https://base2point.optigrid.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 00:40:08 UTC", "last_seen": "2026-03-19 00:40:08 UTC", "sightings": 1 }, { "indicator": "https://glob1infra.optigrid.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 00:34:05 UTC", "last_seen": "2026-03-19 00:34:05 UTC", "sightings": 1 }, { "indicator": "http://117.221.29.167:33296/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 00:33:14 UTC", "last_seen": "2026-03-19 00:33:14 UTC", "sightings": 1 }, { "indicator": "http://110.39.251.84:57390/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 00:32:08 UTC", "last_seen": "2026-03-19 00:32:08 UTC", "sightings": 1 }, { "indicator": "https://flow4work.densapoint.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 00:29:05 UTC", "last_seen": "2026-03-19 00:29:05 UTC", "sightings": 1 }, { "indicator": "https://net3local.densapoint.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 00:24:06 UTC", "last_seen": "2026-03-19 00:24:06 UTC", "sightings": 1 }, { "indicator": "http://42.234.72.238:48342/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 00:22:13 UTC", "last_seen": "2026-03-19 00:22:13 UTC", "sightings": 1 }, { "indicator": "https://github.com/kakunovegorik-bit/bbvb/raw/refs/heads/main/vpn.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "exe", "SalatStealer" ], "first_seen": "2026-03-19 00:22:09 UTC", "last_seen": "2026-03-19 00:22:09 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/kakunovegorik-bit/bbvb/refs/heads/main/vpn.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "exe", "SalatStealer" ], "first_seen": "2026-03-19 00:22:09 UTC", "last_seen": "2026-03-19 00:22:09 UTC", "sightings": 1 }, { "indicator": "https://sys2power.densapoint.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 00:20:07 UTC", "last_seen": "2026-03-19 00:20:07 UTC", "sightings": 1 }, { "indicator": "https://mon1point.densapoint.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 00:17:08 UTC", "last_seen": "2026-03-19 00:17:08 UTC", "sightings": 1 }, { "indicator": "http://110.37.85.16:42240/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 00:16:18 UTC", "last_seen": "2026-03-19 00:16:18 UTC", "sightings": 1 }, { "indicator": "https://github.com/Jaypearl576/farm/raw/refs/heads/main/n/0.txt", "indicator_type": "url", "source": "URLhaus", "tags": [ "lua", "SmartLoader" ], "first_seen": "2026-03-19 00:16:07 UTC", "last_seen": "2026-03-19 00:16:07 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Jaypearl576/farm/refs/heads/main/n/0.txt", "indicator_type": "url", "source": "URLhaus", "tags": [ "lua", "SmartLoader" ], "first_seen": "2026-03-19 00:16:05 UTC", "last_seen": "2026-03-19 00:16:05 UTC", "sightings": 1 }, { "indicator": "http://117.235.140.201:55784/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 00:14:20 UTC", "last_seen": "2026-03-19 00:14:20 UTC", "sightings": 1 }, { "indicator": "https://github.com/ahmed7409/TrackSys/raw/refs/heads/main/customer/Track_Sys_v3.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 00:14:08 UTC", "last_seen": "2026-03-19 00:14:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/ahmed7409/TrackSys/refs/heads/main/customer/Track_Sys_v3.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 00:14:08 UTC", "last_seen": "2026-03-19 00:14:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/ahmed7409/azirevpn-unlocked-premium-access/refs/heads/branch/uncorroded/unlocked-premium-azirevpn-access-2.0.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 00:14:06 UTC", "last_seen": "2026-03-19 00:14:06 UTC", "sightings": 1 }, { "indicator": "https://github.com/ahmed7409/azirevpn-unlocked-premium-access/raw/refs/heads/branch/uncorroded/unlocked-premium-azirevpn-access-2.0.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 00:14:06 UTC", "last_seen": "2026-03-19 00:14:06 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/ahmed7409/ahmed7409.github.io/refs/heads/main/blepharoadenitis/github_ahmed_io_v1.5-alpha.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 00:14:06 UTC", "last_seen": "2026-03-19 00:14:06 UTC", "sightings": 1 }, { "indicator": "https://github.com/ahmed7409/ahmed7409.github.io/raw/refs/heads/main/blepharoadenitis/github_ahmed_io_v1.5-alpha.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 00:14:06 UTC", "last_seen": "2026-03-19 00:14:06 UTC", "sightings": 1 }, { "indicator": "http://59.96.141.146:46669/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-19 00:12:08 UTC", "last_seen": "2026-03-19 00:12:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/illkat4889/torguard-vpn-premium-unlock/raw/refs/heads/branch/sunt/premium-unlock-torguard-vpn-v1.0-alpha.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 00:11:07 UTC", "last_seen": "2026-03-19 00:11:07 UTC", "sightings": 1 }, { "indicator": "https://github.com/illkat4889/illkat4889.github.io/raw/refs/heads/main/outgoingness/io_github_illkat_3.9.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 00:11:07 UTC", "last_seen": "2026-03-19 00:11:07 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/illkat4889/Port-Scanner/refs/heads/main/locale/Scanner_Port_pythonid.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 00:11:07 UTC", "last_seen": "2026-03-19 00:11:07 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/illkat4889/torguard-vpn-premium-unlock/refs/heads/branch/sunt/premium-unlock-torguard-vpn-v1.0-alpha.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 00:11:06 UTC", "last_seen": "2026-03-19 00:11:06 UTC", "sightings": 1 }, { "indicator": "https://github.com/illkat4889/Port-Scanner/raw/refs/heads/main/locale/Scanner_Port_pythonid.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 00:11:06 UTC", "last_seen": "2026-03-19 00:11:06 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/illkat4889/illkat4889.github.io/refs/heads/main/outgoingness/io_github_illkat_3.9.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-19 00:11:06 UTC", "last_seen": "2026-03-19 00:11:06 UTC", "sightings": 1 }, { "indicator": "http://110.39.251.84:57390/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-19 00:09:19 UTC", "last_seen": "2026-03-19 00:09:19 UTC", "sightings": 1 }, { "indicator": "http://120.56.7.130:38674/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-19 00:07:07 UTC", "last_seen": "2026-03-19 00:07:07 UTC", "sightings": 1 }, { "indicator": "https://entry4link.metracore.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 00:07:05 UTC", "last_seen": "2026-03-19 00:07:05 UTC", "sightings": 1 }, { "indicator": "http://120.28.194.30:44819/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-19 00:02:06 UTC", "last_seen": "2026-03-19 00:02:06 UTC", "sightings": 1 }, { "indicator": "https://dev3host.metracore.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-19 00:01:06 UTC", "last_seen": "2026-03-19 00:01:06 UTC", "sightings": 1 }, { "indicator": "http://115.50.5.102:41772/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-18 23:57:06 UTC", "last_seen": "2026-03-18 23:57:06 UTC", "sightings": 1 }, { "indicator": "http://110.37.3.251:58856/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-18 23:55:19 UTC", "last_seen": "2026-03-18 23:55:19 UTC", "sightings": 1 }, { "indicator": "https://rpc2remote.metracore.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 23:55:07 UTC", "last_seen": "2026-03-18 23:55:07 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Subash2200/claw0/refs/heads/main/workspace/skills/claw-v3.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 23:53:06 UTC", "last_seen": "2026-03-18 23:53:06 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/elb790/FlowPilot/refs/heads/main/src/Flow_Pilot_v1.6.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 23:52:09 UTC", "last_seen": "2026-03-18 23:52:09 UTC", "sightings": 1 }, { "indicator": "https://github.com/Subash2200/vpnbook-premium-access-unlocker/raw/refs/heads/branch/tamponade/access_premium_unlocker_vpnbook_v1.9.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 23:52:09 UTC", "last_seen": "2026-03-18 23:52:09 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/elb790/tunnelbear-vpn-premium-unlocked/refs/heads/branch/unripening/vpn-premium-unlocked-tunnelbear-2.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 23:52:08 UTC", "last_seen": "2026-03-18 23:52:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Subash2200/vpnbook-premium-access-unlocker/refs/heads/branch/tamponade/access_premium_unlocker_vpnbook_v1.9.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 23:52:08 UTC", "last_seen": "2026-03-18 23:52:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/sentinelXVI/KeSSie/raw/refs/heads/main/pyrazoline/Ke-S-Sie-3.9.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 23:52:08 UTC", "last_seen": "2026-03-18 23:52:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/sentinelXVI/KeSSie/refs/heads/main/pyrazoline/Ke-S-Sie-3.9.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 23:52:08 UTC", "last_seen": "2026-03-18 23:52:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/sentinelXVI/sentinelXVI.github.io/refs/heads/main/jump/sentinel-github-io-XV-v1.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 23:52:08 UTC", "last_seen": "2026-03-18 23:52:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/Subash2200/claw0/raw/refs/heads/main/workspace/skills/claw-v3.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 23:52:08 UTC", "last_seen": "2026-03-18 23:52:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/sentinelXVI/sentinelXVI.github.io/raw/refs/heads/main/jump/sentinel-github-io-XV-v1.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 23:52:08 UTC", "last_seen": "2026-03-18 23:52:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/elb790/tunnelbear-vpn-premium-unlocked/raw/refs/heads/branch/unripening/vpn-premium-unlocked-tunnelbear-2.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 23:52:08 UTC", "last_seen": "2026-03-18 23:52:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/elb790/FlowPilot/raw/refs/heads/main/src/Flow_Pilot_v1.6.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 23:52:08 UTC", "last_seen": "2026-03-18 23:52:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/sentinelXVI/astrill-vpn-premium-unlocker/raw/refs/heads/branch/spurway/unlocker-astrill-premium-vpn-3.4.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 23:52:07 UTC", "last_seen": "2026-03-18 23:52:07 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/sentinelXVI/astrill-vpn-premium-unlocker/refs/heads/branch/spurway/unlocker-astrill-premium-vpn-3.4.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 23:52:07 UTC", "last_seen": "2026-03-18 23:52:07 UTC", "sightings": 1 }, { "indicator": "http://182.112.28.152:56963/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 23:50:18 UTC", "last_seen": "2026-03-18 23:50:18 UTC", "sightings": 1 }, { "indicator": "https://cloud1store.metracore.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 23:50:10 UTC", "last_seen": "2026-03-18 23:50:10 UTC", "sightings": 1 }, { "indicator": "http://222.139.108.152:42245/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 23:48:10 UTC", "last_seen": "2026-03-18 23:48:10 UTC", "sightings": 1 }, { "indicator": "http://110.36.95.252:48244/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 23:48:09 UTC", "last_seen": "2026-03-18 23:48:09 UTC", "sightings": 1 }, { "indicator": "http://120.28.194.30:44819/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-18 23:47:07 UTC", "last_seen": "2026-03-18 23:47:07 UTC", "sightings": 1 }, { "indicator": "http://115.50.5.102:41772/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-18 23:47:06 UTC", "last_seen": "2026-03-18 23:47:06 UTC", "sightings": 1 }, { "indicator": "https://github.com/fathanghani864/wedding-invitation/raw/refs/heads/main/uredosporous/invitation_wedding_territelarian.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 23:46:11 UTC", "last_seen": "2026-03-18 23:46:11 UTC", "sightings": 1 }, { "indicator": "https://github.com/fathanghani864/tech-educa/raw/refs/heads/main/annoyment/tech-educa-wried.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 23:46:10 UTC", "last_seen": "2026-03-18 23:46:10 UTC", "sightings": 1 }, { "indicator": "https://github.com/Nislade/nislade.github.io/raw/refs/heads/main/epitomize/io-github-nislade-v3.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 23:46:10 UTC", "last_seen": "2026-03-18 23:46:10 UTC", "sightings": 1 }, { "indicator": "https://github.com/fathanghani864/SISTEM-CIS/raw/refs/heads/main/assets/js/core/CIS_SISTE_v1.4.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 23:46:10 UTC", "last_seen": "2026-03-18 23:46:10 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/fathanghani864/oh-my-openclaw/refs/heads/main/src/presets/apex/skills/agent-browser/my-openclaw-oh-postpagan.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 23:46:10 UTC", "last_seen": "2026-03-18 23:46:10 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Nislade/nislade.github.io/refs/heads/main/epitomize/io-github-nislade-v3.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 23:46:10 UTC", "last_seen": "2026-03-18 23:46:10 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/fathanghani864/SISTEM-CIS/refs/heads/main/assets/js/core/CIS_SISTE_v1.4.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 23:46:10 UTC", "last_seen": "2026-03-18 23:46:10 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/fathanghani864/Wordpress/refs/heads/main/standard/Software_v1.4.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 23:46:10 UTC", "last_seen": "2026-03-18 23:46:10 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/fathanghani864/test-pull/refs/heads/main/volucrine/test-pull-v2.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 23:46:10 UTC", "last_seen": "2026-03-18 23:46:10 UTC", "sightings": 1 }, { "indicator": "https://github.com/fathanghani864/test-pull/raw/refs/heads/main/volucrine/test-pull-v2.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 23:46:10 UTC", "last_seen": "2026-03-18 23:46:10 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Nislade/CyberGhost-VPN-Premium-Free/refs/heads/main/depaint/Ghost-Premium-Free-VP-Cyber-2.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 23:46:09 UTC", "last_seen": "2026-03-18 23:46:09 UTC", "sightings": 1 }, { "indicator": "https://github.com/Nislade/CyberGhost-VPN-Premium-Free/raw/refs/heads/main/depaint/Ghost-Premium-Free-VP-Cyber-2.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 23:46:09 UTC", "last_seen": "2026-03-18 23:46:09 UTC", "sightings": 1 }, { "indicator": "https://github.com/fathanghani864/supervpn-premium-unlocked-edition/raw/refs/heads/branch/sarcophagize/supervpn-premium-edition-unlocked-v1.4.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 23:46:09 UTC", "last_seen": "2026-03-18 23:46:09 UTC", "sightings": 1 }, { "indicator": "https://github.com/fathanghani864/php/raw/refs/heads/main/kerbstone/Software_v1.4.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 23:46:09 UTC", "last_seen": "2026-03-18 23:46:09 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/fathanghani864/php/refs/heads/main/kerbstone/Software_v1.4.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 23:46:09 UTC", "last_seen": "2026-03-18 23:46:09 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/fathanghani864/tech-educa/refs/heads/main/annoyment/tech-educa-wried.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 23:46:09 UTC", "last_seen": "2026-03-18 23:46:09 UTC", "sightings": 1 }, { "indicator": "https://github.com/fathanghani864/oh-my-openclaw/raw/refs/heads/main/src/presets/apex/skills/agent-browser/my-openclaw-oh-postpagan.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 23:46:09 UTC", "last_seen": "2026-03-18 23:46:09 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/fathanghani864/supervpn-premium-unlocked-edition/refs/heads/branch/sarcophagize/supervpn-premium-edition-unlocked-v1.4.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 23:46:09 UTC", "last_seen": "2026-03-18 23:46:09 UTC", "sightings": 1 }, { "indicator": "https://github.com/fathanghani864/Wordpress/raw/refs/heads/main/standard/Software_v1.4.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 23:46:09 UTC", "last_seen": "2026-03-18 23:46:09 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/fathanghani864/wedding-invitation/refs/heads/main/uredosporous/invitation_wedding_territelarian.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 23:46:08 UTC", "last_seen": "2026-03-18 23:46:08 UTC", "sightings": 1 }, { "indicator": "https://hub4sync.vivaflux.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 23:45:09 UTC", "last_seen": "2026-03-18 23:45:09 UTC", "sightings": 1 }, { "indicator": "https://gate3proxy.vivaflux.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 23:39:06 UTC", "last_seen": "2026-03-18 23:39:06 UTC", "sightings": 1 }, { "indicator": "http://110.37.40.148:51294/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-18 23:37:07 UTC", "last_seen": "2026-03-18 23:37:07 UTC", "sightings": 1 }, { "indicator": "https://app2data.vivaflux.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 23:35:07 UTC", "last_seen": "2026-03-18 23:35:07 UTC", "sightings": 1 }, { "indicator": "http://182.112.28.152:56963/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 23:33:17 UTC", "last_seen": "2026-03-18 23:33:17 UTC", "sightings": 1 }, { "indicator": "http://110.37.3.251:58856/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-18 23:33:16 UTC", "last_seen": "2026-03-18 23:33:16 UTC", "sightings": 1 }, { "indicator": "https://web1meta.vivaflux.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 23:32:07 UTC", "last_seen": "2026-03-18 23:32:07 UTC", "sightings": 1 }, { "indicator": "http://59.91.246.237:53575/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-18 23:32:06 UTC", "last_seen": "2026-03-18 23:32:06 UTC", "sightings": 1 }, { "indicator": "https://db4static.flexonode.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 23:22:08 UTC", "last_seen": "2026-03-18 23:22:08 UTC", "sightings": 1 }, { "indicator": "http://110.186.228.165:49909/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-18 23:17:20 UTC", "last_seen": "2026-03-18 23:17:20 UTC", "sightings": 1 }, { "indicator": "https://cdn3edge.flexonode.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 23:16:08 UTC", "last_seen": "2026-03-18 23:16:08 UTC", "sightings": 1 }, { "indicator": "http://59.91.246.237:53575/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-18 23:12:08 UTC", "last_seen": "2026-03-18 23:12:08 UTC", "sightings": 1 }, { "indicator": "https://api2sync.flexonode.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 23:10:07 UTC", "last_seen": "2026-03-18 23:10:07 UTC", "sightings": 1 }, { "indicator": "http://61.52.159.21:48632/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 23:09:09 UTC", "last_seen": "2026-03-18 23:09:09 UTC", "sightings": 1 }, { "indicator": "https://srv1node.flexonode.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 23:05:09 UTC", "last_seen": "2026-03-18 23:05:09 UTC", "sightings": 1 }, { "indicator": "https://main-v4-point.vortex-lab.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 22:59:07 UTC", "last_seen": "2026-03-18 22:59:07 UTC", "sightings": 1 }, { "indicator": "http://61.52.159.21:48632/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 22:56:15 UTC", "last_seen": "2026-03-18 22:56:15 UTC", "sightings": 1 }, { "indicator": "https://sync-z9-data.vortex-lab.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-18 22:53:06 UTC", "last_seen": "2026-03-18 22:53:06 UTC", "sightings": 1 }, { "indicator": "http://219.156.125.23:49283/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 22:48:09 UTC", "last_seen": "2026-03-18 22:48:09 UTC", "sightings": 1 }, { "indicator": "http://116.138.205.105:50595/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 22:47:18 UTC", "last_seen": "2026-03-18 22:47:18 UTC", "sightings": 1 }, { "indicator": "https://gate-x1-proxy.vortex-lab.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-18 22:47:06 UTC", "last_seen": "2026-03-18 22:47:06 UTC", "sightings": 1 }, { "indicator": "http://110.37.100.152:37550/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 22:46:16 UTC", "last_seen": "2026-03-18 22:46:16 UTC", "sightings": 1 }, { "indicator": "https://web-v03-infra.vortex-lab.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-18 22:41:05 UTC", "last_seen": "2026-03-18 22:41:05 UTC", "sightings": 1 }, { "indicator": "http://61.52.158.229:54467/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 22:40:10 UTC", "last_seen": "2026-03-18 22:40:10 UTC", "sightings": 1 }, { "indicator": "http://112.238.57.118:33535/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-18 22:37:25 UTC", "last_seen": "2026-03-18 22:37:25 UTC", "sightings": 1 }, { "indicator": "https://link-z2-sat.soma-grid.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-18 22:37:06 UTC", "last_seen": "2026-03-18 22:37:06 UTC", "sightings": 1 }, { "indicator": "http://123.5.175.22:38036/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 22:32:25 UTC", "last_seen": "2026-03-18 22:32:25 UTC", "sightings": 1 }, { "indicator": "https://core-x4-rock.soma-grid.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-18 22:31:06 UTC", "last_seen": "2026-03-18 22:31:06 UTC", "sightings": 1 }, { "indicator": "http://219.156.125.23:49283/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 22:28:07 UTC", "last_seen": "2026-03-18 22:28:07 UTC", "sightings": 1 }, { "indicator": "https://base-v5-steel.soma-grid.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-18 22:25:09 UTC", "last_seen": "2026-03-18 22:25:09 UTC", "sightings": 1 }, { "indicator": "http://59.94.113.81:33322/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 22:22:08 UTC", "last_seen": "2026-03-18 22:22:08 UTC", "sightings": 1 }, { "indicator": "http://221.15.9.174:41259/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-18 22:22:06 UTC", "last_seen": "2026-03-18 22:22:06 UTC", "sightings": 1 }, { "indicator": "https://orbit-z01-moon.soma-grid.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-18 22:20:08 UTC", "last_seen": "2026-03-18 22:20:08 UTC", "sightings": 1 }, { "indicator": "http://115.50.222.3:51229/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 22:18:17 UTC", "last_seen": "2026-03-18 22:18:17 UTC", "sightings": 1 }, { "indicator": "https://github.com/BookkeeperBridge/ExpressVPN-Pro-2026/releases/download/new/ExpressVPN_12.105.0.4_Win64.rar", "indicator_type": "url", "source": "URLhaus", "tags": [ "pw-5571", "rar" ], "first_seen": "2026-03-18 22:15:20 UTC", "last_seen": "2026-03-18 22:15:20 UTC", "sightings": 1 }, { "indicator": "http://42.56.163.142:39640/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 22:15:20 UTC", "last_seen": "2026-03-18 22:15:20 UTC", "sightings": 1 }, { "indicator": "http://175.150.21.57:60301/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 22:14:14 UTC", "last_seen": "2026-03-18 22:14:14 UTC", "sightings": 1 }, { "indicator": "https://space-x9-open.lumen-nodo.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-18 22:14:06 UTC", "last_seen": "2026-03-18 22:14:06 UTC", "sightings": 1 }, { "indicator": "http://115.58.90.63:34653/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-18 22:12:07 UTC", "last_seen": "2026-03-18 22:12:07 UTC", "sightings": 1 }, { "indicator": "https://field-z1-vast.lumen-nodo.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-18 22:08:07 UTC", "last_seen": "2026-03-18 22:08:07 UTC", "sightings": 1 }, { "indicator": "http://123.5.175.22:38036/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 22:06:17 UTC", "last_seen": "2026-03-18 22:06:17 UTC", "sightings": 1 }, { "indicator": "http://59.94.113.81:33322/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 22:02:16 UTC", "last_seen": "2026-03-18 22:02:16 UTC", "sightings": 1 }, { "indicator": "https://zone-v8-area.lumen-nodo.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 22:02:10 UTC", "last_seen": "2026-03-18 22:02:10 UTC", "sightings": 1 }, { "indicator": "http://175.167.187.230:53561/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 21:59:16 UTC", "last_seen": "2026-03-18 21:59:16 UTC", "sightings": 1 }, { "indicator": "https://rim-k12-outer.lumen-nodo.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 21:57:07 UTC", "last_seen": "2026-03-18 21:57:07 UTC", "sightings": 1 }, { "indicator": "http://115.50.222.3:51229/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 21:53:23 UTC", "last_seen": "2026-03-18 21:53:23 UTC", "sightings": 1 }, { "indicator": "http://175.150.21.57:60301/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 21:52:15 UTC", "last_seen": "2026-03-18 21:52:15 UTC", "sightings": 1 }, { "indicator": "https://sync-v9-vision.terra-data.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 21:52:11 UTC", "last_seen": "2026-03-18 21:52:11 UTC", "sightings": 1 }, { "indicator": "http://87.120.191.32/massload", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai", "sh", "ua-wget" ], "first_seen": "2026-03-18 21:51:10 UTC", "last_seen": "2026-03-18 21:51:10 UTC", "sightings": 1 }, { "indicator": "http://61.137.147.126:34771/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 21:50:21 UTC", "last_seen": "2026-03-18 21:50:21 UTC", "sightings": 1 }, { "indicator": "http://42.56.163.142:39640/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 21:48:20 UTC", "last_seen": "2026-03-18 21:48:20 UTC", "sightings": 1 }, { "indicator": "http://27.24.73.156:42919/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-18 21:46:22 UTC", "last_seen": "2026-03-18 21:46:22 UTC", "sightings": 1 }, { "indicator": "https://scan-z0-point.terra-data.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 21:46:07 UTC", "last_seen": "2026-03-18 21:46:07 UTC", "sightings": 1 }, { "indicator": "https://bridge-x4-light.terra-data.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 21:40:07 UTC", "last_seen": "2026-03-18 21:40:07 UTC", "sightings": 1 }, { "indicator": "http://110.37.30.28:59817/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 21:37:06 UTC", "last_seen": "2026-03-18 21:37:06 UTC", "sightings": 1 }, { "indicator": "https://room-v51-dark.terra-data.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 21:34:06 UTC", "last_seen": "2026-03-18 21:34:06 UTC", "sightings": 1 }, { "indicator": "http://115.55.129.39:35286/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 21:32:25 UTC", "last_seen": "2026-03-18 21:32:25 UTC", "sightings": 1 }, { "indicator": "http://117.235.126.164:57669/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-18 21:32:07 UTC", "last_seen": "2026-03-18 21:32:07 UTC", "sightings": 1 }, { "indicator": "http://123.129.133.199:47218/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-18 21:32:07 UTC", "last_seen": "2026-03-18 21:32:07 UTC", "sightings": 1 }, { "indicator": "http://182.112.29.120:53048/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 21:30:18 UTC", "last_seen": "2026-03-18 21:30:18 UTC", "sightings": 1 }, { "indicator": "https://vision-v4-sync.nux-systems.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 21:29:06 UTC", "last_seen": "2026-03-18 21:29:06 UTC", "sightings": 1 }, { "indicator": "http://221.15.9.174:41259/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-18 21:27:08 UTC", "last_seen": "2026-03-18 21:27:08 UTC", "sightings": 1 }, { "indicator": "http://61.54.207.122:43780/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 21:24:25 UTC", "last_seen": "2026-03-18 21:24:25 UTC", "sightings": 1 }, { "indicator": "https://ghost-z2-node.nux-systems.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 21:24:06 UTC", "last_seen": "2026-03-18 21:24:06 UTC", "sightings": 1 }, { "indicator": "http://115.55.129.39:35286/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 21:20:19 UTC", "last_seen": "2026-03-18 21:20:19 UTC", "sightings": 1 }, { "indicator": "https://shell-v7-core.nux-systems.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 21:17:06 UTC", "last_seen": "2026-03-18 21:17:06 UTC", "sightings": 1 }, { "indicator": "http://110.37.30.28:59817/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 21:17:06 UTC", "last_seen": "2026-03-18 21:17:06 UTC", "sightings": 1 }, { "indicator": "http://42.53.62.183:45006/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 21:17:06 UTC", "last_seen": "2026-03-18 21:17:06 UTC", "sightings": 1 }, { "indicator": "http://83.228.109.209:35065/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 21:12:20 UTC", "last_seen": "2026-03-18 21:12:20 UTC", "sightings": 1 }, { "indicator": "https://trace-x11-alpha.nux-systems.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 21:12:07 UTC", "last_seen": "2026-03-18 21:12:07 UTC", "sightings": 1 }, { "indicator": "http://117.235.126.164:57669/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-18 21:07:07 UTC", "last_seen": "2026-03-18 21:07:07 UTC", "sightings": 1 }, { "indicator": "https://auth-l2-user.foco-global.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 21:06:07 UTC", "last_seen": "2026-03-18 21:06:07 UTC", "sightings": 1 }, { "indicator": "http://188.137.232.95/1.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey", "Vidar" ], "first_seen": "2026-03-18 21:03:14 UTC", "last_seen": "2026-03-18 21:03:14 UTC", "sightings": 1 }, { "indicator": "http://61.54.207.122:43780/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 21:01:23 UTC", "last_seen": "2026-03-18 21:01:23 UTC", "sightings": 1 }, { "indicator": "https://db-g0-point.foco-global.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 21:01:06 UTC", "last_seen": "2026-03-18 21:01:06 UTC", "sightings": 1 }, { "indicator": "http://117.200.232.25:33267/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 20:57:24 UTC", "last_seen": "2026-03-18 20:57:24 UTC", "sightings": 1 }, { "indicator": "http://110.37.9.197:45267/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 20:57:22 UTC", "last_seen": "2026-03-18 20:57:22 UTC", "sightings": 1 }, { "indicator": "http://182.112.29.120:53048/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 20:57:22 UTC", "last_seen": "2026-03-18 20:57:22 UTC", "sightings": 1 }, { "indicator": "http://42.53.62.183:45006/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 20:57:22 UTC", "last_seen": "2026-03-18 20:57:22 UTC", "sightings": 1 }, { "indicator": "http://83.228.109.209:35065/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 20:57:21 UTC", "last_seen": "2026-03-18 20:57:21 UTC", "sightings": 1 }, { "indicator": "https://github.com/QWanFLC/qwanflc.github.io/raw/refs/heads/main/karyological/github-qwanflc-io-1.9.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 20:57:13 UTC", "last_seen": "2026-03-18 20:57:13 UTC", "sightings": 1 }, { "indicator": "https://flow-z9-work.punto-viva.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 20:57:13 UTC", "last_seen": "2026-03-18 20:57:13 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/QWanFLC/vidconcept-sum/refs/heads/main/vidconcept_sum/sum_vidconcept_unmotivatedly.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 20:57:12 UTC", "last_seen": "2026-03-18 20:57:12 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/kys-rishi/short-form-video-transcriber/refs/heads/main/src/short_form_scraper/pipeline/transcriber-video-form-short-v3.5-beta.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 20:57:12 UTC", "last_seen": "2026-03-18 20:57:12 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Jayaprakashsrm/insta360-gstreamer/refs/heads/main/src/gstreamer_insta_v3.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 20:57:12 UTC", "last_seen": "2026-03-18 20:57:12 UTC", "sightings": 1 }, { "indicator": "https://base-f4-infra.foco-global.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 20:57:12 UTC", "last_seen": "2026-03-18 20:57:12 UTC", "sightings": 1 }, { "indicator": "https://github.com/Jayaprakashsrm/insta360-gstreamer/raw/refs/heads/main/src/gstreamer_insta_v3.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 20:57:11 UTC", "last_seen": "2026-03-18 20:57:11 UTC", "sightings": 1 }, { "indicator": "https://github.com/kys-rishi/short-form-video-transcriber/raw/refs/heads/main/src/short_form_scraper/pipeline/transcriber-video-form-short-v3.5-beta.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 20:57:10 UTC", "last_seen": "2026-03-18 20:57:10 UTC", "sightings": 1 }, { "indicator": "https://github.com/kys-rishi/kys-rishi.github.io/raw/refs/heads/main/swimmy/github-rishi-kys-io-v3.4.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 20:57:10 UTC", "last_seen": "2026-03-18 20:57:10 UTC", "sightings": 1 }, { "indicator": "https://github.com/QWanFLC/vidconcept-sum/raw/refs/heads/main/vidconcept_sum/sum_vidconcept_unmotivatedly.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 20:57:09 UTC", "last_seen": "2026-03-18 20:57:09 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/kys-rishi/kys-rishi.github.io/refs/heads/main/swimmy/github-rishi-kys-io-v3.4.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 20:57:09 UTC", "last_seen": "2026-03-18 20:57:09 UTC", "sightings": 1 }, { "indicator": "https://github.com/Jayaprakashsrm/jayaprakashsrm.github.io/raw/refs/heads/main/waxen/github_jayaprakashsrm_io_3.5-alpha.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 20:57:08 UTC", "last_seen": "2026-03-18 20:57:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Jayaprakashsrm/jayaprakashsrm.github.io/refs/heads/main/waxen/github_jayaprakashsrm_io_3.5-alpha.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 20:57:08 UTC", "last_seen": "2026-03-18 20:57:08 UTC", "sightings": 1 }, { "indicator": "http://182.113.6.59:39017/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-18 20:57:07 UTC", "last_seen": "2026-03-18 20:57:07 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/milescarson/milescarson.github.io/refs/heads/main/acarophobia/github-io-milescarson-v3.6-alpha.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 20:57:07 UTC", "last_seen": "2026-03-18 20:57:07 UTC", "sightings": 1 }, { "indicator": "https://net-v88-global.foco-global.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 20:57:07 UTC", "last_seen": "2026-03-18 20:57:07 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/QWanFLC/qwanflc.github.io/refs/heads/main/karyological/github-qwanflc-io-1.9.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 20:57:07 UTC", "last_seen": "2026-03-18 20:57:07 UTC", "sightings": 1 }, { "indicator": "http://117.200.232.25:33267/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 20:41:25 UTC", "last_seen": "2026-03-18 20:41:25 UTC", "sightings": 1 }, { "indicator": "http://110.36.15.18:55778/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 20:41:24 UTC", "last_seen": "2026-03-18 20:41:24 UTC", "sightings": 1 }, { "indicator": "http://110.37.9.197:45267/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 20:41:21 UTC", "last_seen": "2026-03-18 20:41:21 UTC", "sightings": 1 }, { "indicator": "https://github.com/darkkshah/1-20-assignment/raw/refs/heads/master/isandrous/assignment_1.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 20:41:11 UTC", "last_seen": "2026-03-18 20:41:11 UTC", "sightings": 1 }, { "indicator": "https://github.com/darkkshah/testing1/raw/refs/heads/master/Mullidae/testing-Romanesque.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 20:41:11 UTC", "last_seen": "2026-03-18 20:41:11 UTC", "sightings": 1 }, { "indicator": "https://github.com/darkkshah/UniversalVideoTranscriber/raw/refs/heads/main/UniversalVideoTranscriber/Assets.xcassets/AppIcon.appiconset/Video-Universal-Transcriber-antisoporific.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 20:41:10 UTC", "last_seen": "2026-03-18 20:41:10 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/darkkshah/FACEBOOK-SIGN-UP-PAGE/refs/heads/main/FACEBOOK%20SIGN%20UP%20PAGE/SIG_FACEBOO_U_PAGE_3.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 20:41:10 UTC", "last_seen": "2026-03-18 20:41:10 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/darkkshah/1-20-assignment/refs/heads/master/isandrous/assignment_1.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 20:41:10 UTC", "last_seen": "2026-03-18 20:41:10 UTC", "sightings": 1 }, { "indicator": "https://github.com/darkkshah/FACEBOOK-SIGN-UP-PAGE/raw/refs/heads/main/FACEBOOK%20SIGN%20UP%20PAGE/SIG_FACEBOO_U_PAGE_3.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 20:41:10 UTC", "last_seen": "2026-03-18 20:41:10 UTC", "sightings": 1 }, { "indicator": "https://link-p1-power.punto-viva.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 20:41:10 UTC", "last_seen": "2026-03-18 20:41:10 UTC", "sightings": 1 }, { "indicator": "https://github.com/darkkshah/21-40-Assignment/raw/refs/heads/main/21-40%20Assignment/Assignment-sphagnologist.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 20:41:10 UTC", "last_seen": "2026-03-18 20:41:10 UTC", "sightings": 1 }, { "indicator": "https://github.com/milescarson/milescarson.github.io/raw/refs/heads/main/acarophobia/github-io-milescarson-v3.6-alpha.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 20:41:10 UTC", "last_seen": "2026-03-18 20:41:10 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/darkkshah/21-40-Assignment/refs/heads/main/21-40%20Assignment/Assignment-sphagnologist.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 20:41:10 UTC", "last_seen": "2026-03-18 20:41:10 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/darkkshah/UniversalVideoTranscriber/refs/heads/main/UniversalVideoTranscriber/Assets.xcassets/AppIcon.appiconset/Video-Universal-Transcriber-antisoporific.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 20:41:10 UTC", "last_seen": "2026-03-18 20:41:10 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/darkkshah/testing1/refs/heads/master/Mullidae/testing-Romanesque.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 20:41:10 UTC", "last_seen": "2026-03-18 20:41:10 UTC", "sightings": 1 }, { "indicator": "https://hub-v02-local.punto-viva.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 20:41:09 UTC", "last_seen": "2026-03-18 20:41:09 UTC", "sightings": 1 }, { "indicator": "http://182.113.6.59:39017/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-18 20:41:09 UTC", "last_seen": "2026-03-18 20:41:09 UTC", "sightings": 1 }, { "indicator": "https://sys-s33-monitor.punto-viva.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 20:41:09 UTC", "last_seen": "2026-03-18 20:41:09 UTC", "sightings": 1 }, { "indicator": "http://123.129.133.199:47218/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-18 20:41:09 UTC", "last_seen": "2026-03-18 20:41:09 UTC", "sightings": 1 }, { "indicator": "https://github.com/chester1900/RMISimpleBankSystem/raw/refs/heads/master/src/Bank-System-RMI-Simple-2.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 20:41:09 UTC", "last_seen": "2026-03-18 20:41:09 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Nassimos19/Skill-Bridge/refs/heads/main/server/bootstrap/Bridge-Skill-2.3-beta.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 20:41:08 UTC", "last_seen": "2026-03-18 20:41:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/SuyogWariror/Warrior/raw/refs/heads/main/teapotful/Software_2.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 20:25:13 UTC", "last_seen": "2026-03-18 20:25:13 UTC", "sightings": 1 }, { "indicator": "https://github.com/xsinopx/xsinopx.github.io/raw/refs/heads/main/tenemental/github_io_xsinopx_v1.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 20:25:13 UTC", "last_seen": "2026-03-18 20:25:13 UTC", "sightings": 1 }, { "indicator": "https://github.com/Not-anybody-ever/tower-vib/raw/refs/heads/main/results/vib-tower-3.9.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 20:25:13 UTC", "last_seen": "2026-03-18 20:25:13 UTC", "sightings": 1 }, { "indicator": "https://github.com/xsinopx/go2rtc/raw/refs/heads/master/internal/gopro/rtc-go-depraver.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 20:25:13 UTC", "last_seen": "2026-03-18 20:25:13 UTC", "sightings": 1 }, { "indicator": "https://github.com/adammtn/WinCam-No-Trial/raw/refs/heads/main/bandrol/Trial-Win-No-Cam-2.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 20:25:13 UTC", "last_seen": "2026-03-18 20:25:13 UTC", "sightings": 1 }, { "indicator": "https://github.com/chester1900/TXT-TO-VIDEO-LEECH-UPLOADER/raw/refs/heads/main/dodecahydrated/T_TX_VIDE_LEEC_UPLOADER_3.7.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 20:25:13 UTC", "last_seen": "2026-03-18 20:25:13 UTC", "sightings": 1 }, { "indicator": "https://github.com/Nassimos19/Skill-Bridge/raw/refs/heads/main/server/bootstrap/Bridge-Skill-2.3-beta.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 20:25:13 UTC", "last_seen": "2026-03-18 20:25:13 UTC", "sightings": 1 }, { "indicator": "https://github.com/WsNicuur/youtube-work-/raw/refs/heads/main/consulage/youtube-work-pensively.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 20:25:13 UTC", "last_seen": "2026-03-18 20:25:13 UTC", "sightings": 1 }, { "indicator": "https://github.com/Unresponsive-in384/temporal_reasoning_vision_system/raw/refs/heads/main/utils/reasoning-vision-system-temporal-inauration.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 20:25:13 UTC", "last_seen": "2026-03-18 20:25:13 UTC", "sightings": 1 }, { "indicator": "https://github.com/SuyogWariror/AIFeedTracker/raw/refs/heads/main/docs/AI_Feed_Tracker_2.6.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 20:25:13 UTC", "last_seen": "2026-03-18 20:25:13 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/xsinopx/go2rtc/refs/heads/master/internal/gopro/rtc-go-depraver.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 20:25:13 UTC", "last_seen": "2026-03-18 20:25:13 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Not-anybody-ever/tower-vib/refs/heads/main/results/vib-tower-3.9.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 20:25:13 UTC", "last_seen": "2026-03-18 20:25:13 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/WsNicuur/youtube-work-/refs/heads/main/consulage/youtube-work-pensively.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 20:25:13 UTC", "last_seen": "2026-03-18 20:25:13 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/SuyogWariror/Warrior/refs/heads/main/teapotful/Software_2.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 20:25:13 UTC", "last_seen": "2026-03-18 20:25:13 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/xsinopx/xsinopx.github.io/refs/heads/main/tenemental/github_io_xsinopx_v1.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 20:25:13 UTC", "last_seen": "2026-03-18 20:25:13 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/SuyogWariror/AIFeedTracker/refs/heads/main/docs/AI_Feed_Tracker_2.6.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 20:25:13 UTC", "last_seen": "2026-03-18 20:25:13 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/adammtn/WinCam-No-Trial/refs/heads/main/bandrol/Trial-Win-No-Cam-2.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 20:25:13 UTC", "last_seen": "2026-03-18 20:25:13 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/chester1900/RMISimpleBankSystem/refs/heads/master/src/Bank-System-RMI-Simple-2.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 20:25:13 UTC", "last_seen": "2026-03-18 20:25:13 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Unresponsive-in384/temporal_reasoning_vision_system/refs/heads/main/utils/reasoning-vision-system-temporal-inauration.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 20:25:13 UTC", "last_seen": "2026-03-18 20:25:13 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/chester1900/TXT-TO-VIDEO-LEECH-UPLOADER/refs/heads/main/dodecahydrated/T_TX_VIDE_LEEC_UPLOADER_3.7.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 20:25:13 UTC", "last_seen": "2026-03-18 20:25:13 UTC", "sightings": 1 }, { "indicator": "http://110.36.15.18:55778/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 20:22:11 UTC", "last_seen": "2026-03-18 20:22:11 UTC", "sightings": 1 }, { "indicator": "https://gate-v5-entry.densa-materia.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 20:21:06 UTC", "last_seen": "2026-03-18 20:21:06 UTC", "sightings": 1 }, { "indicator": "https://api-r2-remote.densa-materia.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 20:11:06 UTC", "last_seen": "2026-03-18 20:11:06 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/sameer2135/OffCam/refs/heads/main/opinable/Cam_Off_v2.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 20:10:07 UTC", "last_seen": "2026-03-18 20:10:07 UTC", "sightings": 1 }, { "indicator": "https://github.com/sameer2135/OffCam/raw/refs/heads/main/opinable/Cam_Off_v2.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 20:10:07 UTC", "last_seen": "2026-03-18 20:10:07 UTC", "sightings": 1 }, { "indicator": "https://cloud-w11-store.densa-materia.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 20:05:08 UTC", "last_seen": "2026-03-18 20:05:08 UTC", "sightings": 1 }, { "indicator": "http://117.221.28.93:45259/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-18 20:02:08 UTC", "last_seen": "2026-03-18 20:02:08 UTC", "sightings": 1 }, { "indicator": "https://core-j1-sync.faser-tech.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 19:59:07 UTC", "last_seen": "2026-03-18 19:59:07 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.7/files/5657278942/wTC5hgy.msi", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey", "EternalRocks" ], "first_seen": "2026-03-18 19:57:06 UTC", "last_seen": "2026-03-18 19:57:06 UTC", "sightings": 1 }, { "indicator": "http://110.36.15.42:52173/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-18 19:56:06 UTC", "last_seen": "2026-03-18 19:56:06 UTC", "sightings": 1 }, { "indicator": "https://web-proxy-707.faser-tech.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 19:54:06 UTC", "last_seen": "2026-03-18 19:54:06 UTC", "sightings": 1 }, { "indicator": "http://188.114.199.203:55853/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 19:52:16 UTC", "last_seen": "2026-03-18 19:52:16 UTC", "sightings": 1 }, { "indicator": "https://app-v09-data.faser-tech.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 19:48:07 UTC", "last_seen": "2026-03-18 19:48:07 UTC", "sightings": 1 }, { "indicator": "http://110.37.78.200:43101/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 19:47:21 UTC", "last_seen": "2026-03-18 19:47:21 UTC", "sightings": 1 }, { "indicator": "http://175.165.79.91:51979/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 19:46:11 UTC", "last_seen": "2026-03-18 19:46:11 UTC", "sightings": 1 }, { "indicator": "https://srv-k44-meta.faser-tech.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 19:42:07 UTC", "last_seen": "2026-03-18 19:42:07 UTC", "sightings": 1 }, { "indicator": "http://117.221.28.93:45259/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-18 19:37:15 UTC", "last_seen": "2026-03-18 19:37:15 UTC", "sightings": 1 }, { "indicator": "https://infra-m2-static.optico-voda.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 19:37:06 UTC", "last_seen": "2026-03-18 19:37:06 UTC", "sightings": 1 }, { "indicator": "http://110.36.15.42:52173/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-18 19:37:06 UTC", "last_seen": "2026-03-18 19:37:06 UTC", "sightings": 1 }, { "indicator": "http://117.222.166.195:51734/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 19:32:07 UTC", "last_seen": "2026-03-18 19:32:07 UTC", "sightings": 1 }, { "indicator": "https://cdn-z7-edge.optico-voda.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 19:31:05 UTC", "last_seen": "2026-03-18 19:31:05 UTC", "sightings": 1 }, { "indicator": "http://182.116.22.59:51314/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 19:29:17 UTC", "last_seen": "2026-03-18 19:29:17 UTC", "sightings": 1 }, { "indicator": "http://188.114.199.203:55853/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 19:26:15 UTC", "last_seen": "2026-03-18 19:26:15 UTC", "sightings": 1 }, { "indicator": "https://sync-v01-auth.optico-voda.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 19:26:07 UTC", "last_seen": "2026-03-18 19:26:07 UTC", "sightings": 1 }, { "indicator": "http://123.132.164.209:41464/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 19:24:10 UTC", "last_seen": "2026-03-18 19:24:10 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Shivansh-aiml/vuejs-cicd-deploy-on-github-pages/refs/heads/main/src/github_on_cicd_deploy_vuejs_pages_3.6-beta.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 19:21:06 UTC", "last_seen": "2026-03-18 19:21:06 UTC", "sightings": 1 }, { "indicator": "https://github.com/Shivansh-aiml/vuejs-cicd-deploy-on-github-pages/raw/refs/heads/main/src/github_on_cicd_deploy_vuejs_pages_3.6-beta.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 19:21:06 UTC", "last_seen": "2026-03-18 19:21:06 UTC", "sightings": 1 }, { "indicator": "https://pop-x88-node.optico-voda.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 19:20:06 UTC", "last_seen": "2026-03-18 19:20:06 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Roop81/Interlink-Multi-Bot/refs/heads/main/Chiwere/Interlink_Bot_Multi_2.7.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 19:19:08 UTC", "last_seen": "2026-03-18 19:19:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/Roop81/Interlink-Multi-Bot/raw/refs/heads/main/Chiwere/Interlink_Bot_Multi_2.7.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 19:19:07 UTC", "last_seen": "2026-03-18 19:19:07 UTC", "sightings": 1 }, { "indicator": "http://42.234.204.54:49938/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 19:17:22 UTC", "last_seen": "2026-03-18 19:17:22 UTC", "sightings": 1 }, { "indicator": "http://61.52.46.117:53468/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-18 19:17:06 UTC", "last_seen": "2026-03-18 19:17:06 UTC", "sightings": 1 }, { "indicator": "https://04cbe3jm.fastbit.digital/?=check&&actmn=TfRmElaHjUglnKGz", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-18 19:14:07 UTC", "last_seen": "2026-03-18 19:14:07 UTC", "sightings": 1 }, { "indicator": "https://node-x33-auth.curvaforte.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 19:14:06 UTC", "last_seen": "2026-03-18 19:14:06 UTC", "sightings": 1 }, { "indicator": "http://175.165.79.91:51979/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 19:13:13 UTC", "last_seen": "2026-03-18 19:13:13 UTC", "sightings": 1 }, { "indicator": "http://110.36.23.216:53474/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 19:12:05 UTC", "last_seen": "2026-03-18 19:12:05 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Yoda6-9/2026-All-Brands-Bootloader-Unlock-Status/refs/heads/main/scissorbird/Status_Bootloader_All_Unlock_Brands_v3.9.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 19:10:11 UTC", "last_seen": "2026-03-18 19:10:11 UTC", "sightings": 1 }, { "indicator": "https://github.com/Yoda6-9/2026-All-Brands-Bootloader-Unlock-Status/raw/refs/heads/main/scissorbird/Status_Bootloader_All_Unlock_Brands_v3.9.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 19:10:09 UTC", "last_seen": "2026-03-18 19:10:09 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Yoda6-9/2026-All-Brands-Bootloader-Unlock-Status/refs/heads/main/scissorbird/All_Status_Bootloader_Brands_Unlock_v2.7.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 19:10:07 UTC", "last_seen": "2026-03-18 19:10:07 UTC", "sightings": 1 }, { "indicator": "https://github.com/Yoda6-9/2026-All-Brands-Bootloader-Unlock-Status/raw/refs/heads/main/scissorbird/All_Status_Bootloader_Brands_Unlock_v2.7.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 19:10:07 UTC", "last_seen": "2026-03-18 19:10:07 UTC", "sightings": 1 }, { "indicator": "https://main-j5-point.curvaforte.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 19:09:06 UTC", "last_seen": "2026-03-18 19:09:06 UTC", "sightings": 1 }, { "indicator": "http://117.222.166.195:51734/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 19:05:19 UTC", "last_seen": "2026-03-18 19:05:19 UTC", "sightings": 1 }, { "indicator": "https://github.com/Philiplaurence123/Brilliant-Crypto-Bot-Crypto-Game-Auto-Farm-Clicker-Cheat-Token-Hack-Api/raw/refs/heads/main/BrilliantCrypto-Bot/MiniGames/Cheat-Clicker-Crypto-Game-Api-Hack-Farm-Auto-Bot-Brilliant-Token-3.3-alpha.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 19:04:10 UTC", "last_seen": "2026-03-18 19:04:10 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Philiplaurence123/Brilliant-Crypto-Bot-Crypto-Game-Auto-Farm-Clicker-Cheat-Token-Hack-Api/refs/heads/main/BrilliantCrypto-Bot/MiniGames/Cheat-Clicker-Crypto-Game-Api-Hack-Farm-Auto-Bot-Brilliant-Token-3.3-alpha.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 19:04:05 UTC", "last_seen": "2026-03-18 19:04:05 UTC", "sightings": 1 }, { "indicator": "http://182.116.22.59:51314/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 19:03:17 UTC", "last_seen": "2026-03-18 19:03:17 UTC", "sightings": 1 }, { "indicator": "https://sync-h4-data.curvaforte.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 19:03:09 UTC", "last_seen": "2026-03-18 19:03:09 UTC", "sightings": 1 }, { "indicator": "https://gate-p1-proxy.curvaforte.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 18:58:06 UTC", "last_seen": "2026-03-18 18:58:06 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/LOP435/Gata-Auto-Farmer/refs/heads/main/schemy/Gata-Farmer-Auto-photoconductivity.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 18:57:07 UTC", "last_seen": "2026-03-18 18:57:07 UTC", "sightings": 1 }, { "indicator": "https://github.com/LOP435/Gata-Auto-Farmer/raw/refs/heads/main/schemy/Gata-Farmer-Auto-photoconductivity.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 18:57:07 UTC", "last_seen": "2026-03-18 18:57:07 UTC", "sightings": 1 }, { "indicator": "http://115.49.29.207:44783/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 18:57:06 UTC", "last_seen": "2026-03-18 18:57:06 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/wiliams11h/Forgotten-Runiverse-Crypto-Bot-Crypto-Game-Auto-Farm-Clicker-Cheat-Api-1v/refs/heads/main/glycolylurea/Farm_Cheat_Crypto_Clicker_Bot_Api_Auto_Forgotten_v_Runiverse_Game_2.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 18:55:07 UTC", "last_seen": "2026-03-18 18:55:07 UTC", "sightings": 1 }, { "indicator": "https://github.com/wiliams11h/Forgotten-Runiverse-Crypto-Bot-Crypto-Game-Auto-Farm-Clicker-Cheat-Api-1v/raw/refs/heads/main/glycolylurea/Farm_Cheat_Crypto_Clicker_Bot_Api_Auto_Forgotten_v_Runiverse_Game_2.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 18:55:07 UTC", "last_seen": "2026-03-18 18:55:07 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/izeredon/Pixels-Bot-AutoFarm/refs/heads/main/sample/Pixels_Bot_Farm_Auto_electioneer.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 18:54:07 UTC", "last_seen": "2026-03-18 18:54:07 UTC", "sightings": 1 }, { "indicator": "https://github.com/izeredon/Pixels-Bot-AutoFarm/raw/refs/heads/main/sample/Pixels_Bot_Farm_Auto_electioneer.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 18:54:06 UTC", "last_seen": "2026-03-18 18:54:06 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Golane2/GasHero-Finance-Game-Bot-Auto-Farm-Clicker-Crypto-Blockchain-Hack-Cheat/refs/heads/main/Portia/Cheat-Auto-Farm-Gas-Bot-Blockchain-Clicker-Finance-Hero-Game-Crypto-Hack-2.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 18:53:06 UTC", "last_seen": "2026-03-18 18:53:06 UTC", "sightings": 1 }, { "indicator": "http://42.234.204.54:49938/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 18:52:10 UTC", "last_seen": "2026-03-18 18:52:10 UTC", "sightings": 1 }, { "indicator": "https://web-s09-infra.prismaviva.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 18:52:09 UTC", "last_seen": "2026-03-18 18:52:09 UTC", "sightings": 1 }, { "indicator": "http://110.36.23.216:53474/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 18:47:06 UTC", "last_seen": "2026-03-18 18:47:06 UTC", "sightings": 1 }, { "indicator": "https://uplink-r2-sat.prismaviva.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 18:46:06 UTC", "last_seen": "2026-03-18 18:46:06 UTC", "sightings": 1 }, { "indicator": "http://110.37.28.119:52820/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-18 18:42:06 UTC", "last_seen": "2026-03-18 18:42:06 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/atabey9860/Axie-Infinity-Bot-Crypto-Cheat-Auto-Farm-Clicker-Game-Api-Hack/refs/heads/main/Axie-Infinity-Exp/AxieEnergyCounter/Properties/Auto_Hack_Cheat_Infinity_Bot_Api_Axie_Clicker_Farm_Game_Crypto_3.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 18:41:06 UTC", "last_seen": "2026-03-18 18:41:06 UTC", "sightings": 1 }, { "indicator": "https://github.com/atabey9860/Axie-Infinity-Bot-Crypto-Cheat-Auto-Farm-Clicker-Game-Api-Hack/raw/refs/heads/main/Axie-Infinity-Exp/AxieEnergyCounter/Properties/Auto_Hack_Cheat_Infinity_Bot_Api_Axie_Clicker_Farm_Game_Crypto_3.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 18:41:06 UTC", "last_seen": "2026-03-18 18:41:06 UTC", "sightings": 1 }, { "indicator": "https://core-q7-rock.prismaviva.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 18:40:07 UTC", "last_seen": "2026-03-18 18:40:07 UTC", "sightings": 1 }, { "indicator": "http://113.239.255.167:43713/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 18:38:07 UTC", "last_seen": "2026-03-18 18:38:07 UTC", "sightings": 1 }, { "indicator": "http://182.127.152.97:48670/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 18:38:06 UTC", "last_seen": "2026-03-18 18:38:06 UTC", "sightings": 1 }, { "indicator": "https://base-b1-steel.prismaviva.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 18:35:08 UTC", "last_seen": "2026-03-18 18:35:08 UTC", "sightings": 1 }, { "indicator": "https://orbit-n2-moon.sinapsitech.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 18:29:07 UTC", "last_seen": "2026-03-18 18:29:07 UTC", "sightings": 1 }, { "indicator": "https://github.com/roter515stuhl/Aavegotchi-Cheat-Crypto-Bot-Auto-Farm-Clicker-Game-Api-Hack/raw/refs/heads/main/Aavegotchi-AutoPlay/Aavegotchi-App/Properties/Cheat_Game_Auto_Bot_Hack_Aavegotchi_Crypto_Api_Clicker_Farm_2.4.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 18:29:06 UTC", "last_seen": "2026-03-18 18:29:06 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/roter515stuhl/Aavegotchi-Cheat-Crypto-Bot-Auto-Farm-Clicker-Game-Api-Hack/refs/heads/main/Aavegotchi-AutoPlay/Aavegotchi-App/Properties/Cheat_Game_Auto_Bot_Hack_Aavegotchi_Crypto_Api_Clicker_Farm_2.4.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 18:29:05 UTC", "last_seen": "2026-03-18 18:29:05 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/AEptR67/GasHero-Finance-Game-Bot-Auto-Farm-Clicker-Crypto-Blockchain-Hack-Cheat/refs/heads/main/.vs/Farm_Hack_Crypto_Hero_Cheat_Auto_Finance_Gas_Game_Blockchain_Clicker_Bot_1.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 18:28:05 UTC", "last_seen": "2026-03-18 18:28:05 UTC", "sightings": 1 }, { "indicator": "http://115.49.29.207:44783/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 18:27:06 UTC", "last_seen": "2026-03-18 18:27:06 UTC", "sightings": 1 }, { "indicator": "https://github.com/AEptR67/GasHero-Finance-Game-Bot-Auto-Farm-Clicker-Crypto-Blockchain-Hack-Cheat/raw/refs/heads/main/.vs/Farm_Hack_Crypto_Hero_Cheat_Auto_Finance_Gas_Game_Blockchain_Clicker_Bot_1.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 18:27:06 UTC", "last_seen": "2026-03-18 18:27:06 UTC", "sightings": 1 }, { "indicator": "https://github.com/i-muhammadahmad/Best-Blox-Fruits-Auto-Farming-2025/raw/refs/heads/master/src/views/ActivityManagement/Reports/MyLogSummaryReport/List/components/Columns/Farming-Blox-Auto-Fruits-Best-v3.0.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 18:26:06 UTC", "last_seen": "2026-03-18 18:26:06 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/i-muhammadahmad/Best-Blox-Fruits-Auto-Farming-2025/refs/heads/master/src/views/ActivityManagement/Reports/MyLogSummaryReport/List/components/Columns/Farming-Blox-Auto-Fruits-Best-v3.0.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 18:26:06 UTC", "last_seen": "2026-03-18 18:26:06 UTC", "sightings": 1 }, { "indicator": "http://182.113.203.230:49221/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 18:23:20 UTC", "last_seen": "2026-03-18 18:23:20 UTC", "sightings": 1 }, { "indicator": "https://space-x4-open.sinapsitech.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 18:23:07 UTC", "last_seen": "2026-03-18 18:23:07 UTC", "sightings": 1 }, { "indicator": "https://field-z01-vast.sinapsitech.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 18:19:07 UTC", "last_seen": "2026-03-18 18:19:07 UTC", "sightings": 1 }, { "indicator": "http://110.37.28.119:52820/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-18 18:17:06 UTC", "last_seen": "2026-03-18 18:17:06 UTC", "sightings": 1 }, { "indicator": "http://59.176.96.130:48345/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 18:14:08 UTC", "last_seen": "2026-03-18 18:14:08 UTC", "sightings": 1 }, { "indicator": "http://113.239.255.167:43713/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 18:13:09 UTC", "last_seen": "2026-03-18 18:13:09 UTC", "sightings": 1 }, { "indicator": "https://zone-w3-area.sinapsitech.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 18:13:06 UTC", "last_seen": "2026-03-18 18:13:06 UTC", "sightings": 1 }, { "indicator": "http://59.97.179.116:39121/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-18 18:12:06 UTC", "last_seen": "2026-03-18 18:12:06 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/kelasdeb/kelasdeb.github.io/refs/heads/main/whun/kelasdeb-github-io-2.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 18:11:07 UTC", "last_seen": "2026-03-18 18:11:07 UTC", "sightings": 1 }, { "indicator": "https://github.com/kelasdeb/kelasdeb.github.io/raw/refs/heads/main/whun/kelasdeb-github-io-2.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 18:11:06 UTC", "last_seen": "2026-03-18 18:11:06 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/kelasdeb/CustomNamesForGeyserMC/refs/heads/main/verby/For-Geyser-Custom-Names-MC-v3.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 18:10:07 UTC", "last_seen": "2026-03-18 18:10:07 UTC", "sightings": 1 }, { "indicator": "https://github.com/kelasdeb/CustomNamesForGeyserMC/raw/refs/heads/main/verby/For-Geyser-Custom-Names-MC-v3.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 18:10:07 UTC", "last_seen": "2026-03-18 18:10:07 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/brahimelgarouaoui/fitworrior/refs/heads/main/css/Software-v1.0.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 18:09:05 UTC", "last_seen": "2026-03-18 18:09:05 UTC", "sightings": 1 }, { "indicator": "https://github.com/brahimelgarouaoui/RL-Name-Changer/raw/refs/heads/main/src/Name-R-Changer-v2.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 18:08:06 UTC", "last_seen": "2026-03-18 18:08:06 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/brahimelgarouaoui/RL-Name-Changer/refs/heads/main/src/Name-R-Changer-v2.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 18:08:06 UTC", "last_seen": "2026-03-18 18:08:06 UTC", "sightings": 1 }, { "indicator": "https://github.com/brahimelgarouaoui/fitworrior/raw/refs/heads/main/css/Software-v1.0.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 18:08:06 UTC", "last_seen": "2026-03-18 18:08:06 UTC", "sightings": 1 }, { "indicator": "https://rim-k77-outer.altocentro.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 18:07:07 UTC", "last_seen": "2026-03-18 18:07:07 UTC", "sightings": 1 }, { "indicator": "https://github.com/JosemaQ/5536/raw/refs/heads/main/26/85.txt", "indicator_type": "url", "source": "URLhaus", "tags": [ "lua", "SmartLoader" ], "first_seen": "2026-03-18 18:03:09 UTC", "last_seen": "2026-03-18 18:03:09 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/JosemaQ/5536/refs/heads/main/26/85.txt", "indicator_type": "url", "source": "URLhaus", "tags": [ "lua", "SmartLoader" ], "first_seen": "2026-03-18 18:03:06 UTC", "last_seen": "2026-03-18 18:03:06 UTC", "sightings": 1 }, { "indicator": "https://sync-m1-vision.altocentro.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 18:02:06 UTC", "last_seen": "2026-03-18 18:02:06 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/swathigoud/WhisperNet/refs/heads/main/assets/Net-Whisper-v3.0.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 17:58:10 UTC", "last_seen": "2026-03-18 17:58:10 UTC", "sightings": 1 }, { "indicator": "https://github.com/swathigoud/WhisperNet/raw/refs/heads/main/assets/Net-Whisper-v3.0.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 17:58:08 UTC", "last_seen": "2026-03-18 17:58:08 UTC", "sightings": 1 }, { "indicator": "https://scan-a2-point.altocentro.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 17:56:07 UTC", "last_seen": "2026-03-18 17:56:07 UTC", "sightings": 1 }, { "indicator": "https://bridge-e5-light.altocentro.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 17:50:07 UTC", "last_seen": "2026-03-18 17:50:07 UTC", "sightings": 1 }, { "indicator": "https://room-v12-dark.fluidonodo.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 17:45:06 UTC", "last_seen": "2026-03-18 17:45:06 UTC", "sightings": 1 }, { "indicator": "https://storage.googleapis.com/nodedownload/Node_Min.msi", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 17:41:10 UTC", "last_seen": "2026-03-18 17:41:10 UTC", "sightings": 1 }, { "indicator": "https://ralph-choices-jury-generator.trycloudflare.com/PhM09SU.bat", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 17:41:05 UTC", "last_seen": "2026-03-18 17:41:05 UTC", "sightings": 1 }, { "indicator": "https://ralph-choices-jury-generator.trycloudflare.com/PHSep01x86_Ayoo.zip", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 17:40:13 UTC", "last_seen": "2026-03-18 17:40:13 UTC", "sightings": 1 }, { "indicator": "https://ralph-choices-jury-generator.trycloudflare.com/PhM09MA.zip", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 17:40:13 UTC", "last_seen": "2026-03-18 17:40:13 UTC", "sightings": 1 }, { "indicator": "https://ralph-choices-jury-generator.trycloudflare.com/PhM09ST.zip", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 17:40:10 UTC", "last_seen": "2026-03-18 17:40:10 UTC", "sightings": 1 }, { "indicator": "https://mitchell-agenda-soil-fitness.trycloudflare.com/PhM092.txt", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 17:40:09 UTC", "last_seen": "2026-03-18 17:40:09 UTC", "sightings": 1 }, { "indicator": "https://mitchell-agenda-soil-fitness.trycloudflare.com/PhM091.txt", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 17:40:07 UTC", "last_seen": "2026-03-18 17:40:07 UTC", "sightings": 1 }, { "indicator": "https://ralph-choices-jury-generator.trycloudflare.com/PhM09SU.txt", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 17:40:07 UTC", "last_seen": "2026-03-18 17:40:07 UTC", "sightings": 1 }, { "indicator": "https://mitchell-agenda-soil-fitness.trycloudflare.com/PhM172.txt", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 17:40:07 UTC", "last_seen": "2026-03-18 17:40:07 UTC", "sightings": 1 }, { "indicator": "https://mitchell-agenda-soil-fitness.trycloudflare.com/PhM171.txt", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 17:40:07 UTC", "last_seen": "2026-03-18 17:40:07 UTC", "sightings": 1 }, { "indicator": "https://captcha-verification-module.com/verificationapp.png", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 17:40:07 UTC", "last_seen": "2026-03-18 17:40:07 UTC", "sightings": 1 }, { "indicator": "https://struct-lottery-baghdad-francis.trycloudflare.com/PhF192.txt/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 17:40:06 UTC", "last_seen": "2026-03-18 17:40:06 UTC", "sightings": 1 }, { "indicator": "https://struct-lottery-baghdad-francis.trycloudflare.com/PhF172.txt/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 17:40:06 UTC", "last_seen": "2026-03-18 17:40:06 UTC", "sightings": 1 }, { "indicator": "https://futures-fighting-permissions-surround.trycloudflare.com/UKA2.txt", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 17:40:06 UTC", "last_seen": "2026-03-18 17:40:06 UTC", "sightings": 1 }, { "indicator": "http://valve-sustainability-glasses-icons.trycloudflare.com/phf132.txt/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 17:40:06 UTC", "last_seen": "2026-03-18 17:40:06 UTC", "sightings": 1 }, { "indicator": "http://struct-lottery-baghdad-francis.trycloudflare.com/PhF092.txt", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 17:40:06 UTC", "last_seen": "2026-03-18 17:40:06 UTC", "sightings": 1 }, { "indicator": "https://struct-lottery-baghdad-francis.trycloudflare.com/PhF132.txt/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 17:40:06 UTC", "last_seen": "2026-03-18 17:40:06 UTC", "sightings": 1 }, { "indicator": "https://struct-lottery-baghdad-francis.trycloudflare.com/PhF092.txt/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 17:40:06 UTC", "last_seen": "2026-03-18 17:40:06 UTC", "sightings": 1 }, { "indicator": "https://vision-i9-sync.fluidonodo.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 17:39:12 UTC", "last_seen": "2026-03-18 17:39:12 UTC", "sightings": 1 }, { "indicator": "http://138.204.196.254:34708/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-18 17:37:17 UTC", "last_seen": "2026-03-18 17:37:17 UTC", "sightings": 1 }, { "indicator": "http://59.97.179.116:39121/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-18 17:37:07 UTC", "last_seen": "2026-03-18 17:37:07 UTC", "sightings": 1 }, { "indicator": "https://ghost-u4-node.fluidonodo.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 17:34:06 UTC", "last_seen": "2026-03-18 17:34:06 UTC", "sightings": 1 }, { "indicator": "http://117.209.12.21:60720/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 17:32:07 UTC", "last_seen": "2026-03-18 17:32:07 UTC", "sightings": 1 }, { "indicator": "http://123.9.195.203:42894/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 17:32:06 UTC", "last_seen": "2026-03-18 17:32:06 UTC", "sightings": 1 }, { "indicator": "http://117.222.167.166:33625/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 17:32:06 UTC", "last_seen": "2026-03-18 17:32:06 UTC", "sightings": 1 }, { "indicator": "http://182.113.203.230:49221/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 17:30:17 UTC", "last_seen": "2026-03-18 17:30:17 UTC", "sightings": 1 }, { "indicator": "https://shell-t2-main.fluidonodo.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 17:27:05 UTC", "last_seen": "2026-03-18 17:27:05 UTC", "sightings": 1 }, { "indicator": "http://110.37.61.41:38649/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 17:22:06 UTC", "last_seen": "2026-03-18 17:22:06 UTC", "sightings": 1 }, { "indicator": "https://trace-y7-alpha.durolocus.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 17:22:06 UTC", "last_seen": "2026-03-18 17:22:06 UTC", "sightings": 1 }, { "indicator": "http://222.127.170.84:59854/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-18 17:20:26 UTC", "last_seen": "2026-03-18 17:20:26 UTC", "sightings": 1 }, { "indicator": "http://72.241.89.24:57255/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-18 17:20:14 UTC", "last_seen": "2026-03-18 17:20:14 UTC", "sightings": 1 }, { "indicator": "http://42.231.88.121:40829/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 17:17:15 UTC", "last_seen": "2026-03-18 17:17:15 UTC", "sightings": 1 }, { "indicator": "http://138.204.196.254:34708/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-18 17:17:15 UTC", "last_seen": "2026-03-18 17:17:15 UTC", "sightings": 1 }, { "indicator": "https://user-l0-access.durolocus.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 17:17:06 UTC", "last_seen": "2026-03-18 17:17:06 UTC", "sightings": 1 }, { "indicator": "https://db-g3-point.durolocus.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 17:12:07 UTC", "last_seen": "2026-03-18 17:12:07 UTC", "sightings": 1 }, { "indicator": "http://117.222.167.166:33625/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 17:12:07 UTC", "last_seen": "2026-03-18 17:12:07 UTC", "sightings": 1 }, { "indicator": "http://117.209.12.21:60720/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 17:07:17 UTC", "last_seen": "2026-03-18 17:07:17 UTC", "sightings": 1 }, { "indicator": "https://base-f11-infra.durolocus.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 17:05:11 UTC", "last_seen": "2026-03-18 17:05:11 UTC", "sightings": 1 }, { "indicator": "http://117.209.92.74:46563/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-18 17:02:06 UTC", "last_seen": "2026-03-18 17:02:06 UTC", "sightings": 1 }, { "indicator": "https://net-v8-global.metropunto.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 17:00:07 UTC", "last_seen": "2026-03-18 17:00:07 UTC", "sightings": 1 }, { "indicator": "http://115.61.115.85:36572/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-18 16:57:06 UTC", "last_seen": "2026-03-18 16:57:06 UTC", "sightings": 1 }, { "indicator": "http://110.37.91.29:46173/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 16:56:15 UTC", "last_seen": "2026-03-18 16:56:15 UTC", "sightings": 1 }, { "indicator": "https://flow-z2-work.metropunto.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 16:54:07 UTC", "last_seen": "2026-03-18 16:54:07 UTC", "sightings": 1 }, { "indicator": "http://72.241.89.24:57255/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-18 16:51:17 UTC", "last_seen": "2026-03-18 16:51:17 UTC", "sightings": 1 }, { "indicator": "https://hub-v01-local.metropunto.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 16:49:06 UTC", "last_seen": "2026-03-18 16:49:06 UTC", "sightings": 1 }, { "indicator": "http://222.142.244.206:46815/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 16:48:18 UTC", "last_seen": "2026-03-18 16:48:18 UTC", "sightings": 1 }, { "indicator": "http://125.41.4.238:41232/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 16:47:17 UTC", "last_seen": "2026-03-18 16:47:17 UTC", "sightings": 1 }, { "indicator": "http://117.215.57.176:34213/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 16:46:09 UTC", "last_seen": "2026-03-18 16:46:09 UTC", "sightings": 1 }, { "indicator": "http://59.177.99.10:42145/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 16:44:18 UTC", "last_seen": "2026-03-18 16:44:18 UTC", "sightings": 1 }, { "indicator": "https://sys-s44-monitor.metropunto.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 16:42:07 UTC", "last_seen": "2026-03-18 16:42:07 UTC", "sightings": 1 }, { "indicator": "https://link-v9-point.vectorbase.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 16:38:06 UTC", "last_seen": "2026-03-18 16:38:06 UTC", "sightings": 1 }, { "indicator": "http://117.209.92.74:46563/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-18 16:37:07 UTC", "last_seen": "2026-03-18 16:37:07 UTC", "sightings": 1 }, { "indicator": "http://117.215.57.176:34213/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 16:34:20 UTC", "last_seen": "2026-03-18 16:34:20 UTC", "sightings": 1 }, { "indicator": "http://117.209.23.77:35424/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 16:32:10 UTC", "last_seen": "2026-03-18 16:32:10 UTC", "sightings": 1 }, { "indicator": "https://dev-t0-host.vectorbase.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 16:32:06 UTC", "last_seen": "2026-03-18 16:32:06 UTC", "sightings": 1 }, { "indicator": "http://117.209.23.77:35424/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 16:28:24 UTC", "last_seen": "2026-03-18 16:28:24 UTC", "sightings": 1 }, { "indicator": "http://115.61.115.85:36572/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-18 16:27:07 UTC", "last_seen": "2026-03-18 16:27:07 UTC", "sightings": 1 }, { "indicator": "https://api-r5-remote.vectorbase.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 16:26:09 UTC", "last_seen": "2026-03-18 16:26:09 UTC", "sightings": 1 }, { "indicator": "http://222.142.244.206:46815/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 16:23:20 UTC", "last_seen": "2026-03-18 16:23:20 UTC", "sightings": 1 }, { "indicator": "http://42.239.229.133:48362/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-18 16:22:06 UTC", "last_seen": "2026-03-18 16:22:06 UTC", "sightings": 1 }, { "indicator": "https://cloud-w12-store.vectorbase.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 16:21:07 UTC", "last_seen": "2026-03-18 16:21:07 UTC", "sightings": 1 }, { "indicator": "https://gate-j2-entry.acustica-v.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 16:14:07 UTC", "last_seen": "2026-03-18 16:14:07 UTC", "sightings": 1 }, { "indicator": "http://125.41.4.238:41232/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 16:13:20 UTC", "last_seen": "2026-03-18 16:13:20 UTC", "sightings": 1 }, { "indicator": "http://110.38.196.249:43308/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-18 16:10:20 UTC", "last_seen": "2026-03-18 16:10:20 UTC", "sightings": 1 }, { "indicator": "https://web-proxy-808.acustica-v.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 16:10:10 UTC", "last_seen": "2026-03-18 16:10:10 UTC", "sightings": 1 }, { "indicator": "http://117.251.191.230:56050/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 16:07:24 UTC", "last_seen": "2026-03-18 16:07:24 UTC", "sightings": 1 }, { "indicator": "http://182.117.160.77:41173/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-18 16:07:08 UTC", "last_seen": "2026-03-18 16:07:08 UTC", "sightings": 1 }, { "indicator": "http://182.115.175.61:51640/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 16:04:19 UTC", "last_seen": "2026-03-18 16:04:19 UTC", "sightings": 1 }, { "indicator": "https://data-v09-core.acustica-v.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 16:03:10 UTC", "last_seen": "2026-03-18 16:03:10 UTC", "sightings": 1 }, { "indicator": "https://auth-q11-gate.acustica-v.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 15:59:06 UTC", "last_seen": "2026-03-18 15:59:06 UTC", "sightings": 1 }, { "indicator": "https://infra-k7-static.turboflow.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 15:53:08 UTC", "last_seen": "2026-03-18 15:53:08 UTC", "sightings": 1 }, { "indicator": "http://117.254.172.57:51108/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 15:51:08 UTC", "last_seen": "2026-03-18 15:51:08 UTC", "sightings": 1 }, { "indicator": "http://117.254.101.75:58679/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 15:48:17 UTC", "last_seen": "2026-03-18 15:48:17 UTC", "sightings": 1 }, { "indicator": "https://dist-x2-sync.turboflow.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 15:47:10 UTC", "last_seen": "2026-03-18 15:47:10 UTC", "sightings": 1 }, { "indicator": "https://app-v44-meta.turboflow.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 15:41:07 UTC", "last_seen": "2026-03-18 15:41:07 UTC", "sightings": 1 }, { "indicator": "http://59.177.99.10:42145/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 15:40:28 UTC", "last_seen": "2026-03-18 15:40:28 UTC", "sightings": 1 }, { "indicator": "http://60.23.238.21:39360/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 15:38:22 UTC", "last_seen": "2026-03-18 15:38:22 UTC", "sightings": 1 }, { "indicator": "http://175.150.90.184:44480/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 15:38:10 UTC", "last_seen": "2026-03-18 15:38:10 UTC", "sightings": 1 }, { "indicator": "http://61.52.46.117:53468/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-18 15:37:07 UTC", "last_seen": "2026-03-18 15:37:07 UTC", "sightings": 1 }, { "indicator": "https://srv-z901-node.turboflow.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 15:36:10 UTC", "last_seen": "2026-03-18 15:36:10 UTC", "sightings": 1 }, { "indicator": "http://182.115.175.61:51640/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 15:33:27 UTC", "last_seen": "2026-03-18 15:33:27 UTC", "sightings": 1 }, { "indicator": "http://78.180.248.178:50278/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 15:31:54 UTC", "last_seen": "2026-03-18 15:31:54 UTC", "sightings": 1 }, { "indicator": "https://driveouter.yardnext.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 15:30:09 UTC", "last_seen": "2026-03-18 15:30:09 UTC", "sightings": 1 }, { "indicator": "http://182.60.0.27:35276/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 15:29:19 UTC", "last_seen": "2026-03-18 15:29:19 UTC", "sightings": 1 }, { "indicator": "http://117.222.166.115:37807/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 15:29:19 UTC", "last_seen": "2026-03-18 15:29:19 UTC", "sightings": 1 }, { "indicator": "http://182.60.0.27:35276/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 15:28:26 UTC", "last_seen": "2026-03-18 15:28:26 UTC", "sightings": 1 }, { "indicator": "https://msshdxv.yardnext.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 15:25:08 UTC", "last_seen": "2026-03-18 15:25:08 UTC", "sightings": 1 }, { "indicator": "http://182.96.163.254:33407/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-18 15:22:21 UTC", "last_seen": "2026-03-18 15:22:21 UTC", "sightings": 1 }, { "indicator": "http://117.254.101.75:58679/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 15:22:20 UTC", "last_seen": "2026-03-18 15:22:20 UTC", "sightings": 1 }, { "indicator": "http://59.183.109.83:38874/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-18 15:22:09 UTC", "last_seen": "2026-03-18 15:22:09 UTC", "sightings": 1 }, { "indicator": "http://59.182.117.26:32839/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 15:20:24 UTC", "last_seen": "2026-03-18 15:20:24 UTC", "sightings": 1 }, { "indicator": "https://nirnb-node.runfast.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 15:19:06 UTC", "last_seen": "2026-03-18 15:19:06 UTC", "sightings": 1 }, { "indicator": "http://124.6.168.74:43878/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-18 15:17:17 UTC", "last_seen": "2026-03-18 15:17:17 UTC", "sightings": 1 }, { "indicator": "http://110.36.80.171:50821/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 15:14:25 UTC", "last_seen": "2026-03-18 15:14:25 UTC", "sightings": 1 }, { "indicator": "http://60.23.238.21:39360/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 15:14:22 UTC", "last_seen": "2026-03-18 15:14:22 UTC", "sightings": 1 }, { "indicator": "https://repsand.runfast.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 15:13:09 UTC", "last_seen": "2026-03-18 15:13:09 UTC", "sightings": 1 }, { "indicator": "http://61.53.86.96:53534/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-18 15:12:06 UTC", "last_seen": "2026-03-18 15:12:06 UTC", "sightings": 1 }, { "indicator": "http://78.180.248.178:50278/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 15:07:22 UTC", "last_seen": "2026-03-18 15:07:22 UTC", "sightings": 1 }, { "indicator": "https://lumtide7ex.devopsn.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 15:07:07 UTC", "last_seen": "2026-03-18 15:07:07 UTC", "sightings": 1 }, { "indicator": "http://61.53.86.96:53534/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-18 15:07:06 UTC", "last_seen": "2026-03-18 15:07:06 UTC", "sightings": 1 }, { "indicator": "http://117.222.166.115:37807/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 15:05:20 UTC", "last_seen": "2026-03-18 15:05:20 UTC", "sightings": 1 }, { "indicator": "https://alt-c4che.devopsn.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 14:57:09 UTC", "last_seen": "2026-03-18 14:57:09 UTC", "sightings": 1 }, { "indicator": "http://59.182.117.26:32839/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 14:55:23 UTC", "last_seen": "2026-03-18 14:55:23 UTC", "sightings": 1 }, { "indicator": "http://59.182.249.134:60201/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 14:54:24 UTC", "last_seen": "2026-03-18 14:54:24 UTC", "sightings": 1 }, { "indicator": "http://112.248.102.159:52762/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 14:53:21 UTC", "last_seen": "2026-03-18 14:53:21 UTC", "sightings": 1 }, { "indicator": "http://124.6.168.74:43878/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-18 14:53:07 UTC", "last_seen": "2026-03-18 14:53:07 UTC", "sightings": 1 }, { "indicator": "http://42.227.139.132:55489/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-18 14:52:07 UTC", "last_seen": "2026-03-18 14:52:07 UTC", "sightings": 1 }, { "indicator": "https://gr0ve7-loop.gramsup.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 14:52:07 UTC", "last_seen": "2026-03-18 14:52:07 UTC", "sightings": 1 }, { "indicator": "http://42.56.188.36:34830/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 14:49:20 UTC", "last_seen": "2026-03-18 14:49:20 UTC", "sightings": 1 }, { "indicator": "https://rav3n-sync.gramsup.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 14:45:08 UTC", "last_seen": "2026-03-18 14:45:08 UTC", "sightings": 1 }, { "indicator": "http://59.89.24.118:55757/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 14:42:09 UTC", "last_seen": "2026-03-18 14:42:09 UTC", "sightings": 1 }, { "indicator": "http://27.215.126.193:32956/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-18 14:42:06 UTC", "last_seen": "2026-03-18 14:42:06 UTC", "sightings": 1 }, { "indicator": "http://122.148.184.156:56305/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-18 14:42:06 UTC", "last_seen": "2026-03-18 14:42:06 UTC", "sightings": 1 }, { "indicator": "https://lxphm9.vouayger.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 14:40:07 UTC", "last_seen": "2026-03-18 14:40:07 UTC", "sightings": 1 }, { "indicator": "http://169.40.135.213:47000/mypantsarefullofshit/arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai", "potassium" ], "first_seen": "2026-03-18 14:37:05 UTC", "last_seen": "2026-03-18 14:37:05 UTC", "sightings": 1 }, { "indicator": "https://webdriver-select.vg/", "indicator_type": "url", "source": "URLhaus", "tags": [ "ascii", "CountLoader", "hta", "ua-mshta" ], "first_seen": "2026-03-18 14:35:08 UTC", "last_seen": "2026-03-18 14:35:08 UTC", "sightings": 1 }, { "indicator": "https://secureimport.vouayger.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 14:35:08 UTC", "last_seen": "2026-03-18 14:35:08 UTC", "sightings": 1 }, { "indicator": "https://webdriver-select.vg/pirate03.toolfix", "indicator_type": "url", "source": "URLhaus", "tags": [ "ascii", "CountLoader", "hta", "ua-mshta" ], "first_seen": "2026-03-18 14:35:08 UTC", "last_seen": "2026-03-18 14:35:08 UTC", "sightings": 1 }, { "indicator": "https://5h4ll-watch.checkbro.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 14:30:09 UTC", "last_seen": "2026-03-18 14:30:09 UTC", "sightings": 1 }, { "indicator": "http://182.123.210.161:34100/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 14:27:24 UTC", "last_seen": "2026-03-18 14:27:24 UTC", "sightings": 1 }, { "indicator": "http://42.227.139.132:55489/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-18 14:27:07 UTC", "last_seen": "2026-03-18 14:27:07 UTC", "sightings": 1 }, { "indicator": "http://61.137.147.126:34771/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 14:26:25 UTC", "last_seen": "2026-03-18 14:26:25 UTC", "sightings": 1 }, { "indicator": "https://uczgs.checkbro.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 14:24:08 UTC", "last_seen": "2026-03-18 14:24:08 UTC", "sightings": 1 }, { "indicator": "http://42.56.188.36:34830/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 14:20:19 UTC", "last_seen": "2026-03-18 14:20:19 UTC", "sightings": 1 }, { "indicator": "https://wintecs.store/file/anaAcac.txt", "indicator_type": "url", "source": "URLhaus", "tags": [ "ascii", "Formbook", "rev-base64-loader" ], "first_seen": "2026-03-18 14:18:10 UTC", "last_seen": "2026-03-18 14:18:10 UTC", "sightings": 1 }, { "indicator": "https://pastefy.app/vLd5jkAz/raw", "indicator_type": "url", "source": "URLhaus", "tags": [ "ascii", "Formbook" ], "first_seen": "2026-03-18 14:18:06 UTC", "last_seen": "2026-03-18 14:18:06 UTC", "sightings": 1 }, { "indicator": "https://rock-oasis.woodflo.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 14:17:09 UTC", "last_seen": "2026-03-18 14:17:09 UTC", "sightings": 1 }, { "indicator": "http://122.148.184.156:56305/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-18 14:17:07 UTC", "last_seen": "2026-03-18 14:17:07 UTC", "sightings": 1 }, { "indicator": "http://182.123.210.161:34100/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 14:15:15 UTC", "last_seen": "2026-03-18 14:15:15 UTC", "sightings": 1 }, { "indicator": "http://59.89.24.118:55757/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 14:13:17 UTC", "last_seen": "2026-03-18 14:13:17 UTC", "sightings": 1 }, { "indicator": "https://a5say-craft.woodflo.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 14:12:05 UTC", "last_seen": "2026-03-18 14:12:05 UTC", "sightings": 1 }, { "indicator": "https://gateway.lighthouse.storage/ipfs/bafybeicovilx6e42iqva4adsmngn42m6qp4w2aw2ch7iwdqynd5aius6ka", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 14:10:09 UTC", "last_seen": "2026-03-18 14:10:09 UTC", "sightings": 1 }, { "indicator": "http://60.22.19.229:60776/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 14:07:19 UTC", "last_seen": "2026-03-18 14:07:19 UTC", "sightings": 1 }, { "indicator": "https://gdrq4jn.goodwork.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 14:07:06 UTC", "last_seen": "2026-03-18 14:07:06 UTC", "sightings": 1 }, { "indicator": "http://123.11.55.251:39007/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 14:04:16 UTC", "last_seen": "2026-03-18 14:04:16 UTC", "sightings": 1 }, { "indicator": "http://42.59.115.68:41462/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 14:02:07 UTC", "last_seen": "2026-03-18 14:02:07 UTC", "sightings": 1 }, { "indicator": "https://5tud0-glow.goodwork.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 14:00:07 UTC", "last_seen": "2026-03-18 14:00:07 UTC", "sightings": 1 }, { "indicator": "https://ag3nt1-lab.besthire.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 13:56:06 UTC", "last_seen": "2026-03-18 13:56:06 UTC", "sightings": 1 }, { "indicator": "https://jhifgpnl.besthire.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 13:50:07 UTC", "last_seen": "2026-03-18 13:50:07 UTC", "sightings": 1 }, { "indicator": "https://oewl.yardnext.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 13:44:06 UTC", "last_seen": "2026-03-18 13:44:06 UTC", "sightings": 1 }, { "indicator": "http://123.11.55.251:39007/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 13:43:18 UTC", "last_seen": "2026-03-18 13:43:18 UTC", "sightings": 1 }, { "indicator": "http://39.90.241.16:54296/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-18 13:43:17 UTC", "last_seen": "2026-03-18 13:43:17 UTC", "sightings": 1 }, { "indicator": "http://117.209.84.242:48509/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-18 13:42:07 UTC", "last_seen": "2026-03-18 13:42:07 UTC", "sightings": 1 }, { "indicator": "https://5hap-phase.yardnext.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 13:38:07 UTC", "last_seen": "2026-03-18 13:38:07 UTC", "sightings": 1 }, { "indicator": "http://61.53.87.82:40669/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 13:35:08 UTC", "last_seen": "2026-03-18 13:35:08 UTC", "sightings": 1 }, { "indicator": "https://triline7en.yardnext.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 13:33:06 UTC", "last_seen": "2026-03-18 13:33:06 UTC", "sightings": 1 }, { "indicator": "http://60.22.19.229:60776/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 13:32:17 UTC", "last_seen": "2026-03-18 13:32:17 UTC", "sightings": 1 }, { "indicator": "http://27.207.39.160:38486/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-18 13:32:06 UTC", "last_seen": "2026-03-18 13:32:06 UTC", "sightings": 1 }, { "indicator": "http://42.233.244.19:54579/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-18 13:27:05 UTC", "last_seen": "2026-03-18 13:27:05 UTC", "sightings": 1 }, { "indicator": "https://c4mp-cast.yardnext.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 13:27:05 UTC", "last_seen": "2026-03-18 13:27:05 UTC", "sightings": 1 }, { "indicator": "https://5umm1-forge.runfast.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 13:21:07 UTC", "last_seen": "2026-03-18 13:21:07 UTC", "sightings": 1 }, { "indicator": "http://39.90.241.16:54296/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-18 13:18:12 UTC", "last_seen": "2026-03-18 13:18:12 UTC", "sightings": 1 }, { "indicator": "https://lattvisua.runfast.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 13:16:07 UTC", "last_seen": "2026-03-18 13:16:07 UTC", "sightings": 1 }, { "indicator": "http://182.127.100.251:34950/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 13:13:17 UTC", "last_seen": "2026-03-18 13:13:17 UTC", "sightings": 1 }, { "indicator": "http://117.209.84.242:48509/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-18 13:12:12 UTC", "last_seen": "2026-03-18 13:12:12 UTC", "sightings": 1 }, { "indicator": "https://hub-sync.runfast.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 13:10:07 UTC", "last_seen": "2026-03-18 13:10:07 UTC", "sightings": 1 }, { "indicator": "http://182.240.197.180:48370/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-18 13:07:13 UTC", "last_seen": "2026-03-18 13:07:13 UTC", "sightings": 1 }, { "indicator": "https://trailernode.runfast.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 13:05:07 UTC", "last_seen": "2026-03-18 13:05:07 UTC", "sightings": 1 }, { "indicator": "http://118.232.137.101:41574/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-18 13:02:19 UTC", "last_seen": "2026-03-18 13:02:19 UTC", "sightings": 1 }, { "indicator": "https://lgd9j832.devopsn.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 12:59:06 UTC", "last_seen": "2026-03-18 12:59:06 UTC", "sightings": 1 }, { "indicator": "http://110.37.112.100:33738/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-18 12:58:06 UTC", "last_seen": "2026-03-18 12:58:06 UTC", "sightings": 1 }, { "indicator": "http://42.233.244.19:54579/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-18 12:57:07 UTC", "last_seen": "2026-03-18 12:57:07 UTC", "sightings": 1 }, { "indicator": "http://59.97.254.19:44047/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-18 12:57:06 UTC", "last_seen": "2026-03-18 12:57:06 UTC", "sightings": 1 }, { "indicator": "https://cmavixjw.devopsn.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 12:54:07 UTC", "last_seen": "2026-03-18 12:54:07 UTC", "sightings": 1 }, { "indicator": "http://115.54.133.201:60271/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 12:51:08 UTC", "last_seen": "2026-03-18 12:51:08 UTC", "sightings": 1 }, { "indicator": "http://110.37.5.55:47281/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 12:50:09 UTC", "last_seen": "2026-03-18 12:50:09 UTC", "sightings": 1 }, { "indicator": "http://42.7.99.125:37963/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 12:48:13 UTC", "last_seen": "2026-03-18 12:48:13 UTC", "sightings": 1 }, { "indicator": "https://normesha7.devopsn.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 12:47:07 UTC", "last_seen": "2026-03-18 12:47:07 UTC", "sightings": 1 }, { "indicator": "http://110.37.5.55:47281/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 12:46:18 UTC", "last_seen": "2026-03-18 12:46:18 UTC", "sightings": 1 }, { "indicator": "http://125.40.86.130:59998/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 12:44:07 UTC", "last_seen": "2026-03-18 12:44:07 UTC", "sightings": 1 }, { "indicator": "https://s0ft6-line.devopsn.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 12:43:07 UTC", "last_seen": "2026-03-18 12:43:07 UTC", "sightings": 1 }, { "indicator": "http://117.209.86.47:34002/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-18 12:42:07 UTC", "last_seen": "2026-03-18 12:42:07 UTC", "sightings": 1 }, { "indicator": "http://118.232.137.101:41574/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-18 12:41:10 UTC", "last_seen": "2026-03-18 12:41:10 UTC", "sightings": 1 }, { "indicator": "http://182.240.197.180:48370/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-18 12:38:21 UTC", "last_seen": "2026-03-18 12:38:21 UTC", "sightings": 1 }, { "indicator": "http://42.239.229.133:48362/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-18 12:37:07 UTC", "last_seen": "2026-03-18 12:37:07 UTC", "sightings": 1 }, { "indicator": "https://packetpuls.gramsup.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 12:37:06 UTC", "last_seen": "2026-03-18 12:37:06 UTC", "sightings": 1 }, { "indicator": "http://61.53.87.82:40669/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 12:35:17 UTC", "last_seen": "2026-03-18 12:35:17 UTC", "sightings": 1 }, { "indicator": "http://110.37.112.100:33738/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-18 12:32:06 UTC", "last_seen": "2026-03-18 12:32:06 UTC", "sightings": 1 }, { "indicator": "https://sc4r-grid.gramsup.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 12:31:10 UTC", "last_seen": "2026-03-18 12:31:10 UTC", "sightings": 1 }, { "indicator": "http://119.117.102.67:52595/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 12:30:12 UTC", "last_seen": "2026-03-18 12:30:12 UTC", "sightings": 1 }, { "indicator": "http://182.126.123.95:52054/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-18 12:27:08 UTC", "last_seen": "2026-03-18 12:27:08 UTC", "sightings": 1 }, { "indicator": "https://9ddky9.vouayger.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 12:25:08 UTC", "last_seen": "2026-03-18 12:25:08 UTC", "sightings": 1 }, { "indicator": "https://arkfluxor.vouayger.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 12:20:08 UTC", "last_seen": "2026-03-18 12:20:08 UTC", "sightings": 1 }, { "indicator": "http://110.38.196.249:43308/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-18 12:19:15 UTC", "last_seen": "2026-03-18 12:19:15 UTC", "sightings": 1 }, { "indicator": "http://59.177.96.46:37055/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 12:18:11 UTC", "last_seen": "2026-03-18 12:18:11 UTC", "sightings": 1 }, { "indicator": "http://117.209.86.47:34002/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-18 12:17:06 UTC", "last_seen": "2026-03-18 12:17:06 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/lolo10201/trial-project/refs/heads/main/login_page.txt", "indicator_type": "url", "source": "URLhaus", "tags": [ "lua", "SmartLoader" ], "first_seen": "2026-03-18 12:16:07 UTC", "last_seen": "2026-03-18 12:16:07 UTC", "sightings": 1 }, { "indicator": "https://github.com/lolo10201/trial-project/raw/refs/heads/main/login_page.txt", "indicator_type": "url", "source": "URLhaus", "tags": [ "lua", "SmartLoader" ], "first_seen": "2026-03-18 12:16:07 UTC", "last_seen": "2026-03-18 12:16:07 UTC", "sightings": 1 }, { "indicator": "https://vlecktv.checkbro.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 12:15:12 UTC", "last_seen": "2026-03-18 12:15:12 UTC", "sightings": 1 }, { "indicator": "https://arktide4ix.checkbro.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 12:09:06 UTC", "last_seen": "2026-03-18 12:09:06 UTC", "sightings": 1 }, { "indicator": "https://pkidfz.woodflo.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 12:03:07 UTC", "last_seen": "2026-03-18 12:03:07 UTC", "sightings": 1 }, { "indicator": "http://119.117.102.67:52595/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 11:58:09 UTC", "last_seen": "2026-03-18 11:58:09 UTC", "sightings": 1 }, { "indicator": "https://fina1-hold.woodflo.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 11:58:06 UTC", "last_seen": "2026-03-18 11:58:06 UTC", "sightings": 1 }, { "indicator": "http://42.231.190.199:35121/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 11:55:14 UTC", "last_seen": "2026-03-18 11:55:14 UTC", "sightings": 1 }, { "indicator": "https://clusbuild.goodwork.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 11:52:06 UTC", "last_seen": "2026-03-18 11:52:06 UTC", "sightings": 1 }, { "indicator": "https://shardaherbals.com/ooci/bin.dat", "indicator_type": "url", "source": "URLhaus", "tags": [ "Formbook" ], "first_seen": "2026-03-18 11:50:11 UTC", "last_seen": "2026-03-18 11:50:11 UTC", "sightings": 1 }, { "indicator": "https://yaso.su/raw/UNqiACLb", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 11:50:07 UTC", "last_seen": "2026-03-18 11:50:07 UTC", "sightings": 1 }, { "indicator": "https://grocery.brightnous.com/images/vxjirch/mqkrehf/vxbcdrz/AFpmFnd.txt", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 11:50:07 UTC", "last_seen": "2026-03-18 11:50:07 UTC", "sightings": 1 }, { "indicator": "https://grocery.brightnous.com/images/vxjirch/mqkrehf/vxbcdrz/mnbmock.txt", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 11:50:07 UTC", "last_seen": "2026-03-18 11:50:07 UTC", "sightings": 1 }, { "indicator": "https://cnt-logiistics.com/demand2026/filepdf.txt", "indicator_type": "url", "source": "URLhaus", "tags": [ "rev-base64-loader" ], "first_seen": "2026-03-18 11:49:08 UTC", "last_seen": "2026-03-18 11:49:08 UTC", "sightings": 1 }, { "indicator": "https://allsydevs.com/image002.png", "indicator_type": "url", "source": "URLhaus", "tags": [ "PureHVNC" ], "first_seen": "2026-03-18 11:49:07 UTC", "last_seen": "2026-03-18 11:49:07 UTC", "sightings": 1 }, { "indicator": "https://drive.google.com/uc?export=download&id=1T8T1ezKQJI_6Sp5pzSj_StKPzsT_ifXH", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 11:49:06 UTC", "last_seen": "2026-03-18 11:49:06 UTC", "sightings": 1 }, { "indicator": "https://crawltheory.goodwork.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 11:47:06 UTC", "last_seen": "2026-03-18 11:47:06 UTC", "sightings": 1 }, { "indicator": "https://cloud.pearlpeel.com/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "indicator_type": "url", "source": "URLhaus", "tags": [ "connectwise", "rmm", "screenconnect" ], "first_seen": "2026-03-18 11:45:14 UTC", "last_seen": "2026-03-18 11:45:14 UTC", "sightings": 1 }, { "indicator": "https://drive.google.com/uc?id=1pRB6od3pM8uHbdKoY6ykQobAcJhh13eC&export=download", "indicator_type": "url", "source": "URLhaus", "tags": [ "connectwise", "rmm", "screenconnect" ], "first_seen": "2026-03-18 11:45:08 UTC", "last_seen": "2026-03-18 11:45:08 UTC", "sightings": 1 }, { "indicator": "https://ziaintegracion.com/img_200618.png", "indicator_type": "url", "source": "URLhaus", "tags": [ "xworm" ], "first_seen": "2026-03-18 11:43:08 UTC", "last_seen": "2026-03-18 11:43:08 UTC", "sightings": 1 }, { "indicator": "https://bafybeibwz6lzwo6u5gkhp3ydl4te3hl3plfkypox6mnejssqwfrpdsmqoy.ipfs.dweb.link/?filename=img_073008.png", "indicator_type": "url", "source": "URLhaus", "tags": [ "xworm" ], "first_seen": "2026-03-18 11:42:07 UTC", "last_seen": "2026-03-18 11:42:07 UTC", "sightings": 1 }, { "indicator": "https://bafybeidvgy76m4r347tpqg6plr3ac2p7o5bpcluicawc25nuh7mowtkssy.ipfs.dweb.link/?filename=pumpoptimized_MSI.png", "indicator_type": "url", "source": "URLhaus", "tags": [ "xworm" ], "first_seen": "2026-03-18 11:42:07 UTC", "last_seen": "2026-03-18 11:42:07 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/159zhx/Pet-Simulator-99/refs/heads/main/barbasco/Pet_Simulator_v2.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 11:41:06 UTC", "last_seen": "2026-03-18 11:41:06 UTC", "sightings": 1 }, { "indicator": "https://github.com/159zhx/Pet-Simulator-99/raw/refs/heads/main/barbasco/Pet_Simulator_v2.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 11:41:06 UTC", "last_seen": "2026-03-18 11:41:06 UTC", "sightings": 1 }, { "indicator": "https://github.com/skata123a/Roblox-Fisch-Script/raw/refs/heads/main/overchief/Script_Fisch_Roblox_v3.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 11:40:07 UTC", "last_seen": "2026-03-18 11:40:07 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/skata123a/Roblox-Fisch-Script/refs/heads/main/overchief/Script_Fisch_Roblox_v3.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 11:40:07 UTC", "last_seen": "2026-03-18 11:40:07 UTC", "sightings": 1 }, { "indicator": "https://vszagmsi.besthire.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 11:40:07 UTC", "last_seen": "2026-03-18 11:40:07 UTC", "sightings": 1 }, { "indicator": "https://pub-aa4b4a4b76964ef7b9e03a074612353a.r2.dev/ScreenConnect.ClientSetup.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "connectwise" ], "first_seen": "2026-03-18 11:39:12 UTC", "last_seen": "2026-03-18 11:39:12 UTC", "sightings": 1 }, { "indicator": "https://github.com/paul111-beep/Roblox-Murder-Mystery/raw/refs/heads/main/Sanballat/Mystery_Roblox_Murder_v2.2-alpha.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 11:39:08 UTC", "last_seen": "2026-03-18 11:39:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/paul111-beep/Roblox-Murder-Mystery/refs/heads/main/Sanballat/Mystery_Roblox_Murder_v2.2-alpha.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 11:39:07 UTC", "last_seen": "2026-03-18 11:39:07 UTC", "sightings": 1 }, { "indicator": "https://drive.google.com/uc?export=download&id=1NayRbYneT5PFVrSCoJbr1-pmIRv08ky1", "indicator_type": "url", "source": "URLhaus", "tags": [ "encrypted", "Formbook", "GuLoader" ], "first_seen": "2026-03-18 11:38:09 UTC", "last_seen": "2026-03-18 11:38:09 UTC", "sightings": 1 }, { "indicator": "https://gateway.lighthouse.storage/ipfs/bafybeigl7leimjh6izjxqapmyjzuobigsz6l7y2lvfcyrnyw5nl254m6aq", "indicator_type": "url", "source": "URLhaus", "tags": [ "Formbook" ], "first_seen": "2026-03-18 11:38:08 UTC", "last_seen": "2026-03-18 11:38:08 UTC", "sightings": 1 }, { "indicator": "https://drive.google.com/uc?export=download&id=1my4Utq51Pb4qletOe1oX63ugWvUAAxrs", "indicator_type": "url", "source": "URLhaus", "tags": [ "ascii", "Encoded", "Formbook", "GuLoader" ], "first_seen": "2026-03-18 11:38:07 UTC", "last_seen": "2026-03-18 11:38:07 UTC", "sightings": 1 }, { "indicator": "http://117.206.105.18:48436/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 11:37:26 UTC", "last_seen": "2026-03-18 11:37:26 UTC", "sightings": 1 }, { "indicator": "http://117.206.105.18:48436/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 11:37:23 UTC", "last_seen": "2026-03-18 11:37:23 UTC", "sightings": 1 }, { "indicator": "http://117.208.240.80:37809/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-18 11:37:21 UTC", "last_seen": "2026-03-18 11:37:21 UTC", "sightings": 1 }, { "indicator": "http://96.245.232.96:54940/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 11:37:19 UTC", "last_seen": "2026-03-18 11:37:19 UTC", "sightings": 1 }, { "indicator": "http://42.231.190.199:35121/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 11:37:18 UTC", "last_seen": "2026-03-18 11:37:18 UTC", "sightings": 1 }, { "indicator": "http://108.168.10.70:55070/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 11:37:18 UTC", "last_seen": "2026-03-18 11:37:18 UTC", "sightings": 1 }, { "indicator": "http://123.12.240.59:37424/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-18 11:37:08 UTC", "last_seen": "2026-03-18 11:37:08 UTC", "sightings": 1 }, { "indicator": "https://gateway.lighthouse.storage/ipfs/bafybeiahu62lb53vvmvkppzxtjfftylicgzfz67immb5yf6pyqencjug7m", "indicator_type": "url", "source": "URLhaus", "tags": [ "Formbook" ], "first_seen": "2026-03-18 11:37:08 UTC", "last_seen": "2026-03-18 11:37:08 UTC", "sightings": 1 }, { "indicator": "http://110.36.93.182:48974/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-18 11:37:07 UTC", "last_seen": "2026-03-18 11:37:07 UTC", "sightings": 1 }, { "indicator": "https://gateway.lighthouse.storage/ipfs/bafybeifbptcev25ovccag6aiwvcnhfu6nqlgpsh6ojkoxqkhd7gltf3akq", "indicator_type": "url", "source": "URLhaus", "tags": [ "Formbook" ], "first_seen": "2026-03-18 11:37:07 UTC", "last_seen": "2026-03-18 11:37:07 UTC", "sightings": 1 }, { "indicator": "http://119.179.254.134:35958/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-18 11:37:07 UTC", "last_seen": "2026-03-18 11:37:07 UTC", "sightings": 1 }, { "indicator": "http://110.36.80.171:50821/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-18 11:37:06 UTC", "last_seen": "2026-03-18 11:37:06 UTC", "sightings": 1 }, { "indicator": "https://sub-dr1v.besthire.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 11:35:10 UTC", "last_seen": "2026-03-18 11:35:10 UTC", "sightings": 1 }, { "indicator": "https://github.com/Artistic-Minds9/Roblox-Death-Ball-Script/raw/refs/heads/main/vesiculose/Ball-Roblox-Script-Death-2.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 11:32:07 UTC", "last_seen": "2026-03-18 11:32:07 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Artistic-Minds9/Roblox-Death-Ball-Script/refs/heads/main/vesiculose/Ball-Roblox-Script-Death-2.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 11:32:06 UTC", "last_seen": "2026-03-18 11:32:06 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Marik201517/Roblox-Death-Ball-Script/refs/heads/main/perpera/Ball_Roblox_Script_Death_v3.4.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 11:31:05 UTC", "last_seen": "2026-03-18 11:31:05 UTC", "sightings": 1 }, { "indicator": "https://github.com/Marik201517/Roblox-Death-Ball-Script/raw/refs/heads/main/perpera/Ball_Roblox_Script_Death_v3.4.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 11:31:05 UTC", "last_seen": "2026-03-18 11:31:05 UTC", "sightings": 1 }, { "indicator": "https://orch3st-plate.gramsup.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 11:29:07 UTC", "last_seen": "2026-03-18 11:29:07 UTC", "sightings": 1 }, { "indicator": "https://github.com/Igmp24184/ROBLOX-MACRO-V3.0.0/raw/refs/heads/main/Language/ROBLO-MACR-v2.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 11:28:06 UTC", "last_seen": "2026-03-18 11:28:06 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Igmp24184/ROBLOX-MACRO-V3.0.0/refs/heads/main/Language/ROBLO-MACR-v2.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 11:28:05 UTC", "last_seen": "2026-03-18 11:28:05 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/unknown4522/GSC-Project/refs/heads/Backend/packages/Portable.BouncyCastle.1.9.0/Project-GS-v1.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 11:26:10 UTC", "last_seen": "2026-03-18 11:26:10 UTC", "sightings": 1 }, { "indicator": "https://github.com/unknown4522/GSC-Project/raw/refs/heads/Backend/packages/Portable.BouncyCastle.1.9.0/Project-GS-v1.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 11:26:09 UTC", "last_seen": "2026-03-18 11:26:09 UTC", "sightings": 1 }, { "indicator": "https://github.com/unknown4522/StudentCheckList/raw/refs/heads/API/Fileschecklist/bin/Debug/net8.0/zh-Hant/Check-Student-List-v3.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 11:26:09 UTC", "last_seen": "2026-03-18 11:26:09 UTC", "sightings": 1 }, { "indicator": "https://github.com/unknown4522/Example/raw/refs/heads/main/Fileschecklist/bin/Debug/net8.0/Software_2.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 11:26:09 UTC", "last_seen": "2026-03-18 11:26:09 UTC", "sightings": 1 }, { "indicator": "https://github.com/unknown4522/Version8Project/raw/refs/heads/Main/GSC-InventoryProject/obj/Release/Project-Version-v3.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 11:26:07 UTC", "last_seen": "2026-03-18 11:26:07 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/unknown4522/Version8Project/refs/heads/Main/GSC-InventoryProject/obj/Release/Project-Version-v3.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 11:26:07 UTC", "last_seen": "2026-03-18 11:26:07 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/unknown4522/StudentCheckList/refs/heads/API/Fileschecklist/bin/Debug/net8.0/zh-Hant/Check-Student-List-v3.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 11:26:07 UTC", "last_seen": "2026-03-18 11:26:07 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/unknown4522/Example/refs/heads/main/Fileschecklist/bin/Debug/net8.0/Software_2.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 11:26:07 UTC", "last_seen": "2026-03-18 11:26:07 UTC", "sightings": 1 }, { "indicator": "https://gent1-core.gramsup.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 11:25:08 UTC", "last_seen": "2026-03-18 11:25:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/unknown4522/roblox-executor/refs/heads/master/InventoryBackEnd/packages/K4os.Hash.xxHash.1.0.6/roblox-executor-kayles.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 11:23:06 UTC", "last_seen": "2026-03-18 11:23:06 UTC", "sightings": 1 }, { "indicator": "https://github.com/unknown4522/roblox-executor/raw/refs/heads/master/InventoryBackEnd/packages/K4os.Hash.xxHash.1.0.6/roblox-executor-kayles.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 11:23:06 UTC", "last_seen": "2026-03-18 11:23:06 UTC", "sightings": 1 }, { "indicator": "https://zub5gp24.skyhub.digital/?=check&&actmn=yjeCznBBWdEcmCQG", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-18 11:21:08 UTC", "last_seen": "2026-03-18 11:21:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/EDWINANGO/Synchronizer/raw/refs/heads/main/docs-site/Software_2.7-beta.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 11:21:06 UTC", "last_seen": "2026-03-18 11:21:06 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/EDWINANGO/Synchronizer/refs/heads/main/docs-site/Software_2.7-beta.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 11:21:06 UTC", "last_seen": "2026-03-18 11:21:06 UTC", "sightings": 1 }, { "indicator": "https://github.com/damartr23/FischROBLOX/raw/refs/heads/main/assure/Fisch-ROBLOX-3.4-alpha.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 11:20:09 UTC", "last_seen": "2026-03-18 11:20:09 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/naruto1233958/Roblox-Fisch-Script/refs/heads/main/mull/Script-Roblox-Fisch-v1.0-beta.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 11:20:08 UTC", "last_seen": "2026-03-18 11:20:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/naruto1233958/Roblox-Fisch-Script/raw/refs/heads/main/mull/Script-Roblox-Fisch-v1.0-beta.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 11:20:08 UTC", "last_seen": "2026-03-18 11:20:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/localdumbass2112/adoptmescript/raw/refs/heads/main/marshalman/Software-v3.9.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 11:20:08 UTC", "last_seen": "2026-03-18 11:20:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/cvcj503/permission_studio/refs/heads/main/permission_studio/config/studio-permission-2.9.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 11:20:08 UTC", "last_seen": "2026-03-18 11:20:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/cvcj503/permission_studio/raw/refs/heads/main/permission_studio/config/studio-permission-2.9.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 11:20:08 UTC", "last_seen": "2026-03-18 11:20:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/localdumbass2112/adoptmescript/refs/heads/main/marshalman/Software-v3.9.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 11:20:08 UTC", "last_seen": "2026-03-18 11:20:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/damartr23/FischROBLOX/refs/heads/main/assure/Fisch-ROBLOX-3.4-alpha.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 11:20:07 UTC", "last_seen": "2026-03-18 11:20:07 UTC", "sightings": 1 }, { "indicator": "https://islbay.gramsup.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 11:19:07 UTC", "last_seen": "2026-03-18 11:19:07 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/jazzman08/Adopt-Me-Script/refs/heads/main/cornification/Me_Adopt_Script_2.0.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 11:16:06 UTC", "last_seen": "2026-03-18 11:16:06 UTC", "sightings": 1 }, { "indicator": "https://github.com/jazzman08/Adopt-Me-Script/raw/refs/heads/main/cornification/Me_Adopt_Script_2.0.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 11:16:06 UTC", "last_seen": "2026-03-18 11:16:06 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/kamutahi27/bernabeu./refs/heads/main/Fruits%20Web/Software-v3.4.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 11:13:07 UTC", "last_seen": "2026-03-18 11:13:07 UTC", "sightings": 1 }, { "indicator": "https://github.com/kamutahi27/bernabeu./raw/refs/heads/main/Fruits%20Web/Software-v3.4.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 11:13:07 UTC", "last_seen": "2026-03-18 11:13:07 UTC", "sightings": 1 }, { "indicator": "https://roadspring.gramsup.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 11:13:06 UTC", "last_seen": "2026-03-18 11:13:06 UTC", "sightings": 1 }, { "indicator": "https://github.com/kamutahi27/The-Best-Roblox-KeyLess-Script-Executor/raw/refs/heads/main/shockingness/Key-Best-Script-Less-The-Roblox-Executor-v1.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 11:12:07 UTC", "last_seen": "2026-03-18 11:12:07 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/kamutahi27/The-Best-Roblox-KeyLess-Script-Executor/refs/heads/main/shockingness/Key-Best-Script-Less-The-Roblox-Executor-v1.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 11:12:06 UTC", "last_seen": "2026-03-18 11:12:06 UTC", "sightings": 1 }, { "indicator": "https://github.com/linapatel518/cv/raw/refs/heads/main/relayman/Software-v3.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 11:11:10 UTC", "last_seen": "2026-03-18 11:11:10 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/linapatel518/cv/refs/heads/main/relayman/Software-v3.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 11:11:08 UTC", "last_seen": "2026-03-18 11:11:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/linapatel518/DrumKit/refs/heads/main/images/Kit_Drum_v2.7.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 11:10:07 UTC", "last_seen": "2026-03-18 11:10:07 UTC", "sightings": 1 }, { "indicator": "https://github.com/linapatel518/DrumKit/raw/refs/heads/main/images/Kit_Drum_v2.7.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 11:10:07 UTC", "last_seen": "2026-03-18 11:10:07 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/linapatel518/rbxfpsunlocker/refs/heads/main/sheepwalker/Software_v2.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 11:09:05 UTC", "last_seen": "2026-03-18 11:09:05 UTC", "sightings": 1 }, { "indicator": "https://github.com/linapatel518/rbxfpsunlocker/raw/refs/heads/main/sheepwalker/Software_v2.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 11:09:05 UTC", "last_seen": "2026-03-18 11:09:05 UTC", "sightings": 1 }, { "indicator": "https://github.com/christiyan0/syyyynapse/raw/refs/heads/main/asniffle/Software-3.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 11:08:07 UTC", "last_seen": "2026-03-18 11:08:07 UTC", "sightings": 1 }, { "indicator": "https://dynvenos7.vouayger.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 11:08:06 UTC", "last_seen": "2026-03-18 11:08:06 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/christiyan0/syyyynapse/refs/heads/main/asniffle/Software-3.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 11:08:06 UTC", "last_seen": "2026-03-18 11:08:06 UTC", "sightings": 1 }, { "indicator": "https://github.com/FRAZE76/Open-Aimbot/raw/refs/heads/main/tremulant/Open-Aimbot-1.7.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 11:06:05 UTC", "last_seen": "2026-03-18 11:06:05 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/FRAZE76/Open-Aimbot/refs/heads/main/tremulant/Open-Aimbot-1.7.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 11:06:04 UTC", "last_seen": "2026-03-18 11:06:04 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/qouzk/now.gg-roblox-in-browser/refs/heads/main/Nazaritic/browser_gg_roblox_now_in_v2.4.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 11:05:07 UTC", "last_seen": "2026-03-18 11:05:07 UTC", "sightings": 1 }, { "indicator": "https://github.com/qouzk/now.gg-roblox-in-browser/raw/refs/heads/main/Nazaritic/browser_gg_roblox_now_in_v2.4.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 11:05:07 UTC", "last_seen": "2026-03-18 11:05:07 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/ishu-276/adoptmescript/refs/heads/main/archduchy/Software_v3.0.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 11:03:08 UTC", "last_seen": "2026-03-18 11:03:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/ishu-276/adoptmescript/raw/refs/heads/main/archduchy/Software_v3.0.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 11:03:08 UTC", "last_seen": "2026-03-18 11:03:08 UTC", "sightings": 1 }, { "indicator": "https://branchpubli.vouayger.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 11:02:06 UTC", "last_seen": "2026-03-18 11:02:06 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/oceanremodeling/FischROBLOX/refs/heads/main/trichroic/Fisch-ROBLOX-3.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 11:01:07 UTC", "last_seen": "2026-03-18 11:01:07 UTC", "sightings": 1 }, { "indicator": "https://github.com/oceanremodeling/FischROBLOX/raw/refs/heads/main/trichroic/Fisch-ROBLOX-3.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 11:01:06 UTC", "last_seen": "2026-03-18 11:01:06 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/ayuxxxxx/build-a-truck-roblox-toolkit/refs/heads/branch/Icelandic/a_truck_toolkit_build_roblox_v2.4.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 10:58:08 UTC", "last_seen": "2026-03-18 10:58:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/IBRAHIM832023/AdoptME-Script-Download/raw/refs/heads/main/palingenesy/Script_M_Adopt_Download_v1.6.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 10:58:08 UTC", "last_seen": "2026-03-18 10:58:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/ayuxxxxx/build-a-truck-roblox-toolkit/raw/refs/heads/branch/Icelandic/a_truck_toolkit_build_roblox_v2.4.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 10:58:07 UTC", "last_seen": "2026-03-18 10:58:07 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/IBRAHIM832023/AdoptME-Script-Download/refs/heads/main/palingenesy/Script_M_Adopt_Download_v1.6.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 10:58:06 UTC", "last_seen": "2026-03-18 10:58:06 UTC", "sightings": 1 }, { "indicator": "https://palesdk.vouayger.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 10:56:08 UTC", "last_seen": "2026-03-18 10:56:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/expect8iondev/towersim-hardcore-evolution/raw/refs/heads/branch/Capitolium/hardcore_towersim_evolution_2.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 10:56:06 UTC", "last_seen": "2026-03-18 10:56:06 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/expect8iondev/towersim-hardcore-evolution/refs/heads/branch/Capitolium/hardcore_towersim_evolution_2.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 10:56:06 UTC", "last_seen": "2026-03-18 10:56:06 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/MahmoudWagih1/ant-man-simulator-toolkit/refs/heads/branch/barrabkie/toolkit_simulator_ant_man_pursily.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 10:53:06 UTC", "last_seen": "2026-03-18 10:53:06 UTC", "sightings": 1 }, { "indicator": "https://github.com/MahmoudWagih1/ant-man-simulator-toolkit/raw/refs/heads/branch/barrabkie/toolkit_simulator_ant_man_pursily.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 10:53:06 UTC", "last_seen": "2026-03-18 10:53:06 UTC", "sightings": 1 }, { "indicator": "https://ty30.vouayger.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 10:51:09 UTC", "last_seen": "2026-03-18 10:51:09 UTC", "sightings": 1 }, { "indicator": "https://github.com/FomaNory/Adobe-Substance-3D-Painter/releases/download/Release/Loader.msi", "indicator_type": "url", "source": "URLhaus", "tags": [ "rustystealer" ], "first_seen": "2026-03-18 10:46:13 UTC", "last_seen": "2026-03-18 10:46:13 UTC", "sightings": 1 }, { "indicator": "http://88.88.147.173:4472/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 10:46:05 UTC", "last_seen": "2026-03-18 10:46:05 UTC", "sightings": 1 }, { "indicator": "http://222.133.102.241:41030/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-18 10:46:05 UTC", "last_seen": "2026-03-18 10:46:05 UTC", "sightings": 1 }, { "indicator": "http://117.208.240.80:37809/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-18 10:45:18 UTC", "last_seen": "2026-03-18 10:45:18 UTC", "sightings": 1 }, { "indicator": "http://108.168.10.70:55070/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 10:45:13 UTC", "last_seen": "2026-03-18 10:45:13 UTC", "sightings": 1 }, { "indicator": "http://117.247.222.222:43753/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-18 10:45:10 UTC", "last_seen": "2026-03-18 10:45:10 UTC", "sightings": 1 }, { "indicator": "https://grocery.brightnous.com/images/vxjirch/mqkrehf/vxbcdrz/gmchmkp.txt", "indicator_type": "url", "source": "URLhaus", "tags": [ "ascii", "Encoded", "PhantomStealer" ], "first_seen": "2026-03-18 10:45:10 UTC", "last_seen": "2026-03-18 10:45:10 UTC", "sightings": 1 }, { "indicator": "http://110.36.93.182:48974/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-18 10:45:08 UTC", "last_seen": "2026-03-18 10:45:08 UTC", "sightings": 1 }, { "indicator": "https://sunchernical.com/blessed/blessed/ENCRYPT.Ps1", "indicator_type": "url", "source": "URLhaus", "tags": [ "ascii", "PhantomStealer", "powershell", "ps1" ], "first_seen": "2026-03-18 10:45:08 UTC", "last_seen": "2026-03-18 10:45:08 UTC", "sightings": 1 }, { "indicator": "https://7uka.checkbro.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 10:45:08 UTC", "last_seen": "2026-03-18 10:45:08 UTC", "sightings": 1 }, { "indicator": "http://60.23.236.39:38081/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 10:44:20 UTC", "last_seen": "2026-03-18 10:44:20 UTC", "sightings": 1 }, { "indicator": "http://117.231.143.134:43700/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 10:43:22 UTC", "last_seen": "2026-03-18 10:43:22 UTC", "sightings": 1 }, { "indicator": "http://163.142.95.53:47005/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 10:43:08 UTC", "last_seen": "2026-03-18 10:43:08 UTC", "sightings": 1 }, { "indicator": "http://42.230.249.127:41174/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-18 10:43:06 UTC", "last_seen": "2026-03-18 10:43:06 UTC", "sightings": 1 }, { "indicator": "http://117.221.242.112:58541/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-18 10:42:09 UTC", "last_seen": "2026-03-18 10:42:09 UTC", "sightings": 1 }, { "indicator": "http://218.58.242.146:33210/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-18 10:42:05 UTC", "last_seen": "2026-03-18 10:42:05 UTC", "sightings": 1 }, { "indicator": "https://pablo.yzz.me/img_235619.png", "indicator_type": "url", "source": "URLhaus", "tags": [ "rat", "RemcosRAT" ], "first_seen": "2026-03-18 10:42:05 UTC", "last_seen": "2026-03-18 10:42:05 UTC", "sightings": 1 }, { "indicator": "https://zynova.yzz.me/MSI_115222.png", "indicator_type": "url", "source": "URLhaus", "tags": [ "rat", "RemcosRAT" ], "first_seen": "2026-03-18 10:41:11 UTC", "last_seen": "2026-03-18 10:41:11 UTC", "sightings": 1 }, { "indicator": "http://163.142.95.53:47005/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "cowrie", "honeypot" ], "first_seen": "2026-03-18 10:41:10 UTC", "last_seen": "2026-03-18 10:41:10 UTC", "sightings": 1 }, { "indicator": "http://124.134.78.199:43467/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-18 10:41:08 UTC", "last_seen": "2026-03-18 10:41:08 UTC", "sightings": 1 }, { "indicator": "http://103.102.25.50:56749/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-18 10:41:07 UTC", "last_seen": "2026-03-18 10:41:07 UTC", "sightings": 1 }, { "indicator": "http://110.37.35.235:49614/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 10:41:07 UTC", "last_seen": "2026-03-18 10:41:07 UTC", "sightings": 1 }, { "indicator": "https://pablo.yzz.me/img_002942.png", "indicator_type": "url", "source": "URLhaus", "tags": [ "rat", "RemcosRAT" ], "first_seen": "2026-03-18 10:41:07 UTC", "last_seen": "2026-03-18 10:41:07 UTC", "sightings": 1 }, { "indicator": "http://182.116.114.233:38645/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 10:40:19 UTC", "last_seen": "2026-03-18 10:40:19 UTC", "sightings": 1 }, { "indicator": "http://123.173.87.161:44084/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-18 10:40:19 UTC", "last_seen": "2026-03-18 10:40:19 UTC", "sightings": 1 }, { "indicator": "https://www.mediafire.com/file/sdk8lwyfsc3x0a3/img_235552.png/file", "indicator_type": "url", "source": "URLhaus", "tags": [ "rat", "RemcosRAT" ], "first_seen": "2026-03-18 10:40:11 UTC", "last_seen": "2026-03-18 10:40:11 UTC", "sightings": 1 }, { "indicator": "http://27.193.158.155:51549/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 10:40:08 UTC", "last_seen": "2026-03-18 10:40:08 UTC", "sightings": 1 }, { "indicator": "http://58.255.40.187:48844/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 10:40:08 UTC", "last_seen": "2026-03-18 10:40:08 UTC", "sightings": 1 }, { "indicator": "http://110.37.44.250:56052/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-18 10:40:08 UTC", "last_seen": "2026-03-18 10:40:08 UTC", "sightings": 1 }, { "indicator": "http://46.163.184.136:34454/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 10:40:07 UTC", "last_seen": "2026-03-18 10:40:07 UTC", "sightings": 1 }, { "indicator": "http://218.58.242.146:33210/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-18 10:39:10 UTC", "last_seen": "2026-03-18 10:39:10 UTC", "sightings": 1 }, { "indicator": "https://zen-fluxon.checkbro.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 10:39:06 UTC", "last_seen": "2026-03-18 10:39:06 UTC", "sightings": 1 }, { "indicator": "http://59.183.98.39:38874/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 10:38:29 UTC", "last_seen": "2026-03-18 10:38:29 UTC", "sightings": 1 }, { "indicator": "http://42.227.246.19:39917/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 10:38:09 UTC", "last_seen": "2026-03-18 10:38:09 UTC", "sightings": 1 }, { "indicator": "http://103.164.128.58:55841/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 10:38:06 UTC", "last_seen": "2026-03-18 10:38:06 UTC", "sightings": 1 }, { "indicator": "http://217.24.176.168:52147/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 10:38:05 UTC", "last_seen": "2026-03-18 10:38:05 UTC", "sightings": 1 }, { "indicator": "http://182.191.71.74:58627/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-18 10:36:14 UTC", "last_seen": "2026-03-18 10:36:14 UTC", "sightings": 1 }, { "indicator": "http://60.23.236.39:38081/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 10:36:10 UTC", "last_seen": "2026-03-18 10:36:10 UTC", "sightings": 1 }, { "indicator": "http://42.238.135.134:51740/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-18 10:36:07 UTC", "last_seen": "2026-03-18 10:36:07 UTC", "sightings": 1 }, { "indicator": "http://117.208.251.238:44422/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-18 10:36:07 UTC", "last_seen": "2026-03-18 10:36:07 UTC", "sightings": 1 }, { "indicator": "http://174.105.154.212:40964/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-18 10:36:06 UTC", "last_seen": "2026-03-18 10:36:06 UTC", "sightings": 1 }, { "indicator": "http://221.202.107.240:45133/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 10:35:19 UTC", "last_seen": "2026-03-18 10:35:19 UTC", "sightings": 1 }, { "indicator": "http://27.37.63.30:53783/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 10:35:08 UTC", "last_seen": "2026-03-18 10:35:08 UTC", "sightings": 1 }, { "indicator": "http://117.205.83.123:49203/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-18 10:35:08 UTC", "last_seen": "2026-03-18 10:35:08 UTC", "sightings": 1 }, { "indicator": "http://125.40.86.130:59998/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-18 10:35:08 UTC", "last_seen": "2026-03-18 10:35:08 UTC", "sightings": 1 }, { "indicator": "http://110.37.39.146:47649/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-18 10:35:07 UTC", "last_seen": "2026-03-18 10:35:07 UTC", "sightings": 1 }, { "indicator": "http://123.235.95.85:49600/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-18 10:33:20 UTC", "last_seen": "2026-03-18 10:33:20 UTC", "sightings": 1 }, { "indicator": "http://71.207.128.92:52063/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-18 10:33:14 UTC", "last_seen": "2026-03-18 10:33:14 UTC", "sightings": 1 }, { "indicator": "https://vorspire4a.checkbro.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 10:33:06 UTC", "last_seen": "2026-03-18 10:33:06 UTC", "sightings": 1 }, { "indicator": "http://123.130.151.28:36037/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "cowrie", "honeypot", "Mozi" ], "first_seen": "2026-03-18 10:33:06 UTC", "last_seen": "2026-03-18 10:33:06 UTC", "sightings": 1 }, { "indicator": "http://222.133.102.241:41030/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-18 10:32:07 UTC", "last_seen": "2026-03-18 10:32:07 UTC", "sightings": 1 }, { "indicator": "http://85.226.212.168:59318/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 10:32:06 UTC", "last_seen": "2026-03-18 10:32:06 UTC", "sightings": 1 }, { "indicator": "http://182.126.199.135:37933/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-18 10:32:06 UTC", "last_seen": "2026-03-18 10:32:06 UTC", "sightings": 1 }, { "indicator": "http://219.157.57.193:60557/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-18 10:32:06 UTC", "last_seen": "2026-03-18 10:32:06 UTC", "sightings": 1 }, { "indicator": "http://112.225.149.112:52365/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-18 10:32:06 UTC", "last_seen": "2026-03-18 10:32:06 UTC", "sightings": 1 }, { "indicator": "http://103.164.128.58:55841/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 10:31:08 UTC", "last_seen": "2026-03-18 10:31:08 UTC", "sightings": 1 }, { "indicator": "http://219.157.57.193:60557/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-18 10:31:06 UTC", "last_seen": "2026-03-18 10:31:06 UTC", "sightings": 1 }, { "indicator": "http://115.204.96.153:51574/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-18 10:30:14 UTC", "last_seen": "2026-03-18 10:30:14 UTC", "sightings": 1 }, { "indicator": "https://controliumbt.com/MSI_140830.png", "indicator_type": "url", "source": "URLhaus", "tags": [ "VIPKeylogger" ], "first_seen": "2026-03-18 10:30:11 UTC", "last_seen": "2026-03-18 10:30:11 UTC", "sightings": 1 }, { "indicator": "https://controliumbt.com/img_182028.png", "indicator_type": "url", "source": "URLhaus", "tags": [ "VIPKeylogger" ], "first_seen": "2026-03-18 10:30:11 UTC", "last_seen": "2026-03-18 10:30:11 UTC", "sightings": 1 }, { "indicator": "http://27.37.63.30:53783/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 10:30:08 UTC", "last_seen": "2026-03-18 10:30:08 UTC", "sightings": 1 }, { "indicator": "http://27.13.175.12:58633/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-18 10:30:08 UTC", "last_seen": "2026-03-18 10:30:08 UTC", "sightings": 1 }, { "indicator": "https://deejay-florin.ro/text/img_165821.png", "indicator_type": "url", "source": "URLhaus", "tags": [ "xworm" ], "first_seen": "2026-03-18 10:30:08 UTC", "last_seen": "2026-03-18 10:30:08 UTC", "sightings": 1 }, { "indicator": "https://drive.google.com/uc?export=download&id=1PyqsRKLXw1GypoJQ-TLpXOAGWM2390vb", "indicator_type": "url", "source": "URLhaus", "tags": [ "encrypted" ], "first_seen": "2026-03-18 10:29:08 UTC", "last_seen": "2026-03-18 10:29:08 UTC", "sightings": 1 }, { "indicator": "http://27.215.213.136:45337/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 10:29:08 UTC", "last_seen": "2026-03-18 10:29:08 UTC", "sightings": 1 }, { "indicator": "http://110.37.53.25:36297/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 10:29:07 UTC", "last_seen": "2026-03-18 10:29:07 UTC", "sightings": 1 }, { "indicator": "http://42.59.115.132:35783/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 10:29:07 UTC", "last_seen": "2026-03-18 10:29:07 UTC", "sightings": 1 }, { "indicator": "http://110.39.249.174:55516/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-18 10:29:07 UTC", "last_seen": "2026-03-18 10:29:07 UTC", "sightings": 1 }, { "indicator": "https://torrentink.checkbro.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 10:29:07 UTC", "last_seen": "2026-03-18 10:29:07 UTC", "sightings": 1 }, { "indicator": "http://117.205.83.123:49203/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "cowrie", "honeypot", "Mozi" ], "first_seen": "2026-03-18 10:29:07 UTC", "last_seen": "2026-03-18 10:29:07 UTC", "sightings": 1 }, { "indicator": "http://42.227.246.19:39917/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 10:28:13 UTC", "last_seen": "2026-03-18 10:28:13 UTC", "sightings": 1 }, { "indicator": "http://120.28.219.42:36486/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-18 10:28:07 UTC", "last_seen": "2026-03-18 10:28:07 UTC", "sightings": 1 }, { "indicator": "http://115.58.90.63:34653/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "cowrie", "honeypot", "Mozi" ], "first_seen": "2026-03-18 10:28:07 UTC", "last_seen": "2026-03-18 10:28:07 UTC", "sightings": 1 }, { "indicator": "http://110.37.91.29:46173/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 10:28:06 UTC", "last_seen": "2026-03-18 10:28:06 UTC", "sightings": 1 }, { "indicator": "http://175.148.133.109:45700/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 10:27:15 UTC", "last_seen": "2026-03-18 10:27:15 UTC", "sightings": 1 }, { "indicator": "http://42.59.115.239:60942/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 10:27:06 UTC", "last_seen": "2026-03-18 10:27:06 UTC", "sightings": 1 }, { "indicator": "http://110.37.107.203:39432/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-18 10:27:06 UTC", "last_seen": "2026-03-18 10:27:06 UTC", "sightings": 1 }, { "indicator": "http://120.28.169.104:47584/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-18 10:27:06 UTC", "last_seen": "2026-03-18 10:27:06 UTC", "sightings": 1 }, { "indicator": "http://103.102.25.50:56749/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-18 10:27:06 UTC", "last_seen": "2026-03-18 10:27:06 UTC", "sightings": 1 }, { "indicator": "http://123.235.95.85:49600/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-18 10:26:09 UTC", "last_seen": "2026-03-18 10:26:09 UTC", "sightings": 1 }, { "indicator": "http://42.59.115.239:60942/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 10:26:08 UTC", "last_seen": "2026-03-18 10:26:08 UTC", "sightings": 1 }, { "indicator": "http://91.92.242.3/noesisllc.online/fisherzxcc/fisherxx/tgckftbiqazqkklwtwtu7vhhnh6foxc.js", "indicator_type": "url", "source": "URLhaus", "tags": [ "Formbook", "js" ], "first_seen": "2026-03-18 10:26:06 UTC", "last_seen": "2026-03-18 10:26:06 UTC", "sightings": 1 }, { "indicator": "http://115.201.126.143:34526/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-18 10:25:20 UTC", "last_seen": "2026-03-18 10:25:20 UTC", "sightings": 1 }, { "indicator": "http://110.37.24.11:49499/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 10:25:14 UTC", "last_seen": "2026-03-18 10:25:14 UTC", "sightings": 1 }, { "indicator": "http://120.28.169.104:47584/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-18 10:25:10 UTC", "last_seen": "2026-03-18 10:25:10 UTC", "sightings": 1 }, { "indicator": "http://110.37.1.254:52186/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-18 10:25:09 UTC", "last_seen": "2026-03-18 10:25:09 UTC", "sightings": 1 }, { "indicator": "http://120.28.218.245:56721/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-18 10:24:17 UTC", "last_seen": "2026-03-18 10:24:17 UTC", "sightings": 1 }, { "indicator": "http://27.23.67.144:38193/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-18 10:24:09 UTC", "last_seen": "2026-03-18 10:24:09 UTC", "sightings": 1 }, { "indicator": "http://110.37.35.235:49614/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 10:24:08 UTC", "last_seen": "2026-03-18 10:24:08 UTC", "sightings": 1 }, { "indicator": "http://120.28.218.245:56721/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-18 10:24:08 UTC", "last_seen": "2026-03-18 10:24:08 UTC", "sightings": 1 }, { "indicator": "http://45.153.34.209:5000/storage/70dabe6c68034149.enc", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 10:24:07 UTC", "last_seen": "2026-03-18 10:24:07 UTC", "sightings": 1 }, { "indicator": "http://182.116.114.233:38645/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 10:23:17 UTC", "last_seen": "2026-03-18 10:23:17 UTC", "sightings": 1 }, { "indicator": "http://175.148.133.109:45700/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 10:23:17 UTC", "last_seen": "2026-03-18 10:23:17 UTC", "sightings": 1 }, { "indicator": "http://110.37.39.146:47649/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-18 10:23:08 UTC", "last_seen": "2026-03-18 10:23:08 UTC", "sightings": 1 }, { "indicator": "https://innerbund.woodflo.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 10:23:08 UTC", "last_seen": "2026-03-18 10:23:08 UTC", "sightings": 1 }, { "indicator": "http://39.187.66.101:50984/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-18 10:23:08 UTC", "last_seen": "2026-03-18 10:23:08 UTC", "sightings": 1 }, { "indicator": "http://27.215.213.136:45337/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 10:23:08 UTC", "last_seen": "2026-03-18 10:23:08 UTC", "sightings": 1 }, { "indicator": "http://182.126.199.135:37933/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-18 10:23:08 UTC", "last_seen": "2026-03-18 10:23:08 UTC", "sightings": 1 }, { "indicator": "https://expltsq.zzux.com/downloads/e896520a.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "exe", "opendir" ], "first_seen": "2026-03-18 10:23:08 UTC", "last_seen": "2026-03-18 10:23:08 UTC", "sightings": 1 }, { "indicator": "http://198.12.83.68/177/dec/becarewitheveryonebestwaysforme.hta", "indicator_type": "url", "source": "URLhaus", "tags": [ "hta" ], "first_seen": "2026-03-18 10:23:06 UTC", "last_seen": "2026-03-18 10:23:06 UTC", "sightings": 1 }, { "indicator": "http://112.225.149.112:52365/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-18 10:22:26 UTC", "last_seen": "2026-03-18 10:22:26 UTC", "sightings": 1 }, { "indicator": "http://117.208.251.238:44422/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-18 10:22:19 UTC", "last_seen": "2026-03-18 10:22:19 UTC", "sightings": 1 }, { "indicator": "http://175.167.187.230:53561/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 10:22:08 UTC", "last_seen": "2026-03-18 10:22:08 UTC", "sightings": 1 }, { "indicator": "http://115.54.154.222:50789/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-18 10:22:07 UTC", "last_seen": "2026-03-18 10:22:07 UTC", "sightings": 1 }, { "indicator": "http://110.36.20.111:38850/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-18 10:22:07 UTC", "last_seen": "2026-03-18 10:22:07 UTC", "sightings": 1 }, { "indicator": "http://42.59.115.132:35783/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 10:21:20 UTC", "last_seen": "2026-03-18 10:21:20 UTC", "sightings": 1 }, { "indicator": "http://123.173.87.161:44084/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-18 10:21:15 UTC", "last_seen": "2026-03-18 10:21:15 UTC", "sightings": 1 }, { "indicator": "http://124.134.78.199:43467/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-18 10:21:10 UTC", "last_seen": "2026-03-18 10:21:10 UTC", "sightings": 1 }, { "indicator": "http://115.201.126.143:34526/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-18 10:19:15 UTC", "last_seen": "2026-03-18 10:19:15 UTC", "sightings": 1 }, { "indicator": "https://grocery.brightnous.com/images/vxjirch/mqkrehf/vxbcdrz/ddcgagd.txt", "indicator_type": "url", "source": "URLhaus", "tags": [ "ascii", "Encoded", "PhantomStealer" ], "first_seen": "2026-03-18 10:19:11 UTC", "last_seen": "2026-03-18 10:19:11 UTC", "sightings": 1 }, { "indicator": "http://107.173.143.35/122/goodthingsbestforme.vbs", "indicator_type": "url", "source": "URLhaus", "tags": [ "ascii", "RemcosRAT", "vbs" ], "first_seen": "2026-03-18 10:19:09 UTC", "last_seen": "2026-03-18 10:19:09 UTC", "sightings": 1 }, { "indicator": "http://182.240.3.9:43335/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-18 10:19:08 UTC", "last_seen": "2026-03-18 10:19:08 UTC", "sightings": 1 }, { "indicator": "https://pastefy.app/RoBl0TEe/raw", "indicator_type": "url", "source": "URLhaus", "tags": [ "ascii", "Encoded", "PhantomStealer" ], "first_seen": "2026-03-18 10:19:08 UTC", "last_seen": "2026-03-18 10:19:08 UTC", "sightings": 1 }, { "indicator": "http://175.165.72.73:49811/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 10:19:07 UTC", "last_seen": "2026-03-18 10:19:07 UTC", "sightings": 1 }, { "indicator": "http://58.255.46.66:52268/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 10:19:07 UTC", "last_seen": "2026-03-18 10:19:07 UTC", "sightings": 1 }, { "indicator": "http://110.37.44.250:56052/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-18 10:19:07 UTC", "last_seen": "2026-03-18 10:19:07 UTC", "sightings": 1 }, { "indicator": "http://110.37.27.164:50494/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-18 10:19:07 UTC", "last_seen": "2026-03-18 10:19:07 UTC", "sightings": 1 }, { "indicator": "http://107.173.143.35/122/wecc/createdbestthinsgsforme.hta", "indicator_type": "url", "source": "URLhaus", "tags": [ "hta", "RemcosRAT" ], "first_seen": "2026-03-18 10:19:07 UTC", "last_seen": "2026-03-18 10:19:07 UTC", "sightings": 1 }, { "indicator": "https://grocery.brightnous.com/images/vxjirch/mqkrehf/vxbcdrz/rhaadpf.txt", "indicator_type": "url", "source": "URLhaus", "tags": [ "ascii", "PhantomStealer" ], "first_seen": "2026-03-18 10:18:10 UTC", "last_seen": "2026-03-18 10:18:10 UTC", "sightings": 1 }, { "indicator": "https://pastefy.app/3ocDEoXR/raw", "indicator_type": "url", "source": "URLhaus", "tags": [ "ascii", "PhantomStealer" ], "first_seen": "2026-03-18 10:18:06 UTC", "last_seen": "2026-03-18 10:18:06 UTC", "sightings": 1 }, { "indicator": "http://117.209.18.125:58189/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 10:17:17 UTC", "last_seen": "2026-03-18 10:17:17 UTC", "sightings": 1 }, { "indicator": "http://110.37.27.164:50494/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-18 10:17:07 UTC", "last_seen": "2026-03-18 10:17:07 UTC", "sightings": 1 }, { "indicator": "http://175.149.146.87:47304/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 10:17:07 UTC", "last_seen": "2026-03-18 10:17:07 UTC", "sightings": 1 }, { "indicator": "https://oxtn0z.woodflo.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 10:17:07 UTC", "last_seen": "2026-03-18 10:17:07 UTC", "sightings": 1 }, { "indicator": "http://120.84.215.13:48403/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 10:17:07 UTC", "last_seen": "2026-03-18 10:17:07 UTC", "sightings": 1 }, { "indicator": "https://estudarebomai.com/optimized_MSI.png", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 10:16:08 UTC", "last_seen": "2026-03-18 10:16:08 UTC", "sightings": 1 }, { "indicator": "https://estudarebomai.com/img_080544.png", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 10:16:08 UTC", "last_seen": "2026-03-18 10:16:08 UTC", "sightings": 1 }, { "indicator": "https://estudarebomai.com/img_131301.png", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 10:16:08 UTC", "last_seen": "2026-03-18 10:16:08 UTC", "sightings": 1 }, { "indicator": "http://27.13.175.12:58633/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-18 10:16:07 UTC", "last_seen": "2026-03-18 10:16:07 UTC", "sightings": 1 }, { "indicator": "http://123.130.151.28:36037/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "cowrie", "honeypot", "Mozi" ], "first_seen": "2026-03-18 10:16:07 UTC", "last_seen": "2026-03-18 10:16:07 UTC", "sightings": 1 }, { "indicator": "http://115.48.47.68:55835/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-18 10:16:06 UTC", "last_seen": "2026-03-18 10:16:06 UTC", "sightings": 1 }, { "indicator": "http://71.207.128.92:52063/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-18 10:15:17 UTC", "last_seen": "2026-03-18 10:15:17 UTC", "sightings": 1 }, { "indicator": "https://estudarebomai.com/bkp", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 10:15:12 UTC", "last_seen": "2026-03-18 10:15:12 UTC", "sightings": 1 }, { "indicator": "https://estudarebomai.com/MSI_150534.png", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 10:15:12 UTC", "last_seen": "2026-03-18 10:15:12 UTC", "sightings": 1 }, { "indicator": "https://estudarebomai.com/MSI_110551.png", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 10:15:12 UTC", "last_seen": "2026-03-18 10:15:12 UTC", "sightings": 1 }, { "indicator": "https://estudarebomai.com/img_083249.png", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 10:15:12 UTC", "last_seen": "2026-03-18 10:15:12 UTC", "sightings": 1 }, { "indicator": "https://estudarebomai.com/hosope.txt", "indicator_type": "url", "source": "URLhaus", "tags": [ "base64-loader" ], "first_seen": "2026-03-18 10:15:11 UTC", "last_seen": "2026-03-18 10:15:11 UTC", "sightings": 1 }, { "indicator": "https://estudarebomai.com/img_081931.png", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 10:15:10 UTC", "last_seen": "2026-03-18 10:15:10 UTC", "sightings": 1 }, { "indicator": "https://estudarebomai.com/arquivo_20260227080548.txt", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 10:15:07 UTC", "last_seen": "2026-03-18 10:15:07 UTC", "sightings": 1 }, { "indicator": "https://estudarebomai.com/arquivo_20260220065212.txt", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 10:15:07 UTC", "last_seen": "2026-03-18 10:15:07 UTC", "sightings": 1 }, { "indicator": "https://estudarebomai.com/arquivo_20260213063035.txt", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 10:15:07 UTC", "last_seen": "2026-03-18 10:15:07 UTC", "sightings": 1 }, { "indicator": "https://estudarebomai.com/arquivo_20260211063109.txt", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 10:15:07 UTC", "last_seen": "2026-03-18 10:15:07 UTC", "sightings": 1 }, { "indicator": "https://estudarebomai.com/arquivo_20260206132344.txt", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 10:15:07 UTC", "last_seen": "2026-03-18 10:15:07 UTC", "sightings": 1 }, { "indicator": "https://estudarebomai.com/arquivo_20260210135537.txt", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 10:15:07 UTC", "last_seen": "2026-03-18 10:15:07 UTC", "sightings": 1 }, { "indicator": "https://estudarebomai.com/arquivo_20260211063109.txt/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 10:15:07 UTC", "last_seen": "2026-03-18 10:15:07 UTC", "sightings": 1 }, { "indicator": "https://atomi5-watch.woodflo.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 10:12:08 UTC", "last_seen": "2026-03-18 10:12:08 UTC", "sightings": 1 }, { "indicator": "http://108.170.136.155:39606/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 10:12:05 UTC", "last_seen": "2026-03-18 10:12:05 UTC", "sightings": 1 }, { "indicator": "https://lumlithis8.woodflo.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 10:06:08 UTC", "last_seen": "2026-03-18 10:06:08 UTC", "sightings": 1 }, { "indicator": "http://110.37.53.25:36297/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 10:03:06 UTC", "last_seen": "2026-03-18 10:03:06 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/clydet1/otp/refs/heads/main/101/56.txt", "indicator_type": "url", "source": "URLhaus", "tags": [ "lua", "SmartLoader" ], "first_seen": "2026-03-18 10:01:10 UTC", "last_seen": "2026-03-18 10:01:10 UTC", "sightings": 1 }, { "indicator": "https://github.com/clydet1/otp/raw/refs/heads/main/101/56.txt", "indicator_type": "url", "source": "URLhaus", "tags": [ "lua", "SmartLoader" ], "first_seen": "2026-03-18 10:01:08 UTC", "last_seen": "2026-03-18 10:01:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/clydet1/otp/refs/heads/main/101/355.txt", "indicator_type": "url", "source": "URLhaus", "tags": [ "lua", "SmartLoader" ], "first_seen": "2026-03-18 10:01:06 UTC", "last_seen": "2026-03-18 10:01:06 UTC", "sightings": 1 }, { "indicator": "http://39.187.66.101:50984/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-18 10:00:22 UTC", "last_seen": "2026-03-18 10:00:22 UTC", "sightings": 1 }, { "indicator": "https://github.com/clydet1/otp/raw/refs/heads/main/101/355.txt", "indicator_type": "url", "source": "URLhaus", "tags": [ "lua", "SmartLoader" ], "first_seen": "2026-03-18 10:00:11 UTC", "last_seen": "2026-03-18 10:00:11 UTC", "sightings": 1 }, { "indicator": "https://biropt.goodwork.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 10:00:09 UTC", "last_seen": "2026-03-18 10:00:09 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Amuthan1808/VALORANT-EFI-DRIVVER-Cheat-Hack/refs/heads/main/Hyprism/VALORAN_DRIVVE_Hack_Cheat_EF_nephrosclerosis.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 09:57:05 UTC", "last_seen": "2026-03-18 09:57:05 UTC", "sightings": 1 }, { "indicator": "https://github.com/Amuthan1808/VALORANT-EFI-DRIVVER-Cheat-Hack/raw/refs/heads/main/Hyprism/VALORAN_DRIVVE_Hack_Cheat_EF_nephrosclerosis.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 09:56:08 UTC", "last_seen": "2026-03-18 09:56:08 UTC", "sightings": 1 }, { "indicator": "https://tal-nexos.goodwork.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 09:54:06 UTC", "last_seen": "2026-03-18 09:54:06 UTC", "sightings": 1 }, { "indicator": "http://187.204.201.242/1.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "meterpreter", "opendir", "ua-wget" ], "first_seen": "2026-03-18 09:53:07 UTC", "last_seen": "2026-03-18 09:53:07 UTC", "sightings": 1 }, { "indicator": "https://github.com/clifford-ui/Roblox-Executor-Injector-2025/raw/refs/heads/main/Birkeniidae/Executor_Injector_Roblox_2.7-beta.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 09:53:06 UTC", "last_seen": "2026-03-18 09:53:06 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/clifford-ui/Roblox-Executor-Injector-2025/refs/heads/main/Birkeniidae/Executor_Injector_Roblox_2.7-beta.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 09:53:06 UTC", "last_seen": "2026-03-18 09:53:06 UTC", "sightings": 1 }, { "indicator": "https://github.com/Cyclopsoudome/FiveM-Last-Version/releases/download/new/FiveM-7.5.3.rar", "indicator_type": "url", "source": "URLhaus", "tags": [ "pw-9959", "rar" ], "first_seen": "2026-03-18 09:51:19 UTC", "last_seen": "2026-03-18 09:51:19 UTC", "sightings": 1 }, { "indicator": "http://120.28.219.42:36486/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-18 09:50:07 UTC", "last_seen": "2026-03-18 09:50:07 UTC", "sightings": 1 }, { "indicator": "https://craf-freig.goodwork.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 09:49:06 UTC", "last_seen": "2026-03-18 09:49:06 UTC", "sightings": 1 }, { "indicator": "http://172.245.95.24/inverstorrneeepng.png", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 09:48:07 UTC", "last_seen": "2026-03-18 09:48:07 UTC", "sightings": 1 }, { "indicator": "http://172.245.95.24/goQLgCBoJwwcbEHEhs170.bin", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 09:48:05 UTC", "last_seen": "2026-03-18 09:48:05 UTC", "sightings": 1 }, { "indicator": "http://172.245.95.24/jPGOuDuDXsVEytvI5.bin", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 09:48:05 UTC", "last_seen": "2026-03-18 09:48:05 UTC", "sightings": 1 }, { "indicator": "http://172.245.95.24/lyakbCzRnSRlXpgOrqTzIib11.bin", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 09:48:05 UTC", "last_seen": "2026-03-18 09:48:05 UTC", "sightings": 1 }, { "indicator": "http://172.245.95.24/NMhgWaltc163.bin", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 09:48:05 UTC", "last_seen": "2026-03-18 09:48:05 UTC", "sightings": 1 }, { "indicator": "http://172.245.95.24/FOcojGeLvuzChZLiE31.bin", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 09:48:05 UTC", "last_seen": "2026-03-18 09:48:05 UTC", "sightings": 1 }, { "indicator": "http://172.245.95.24/lowWKYgPAFmFVm168.bin", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 09:48:05 UTC", "last_seen": "2026-03-18 09:48:05 UTC", "sightings": 1 }, { "indicator": "http://teslasuit.to/optimized_MSI.png", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 09:47:08 UTC", "last_seen": "2026-03-18 09:47:08 UTC", "sightings": 1 }, { "indicator": "http://110.37.107.203:39432/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-18 09:47:07 UTC", "last_seen": "2026-03-18 09:47:07 UTC", "sightings": 1 }, { "indicator": "http://teslasuit.to/img_232730yunobt.png", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 09:47:07 UTC", "last_seen": "2026-03-18 09:47:07 UTC", "sightings": 1 }, { "indicator": "http://222.127.63.144:59050/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-18 09:45:09 UTC", "last_seen": "2026-03-18 09:45:09 UTC", "sightings": 1 }, { "indicator": "https://mist-logic.goodwork.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 09:43:08 UTC", "last_seen": "2026-03-18 09:43:08 UTC", "sightings": 1 }, { "indicator": "https://carrypublish.besthire.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 09:37:07 UTC", "last_seen": "2026-03-18 09:37:07 UTC", "sightings": 1 }, { "indicator": "https://norcrest7is.besthire.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 09:33:07 UTC", "last_seen": "2026-03-18 09:33:07 UTC", "sightings": 1 }, { "indicator": "http://58.255.40.187:48844/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 09:31:21 UTC", "last_seen": "2026-03-18 09:31:21 UTC", "sightings": 1 }, { "indicator": "https://adapterprime.besthire.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 09:27:10 UTC", "last_seen": "2026-03-18 09:27:10 UTC", "sightings": 1 }, { "indicator": "https://javascriptupdate.com/backup-update-system32", "indicator_type": "url", "source": "URLhaus", "tags": [ "CaminhoLoader", "geofenced", "prt", "ua-ps" ], "first_seen": "2026-03-18 09:25:24 UTC", "last_seen": "2026-03-18 09:25:24 UTC", "sightings": 1 }, { "indicator": "https://res.cloudinary.com/dlppmjxm5/image/upload/v1773516860/schedulsjjao_tchqtm.jpg", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 09:24:07 UTC", "last_seen": "2026-03-18 09:24:07 UTC", "sightings": 1 }, { "indicator": "https://lumcrestor.besthire.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 09:21:08 UTC", "last_seen": "2026-03-18 09:21:08 UTC", "sightings": 1 }, { "indicator": "http://122.190.162.101:60054/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-18 09:21:08 UTC", "last_seen": "2026-03-18 09:21:08 UTC", "sightings": 1 }, { "indicator": "http://58.255.44.24:43364/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 09:18:21 UTC", "last_seen": "2026-03-18 09:18:21 UTC", "sightings": 1 }, { "indicator": "https://ds-grok.bokshire.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 09:16:08 UTC", "last_seen": "2026-03-18 09:16:08 UTC", "sightings": 1 }, { "indicator": "http://110.37.65.64:47414/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 09:14:06 UTC", "last_seen": "2026-03-18 09:14:06 UTC", "sightings": 1 }, { "indicator": "http://115.50.225.45:45772/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-18 09:12:06 UTC", "last_seen": "2026-03-18 09:12:06 UTC", "sightings": 1 }, { "indicator": "https://fast7.bokshire.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 09:11:09 UTC", "last_seen": "2026-03-18 09:11:09 UTC", "sightings": 1 }, { "indicator": "http://175.165.72.73:49811/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 09:09:10 UTC", "last_seen": "2026-03-18 09:09:10 UTC", "sightings": 1 }, { "indicator": "http://117.209.18.125:58189/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 09:08:14 UTC", "last_seen": "2026-03-18 09:08:14 UTC", "sightings": 1 }, { "indicator": "http://115.63.52.99:59115/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 09:08:08 UTC", "last_seen": "2026-03-18 09:08:08 UTC", "sightings": 1 }, { "indicator": "http://95.72.141.230:53427/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 09:05:09 UTC", "last_seen": "2026-03-18 09:05:09 UTC", "sightings": 1 }, { "indicator": "https://geamervial.slashbak.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 09:04:07 UTC", "last_seen": "2026-03-18 09:04:07 UTC", "sightings": 1 }, { "indicator": "http://110.37.65.64:47414/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 09:04:06 UTC", "last_seen": "2026-03-18 09:04:06 UTC", "sightings": 1 }, { "indicator": "http://62.60.226.40/public_files/EOKuVkb.txt", "indicator_type": "url", "source": "URLhaus", "tags": [ "rev-base64-loader" ], "first_seen": "2026-03-18 09:03:07 UTC", "last_seen": "2026-03-18 09:03:07 UTC", "sightings": 1 }, { "indicator": "http://62.60.226.40/public_files/kEOrI9t.txt", "indicator_type": "url", "source": "URLhaus", "tags": [ "rev-base64-loader" ], "first_seen": "2026-03-18 09:03:07 UTC", "last_seen": "2026-03-18 09:03:07 UTC", "sightings": 1 }, { "indicator": "http://62.60.226.40/public_files/160066.jpg", "indicator_type": "url", "source": "URLhaus", "tags": [ "jpg-base64-loader" ], "first_seen": "2026-03-18 09:03:06 UTC", "last_seen": "2026-03-18 09:03:06 UTC", "sightings": 1 }, { "indicator": "http://62.60.226.40/public_files/FyFv2Nn.txt", "indicator_type": "url", "source": "URLhaus", "tags": [ "rev-base64-loader" ], "first_seen": "2026-03-18 09:03:06 UTC", "last_seen": "2026-03-18 09:03:06 UTC", "sightings": 1 }, { "indicator": "http://62.60.226.40/public_files/160065.jpg", "indicator_type": "url", "source": "URLhaus", "tags": [ "jpg-base64-loader" ], "first_seen": "2026-03-18 09:03:05 UTC", "last_seen": "2026-03-18 09:03:05 UTC", "sightings": 1 }, { "indicator": "https://sentinsp.natneth.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 08:59:06 UTC", "last_seen": "2026-03-18 08:59:06 UTC", "sightings": 1 }, { "indicator": "https://microneur.bokshire.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 08:54:06 UTC", "last_seen": "2026-03-18 08:54:06 UTC", "sightings": 1 }, { "indicator": "http://115.53.44.74:40791/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 08:50:25 UTC", "last_seen": "2026-03-18 08:50:25 UTC", "sightings": 1 }, { "indicator": "http://182.127.128.122:48844/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-18 08:50:09 UTC", "last_seen": "2026-03-18 08:50:09 UTC", "sightings": 1 }, { "indicator": "http://42.56.167.222:49208/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 08:50:07 UTC", "last_seen": "2026-03-18 08:50:07 UTC", "sightings": 1 }, { "indicator": "http://182.112.239.5:54039/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-18 08:50:07 UTC", "last_seen": "2026-03-18 08:50:07 UTC", "sightings": 1 }, { "indicator": "https://github.com/moyousry95/slash2/raw/refs/heads/main/Security.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "AsyncRAT", "exe" ], "first_seen": "2026-03-18 08:45:09 UTC", "last_seen": "2026-03-18 08:45:09 UTC", "sightings": 1 }, { "indicator": "https://github.com/moyousry95/slash/raw/refs/heads/main/Graphics.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "AsyncRAT", "exe" ], "first_seen": "2026-03-18 08:45:08 UTC", "last_seen": "2026-03-18 08:45:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/moyousry95/slash2/raw/refs/heads/main/Security.ico", "indicator_type": "url", "source": "URLhaus", "tags": [ "ascii", "bat" ], "first_seen": "2026-03-18 08:44:10 UTC", "last_seen": "2026-03-18 08:44:10 UTC", "sightings": 1 }, { "indicator": "https://neuronbundle.bokshire.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 08:44:05 UTC", "last_seen": "2026-03-18 08:44:05 UTC", "sightings": 1 }, { "indicator": "https://megoo.duckdns.org/Graphics.exe", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 08:42:09 UTC", "last_seen": "2026-03-18 08:42:09 UTC", "sightings": 1 }, { "indicator": "http://156.233.71.230/EN/2.py", "indicator_type": "url", "source": "URLhaus", "tags": [ "opendir" ], "first_seen": "2026-03-18 08:42:08 UTC", "last_seen": "2026-03-18 08:42:08 UTC", "sightings": 1 }, { "indicator": "http://156.233.71.230/EN/1.bat", "indicator_type": "url", "source": "URLhaus", "tags": [ "opendir" ], "first_seen": "2026-03-18 08:42:06 UTC", "last_seen": "2026-03-18 08:42:06 UTC", "sightings": 1 }, { "indicator": "http://156.233.71.230/EN/1.py", "indicator_type": "url", "source": "URLhaus", "tags": [ "opendir" ], "first_seen": "2026-03-18 08:42:05 UTC", "last_seen": "2026-03-18 08:42:05 UTC", "sightings": 1 }, { "indicator": "http://156.233.71.230/EN/Exe/0Yx1zc/mego.ico", "indicator_type": "url", "source": "URLhaus", "tags": [ "opendir" ], "first_seen": "2026-03-18 08:42:05 UTC", "last_seen": "2026-03-18 08:42:05 UTC", "sightings": 1 }, { "indicator": "http://156.233.71.230/EN/Exe/ul0Its/rufus-4.11.ico", "indicator_type": "url", "source": "URLhaus", "tags": [ "opendir" ], "first_seen": "2026-03-18 08:42:04 UTC", "last_seen": "2026-03-18 08:42:04 UTC", "sightings": 1 }, { "indicator": "http://156.233.71.230/EN/Exe/gfnYmD/hydra.ico", "indicator_type": "url", "source": "URLhaus", "tags": [ "opendir" ], "first_seen": "2026-03-18 08:42:04 UTC", "last_seen": "2026-03-18 08:42:04 UTC", "sightings": 1 }, { "indicator": "https://5andb0x-gate.bokshire.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 08:39:07 UTC", "last_seen": "2026-03-18 08:39:07 UTC", "sightings": 1 }, { "indicator": "http://110.37.78.200:43101/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-18 08:39:05 UTC", "last_seen": "2026-03-18 08:39:05 UTC", "sightings": 1 }, { "indicator": "http://173.54.186.2:43168/.i", "indicator_type": "url", "source": "URLhaus", "tags": [ "hajime" ], "first_seen": "2026-03-18 08:38:20 UTC", "last_seen": "2026-03-18 08:38:20 UTC", "sightings": 1 }, { "indicator": "http://182.127.100.251:34950/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-18 08:38:07 UTC", "last_seen": "2026-03-18 08:38:07 UTC", "sightings": 1 }, { "indicator": "http://120.28.215.129:52567/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-18 08:36:13 UTC", "last_seen": "2026-03-18 08:36:13 UTC", "sightings": 1 }, { "indicator": "http://59.58.42.199:50260/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-18 08:34:26 UTC", "last_seen": "2026-03-18 08:34:26 UTC", "sightings": 1 }, { "indicator": "http://222.142.249.29:36429/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 08:33:18 UTC", "last_seen": "2026-03-18 08:33:18 UTC", "sightings": 1 }, { "indicator": "https://ynpxhbz.bokshire.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 08:32:06 UTC", "last_seen": "2026-03-18 08:32:06 UTC", "sightings": 1 }, { "indicator": "http://117.131.92.150:39369/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-18 08:31:21 UTC", "last_seen": "2026-03-18 08:31:21 UTC", "sightings": 1 }, { "indicator": "http://115.63.52.99:59115/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 08:30:27 UTC", "last_seen": "2026-03-18 08:30:27 UTC", "sightings": 1 }, { "indicator": "http://117.131.92.150:39369/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-18 08:30:23 UTC", "last_seen": "2026-03-18 08:30:23 UTC", "sightings": 1 }, { "indicator": "http://117.209.86.174:39211/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 08:30:22 UTC", "last_seen": "2026-03-18 08:30:22 UTC", "sightings": 1 }, { "indicator": "http://175.9.132.163:39420/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-18 08:30:22 UTC", "last_seen": "2026-03-18 08:30:22 UTC", "sightings": 1 }, { "indicator": "http://117.209.86.174:39211/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 08:29:32 UTC", "last_seen": "2026-03-18 08:29:32 UTC", "sightings": 1 }, { "indicator": "http://123.132.164.209:41464/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 08:29:23 UTC", "last_seen": "2026-03-18 08:29:23 UTC", "sightings": 1 }, { "indicator": "http://175.9.132.163:39420/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-18 08:29:22 UTC", "last_seen": "2026-03-18 08:29:22 UTC", "sightings": 1 }, { "indicator": "http://115.53.44.74:40791/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 08:28:27 UTC", "last_seen": "2026-03-18 08:28:27 UTC", "sightings": 1 }, { "indicator": "http://27.153.152.89:56557/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-18 08:27:27 UTC", "last_seen": "2026-03-18 08:27:27 UTC", "sightings": 1 }, { "indicator": "http://27.153.152.89:56557/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-18 08:27:25 UTC", "last_seen": "2026-03-18 08:27:25 UTC", "sightings": 1 }, { "indicator": "https://whrc.ru/files/jar/component", "indicator_type": "url", "source": "URLhaus", "tags": [ "WeedHack" ], "first_seen": "2026-03-18 08:27:12 UTC", "last_seen": "2026-03-18 08:27:12 UTC", "sightings": 1 }, { "indicator": "https://dropmefiles.com/7Tpu0", "indicator_type": "url", "source": "URLhaus", "tags": [ "SalatStealer" ], "first_seen": "2026-03-18 08:27:12 UTC", "last_seen": "2026-03-18 08:27:12 UTC", "sightings": 1 }, { "indicator": "https://pastefy.app/JJtdc9TE/raw", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 08:27:11 UTC", "last_seen": "2026-03-18 08:27:11 UTC", "sightings": 1 }, { "indicator": "https://estudarebomai.com/MSI_145958.png", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 08:27:11 UTC", "last_seen": "2026-03-18 08:27:11 UTC", "sightings": 1 }, { "indicator": "https://estudarebomai.com/MSI_162456.png", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 08:27:11 UTC", "last_seen": "2026-03-18 08:27:11 UTC", "sightings": 1 }, { "indicator": "https://whrc.ru/files/jar/RuntimeBroker.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "rustystealer" ], "first_seen": "2026-03-18 08:27:11 UTC", "last_seen": "2026-03-18 08:27:11 UTC", "sightings": 1 }, { "indicator": "https://www.mediafire.com/file/bm0cj6jfpki80yd/Xeno.zip/file", "indicator_type": "url", "source": "URLhaus", "tags": [ "SalatStealer" ], "first_seen": "2026-03-18 08:27:10 UTC", "last_seen": "2026-03-18 08:27:10 UTC", "sightings": 1 }, { "indicator": "https://limewire.com/d/pQojy#OKnl04bf7o", "indicator_type": "url", "source": "URLhaus", "tags": [ "SalatStealer" ], "first_seen": "2026-03-18 08:27:10 UTC", "last_seen": "2026-03-18 08:27:10 UTC", "sightings": 1 }, { "indicator": "https://www.mediafire.com/file/xsh96sv45pnkpfl/Roblox_Script_Executor.rar/file", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 08:27:10 UTC", "last_seen": "2026-03-18 08:27:10 UTC", "sightings": 1 }, { "indicator": "https://gardeninsp.natneth.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 08:27:06 UTC", "last_seen": "2026-03-18 08:27:06 UTC", "sightings": 1 }, { "indicator": "http://alzaptop.online/MSI_084537.png", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 08:27:05 UTC", "last_seen": "2026-03-18 08:27:05 UTC", "sightings": 1 }, { "indicator": "https://whrc.ru/files/jar/module", "indicator_type": "url", "source": "URLhaus", "tags": [ "WeedHack" ], "first_seen": "2026-03-18 08:26:11 UTC", "last_seen": "2026-03-18 08:26:11 UTC", "sightings": 1 }, { "indicator": "https://whrc.ru/files/jar/module2", "indicator_type": "url", "source": "URLhaus", "tags": [ "WeedHack" ], "first_seen": "2026-03-18 08:26:11 UTC", "last_seen": "2026-03-18 08:26:11 UTC", "sightings": 1 }, { "indicator": "https://whrc.ru/files/jar/security", "indicator_type": "url", "source": "URLhaus", "tags": [ "WeedHack" ], "first_seen": "2026-03-18 08:26:07 UTC", "last_seen": "2026-03-18 08:26:07 UTC", "sightings": 1 }, { "indicator": "https://www.dropbox.com/t/TdZoYTuggGYL7vgl", "indicator_type": "url", "source": "URLhaus", "tags": [ "SalatStealer" ], "first_seen": "2026-03-18 08:26:06 UTC", "last_seen": "2026-03-18 08:26:06 UTC", "sightings": 1 }, { "indicator": "http://108.170.136.155:39606/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 08:26:06 UTC", "last_seen": "2026-03-18 08:26:06 UTC", "sightings": 1 }, { "indicator": "http://219.157.19.9:43348/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 08:25:22 UTC", "last_seen": "2026-03-18 08:25:22 UTC", "sightings": 1 }, { "indicator": "http://110.37.39.182:48703/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 08:25:21 UTC", "last_seen": "2026-03-18 08:25:21 UTC", "sightings": 1 }, { "indicator": "http://110.37.39.182:48703/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 08:25:21 UTC", "last_seen": "2026-03-18 08:25:21 UTC", "sightings": 1 }, { "indicator": "http://182.127.128.122:48844/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-18 08:25:21 UTC", "last_seen": "2026-03-18 08:25:21 UTC", "sightings": 1 }, { "indicator": "http://182.112.239.5:54039/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-18 08:25:13 UTC", "last_seen": "2026-03-18 08:25:13 UTC", "sightings": 1 }, { "indicator": "http://123.9.195.203:42894/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 08:25:13 UTC", "last_seen": "2026-03-18 08:25:13 UTC", "sightings": 1 }, { "indicator": "http://103.98.212.184/ethd0", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 08:25:12 UTC", "last_seen": "2026-03-18 08:25:12 UTC", "sightings": 1 }, { "indicator": "http://125.46.45.246:51694/.i", "indicator_type": "url", "source": "URLhaus", "tags": [ "hajime" ], "first_seen": "2026-03-18 08:25:12 UTC", "last_seen": "2026-03-18 08:25:12 UTC", "sightings": 1 }, { "indicator": "http://65.186.8.21:38428/.i", "indicator_type": "url", "source": "URLhaus", "tags": [ "hajime" ], "first_seen": "2026-03-18 08:25:11 UTC", "last_seen": "2026-03-18 08:25:11 UTC", "sightings": 1 }, { "indicator": "http://120.28.215.129:52567/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-18 08:25:11 UTC", "last_seen": "2026-03-18 08:25:11 UTC", "sightings": 1 }, { "indicator": "http://123.5.188.101:35287/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 08:25:09 UTC", "last_seen": "2026-03-18 08:25:09 UTC", "sightings": 1 }, { "indicator": "http://117.211.218.150:47478/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 08:25:07 UTC", "last_seen": "2026-03-18 08:25:07 UTC", "sightings": 1 }, { "indicator": "https://kernelbrid.natneth.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 08:22:06 UTC", "last_seen": "2026-03-18 08:22:06 UTC", "sightings": 1 }, { "indicator": "https://github.com/Basiliskaisheave/-hack-cheat-crack-Valorant-External-2026/releases/download/new/ValorantExternal-3.1-x64.rar", "indicator_type": "url", "source": "URLhaus", "tags": [ "pw-4492", "rar" ], "first_seen": "2026-03-18 08:18:25 UTC", "last_seen": "2026-03-18 08:18:25 UTC", "sightings": 1 }, { "indicator": "https://shapedock.natneth.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 08:16:08 UTC", "last_seen": "2026-03-18 08:16:08 UTC", "sightings": 1 }, { "indicator": "http://45.88.105.142/2.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "CryptOne", "ua-wget" ], "first_seen": "2026-03-18 08:12:10 UTC", "last_seen": "2026-03-18 08:12:10 UTC", "sightings": 1 }, { "indicator": "https://github.com/Emonsheikh32/sql-cheatsheet/raw/refs/heads/main/preindustrial/cheatsheet-sql-v2.0-alpha.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 08:12:09 UTC", "last_seen": "2026-03-18 08:12:09 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Emonsheikh32/sql-cheatsheet/refs/heads/main/preindustrial/cheatsheet-sql-v2.0-alpha.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 08:12:08 UTC", "last_seen": "2026-03-18 08:12:08 UTC", "sightings": 1 }, { "indicator": "https://anchor0-mount.natneth.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 08:11:11 UTC", "last_seen": "2026-03-18 08:11:11 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/ian3P2-PCI/Areana-Breakout-Wildwave-Cheat/refs/heads/main/peachify/Areana-Breakout-Cheat-Wildwave-3.3-beta.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 08:11:06 UTC", "last_seen": "2026-03-18 08:11:06 UTC", "sightings": 1 }, { "indicator": "https://github.com/ian3P2-PCI/Areana-Breakout-Wildwave-Cheat/raw/refs/heads/main/peachify/Areana-Breakout-Cheat-Wildwave-3.3-beta.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 08:11:06 UTC", "last_seen": "2026-03-18 08:11:06 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/MantaJP/Fableborne-Crypto-Bot-Crypto-Game-Auto-Farm-Clicker-Cheat-Token-Hack-Api/refs/heads/main/perceivably/Cheat-Crypto-Token-Farm-Fableborne-Auto-Api-Bot-Game-Hack-Clicker-endogen.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 08:10:08 UTC", "last_seen": "2026-03-18 08:10:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/MantaJP/Fableborne-Crypto-Bot-Crypto-Game-Auto-Farm-Clicker-Cheat-Token-Hack-Api/raw/refs/heads/main/perceivably/Cheat-Crypto-Token-Farm-Fableborne-Auto-Api-Bot-Game-Hack-Clicker-endogen.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 08:10:08 UTC", "last_seen": "2026-03-18 08:10:08 UTC", "sightings": 1 }, { "indicator": "http://27.23.67.144:38193/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 08:05:21 UTC", "last_seen": "2026-03-18 08:05:21 UTC", "sightings": 1 }, { "indicator": "http://raw.flameblox.com/nuclear.x86_64", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-18 08:05:20 UTC", "last_seen": "2026-03-18 08:05:20 UTC", "sightings": 1 }, { "indicator": "http://raw.flameblox.com/nuclear.arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-18 08:05:20 UTC", "last_seen": "2026-03-18 08:05:20 UTC", "sightings": 1 }, { "indicator": "http://raw.flameblox.com/nuclear.ppc", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-18 08:05:20 UTC", "last_seen": "2026-03-18 08:05:20 UTC", "sightings": 1 }, { "indicator": "http://raw.flameblox.com/nuclear.mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-18 08:05:20 UTC", "last_seen": "2026-03-18 08:05:20 UTC", "sightings": 1 }, { "indicator": "http://raw.flameblox.com/nuclear.mpsl", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-18 08:05:20 UTC", "last_seen": "2026-03-18 08:05:20 UTC", "sightings": 1 }, { "indicator": "http://raw.flameblox.com/nuclear.arc", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-18 08:05:17 UTC", "last_seen": "2026-03-18 08:05:17 UTC", "sightings": 1 }, { "indicator": "http://raw.flameblox.com/nuclear.spc", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-18 08:05:17 UTC", "last_seen": "2026-03-18 08:05:17 UTC", "sightings": 1 }, { "indicator": "http://raw.flameblox.com/nuclear.m68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-18 08:05:17 UTC", "last_seen": "2026-03-18 08:05:17 UTC", "sightings": 1 }, { "indicator": "https://github.com/husam8185/BoomLand-io-Bot-Crypto-Game-Auto-Farm-Clicker-Cheat-Api-Hack/raw/refs/heads/main/Boomland-EarnCrypto/Form11/obj/Debug/Clicker_Crypto_io_Farm_Game_Api_Bot_Auto_Land_Cheat_Hack_Boom_unmotherly.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 08:05:10 UTC", "last_seen": "2026-03-18 08:05:10 UTC", "sightings": 1 }, { "indicator": "https://south1-wave.slashbak.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 08:05:10 UTC", "last_seen": "2026-03-18 08:05:10 UTC", "sightings": 1 }, { "indicator": "https://github.com/Kaizuya/1849-cheats-unlimited-resources/raw/refs/heads/main/vermiculate/unlimited-cheats-resources-v1.6-beta.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 08:05:09 UTC", "last_seen": "2026-03-18 08:05:09 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Kaizuya/1849-cheats-unlimited-resources/refs/heads/main/vermiculate/unlimited-cheats-resources-v1.6-beta.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 08:05:09 UTC", "last_seen": "2026-03-18 08:05:09 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.7/files/7845402472/eL1aVtT.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey", "PureHVNC" ], "first_seen": "2026-03-18 08:05:09 UTC", "last_seen": "2026-03-18 08:05:09 UTC", "sightings": 1 }, { "indicator": "https://streamervial.slashbak.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 08:05:09 UTC", "last_seen": "2026-03-18 08:05:09 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/husam8185/BoomLand-io-Bot-Crypto-Game-Auto-Farm-Clicker-Cheat-Api-Hack/refs/heads/main/Boomland-EarnCrypto/Form11/obj/Debug/Clicker_Crypto_io_Farm_Game_Api_Bot_Auto_Land_Cheat_Hack_Boom_unmotherly.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 08:05:09 UTC", "last_seen": "2026-03-18 08:05:09 UTC", "sightings": 1 }, { "indicator": "https://geo-n0de.slashbak.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 08:05:09 UTC", "last_seen": "2026-03-18 08:05:09 UTC", "sightings": 1 }, { "indicator": "https://dl.armour-inc-down.net/data/?11", "indicator_type": "url", "source": "URLhaus", "tags": [ "pw-NMCLDJX3SK2", "zip" ], "first_seen": "2026-03-18 08:05:07 UTC", "last_seen": "2026-03-18 08:05:07 UTC", "sightings": 1 }, { "indicator": "https://yagla.tv/cEP9PmS", "indicator_type": "url", "source": "URLhaus", "tags": [ "pw-update", "zip" ], "first_seen": "2026-03-18 08:05:06 UTC", "last_seen": "2026-03-18 08:05:06 UTC", "sightings": 1 }, { "indicator": "http://raw.flameblox.com/nuclear.i686", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-18 07:50:22 UTC", "last_seen": "2026-03-18 07:50:22 UTC", "sightings": 1 }, { "indicator": "http://raw.flameblox.com/nuclear.arm", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-18 07:50:22 UTC", "last_seen": "2026-03-18 07:50:22 UTC", "sightings": 1 }, { "indicator": "http://raw.flameblox.com/nuclear.arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-18 07:50:09 UTC", "last_seen": "2026-03-18 07:50:09 UTC", "sightings": 1 }, { "indicator": "http://raw.flameblox.com/nuclear.sh4", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-18 07:50:09 UTC", "last_seen": "2026-03-18 07:50:09 UTC", "sightings": 1 }, { "indicator": "http://raw.flameblox.com/nuclear.arm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-18 07:50:09 UTC", "last_seen": "2026-03-18 07:50:09 UTC", "sightings": 1 }, { "indicator": "http://raw.flameblox.com/nuclear.x86", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-18 07:50:09 UTC", "last_seen": "2026-03-18 07:50:09 UTC", "sightings": 1 }, { "indicator": "http://77.247.88.72:46687/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-18 07:47:05 UTC", "last_seen": "2026-03-18 07:47:05 UTC", "sightings": 1 }, { "indicator": "https://monit8-spark.slashbak.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 07:47:05 UTC", "last_seen": "2026-03-18 07:47:05 UTC", "sightings": 1 }, { "indicator": "https://rizvexeno.ws/%D0%92%D0%BE%D0%BEtstap%D1%80%D0%B5%D0%B3%E2%80%A2%D1%8564.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "pw-ryos", "zip" ], "first_seen": "2026-03-18 07:46:07 UTC", "last_seen": "2026-03-18 07:46:07 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Sbdbb/brute_it/refs/heads/main/informable/brute_it_3.0.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 07:44:12 UTC", "last_seen": "2026-03-18 07:44:12 UTC", "sightings": 1 }, { "indicator": "https://github.com/Sbdbb/brute_it/raw/refs/heads/main/informable/brute_it_3.0.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 07:44:07 UTC", "last_seen": "2026-03-18 07:44:07 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Sbdbb/brute_it/refs/heads/main/informable/it_brute_v2.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 07:44:06 UTC", "last_seen": "2026-03-18 07:44:06 UTC", "sightings": 1 }, { "indicator": "https://github.com/Sbdbb/brute_it/raw/refs/heads/main/informable/it_brute_v2.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 07:44:06 UTC", "last_seen": "2026-03-18 07:44:06 UTC", "sightings": 1 }, { "indicator": "https://forest-sparr.copyvrok.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 07:42:06 UTC", "last_seen": "2026-03-18 07:42:06 UTC", "sightings": 1 }, { "indicator": "https://github.com/Lovenain/hypervisor-crack-audit/raw/refs/heads/main/slinger/hypervisor_crack_audit_v3.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 07:40:08 UTC", "last_seen": "2026-03-18 07:40:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Lovenain/hypervisor-crack-audit/refs/heads/main/slinger/hypervisor_crack_audit_v3.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-18 07:40:08 UTC", "last_seen": "2026-03-18 07:40:08 UTC", "sightings": 1 }, { "indicator": "https://rktqwhu.copyvrok.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 07:36:09 UTC", "last_seen": "2026-03-18 07:36:09 UTC", "sightings": 1 }, { "indicator": "http://158.94.211.162/data/509.txt", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 07:36:06 UTC", "last_seen": "2026-03-18 07:36:06 UTC", "sightings": 1 }, { "indicator": "http://158.94.211.162/data/5945.txt", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 07:36:06 UTC", "last_seen": "2026-03-18 07:36:06 UTC", "sightings": 1 }, { "indicator": "http://158.94.211.162/all/12956.txt", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 07:36:05 UTC", "last_seen": "2026-03-18 07:36:05 UTC", "sightings": 1 }, { "indicator": "http://158.94.211.162/STATACOMPL", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 07:36:05 UTC", "last_seen": "2026-03-18 07:36:05 UTC", "sightings": 1 }, { "indicator": "http://158.94.211.162/ok/n.txt", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 07:36:05 UTC", "last_seen": "2026-03-18 07:36:05 UTC", "sightings": 1 }, { "indicator": "http://158.94.211.162/3", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 07:36:05 UTC", "last_seen": "2026-03-18 07:36:05 UTC", "sightings": 1 }, { "indicator": "http://158.94.211.162/all/n.txt", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 07:36:05 UTC", "last_seen": "2026-03-18 07:36:05 UTC", "sightings": 1 }, { "indicator": "http://158.94.211.162/1", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 07:36:05 UTC", "last_seen": "2026-03-18 07:36:05 UTC", "sightings": 1 }, { "indicator": "http://158.94.211.162/5", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 07:36:05 UTC", "last_seen": "2026-03-18 07:36:05 UTC", "sightings": 1 }, { "indicator": "http://158.94.211.162/data/n.txt", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 07:36:05 UTC", "last_seen": "2026-03-18 07:36:05 UTC", "sightings": 1 }, { "indicator": "http://158.94.211.162/ok/8293.txt", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 07:36:05 UTC", "last_seen": "2026-03-18 07:36:05 UTC", "sightings": 1 }, { "indicator": "http://158.94.211.162/4", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-18 07:36:05 UTC", "last_seen": "2026-03-18 07:36:05 UTC", "sightings": 1 }, { "indicator": "http://182.191.71.74:58627/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-18 07:35:26 UTC", "last_seen": "2026-03-18 07:35:26 UTC", "sightings": 1 }, { "indicator": "http://github.com/qudette/fluffy-dollop/releases/download/Tag/DesireHack.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SalatStealer", "zip" ], "first_seen": "2026-03-18 07:30:17 UTC", "last_seen": "2026-03-18 07:30:17 UTC", "sightings": 1 }, { "indicator": "https://igewi86i.copyvrok.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 07:30:08 UTC", "last_seen": "2026-03-18 07:30:08 UTC", "sightings": 1 }, { "indicator": "https://enzym-nod.copyvrok.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 07:25:08 UTC", "last_seen": "2026-03-18 07:25:08 UTC", "sightings": 1 }, { "indicator": "https://677ktc.slashbak.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 07:20:08 UTC", "last_seen": "2026-03-18 07:20:08 UTC", "sightings": 1 }, { "indicator": "http://112.240.251.159:40772/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-18 07:15:27 UTC", "last_seen": "2026-03-18 07:15:27 UTC", "sightings": 1 }, { "indicator": "https://cache-path.slashbak.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 07:14:06 UTC", "last_seen": "2026-03-18 07:14:06 UTC", "sightings": 1 }, { "indicator": "https://innerrouter.slashbak.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 07:09:05 UTC", "last_seen": "2026-03-18 07:09:05 UTC", "sightings": 1 }, { "indicator": "https://lago-lun.slashbak.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 07:03:06 UTC", "last_seen": "2026-03-18 07:03:06 UTC", "sightings": 1 }, { "indicator": "http://59.91.252.203:56995/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 06:58:19 UTC", "last_seen": "2026-03-18 06:58:19 UTC", "sightings": 1 }, { "indicator": "https://syncgath.copyvrok.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 06:56:07 UTC", "last_seen": "2026-03-18 06:56:07 UTC", "sightings": 1 }, { "indicator": "http://83.229.17.114/Okami.sparc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-18 06:52:09 UTC", "last_seen": "2026-03-18 06:52:09 UTC", "sightings": 1 }, { "indicator": "http://83.229.17.114/Okami.m68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-18 06:52:09 UTC", "last_seen": "2026-03-18 06:52:09 UTC", "sightings": 1 }, { "indicator": "http://83.229.17.114/Okami.arm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-18 06:52:09 UTC", "last_seen": "2026-03-18 06:52:09 UTC", "sightings": 1 }, { "indicator": "http://83.229.17.114/Okami.mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-18 06:52:09 UTC", "last_seen": "2026-03-18 06:52:09 UTC", "sightings": 1 }, { "indicator": "http://83.229.17.114/Okami.arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-18 06:52:09 UTC", "last_seen": "2026-03-18 06:52:09 UTC", "sightings": 1 }, { "indicator": "http://83.229.17.114/Okami.mpsl", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-18 06:52:09 UTC", "last_seen": "2026-03-18 06:52:09 UTC", "sightings": 1 }, { "indicator": "http://83.229.17.114/Okami.x86", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-18 06:52:09 UTC", "last_seen": "2026-03-18 06:52:09 UTC", "sightings": 1 }, { "indicator": "http://83.229.17.114/Okami.i586", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-18 06:52:09 UTC", "last_seen": "2026-03-18 06:52:09 UTC", "sightings": 1 }, { "indicator": "http://83.229.17.114/Okami.i686", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-18 06:52:09 UTC", "last_seen": "2026-03-18 06:52:09 UTC", "sightings": 1 }, { "indicator": "http://83.229.17.114/Okami.arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-18 06:52:09 UTC", "last_seen": "2026-03-18 06:52:09 UTC", "sightings": 1 }, { "indicator": "http://83.229.17.114/Okami.arm4", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-18 06:52:09 UTC", "last_seen": "2026-03-18 06:52:09 UTC", "sightings": 1 }, { "indicator": "http://83.229.17.114/Okami.ppc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-18 06:52:09 UTC", "last_seen": "2026-03-18 06:52:09 UTC", "sightings": 1 }, { "indicator": "http://83.229.17.114/Okami.sh4", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-18 06:52:09 UTC", "last_seen": "2026-03-18 06:52:09 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.43/hiddenbin/boatnet.x86_64", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-18 06:52:08 UTC", "last_seen": "2026-03-18 06:52:08 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.43/hiddenbin/boatnet.arc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-18 06:52:08 UTC", "last_seen": "2026-03-18 06:52:08 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.43/hiddenbin/boatnet.i686", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-18 06:52:08 UTC", "last_seen": "2026-03-18 06:52:08 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.43/hiddenbin/boatnet.i468", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-18 06:52:08 UTC", "last_seen": "2026-03-18 06:52:08 UTC", "sightings": 1 }, { "indicator": "http://115.50.225.45:45772/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 06:46:11 UTC", "last_seen": "2026-03-18 06:46:11 UTC", "sightings": 1 }, { "indicator": "http://115.57.232.210:34947/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 06:43:13 UTC", "last_seen": "2026-03-18 06:43:13 UTC", "sightings": 1 }, { "indicator": "https://tranyasy.com.cn/Google.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SilverFox" ], "first_seen": "2026-03-18 06:38:26 UTC", "last_seen": "2026-03-18 06:38:26 UTC", "sightings": 1 }, { "indicator": "https://hjendcs.x98665.com/liulanSetup.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SilverFox" ], "first_seen": "2026-03-18 06:38:22 UTC", "last_seen": "2026-03-18 06:38:22 UTC", "sightings": 1 }, { "indicator": "https://daw.tos-cn-hongkong.volces.com/Dwglq.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SilverFox" ], "first_seen": "2026-03-18 06:38:17 UTC", "last_seen": "2026-03-18 06:38:17 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.7/files/8468794285/4Ma9Ksk.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543", "SantaStealer" ], "first_seen": "2026-03-18 06:38:10 UTC", "last_seen": "2026-03-18 06:38:10 UTC", "sightings": 1 }, { "indicator": "https://main-j9-point.gravix-net.cfd/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 06:34:06 UTC", "last_seen": "2026-03-18 06:34:06 UTC", "sightings": 1 }, { "indicator": "http://110.36.20.21:44269/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 06:29:17 UTC", "last_seen": "2026-03-18 06:29:17 UTC", "sightings": 1 }, { "indicator": "https://sync-h1-data.gravix-net.cfd/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 06:29:06 UTC", "last_seen": "2026-03-18 06:29:06 UTC", "sightings": 1 }, { "indicator": "http://196.188.135.20:55026/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-18 06:28:18 UTC", "last_seen": "2026-03-18 06:28:18 UTC", "sightings": 1 }, { "indicator": "https://gate-p7-proxy.gravix-net.cfd/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 06:23:10 UTC", "last_seen": "2026-03-18 06:23:10 UTC", "sightings": 1 }, { "indicator": "https://web-s3-infra.gravix-net.cfd/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 06:17:06 UTC", "last_seen": "2026-03-18 06:17:06 UTC", "sightings": 1 }, { "indicator": "http://110.37.37.232:59674/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 06:16:17 UTC", "last_seen": "2026-03-18 06:16:17 UTC", "sightings": 1 }, { "indicator": "https://link-r1-sat.densocore.cfd/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 06:12:06 UTC", "last_seen": "2026-03-18 06:12:06 UTC", "sightings": 1 }, { "indicator": "https://core-q9-rock.densocore.cfd/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 06:07:06 UTC", "last_seen": "2026-03-18 06:07:06 UTC", "sightings": 1 }, { "indicator": "http://110.36.20.21:44269/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 06:05:08 UTC", "last_seen": "2026-03-18 06:05:08 UTC", "sightings": 1 }, { "indicator": "http://196.188.135.20:55026/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-18 06:01:19 UTC", "last_seen": "2026-03-18 06:01:19 UTC", "sightings": 1 }, { "indicator": "https://base-b4-steel.densocore.cfd/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 06:01:08 UTC", "last_seen": "2026-03-18 06:01:08 UTC", "sightings": 1 }, { "indicator": "http://117.232.188.135:46719/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 05:59:10 UTC", "last_seen": "2026-03-18 05:59:10 UTC", "sightings": 1 }, { "indicator": "http://123.14.33.100:59282/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 05:58:16 UTC", "last_seen": "2026-03-18 05:58:16 UTC", "sightings": 1 }, { "indicator": "http://110.39.252.138:45159/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 05:56:17 UTC", "last_seen": "2026-03-18 05:56:17 UTC", "sightings": 1 }, { "indicator": "https://orbit-n0-moon.densocore.cfd/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 05:56:06 UTC", "last_seen": "2026-03-18 05:56:06 UTC", "sightings": 1 }, { "indicator": "https://space-x9-open.polar-axis.cfd/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 05:50:08 UTC", "last_seen": "2026-03-18 05:50:08 UTC", "sightings": 1 }, { "indicator": "http://110.37.37.232:59674/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 05:48:15 UTC", "last_seen": "2026-03-18 05:48:15 UTC", "sightings": 1 }, { "indicator": "http://123.14.33.100:59282/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 05:45:18 UTC", "last_seen": "2026-03-18 05:45:18 UTC", "sightings": 1 }, { "indicator": "https://field-z2-vast.polar-axis.cfd/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 05:45:07 UTC", "last_seen": "2026-03-18 05:45:07 UTC", "sightings": 1 }, { "indicator": "http://117.232.188.135:46719/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 05:43:16 UTC", "last_seen": "2026-03-18 05:43:16 UTC", "sightings": 1 }, { "indicator": "https://zone-w8-area.polar-axis.cfd/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 05:38:06 UTC", "last_seen": "2026-03-18 05:38:06 UTC", "sightings": 1 }, { "indicator": "http://115.57.232.210:34947/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 05:37:09 UTC", "last_seen": "2026-03-18 05:37:09 UTC", "sightings": 1 }, { "indicator": "http://125.44.252.209:48537/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 05:35:13 UTC", "last_seen": "2026-03-18 05:35:13 UTC", "sightings": 1 }, { "indicator": "http://125.41.225.146:32997/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 05:33:17 UTC", "last_seen": "2026-03-18 05:33:17 UTC", "sightings": 1 }, { "indicator": "https://rim-k11-outer.polar-axis.cfd/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 05:33:08 UTC", "last_seen": "2026-03-18 05:33:08 UTC", "sightings": 1 }, { "indicator": "http://125.41.225.146:32997/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 05:32:19 UTC", "last_seen": "2026-03-18 05:32:19 UTC", "sightings": 1 }, { "indicator": "http://110.39.252.138:45159/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 05:29:07 UTC", "last_seen": "2026-03-18 05:29:07 UTC", "sightings": 1 }, { "indicator": "http://223.151.75.208:43874/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-18 05:28:20 UTC", "last_seen": "2026-03-18 05:28:20 UTC", "sightings": 1 }, { "indicator": "http://110.37.32.228:58226/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-18 05:26:18 UTC", "last_seen": "2026-03-18 05:26:18 UTC", "sightings": 1 }, { "indicator": "https://scan-a9-point.curva-flux.cfd/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 05:22:07 UTC", "last_seen": "2026-03-18 05:22:07 UTC", "sightings": 1 }, { "indicator": "http://61.1.230.165:54923/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 05:21:18 UTC", "last_seen": "2026-03-18 05:21:18 UTC", "sightings": 1 }, { "indicator": "http://125.44.252.209:48537/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 05:19:19 UTC", "last_seen": "2026-03-18 05:19:19 UTC", "sightings": 1 }, { "indicator": "http://61.54.199.43:58743/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 05:17:08 UTC", "last_seen": "2026-03-18 05:17:08 UTC", "sightings": 1 }, { "indicator": "https://bridge-e1-light.curva-flux.cfd/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 05:16:06 UTC", "last_seen": "2026-03-18 05:16:06 UTC", "sightings": 1 }, { "indicator": "http://175.146.154.138:39964/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 05:15:16 UTC", "last_seen": "2026-03-18 05:15:16 UTC", "sightings": 1 }, { "indicator": "https://room-v5-dark.curva-flux.cfd/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 05:12:06 UTC", "last_seen": "2026-03-18 05:12:06 UTC", "sightings": 1 }, { "indicator": "https://vision-i4-sync.nauticbase.cfd/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 05:06:06 UTC", "last_seen": "2026-03-18 05:06:06 UTC", "sightings": 1 }, { "indicator": "http://110.37.32.228:58226/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-18 05:05:20 UTC", "last_seen": "2026-03-18 05:05:20 UTC", "sightings": 1 }, { "indicator": "http://61.1.230.165:54923/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 05:04:07 UTC", "last_seen": "2026-03-18 05:04:07 UTC", "sightings": 1 }, { "indicator": "http://182.119.167.192:58696/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 05:02:18 UTC", "last_seen": "2026-03-18 05:02:18 UTC", "sightings": 1 }, { "indicator": "http://175.146.154.138:39964/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 05:02:18 UTC", "last_seen": "2026-03-18 05:02:18 UTC", "sightings": 1 }, { "indicator": "https://ghost-u9-node.nauticbase.cfd/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 04:59:07 UTC", "last_seen": "2026-03-18 04:59:07 UTC", "sightings": 1 }, { "indicator": "http://117.209.82.10:34299/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 04:58:27 UTC", "last_seen": "2026-03-18 04:58:27 UTC", "sightings": 1 }, { "indicator": "https://shell-t0-core.nauticbase.cfd/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 04:54:06 UTC", "last_seen": "2026-03-18 04:54:06 UTC", "sightings": 1 }, { "indicator": "https://trace-y21-alpha.nauticbase.cfd/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 04:48:07 UTC", "last_seen": "2026-03-18 04:48:07 UTC", "sightings": 1 }, { "indicator": "http://61.54.199.43:58743/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 04:44:08 UTC", "last_seen": "2026-03-18 04:44:08 UTC", "sightings": 1 }, { "indicator": "https://auth-l9-user.termoviva.cfd/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 04:42:06 UTC", "last_seen": "2026-03-18 04:42:06 UTC", "sightings": 1 }, { "indicator": "http://61.137.156.80:55202/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 04:39:18 UTC", "last_seen": "2026-03-18 04:39:18 UTC", "sightings": 1 }, { "indicator": "https://db-g1-point.termoviva.cfd/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 04:37:07 UTC", "last_seen": "2026-03-18 04:37:07 UTC", "sightings": 1 }, { "indicator": "http://182.119.167.192:58696/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 04:35:17 UTC", "last_seen": "2026-03-18 04:35:17 UTC", "sightings": 1 }, { "indicator": "http://223.151.75.208:43874/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-18 04:34:19 UTC", "last_seen": "2026-03-18 04:34:19 UTC", "sightings": 1 }, { "indicator": "http://219.155.95.119:43938/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 04:34:18 UTC", "last_seen": "2026-03-18 04:34:18 UTC", "sightings": 1 }, { "indicator": "http://219.157.50.209:46320/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "mirai" ], "first_seen": "2026-03-18 04:33:16 UTC", "last_seen": "2026-03-18 04:33:16 UTC", "sightings": 1 }, { "indicator": "https://base-f3-infra.termoviva.cfd/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 04:31:07 UTC", "last_seen": "2026-03-18 04:31:07 UTC", "sightings": 1 }, { "indicator": "http://219.155.95.119:43938/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 04:29:08 UTC", "last_seen": "2026-03-18 04:29:08 UTC", "sightings": 1 }, { "indicator": "http://110.37.111.178:44391/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-18 04:27:18 UTC", "last_seen": "2026-03-18 04:27:18 UTC", "sightings": 1 }, { "indicator": "http://219.156.176.247:44440/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 04:25:24 UTC", "last_seen": "2026-03-18 04:25:24 UTC", "sightings": 1 }, { "indicator": "https://net-d88-global.termoviva.cfd/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 04:25:09 UTC", "last_seen": "2026-03-18 04:25:09 UTC", "sightings": 1 }, { "indicator": "http://110.37.36.23:52787/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-18 04:23:11 UTC", "last_seen": "2026-03-18 04:23:11 UTC", "sightings": 1 }, { "indicator": "http://222.142.249.29:36429/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 04:22:17 UTC", "last_seen": "2026-03-18 04:22:17 UTC", "sightings": 1 }, { "indicator": "http://196.190.224.62:47577/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-18 04:21:15 UTC", "last_seen": "2026-03-18 04:21:15 UTC", "sightings": 1 }, { "indicator": "https://flow-z4-work.prismagrid.cfd/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 04:20:08 UTC", "last_seen": "2026-03-18 04:20:08 UTC", "sightings": 1 }, { "indicator": "http://117.205.169.104:44609/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 04:15:16 UTC", "last_seen": "2026-03-18 04:15:16 UTC", "sightings": 1 }, { "indicator": "https://hub-v22-local.prismagrid.cfd/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 04:15:08 UTC", "last_seen": "2026-03-18 04:15:08 UTC", "sightings": 1 }, { "indicator": "http://42.239.154.160:57474/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 04:14:17 UTC", "last_seen": "2026-03-18 04:14:17 UTC", "sightings": 1 }, { "indicator": "http://61.137.156.80:55202/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 04:12:17 UTC", "last_seen": "2026-03-18 04:12:17 UTC", "sightings": 1 }, { "indicator": "http://117.205.169.104:44609/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 04:11:14 UTC", "last_seen": "2026-03-18 04:11:14 UTC", "sightings": 1 }, { "indicator": "https://link-p9-power.prismagrid.cfd/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 04:09:06 UTC", "last_seen": "2026-03-18 04:09:06 UTC", "sightings": 1 }, { "indicator": "http://59.183.113.113:50503/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 04:07:27 UTC", "last_seen": "2026-03-18 04:07:27 UTC", "sightings": 1 }, { "indicator": "http://117.222.167.199:55331/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 04:07:22 UTC", "last_seen": "2026-03-18 04:07:22 UTC", "sightings": 1 }, { "indicator": "http://219.156.176.247:44440/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 04:05:19 UTC", "last_seen": "2026-03-18 04:05:19 UTC", "sightings": 1 }, { "indicator": "http://78.29.39.213:37794/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 04:05:17 UTC", "last_seen": "2026-03-18 04:05:17 UTC", "sightings": 1 }, { "indicator": "http://112.239.98.18:56299/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 04:04:34 UTC", "last_seen": "2026-03-18 04:04:34 UTC", "sightings": 1 }, { "indicator": "http://87.120.191.32/nuclear.arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai" ], "first_seen": "2026-03-18 04:04:13 UTC", "last_seen": "2026-03-18 04:04:13 UTC", "sightings": 1 }, { "indicator": "http://87.120.191.32/nuclear.arc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai" ], "first_seen": "2026-03-18 04:04:11 UTC", "last_seen": "2026-03-18 04:04:11 UTC", "sightings": 1 }, { "indicator": "http://87.120.191.32/nuclear.m68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai" ], "first_seen": "2026-03-18 04:04:11 UTC", "last_seen": "2026-03-18 04:04:11 UTC", "sightings": 1 }, { "indicator": "http://87.120.191.32/nuclear.arm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai" ], "first_seen": "2026-03-18 04:04:11 UTC", "last_seen": "2026-03-18 04:04:11 UTC", "sightings": 1 }, { "indicator": "http://87.120.191.32/nuclear.sh4", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai" ], "first_seen": "2026-03-18 04:04:11 UTC", "last_seen": "2026-03-18 04:04:11 UTC", "sightings": 1 }, { "indicator": "http://87.120.191.32/nuclear.mpsl", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai" ], "first_seen": "2026-03-18 04:04:11 UTC", "last_seen": "2026-03-18 04:04:11 UTC", "sightings": 1 }, { "indicator": "http://87.120.191.32/nuclear.mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai" ], "first_seen": "2026-03-18 04:04:11 UTC", "last_seen": "2026-03-18 04:04:11 UTC", "sightings": 1 }, { "indicator": "http://87.120.191.32/nuclear.x86", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai" ], "first_seen": "2026-03-18 04:04:11 UTC", "last_seen": "2026-03-18 04:04:11 UTC", "sightings": 1 }, { "indicator": "http://87.120.191.32/nuclear.ppc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai" ], "first_seen": "2026-03-18 04:04:11 UTC", "last_seen": "2026-03-18 04:04:11 UTC", "sightings": 1 }, { "indicator": "http://87.120.191.32/nuclear.spc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai" ], "first_seen": "2026-03-18 04:04:11 UTC", "last_seen": "2026-03-18 04:04:11 UTC", "sightings": 1 }, { "indicator": "http://87.120.191.32/nuclear.arm", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai" ], "first_seen": "2026-03-18 04:04:11 UTC", "last_seen": "2026-03-18 04:04:11 UTC", "sightings": 1 }, { "indicator": "http://87.120.191.32/nuclear.i686", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai" ], "first_seen": "2026-03-18 04:04:11 UTC", "last_seen": "2026-03-18 04:04:11 UTC", "sightings": 1 }, { "indicator": "http://87.120.191.32/nuclear.x86_64", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai" ], "first_seen": "2026-03-18 04:04:11 UTC", "last_seen": "2026-03-18 04:04:11 UTC", "sightings": 1 }, { "indicator": "http://87.120.191.32/nuclear.arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai" ], "first_seen": "2026-03-18 04:04:11 UTC", "last_seen": "2026-03-18 04:04:11 UTC", "sightings": 1 }, { "indicator": "http://110.37.36.23:52787/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-18 04:03:15 UTC", "last_seen": "2026-03-18 04:03:15 UTC", "sightings": 1 }, { "indicator": "https://sys-s01-monitor.prismagrid.cfd/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 04:03:08 UTC", "last_seen": "2026-03-18 04:03:08 UTC", "sightings": 1 }, { "indicator": "http://110.37.111.178:44391/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-18 04:00:09 UTC", "last_seen": "2026-03-18 04:00:09 UTC", "sightings": 1 }, { "indicator": "https://gate-v5-entry.fluido-v.cfd/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 03:59:06 UTC", "last_seen": "2026-03-18 03:59:06 UTC", "sightings": 1 }, { "indicator": "https://dev-t4-host.fluido-v.cfd/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 03:52:07 UTC", "last_seen": "2026-03-18 03:52:07 UTC", "sightings": 1 }, { "indicator": "http://42.227.32.132:37098/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 03:50:23 UTC", "last_seen": "2026-03-18 03:50:23 UTC", "sightings": 1 }, { "indicator": "http://175.173.90.64:47108/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 03:49:18 UTC", "last_seen": "2026-03-18 03:49:18 UTC", "sightings": 1 }, { "indicator": "http://42.239.154.160:57474/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 03:47:08 UTC", "last_seen": "2026-03-18 03:47:08 UTC", "sightings": 1 }, { "indicator": "https://api-r8-remote.fluido-v.cfd/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 03:47:06 UTC", "last_seen": "2026-03-18 03:47:06 UTC", "sightings": 1 }, { "indicator": "http://222.140.216.28:56621/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 03:44:22 UTC", "last_seen": "2026-03-18 03:44:22 UTC", "sightings": 1 }, { "indicator": "https://cloud-w22-store.fluido-v.cfd/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 03:41:05 UTC", "last_seen": "2026-03-18 03:41:05 UTC", "sightings": 1 }, { "indicator": "http://117.222.167.199:55331/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 03:37:19 UTC", "last_seen": "2026-03-18 03:37:19 UTC", "sightings": 1 }, { "indicator": "http://78.29.39.213:37794/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 03:36:15 UTC", "last_seen": "2026-03-18 03:36:15 UTC", "sightings": 1 }, { "indicator": "https://core-j1-sync.optic-prime.cfd/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 03:35:09 UTC", "last_seen": "2026-03-18 03:35:09 UTC", "sightings": 1 }, { "indicator": "http://110.37.66.248:36845/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-18 03:32:21 UTC", "last_seen": "2026-03-18 03:32:21 UTC", "sightings": 1 }, { "indicator": "https://web-303-proxy.optic-prime.cfd/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 03:30:07 UTC", "last_seen": "2026-03-18 03:30:07 UTC", "sightings": 1 }, { "indicator": "http://59.88.225.156:56704/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 03:29:21 UTC", "last_seen": "2026-03-18 03:29:21 UTC", "sightings": 1 }, { "indicator": "http://120.28.109.102:45324/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-18 03:25:14 UTC", "last_seen": "2026-03-18 03:25:14 UTC", "sightings": 1 }, { "indicator": "https://app-v09-data.optic-prime.cfd/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 03:24:07 UTC", "last_seen": "2026-03-18 03:24:07 UTC", "sightings": 1 }, { "indicator": "http://117.222.167.173:48653/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 03:22:12 UTC", "last_seen": "2026-03-18 03:22:12 UTC", "sightings": 1 }, { "indicator": "http://110.37.39.32:38426/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-18 03:20:26 UTC", "last_seen": "2026-03-18 03:20:26 UTC", "sightings": 1 }, { "indicator": "https://srv-q44-meta.optic-prime.cfd/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 03:19:07 UTC", "last_seen": "2026-03-18 03:19:07 UTC", "sightings": 1 }, { "indicator": "http://222.140.216.28:56621/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 03:18:23 UTC", "last_seen": "2026-03-18 03:18:23 UTC", "sightings": 1 }, { "indicator": "http://196.190.69.149:49095/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-18 03:18:22 UTC", "last_seen": "2026-03-18 03:18:22 UTC", "sightings": 1 }, { "indicator": "http://42.237.25.222:48972/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 03:15:11 UTC", "last_seen": "2026-03-18 03:15:11 UTC", "sightings": 1 }, { "indicator": "https://infra-k1-static.ventonodal.cfd/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 03:13:06 UTC", "last_seen": "2026-03-18 03:13:06 UTC", "sightings": 1 }, { "indicator": "http://117.196.181.154:32960/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 03:12:21 UTC", "last_seen": "2026-03-18 03:12:21 UTC", "sightings": 1 }, { "indicator": "http://175.173.84.220:43593/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 03:11:32 UTC", "last_seen": "2026-03-18 03:11:32 UTC", "sightings": 1 }, { "indicator": "http://117.196.181.154:32960/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 03:10:17 UTC", "last_seen": "2026-03-18 03:10:17 UTC", "sightings": 1 }, { "indicator": "http://175.173.90.64:47108/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 03:10:17 UTC", "last_seen": "2026-03-18 03:10:17 UTC", "sightings": 1 }, { "indicator": "https://dist-z7-cache.ventonodal.cfd/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 03:08:06 UTC", "last_seen": "2026-03-18 03:08:06 UTC", "sightings": 1 }, { "indicator": "https://sync-v02-edge.ventonodal.cfd/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 03:03:08 UTC", "last_seen": "2026-03-18 03:03:08 UTC", "sightings": 1 }, { "indicator": "http://117.253.65.125:36946/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 03:02:30 UTC", "last_seen": "2026-03-18 03:02:30 UTC", "sightings": 1 }, { "indicator": "http://42.224.100.120:51739/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 03:01:23 UTC", "last_seen": "2026-03-18 03:01:23 UTC", "sightings": 1 }, { "indicator": "http://117.222.167.173:48653/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 02:57:21 UTC", "last_seen": "2026-03-18 02:57:21 UTC", "sightings": 1 }, { "indicator": "https://node-x911-auth.ventonodal.cfd/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 02:56:06 UTC", "last_seen": "2026-03-18 02:56:06 UTC", "sightings": 1 }, { "indicator": "http://110.37.66.248:36845/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-18 02:54:29 UTC", "last_seen": "2026-03-18 02:54:29 UTC", "sightings": 1 }, { "indicator": "http://196.190.69.149:49095/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-18 02:52:18 UTC", "last_seen": "2026-03-18 02:52:18 UTC", "sightings": 1 }, { "indicator": "http://110.37.39.32:38426/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-18 02:52:18 UTC", "last_seen": "2026-03-18 02:52:18 UTC", "sightings": 1 }, { "indicator": "http://120.28.109.102:45324/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-18 02:51:19 UTC", "last_seen": "2026-03-18 02:51:19 UTC", "sightings": 1 }, { "indicator": "https://breezetide.slashbak.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 02:51:05 UTC", "last_seen": "2026-03-18 02:51:05 UTC", "sightings": 1 }, { "indicator": "http://42.224.100.120:51739/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 02:50:14 UTC", "last_seen": "2026-03-18 02:50:14 UTC", "sightings": 1 }, { "indicator": "http://42.237.25.222:48972/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 02:48:19 UTC", "last_seen": "2026-03-18 02:48:19 UTC", "sightings": 1 }, { "indicator": "http://120.61.202.93:58831/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 02:44:19 UTC", "last_seen": "2026-03-18 02:44:19 UTC", "sightings": 1 }, { "indicator": "https://lanecheck.slashbak.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 02:42:06 UTC", "last_seen": "2026-03-18 02:42:06 UTC", "sightings": 1 }, { "indicator": "http://60.214.22.144:55219/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 02:38:22 UTC", "last_seen": "2026-03-18 02:38:22 UTC", "sightings": 1 }, { "indicator": "http://45.153.34.199/bins/px86", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-18 02:36:23 UTC", "last_seen": "2026-03-18 02:36:23 UTC", "sightings": 1 }, { "indicator": "http://45.153.34.199/bins/pmips", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-18 02:36:23 UTC", "last_seen": "2026-03-18 02:36:23 UTC", "sightings": 1 }, { "indicator": "http://45.153.34.199/bins/parm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-18 02:36:23 UTC", "last_seen": "2026-03-18 02:36:23 UTC", "sightings": 1 }, { "indicator": "http://45.153.34.199/bins/pm68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-18 02:36:17 UTC", "last_seen": "2026-03-18 02:36:17 UTC", "sightings": 1 }, { "indicator": "http://45.153.34.199/bins/pspc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-18 02:36:17 UTC", "last_seen": "2026-03-18 02:36:17 UTC", "sightings": 1 }, { "indicator": "http://45.153.34.199/bins/parm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-18 02:36:17 UTC", "last_seen": "2026-03-18 02:36:17 UTC", "sightings": 1 }, { "indicator": "http://45.153.34.199/bins/pmpsl", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-18 02:36:17 UTC", "last_seen": "2026-03-18 02:36:17 UTC", "sightings": 1 }, { "indicator": "https://4ztdaumj.slashbak.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 02:36:06 UTC", "last_seen": "2026-03-18 02:36:06 UTC", "sightings": 1 }, { "indicator": "http://117.253.65.125:36946/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 02:34:20 UTC", "last_seen": "2026-03-18 02:34:20 UTC", "sightings": 1 }, { "indicator": "http://42.227.32.132:37098/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 02:34:20 UTC", "last_seen": "2026-03-18 02:34:20 UTC", "sightings": 1 }, { "indicator": "https://alignpro.slashbak.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 02:30:13 UTC", "last_seen": "2026-03-18 02:30:13 UTC", "sightings": 1 }, { "indicator": "http://110.37.78.177:53799/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 02:28:31 UTC", "last_seen": "2026-03-18 02:28:31 UTC", "sightings": 1 }, { "indicator": "http://203.161.47.138/oop/dontcrynow.m68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "m68k", "mirai", "ua-wget" ], "first_seen": "2026-03-18 02:27:25 UTC", "last_seen": "2026-03-18 02:27:25 UTC", "sightings": 1 }, { "indicator": "http://203.161.47.138/oop/dontcrynow.mpsl", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mips", "mirai", "ua-wget" ], "first_seen": "2026-03-18 02:27:25 UTC", "last_seen": "2026-03-18 02:27:25 UTC", "sightings": 1 }, { "indicator": "http://203.161.47.138/oop/dontcrynow.ppc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "PowerPC", "ua-wget" ], "first_seen": "2026-03-18 02:27:25 UTC", "last_seen": "2026-03-18 02:27:25 UTC", "sightings": 1 }, { "indicator": "http://120.60.229.89:38313/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 02:27:24 UTC", "last_seen": "2026-03-18 02:27:24 UTC", "sightings": 1 }, { "indicator": "http://203.161.47.138/oop/dontcrynow.x86", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget", "x86" ], "first_seen": "2026-03-18 02:27:24 UTC", "last_seen": "2026-03-18 02:27:24 UTC", "sightings": 1 }, { "indicator": "http://203.161.47.138/splash.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai", "sh", "ua-wget" ], "first_seen": "2026-03-18 02:27:23 UTC", "last_seen": "2026-03-18 02:27:23 UTC", "sightings": 1 }, { "indicator": "http://203.161.47.138/oop/dontcrynow.arm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "arm", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-18 02:27:23 UTC", "last_seen": "2026-03-18 02:27:23 UTC", "sightings": 1 }, { "indicator": "http://203.161.47.138/oop/dontcrynow.arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "arm", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-18 02:27:23 UTC", "last_seen": "2026-03-18 02:27:23 UTC", "sightings": 1 }, { "indicator": "http://203.161.47.138/oop/dontcrynow.arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "arm", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-18 02:27:23 UTC", "last_seen": "2026-03-18 02:27:23 UTC", "sightings": 1 }, { "indicator": "http://203.161.47.138/oop/dontcrynow.mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mips", "mirai", "ua-wget" ], "first_seen": "2026-03-18 02:27:23 UTC", "last_seen": "2026-03-18 02:27:23 UTC", "sightings": 1 }, { "indicator": "http://203.161.47.138/oop/dontcrynow.spc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "sparc", "ua-wget" ], "first_seen": "2026-03-18 02:27:23 UTC", "last_seen": "2026-03-18 02:27:23 UTC", "sightings": 1 }, { "indicator": "http://203.161.47.138/oop/dontcrynow.sh4", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "SuperH", "ua-wget" ], "first_seen": "2026-03-18 02:27:23 UTC", "last_seen": "2026-03-18 02:27:23 UTC", "sightings": 1 }, { "indicator": "http://203.161.47.138/oop/dontcrynow.arm", "indicator_type": "url", "source": "URLhaus", "tags": [ "arm", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-18 02:27:23 UTC", "last_seen": "2026-03-18 02:27:23 UTC", "sightings": 1 }, { "indicator": "https://exhys.copyvrok.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 02:24:07 UTC", "last_seen": "2026-03-18 02:24:07 UTC", "sightings": 1 }, { "indicator": "http://120.61.202.93:58831/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 02:22:26 UTC", "last_seen": "2026-03-18 02:22:26 UTC", "sightings": 1 }, { "indicator": "https://vellineal.copyvrok.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 02:17:06 UTC", "last_seen": "2026-03-18 02:17:06 UTC", "sightings": 1 }, { "indicator": "http://121.231.137.46:51317/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-18 02:13:21 UTC", "last_seen": "2026-03-18 02:13:21 UTC", "sightings": 1 }, { "indicator": "http://61.68.175.20:34211/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 02:10:18 UTC", "last_seen": "2026-03-18 02:10:18 UTC", "sightings": 1 }, { "indicator": "https://vor-tidea.copyvrok.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 02:10:06 UTC", "last_seen": "2026-03-18 02:10:06 UTC", "sightings": 1 }, { "indicator": "http://115.63.55.27:44193/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 02:08:11 UTC", "last_seen": "2026-03-18 02:08:11 UTC", "sightings": 1 }, { "indicator": "http://120.60.229.89:38313/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 02:03:20 UTC", "last_seen": "2026-03-18 02:03:20 UTC", "sightings": 1 }, { "indicator": "https://afikku.copyvrok.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 02:03:07 UTC", "last_seen": "2026-03-18 02:03:07 UTC", "sightings": 1 }, { "indicator": "http://117.205.90.249:34895/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 02:00:20 UTC", "last_seen": "2026-03-18 02:00:20 UTC", "sightings": 1 }, { "indicator": "http://117.217.193.248:46523/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 01:57:14 UTC", "last_seen": "2026-03-18 01:57:14 UTC", "sightings": 1 }, { "indicator": "http://110.37.78.177:53799/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 01:57:10 UTC", "last_seen": "2026-03-18 01:57:10 UTC", "sightings": 1 }, { "indicator": "http://59.42.89.220:48392/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 01:54:07 UTC", "last_seen": "2026-03-18 01:54:07 UTC", "sightings": 1 }, { "indicator": "http://123.12.47.238:57010/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 01:53:17 UTC", "last_seen": "2026-03-18 01:53:17 UTC", "sightings": 1 }, { "indicator": "http://123.12.47.238:57010/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 01:51:09 UTC", "last_seen": "2026-03-18 01:51:09 UTC", "sightings": 1 }, { "indicator": "http://61.68.175.20:34211/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 01:47:21 UTC", "last_seen": "2026-03-18 01:47:21 UTC", "sightings": 1 }, { "indicator": "http://115.63.55.27:44193/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 01:41:12 UTC", "last_seen": "2026-03-18 01:41:12 UTC", "sightings": 1 }, { "indicator": "http://117.205.90.249:34895/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 01:40:20 UTC", "last_seen": "2026-03-18 01:40:20 UTC", "sightings": 1 }, { "indicator": "http://117.198.193.19:51797/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 01:35:17 UTC", "last_seen": "2026-03-18 01:35:17 UTC", "sightings": 1 }, { "indicator": "http://59.42.89.220:48392/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 01:28:14 UTC", "last_seen": "2026-03-18 01:28:14 UTC", "sightings": 1 }, { "indicator": "https://link-r5-sat.purosentido.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 01:28:07 UTC", "last_seen": "2026-03-18 01:28:07 UTC", "sightings": 1 }, { "indicator": "http://111.61.92.78:51564/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 01:27:07 UTC", "last_seen": "2026-03-18 01:27:07 UTC", "sightings": 1 }, { "indicator": "http://42.224.255.76:55376/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-18 01:24:10 UTC", "last_seen": "2026-03-18 01:24:10 UTC", "sightings": 1 }, { "indicator": "https://core-q1-rock.purosentido.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 01:22:06 UTC", "last_seen": "2026-03-18 01:22:06 UTC", "sightings": 1 }, { "indicator": "http://27.37.228.169:44188/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 01:19:15 UTC", "last_seen": "2026-03-18 01:19:15 UTC", "sightings": 1 }, { "indicator": "https://base-b9-steel.purosentido.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 01:16:07 UTC", "last_seen": "2026-03-18 01:16:07 UTC", "sightings": 1 }, { "indicator": "https://orbit-n4-moon.purosentido.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 01:10:10 UTC", "last_seen": "2026-03-18 01:10:10 UTC", "sightings": 1 }, { "indicator": "http://117.198.193.19:51797/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 01:07:18 UTC", "last_seen": "2026-03-18 01:07:18 UTC", "sightings": 1 }, { "indicator": "https://space-x0-open.curvazero.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 01:05:08 UTC", "last_seen": "2026-03-18 01:05:08 UTC", "sightings": 1 }, { "indicator": "http://111.61.92.78:51564/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 01:03:21 UTC", "last_seen": "2026-03-18 01:03:21 UTC", "sightings": 1 }, { "indicator": "https://field-z7-vast.curvazero.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 00:59:10 UTC", "last_seen": "2026-03-18 00:59:10 UTC", "sightings": 1 }, { "indicator": "http://42.224.255.76:55376/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-18 00:57:20 UTC", "last_seen": "2026-03-18 00:57:20 UTC", "sightings": 1 }, { "indicator": "http://117.245.216.249:50091/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 00:57:07 UTC", "last_seen": "2026-03-18 00:57:07 UTC", "sightings": 1 }, { "indicator": "http://178.141.186.36:45251/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 00:55:19 UTC", "last_seen": "2026-03-18 00:55:19 UTC", "sightings": 1 }, { "indicator": "http://85.113.165.216:55012/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 00:55:19 UTC", "last_seen": "2026-03-18 00:55:19 UTC", "sightings": 1 }, { "indicator": "http://222.219.4.21:40926/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-18 00:54:09 UTC", "last_seen": "2026-03-18 00:54:09 UTC", "sightings": 1 }, { "indicator": "https://zone-w1-area.curvazero.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 00:54:06 UTC", "last_seen": "2026-03-18 00:54:06 UTC", "sightings": 1 }, { "indicator": "http://116.149.28.146:38722/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-18 00:52:31 UTC", "last_seen": "2026-03-18 00:52:31 UTC", "sightings": 1 }, { "indicator": "https://rim-k9-outer.curvazero.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 00:48:07 UTC", "last_seen": "2026-03-18 00:48:07 UTC", "sightings": 1 }, { "indicator": "https://sync-m8-vision.nexustech-v.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 00:43:06 UTC", "last_seen": "2026-03-18 00:43:06 UTC", "sightings": 1 }, { "indicator": "https://scan-a4-point.nexustech-v.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 00:37:06 UTC", "last_seen": "2026-03-18 00:37:06 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.7/files/8144679401/GFOiw5Q.msi", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "EternalRocks", "fbf543" ], "first_seen": "2026-03-18 00:35:11 UTC", "last_seen": "2026-03-18 00:35:11 UTC", "sightings": 1 }, { "indicator": "https://bridge-e6-light.nexustech-v.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 00:31:11 UTC", "last_seen": "2026-03-18 00:31:11 UTC", "sightings": 1 }, { "indicator": "http://110.37.120.17:44987/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 00:30:19 UTC", "last_seen": "2026-03-18 00:30:19 UTC", "sightings": 1 }, { "indicator": "http://110.37.102.128:55751/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 00:28:06 UTC", "last_seen": "2026-03-18 00:28:06 UTC", "sightings": 1 }, { "indicator": "http://115.53.197.134:53792/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 00:25:16 UTC", "last_seen": "2026-03-18 00:25:16 UTC", "sightings": 1 }, { "indicator": "http://85.113.165.216:55012/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 00:25:16 UTC", "last_seen": "2026-03-18 00:25:16 UTC", "sightings": 1 }, { "indicator": "https://vision-i1-sync.primasfera.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 00:20:12 UTC", "last_seen": "2026-03-18 00:20:12 UTC", "sightings": 1 }, { "indicator": "http://117.209.95.175:53482/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 00:20:10 UTC", "last_seen": "2026-03-18 00:20:10 UTC", "sightings": 1 }, { "indicator": "http://115.58.91.230:41715/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 00:16:17 UTC", "last_seen": "2026-03-18 00:16:17 UTC", "sightings": 1 }, { "indicator": "http://88.88.147.173:4472/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 00:11:16 UTC", "last_seen": "2026-03-18 00:11:16 UTC", "sightings": 1 }, { "indicator": "https://shell-t5-core.primasfera.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 00:09:09 UTC", "last_seen": "2026-03-18 00:09:09 UTC", "sightings": 1 }, { "indicator": "http://117.245.216.249:50091/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 00:03:08 UTC", "last_seen": "2026-03-18 00:03:08 UTC", "sightings": 1 }, { "indicator": "https://trace-y2-alpha.primasfera.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-18 00:03:07 UTC", "last_seen": "2026-03-18 00:03:07 UTC", "sightings": 1 }, { "indicator": "http://110.37.120.17:44987/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 00:02:14 UTC", "last_seen": "2026-03-18 00:02:14 UTC", "sightings": 1 }, { "indicator": "http://110.37.102.128:55751/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-18 00:00:21 UTC", "last_seen": "2026-03-18 00:00:21 UTC", "sightings": 1 }, { "indicator": "http://115.53.197.134:53792/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 23:58:18 UTC", "last_seen": "2026-03-17 23:58:18 UTC", "sightings": 1 }, { "indicator": "https://auth-l9-user.optimumvia.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 23:58:06 UTC", "last_seen": "2026-03-17 23:58:06 UTC", "sightings": 1 }, { "indicator": "https://db-g7-point.optimumvia.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 23:52:06 UTC", "last_seen": "2026-03-17 23:52:06 UTC", "sightings": 1 }, { "indicator": "http://122.157.69.173:33377/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-17 23:50:18 UTC", "last_seen": "2026-03-17 23:50:18 UTC", "sightings": 1 }, { "indicator": "http://117.209.95.175:53482/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 23:49:17 UTC", "last_seen": "2026-03-17 23:49:17 UTC", "sightings": 1 }, { "indicator": "http://37.52.190.75:39072/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 23:46:18 UTC", "last_seen": "2026-03-17 23:46:18 UTC", "sightings": 1 }, { "indicator": "https://base-f4-infra.optimumvia.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 23:46:07 UTC", "last_seen": "2026-03-17 23:46:07 UTC", "sightings": 1 }, { "indicator": "http://115.58.91.230:41715/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 23:45:17 UTC", "last_seen": "2026-03-17 23:45:17 UTC", "sightings": 1 }, { "indicator": "http://58.255.47.212:37090/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 23:45:14 UTC", "last_seen": "2026-03-17 23:45:14 UTC", "sightings": 1 }, { "indicator": "http://110.37.13.213:60794/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 23:44:18 UTC", "last_seen": "2026-03-17 23:44:18 UTC", "sightings": 1 }, { "indicator": "http://61.53.138.202:53561/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 23:43:18 UTC", "last_seen": "2026-03-17 23:43:18 UTC", "sightings": 1 }, { "indicator": "https://net-d8-global.optimumvia.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 23:43:10 UTC", "last_seen": "2026-03-17 23:43:10 UTC", "sightings": 1 }, { "indicator": "https://gate-v7-entry.veloxfundo.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 23:40:09 UTC", "last_seen": "2026-03-17 23:40:09 UTC", "sightings": 1 }, { "indicator": "https://dev-t44-host.veloxfundo.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 23:36:07 UTC", "last_seen": "2026-03-17 23:36:07 UTC", "sightings": 1 }, { "indicator": "https://api-r8-remote.veloxfundo.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 23:33:08 UTC", "last_seen": "2026-03-17 23:33:08 UTC", "sightings": 1 }, { "indicator": "http://110.37.13.213:60794/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 23:32:13 UTC", "last_seen": "2026-03-17 23:32:13 UTC", "sightings": 1 }, { "indicator": "http://117.193.148.143:60396/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 23:30:17 UTC", "last_seen": "2026-03-17 23:30:17 UTC", "sightings": 1 }, { "indicator": "http://122.157.69.173:33377/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-17 23:24:13 UTC", "last_seen": "2026-03-17 23:24:13 UTC", "sightings": 1 }, { "indicator": "http://37.52.190.75:39072/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 23:22:18 UTC", "last_seen": "2026-03-17 23:22:18 UTC", "sightings": 1 }, { "indicator": "http://110.182.236.7:43128/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-17 23:20:08 UTC", "last_seen": "2026-03-17 23:20:08 UTC", "sightings": 1 }, { "indicator": "https://infra-z0-static.fluxovivavo.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 23:17:07 UTC", "last_seen": "2026-03-17 23:17:07 UTC", "sightings": 1 }, { "indicator": "https://dist-k4-meta.fluxovivavo.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 23:13:06 UTC", "last_seen": "2026-03-17 23:13:06 UTC", "sightings": 1 }, { "indicator": "http://61.53.138.202:53561/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 23:12:13 UTC", "last_seen": "2026-03-17 23:12:13 UTC", "sightings": 1 }, { "indicator": "https://v1-sync-h07.fluxovivavo.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 23:06:07 UTC", "last_seen": "2026-03-17 23:06:07 UTC", "sightings": 1 }, { "indicator": "https://id-x992-node.fluxovivavo.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 23:00:09 UTC", "last_seen": "2026-03-17 23:00:09 UTC", "sightings": 1 }, { "indicator": "http://221.13.235.193:53567/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 22:55:16 UTC", "last_seen": "2026-03-17 22:55:16 UTC", "sightings": 1 }, { "indicator": "http://178.16.54.73/IeEGYOrPIHEg8WmroKfsCF", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "PowerPC", "ua-wget" ], "first_seen": "2026-03-17 22:48:06 UTC", "last_seen": "2026-03-17 22:48:06 UTC", "sightings": 1 }, { "indicator": "http://110.182.236.7:43128/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-17 22:47:17 UTC", "last_seen": "2026-03-17 22:47:17 UTC", "sightings": 1 }, { "indicator": "http://45.88.105.142/1.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543", "Vidar" ], "first_seen": "2026-03-17 22:45:12 UTC", "last_seen": "2026-03-17 22:45:12 UTC", "sightings": 1 }, { "indicator": "http://178.16.54.73/pIP5soqMaST8B1IQK51Pn", "indicator_type": "url", "source": "URLhaus", "tags": [ "arm", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-17 22:43:19 UTC", "last_seen": "2026-03-17 22:43:19 UTC", "sightings": 1 }, { "indicator": "http://178.16.54.73/sifFBrHc.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai", "sh", "ua-wget" ], "first_seen": "2026-03-17 22:43:19 UTC", "last_seen": "2026-03-17 22:43:19 UTC", "sightings": 1 }, { "indicator": "http://178.16.54.73/BKDqqlGsf5dk0IrwZVgB", "indicator_type": "url", "source": "URLhaus", "tags": [ "arm", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-17 22:43:18 UTC", "last_seen": "2026-03-17 22:43:18 UTC", "sightings": 1 }, { "indicator": "http://178.16.54.73/RsFtwTTsYv34xStYDnjN63iD", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mips", "mirai", "ua-wget" ], "first_seen": "2026-03-17 22:43:18 UTC", "last_seen": "2026-03-17 22:43:18 UTC", "sightings": 1 }, { "indicator": "http://178.16.54.73/fKlK05Fc24ZNucvNh2mhBC", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "PowerPC", "ua-wget" ], "first_seen": "2026-03-17 22:43:18 UTC", "last_seen": "2026-03-17 22:43:18 UTC", "sightings": 1 }, { "indicator": "http://178.16.54.73/q98WAmCazAkPXc3wGh3DFHO", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget", "x86" ], "first_seen": "2026-03-17 22:43:18 UTC", "last_seen": "2026-03-17 22:43:18 UTC", "sightings": 1 }, { "indicator": "http://178.16.54.73/jHlAwTINQWl0vqvfmfPTPWYM", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mips", "mirai", "ua-wget" ], "first_seen": "2026-03-17 22:43:18 UTC", "last_seen": "2026-03-17 22:43:18 UTC", "sightings": 1 }, { "indicator": "http://178.16.54.73/Wl1od1VJR3WquMjE", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "m68k", "mirai", "ua-wget" ], "first_seen": "2026-03-17 22:43:18 UTC", "last_seen": "2026-03-17 22:43:18 UTC", "sightings": 1 }, { "indicator": "http://178.16.54.73/EIy6BAYzYWv0jhNo6oSuvG2Q", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget", "x86" ], "first_seen": "2026-03-17 22:43:18 UTC", "last_seen": "2026-03-17 22:43:18 UTC", "sightings": 1 }, { "indicator": "http://178.16.54.73/EGeWczeqnEXTMUhzwSnhcgz", "indicator_type": "url", "source": "URLhaus", "tags": [ "arm", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-17 22:43:18 UTC", "last_seen": "2026-03-17 22:43:18 UTC", "sightings": 1 }, { "indicator": "http://178.16.54.73/KweOhS08huYPY94Qpd9bz", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget", "x86" ], "first_seen": "2026-03-17 22:43:18 UTC", "last_seen": "2026-03-17 22:43:18 UTC", "sightings": 1 }, { "indicator": "http://178.16.54.73/CJ5YYyumIO0jZ", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "SuperH", "ua-wget" ], "first_seen": "2026-03-17 22:43:18 UTC", "last_seen": "2026-03-17 22:43:18 UTC", "sightings": 1 }, { "indicator": "http://178.16.54.73/B3XOHsUWebhjBm", "indicator_type": "url", "source": "URLhaus", "tags": [ "arm", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-17 22:43:18 UTC", "last_seen": "2026-03-17 22:43:18 UTC", "sightings": 1 }, { "indicator": "https://c1-core-j3.amplitudo-v.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 22:35:08 UTC", "last_seen": "2026-03-17 22:35:08 UTC", "sightings": 1 }, { "indicator": "http://221.13.235.193:53567/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 22:34:18 UTC", "last_seen": "2026-03-17 22:34:18 UTC", "sightings": 1 }, { "indicator": "https://x4-web-p09.amplitudo-v.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 22:30:08 UTC", "last_seen": "2026-03-17 22:30:08 UTC", "sightings": 1 }, { "indicator": "https://z6-app-h11.amplitudo-v.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 22:24:07 UTC", "last_seen": "2026-03-17 22:24:07 UTC", "sightings": 1 }, { "indicator": "https://v0-srv-q82.amplitudo-v.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 22:18:07 UTC", "last_seen": "2026-03-17 22:18:07 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.7/files/7776573655/JHNYcS3.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543", "gcleaner" ], "first_seen": "2026-03-17 22:16:06 UTC", "last_seen": "2026-03-17 22:16:06 UTC", "sightings": 1 }, { "indicator": "http://196.189.9.27:48697/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-17 22:13:18 UTC", "last_seen": "2026-03-17 22:13:18 UTC", "sightings": 1 }, { "indicator": "https://m2-infra-b4.versicodex.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 22:13:07 UTC", "last_seen": "2026-03-17 22:13:07 UTC", "sightings": 1 }, { "indicator": "http://112.198.186.100:34206/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-17 22:08:19 UTC", "last_seen": "2026-03-17 22:08:19 UTC", "sightings": 1 }, { "indicator": "https://k5-dist-z07.versicodex.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 22:07:06 UTC", "last_seen": "2026-03-17 22:07:06 UTC", "sightings": 1 }, { "indicator": "https://w3-sync-v99.versicodex.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 22:04:05 UTC", "last_seen": "2026-03-17 22:04:05 UTC", "sightings": 1 }, { "indicator": "http://112.198.186.100:34206/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-17 21:56:08 UTC", "last_seen": "2026-03-17 21:56:08 UTC", "sightings": 1 }, { "indicator": "https://b1rch0-route.yellglass.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 21:47:11 UTC", "last_seen": "2026-03-17 21:47:11 UTC", "sightings": 1 }, { "indicator": "http://196.189.9.27:48697/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-17 21:44:26 UTC", "last_seen": "2026-03-17 21:44:26 UTC", "sightings": 1 }, { "indicator": "https://quordra5a.yellglass.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 21:42:07 UTC", "last_seen": "2026-03-17 21:42:07 UTC", "sightings": 1 }, { "indicator": "http://110.36.23.65:54572/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 21:39:20 UTC", "last_seen": "2026-03-17 21:39:20 UTC", "sightings": 1 }, { "indicator": "http://110.39.228.78:51031/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 21:37:11 UTC", "last_seen": "2026-03-17 21:37:11 UTC", "sightings": 1 }, { "indicator": "https://driver-tru.yellglass.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 21:37:10 UTC", "last_seen": "2026-03-17 21:37:10 UTC", "sightings": 1 }, { "indicator": "https://dynlineal3.yellglass.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 21:34:09 UTC", "last_seen": "2026-03-17 21:34:09 UTC", "sightings": 1 }, { "indicator": "http://42.7.194.79:52527/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 21:31:20 UTC", "last_seen": "2026-03-17 21:31:20 UTC", "sightings": 1 }, { "indicator": "http://110.36.23.65:54572/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 21:18:23 UTC", "last_seen": "2026-03-17 21:18:23 UTC", "sightings": 1 }, { "indicator": "http://42.7.194.79:52527/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 21:17:20 UTC", "last_seen": "2026-03-17 21:17:20 UTC", "sightings": 1 }, { "indicator": "http://125.43.82.232:56342/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 21:16:21 UTC", "last_seen": "2026-03-17 21:16:21 UTC", "sightings": 1 }, { "indicator": "http://222.127.49.161:59572/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-17 21:13:16 UTC", "last_seen": "2026-03-17 21:13:16 UTC", "sightings": 1 }, { "indicator": "https://cultur3-array.ratflat.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 21:12:06 UTC", "last_seen": "2026-03-17 21:12:06 UTC", "sightings": 1 }, { "indicator": "http://110.39.228.78:51031/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 21:06:28 UTC", "last_seen": "2026-03-17 21:06:28 UTC", "sightings": 1 }, { "indicator": "https://qxff.ratflat.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 21:06:07 UTC", "last_seen": "2026-03-17 21:06:07 UTC", "sightings": 1 }, { "indicator": "http://158.94.211.162/14.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "BlackMatter", "dropped-by-Phorpiex" ], "first_seen": "2026-03-17 21:03:07 UTC", "last_seen": "2026-03-17 21:03:07 UTC", "sightings": 1 }, { "indicator": "http://158.94.211.162/12.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "BlackMatter", "dropped-by-Phorpiex" ], "first_seen": "2026-03-17 21:03:07 UTC", "last_seen": "2026-03-17 21:03:07 UTC", "sightings": 1 }, { "indicator": "http://158.94.211.162/11.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "BlackMatter", "dropped-by-Phorpiex" ], "first_seen": "2026-03-17 21:03:07 UTC", "last_seen": "2026-03-17 21:03:07 UTC", "sightings": 1 }, { "indicator": "http://158.94.211.162/13.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "BlackMatter", "dropped-by-Phorpiex" ], "first_seen": "2026-03-17 21:03:07 UTC", "last_seen": "2026-03-17 21:03:07 UTC", "sightings": 1 }, { "indicator": "http://158.94.211.162/6.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "BlackMatter", "dropped-by-Phorpiex" ], "first_seen": "2026-03-17 21:02:06 UTC", "last_seen": "2026-03-17 21:02:06 UTC", "sightings": 1 }, { "indicator": "http://158.94.211.162/4.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "BlackMatter", "dropped-by-Phorpiex" ], "first_seen": "2026-03-17 21:02:06 UTC", "last_seen": "2026-03-17 21:02:06 UTC", "sightings": 1 }, { "indicator": "http://158.94.211.162/9.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "BlackMatter", "dropped-by-Phorpiex" ], "first_seen": "2026-03-17 21:02:06 UTC", "last_seen": "2026-03-17 21:02:06 UTC", "sightings": 1 }, { "indicator": "http://158.94.211.162/5.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "BlackMatter", "dropped-by-Phorpiex" ], "first_seen": "2026-03-17 21:02:06 UTC", "last_seen": "2026-03-17 21:02:06 UTC", "sightings": 1 }, { "indicator": "http://158.94.211.162/8.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "BlackMatter", "dropped-by-Phorpiex" ], "first_seen": "2026-03-17 21:02:06 UTC", "last_seen": "2026-03-17 21:02:06 UTC", "sightings": 1 }, { "indicator": "http://158.94.211.162/7.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "BlackMatter", "dropped-by-Phorpiex" ], "first_seen": "2026-03-17 21:02:06 UTC", "last_seen": "2026-03-17 21:02:06 UTC", "sightings": 1 }, { "indicator": "http://158.94.211.162/10.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "BlackMatter", "dropped-by-Phorpiex" ], "first_seen": "2026-03-17 21:02:06 UTC", "last_seen": "2026-03-17 21:02:06 UTC", "sightings": 1 }, { "indicator": "http://115.48.146.72:34536/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 21:01:21 UTC", "last_seen": "2026-03-17 21:01:21 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/moyousry95/test/refs/heads/main/test.bat", "indicator_type": "url", "source": "URLhaus", "tags": [ "156-233-71-230", "github", "ua-wget" ], "first_seen": "2026-03-17 21:01:09 UTC", "last_seen": "2026-03-17 21:01:09 UTC", "sightings": 1 }, { "indicator": "http://158.94.211.162/1.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "BlackMatter", "dropped-by-Phorpiex" ], "first_seen": "2026-03-17 21:01:08 UTC", "last_seen": "2026-03-17 21:01:08 UTC", "sightings": 1 }, { "indicator": "http://158.94.211.162/2.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "BlackMatter", "dropped-by-Phorpiex" ], "first_seen": "2026-03-17 21:01:08 UTC", "last_seen": "2026-03-17 21:01:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/moyousry95/slash2/refs/heads/main/Security.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "156-233-71-230", "AsyncRAT", "github", "ua-wget" ], "first_seen": "2026-03-17 21:01:08 UTC", "last_seen": "2026-03-17 21:01:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/moyousry95/slash2/refs/heads/main/payment.bat", "indicator_type": "url", "source": "URLhaus", "tags": [ "156-233-71-230", "github", "ua-wget", "xworm" ], "first_seen": "2026-03-17 21:01:08 UTC", "last_seen": "2026-03-17 21:01:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/moyousry95/slash/refs/heads/main/Graphics.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "156-233-71-230", "AsyncRAT", "github", "ua-wget" ], "first_seen": "2026-03-17 21:01:08 UTC", "last_seen": "2026-03-17 21:01:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/moyousry95/slash/refs/heads/main/SecurityHealthSystry.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "156-233-71-230", "AsyncRAT", "github", "ua-wget" ], "first_seen": "2026-03-17 21:01:08 UTC", "last_seen": "2026-03-17 21:01:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/moyousry95/slash/refs/heads/main/Graphics.ico", "indicator_type": "url", "source": "URLhaus", "tags": [ "156-233-71-230", "github", "ua-wget" ], "first_seen": "2026-03-17 21:01:08 UTC", "last_seen": "2026-03-17 21:01:08 UTC", "sightings": 1 }, { "indicator": "https://tiny-stack.ratflat.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 21:01:07 UTC", "last_seen": "2026-03-17 21:01:07 UTC", "sightings": 1 }, { "indicator": "http://158.94.211.162/3.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "BlackMatter", "dropped-by-Phorpiex" ], "first_seen": "2026-03-17 21:01:07 UTC", "last_seen": "2026-03-17 21:01:07 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/moyousry95/slash2/refs/heads/main/Security.ico", "indicator_type": "url", "source": "URLhaus", "tags": [ "156-233-71-230", "github", "ua-wget" ], "first_seen": "2026-03-17 21:01:07 UTC", "last_seen": "2026-03-17 21:01:07 UTC", "sightings": 1 }, { "indicator": "http://61.52.113.101:56565/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 20:59:21 UTC", "last_seen": "2026-03-17 20:59:21 UTC", "sightings": 1 }, { "indicator": "https://nordraal4.ratflat.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 20:55:07 UTC", "last_seen": "2026-03-17 20:55:07 UTC", "sightings": 1 }, { "indicator": "http://115.48.146.72:34536/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 20:50:22 UTC", "last_seen": "2026-03-17 20:50:22 UTC", "sightings": 1 }, { "indicator": "https://petalcra.catflat.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 20:50:08 UTC", "last_seen": "2026-03-17 20:50:08 UTC", "sightings": 1 }, { "indicator": "https://156.233.71.230/Interac_e-transfer.bat", "indicator_type": "url", "source": "URLhaus", "tags": [ "Adware.Techsnab", "base64", "bat", "opendir", "ua-wget" ], "first_seen": "2026-03-17 20:47:06 UTC", "last_seen": "2026-03-17 20:47:06 UTC", "sightings": 1 }, { "indicator": "https://156.233.71.230/mego2.bat", "indicator_type": "url", "source": "URLhaus", "tags": [ "base64", "bat", "opendir", "ua-wget" ], "first_seen": "2026-03-17 20:46:09 UTC", "last_seen": "2026-03-17 20:46:09 UTC", "sightings": 1 }, { "indicator": "https://156.233.71.230/interac.bat", "indicator_type": "url", "source": "URLhaus", "tags": [ "base64", "bat", "opendir", "ua-wget" ], "first_seen": "2026-03-17 20:46:09 UTC", "last_seen": "2026-03-17 20:46:09 UTC", "sightings": 1 }, { "indicator": "http://156.233.71.230/EN/Exe/nhFRAN/interac.ico", "indicator_type": "url", "source": "URLhaus", "tags": [ "156-233-71-230", "opendir", "ua-wget" ], "first_seen": "2026-03-17 20:46:09 UTC", "last_seen": "2026-03-17 20:46:09 UTC", "sightings": 1 }, { "indicator": "http://156.233.71.230/EN/Exe/XmZtgu/Client.ico", "indicator_type": "url", "source": "URLhaus", "tags": [ "156-233-71-230", "opendir", "ua-wget" ], "first_seen": "2026-03-17 20:46:09 UTC", "last_seen": "2026-03-17 20:46:09 UTC", "sightings": 1 }, { "indicator": "http://156.233.71.230/EN/Exe/XmZtgu/Client.bat", "indicator_type": "url", "source": "URLhaus", "tags": [ "156-233-71-230", "Adware.Techsnab", "opendir", "ua-wget" ], "first_seen": "2026-03-17 20:46:09 UTC", "last_seen": "2026-03-17 20:46:09 UTC", "sightings": 1 }, { "indicator": "https://156.233.71.230/33.bat", "indicator_type": "url", "source": "URLhaus", "tags": [ "base64", "bat", "opendir", "ua-wget" ], "first_seen": "2026-03-17 20:46:09 UTC", "last_seen": "2026-03-17 20:46:09 UTC", "sightings": 1 }, { "indicator": "https://156.233.71.230/mego200.bat", "indicator_type": "url", "source": "URLhaus", "tags": [ "base64", "bat", "opendir", "ua-wget" ], "first_seen": "2026-03-17 20:46:09 UTC", "last_seen": "2026-03-17 20:46:09 UTC", "sightings": 1 }, { "indicator": "https://156.233.71.230/mego.bat", "indicator_type": "url", "source": "URLhaus", "tags": [ "base64", "bat", "opendir", "ua-wget" ], "first_seen": "2026-03-17 20:46:09 UTC", "last_seen": "2026-03-17 20:46:09 UTC", "sightings": 1 }, { "indicator": "http://156.233.71.230/EN/Exe/DBopwb/MEGO-BAT.bat", "indicator_type": "url", "source": "URLhaus", "tags": [ "156-233-71-230", "opendir", "ua-wget", "xworm" ], "first_seen": "2026-03-17 20:46:09 UTC", "last_seen": "2026-03-17 20:46:09 UTC", "sightings": 1 }, { "indicator": "http://156.233.71.230/EN/Exe/nhFRAN/interac.bat", "indicator_type": "url", "source": "URLhaus", "tags": [ "156-233-71-230", "AsyncRAT", "opendir", "ua-wget" ], "first_seen": "2026-03-17 20:46:09 UTC", "last_seen": "2026-03-17 20:46:09 UTC", "sightings": 1 }, { "indicator": "https://156.233.71.230/interac-viewer.bat", "indicator_type": "url", "source": "URLhaus", "tags": [ "Adware.Techsnab", "base64", "bat", "opendir", "ua-wget" ], "first_seen": "2026-03-17 20:46:08 UTC", "last_seen": "2026-03-17 20:46:08 UTC", "sightings": 1 }, { "indicator": "http://156.233.71.230/EN/Exe/OdI5Py/Client.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "156-233-71-230", "Adware.Techsnab", "opendir", "ua-wget" ], "first_seen": "2026-03-17 20:45:21 UTC", "last_seen": "2026-03-17 20:45:21 UTC", "sightings": 1 }, { "indicator": "http://156.233.71.230/EN/Exe/kSYMP4/MEGO-BAT.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "156-233-71-230", "opendir", "ua-wget" ], "first_seen": "2026-03-17 20:45:20 UTC", "last_seen": "2026-03-17 20:45:20 UTC", "sightings": 1 }, { "indicator": "http://156.233.71.230/EN/Exe/XmZtgu/Client.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "156-233-71-230", "Adware.Techsnab", "opendir", "ua-wget" ], "first_seen": "2026-03-17 20:45:14 UTC", "last_seen": "2026-03-17 20:45:14 UTC", "sightings": 1 }, { "indicator": "http://156.233.71.230/EN/Exe/DBopwb/MEGO-BAT.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "156-233-71-230", "opendir", "ua-wget" ], "first_seen": "2026-03-17 20:45:13 UTC", "last_seen": "2026-03-17 20:45:13 UTC", "sightings": 1 }, { "indicator": "http://156.233.71.230/EN/Exe/DBopwb/MEGO-BAT.ico", "indicator_type": "url", "source": "URLhaus", "tags": [ "156-233-71-230", "opendir", "ua-wget" ], "first_seen": "2026-03-17 20:45:10 UTC", "last_seen": "2026-03-17 20:45:10 UTC", "sightings": 1 }, { "indicator": "http://156.233.71.230/EN/Exe/kSYMP4/MEGO-BAT.bat", "indicator_type": "url", "source": "URLhaus", "tags": [ "156-233-71-230", "opendir", "ua-wget", "xworm" ], "first_seen": "2026-03-17 20:45:10 UTC", "last_seen": "2026-03-17 20:45:10 UTC", "sightings": 1 }, { "indicator": "http://156.233.71.230/EN/Exe/kSYMP4/MEGO-BAT.ico", "indicator_type": "url", "source": "URLhaus", "tags": [ "156-233-71-230", "opendir", "ua-wget" ], "first_seen": "2026-03-17 20:45:10 UTC", "last_seen": "2026-03-17 20:45:10 UTC", "sightings": 1 }, { "indicator": "http://156.233.71.230/EN/Exe/nhFRAN/interac.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "156-233-71-230", "AsyncRAT", "opendir", "ua-wget" ], "first_seen": "2026-03-17 20:45:10 UTC", "last_seen": "2026-03-17 20:45:10 UTC", "sightings": 1 }, { "indicator": "http://156.233.71.230/EN/Exe/OdI5Py/Client.bat", "indicator_type": "url", "source": "URLhaus", "tags": [ "156-233-71-230", "Adware.Techsnab", "opendir", "ua-wget" ], "first_seen": "2026-03-17 20:45:10 UTC", "last_seen": "2026-03-17 20:45:10 UTC", "sightings": 1 }, { "indicator": "http://156.233.71.230/EN/Exe/OdI5Py/Client.ico", "indicator_type": "url", "source": "URLhaus", "tags": [ "156-233-71-230", "opendir", "ua-wget" ], "first_seen": "2026-03-17 20:45:09 UTC", "last_seen": "2026-03-17 20:45:09 UTC", "sightings": 1 }, { "indicator": "http://42.235.38.164:47661/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 20:44:18 UTC", "last_seen": "2026-03-17 20:44:18 UTC", "sightings": 1 }, { "indicator": "http://125.43.82.232:56342/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 20:44:17 UTC", "last_seen": "2026-03-17 20:44:17 UTC", "sightings": 1 }, { "indicator": "https://nqsl.catflat.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 20:44:06 UTC", "last_seen": "2026-03-17 20:44:06 UTC", "sightings": 1 }, { "indicator": "http://182.117.110.96:45178/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 20:39:22 UTC", "last_seen": "2026-03-17 20:39:22 UTC", "sightings": 1 }, { "indicator": "http://123.179.234.175:41505/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-17 20:38:20 UTC", "last_seen": "2026-03-17 20:38:20 UTC", "sightings": 1 }, { "indicator": "https://delive-crest.catflat.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 20:38:06 UTC", "last_seen": "2026-03-17 20:38:06 UTC", "sightings": 1 }, { "indicator": "https://riv3-node.catflat.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 20:34:06 UTC", "last_seen": "2026-03-17 20:34:06 UTC", "sightings": 1 }, { "indicator": "http://61.52.113.101:56565/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 20:32:21 UTC", "last_seen": "2026-03-17 20:32:21 UTC", "sightings": 1 }, { "indicator": "http://123.12.230.144:52774/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 20:27:20 UTC", "last_seen": "2026-03-17 20:27:20 UTC", "sightings": 1 }, { "indicator": "https://banne-shi.catflow.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 20:27:07 UTC", "last_seen": "2026-03-17 20:27:07 UTC", "sightings": 1 }, { "indicator": "https://norcore4ex.catflow.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 20:21:07 UTC", "last_seen": "2026-03-17 20:21:07 UTC", "sightings": 1 }, { "indicator": "http://83.229.17.114/bins.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "sh", "ua-wget" ], "first_seen": "2026-03-17 20:20:24 UTC", "last_seen": "2026-03-17 20:20:24 UTC", "sightings": 1 }, { "indicator": "http://83.229.17.114/OwO.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "sh", "ua-wget" ], "first_seen": "2026-03-17 20:19:20 UTC", "last_seen": "2026-03-17 20:19:20 UTC", "sightings": 1 }, { "indicator": "http://83.229.17.114/Dior.arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "gafgyt", "ua-wget" ], "first_seen": "2026-03-17 20:18:16 UTC", "last_seen": "2026-03-17 20:18:16 UTC", "sightings": 1 }, { "indicator": "http://83.229.17.114/Dior.mpsl", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-17 20:18:16 UTC", "last_seen": "2026-03-17 20:18:16 UTC", "sightings": 1 }, { "indicator": "http://83.229.17.114/Dior.arm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "gafgyt", "ua-wget" ], "first_seen": "2026-03-17 20:18:16 UTC", "last_seen": "2026-03-17 20:18:16 UTC", "sightings": 1 }, { "indicator": "http://42.235.38.164:47661/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 20:18:12 UTC", "last_seen": "2026-03-17 20:18:12 UTC", "sightings": 1 }, { "indicator": "http://83.229.17.114/Dior.spc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "gafgyt", "ua-wget" ], "first_seen": "2026-03-17 20:18:12 UTC", "last_seen": "2026-03-17 20:18:12 UTC", "sightings": 1 }, { "indicator": "http://83.229.17.114/Dior.i586", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "gafgyt", "ua-wget" ], "first_seen": "2026-03-17 20:18:12 UTC", "last_seen": "2026-03-17 20:18:12 UTC", "sightings": 1 }, { "indicator": "http://83.229.17.114/Dior.arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "gafgyt", "ua-wget" ], "first_seen": "2026-03-17 20:18:12 UTC", "last_seen": "2026-03-17 20:18:12 UTC", "sightings": 1 }, { "indicator": "http://83.229.17.114/Dior.i686", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "gafgyt", "ua-wget" ], "first_seen": "2026-03-17 20:18:12 UTC", "last_seen": "2026-03-17 20:18:12 UTC", "sightings": 1 }, { "indicator": "http://83.229.17.114/Dior.ppc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-17 20:18:12 UTC", "last_seen": "2026-03-17 20:18:12 UTC", "sightings": 1 }, { "indicator": "http://83.229.17.114/Dior.arc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "gafgyt", "ua-wget" ], "first_seen": "2026-03-17 20:18:12 UTC", "last_seen": "2026-03-17 20:18:12 UTC", "sightings": 1 }, { "indicator": "http://83.229.17.114/Dior.mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-17 20:18:11 UTC", "last_seen": "2026-03-17 20:18:11 UTC", "sightings": 1 }, { "indicator": "http://83.229.17.114/Dior.ppc-440fp", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-17 20:18:11 UTC", "last_seen": "2026-03-17 20:18:11 UTC", "sightings": 1 }, { "indicator": "http://83.229.17.114/Dior.x86", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-17 20:18:11 UTC", "last_seen": "2026-03-17 20:18:11 UTC", "sightings": 1 }, { "indicator": "http://83.229.17.114/Dior.sh4", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-17 20:18:11 UTC", "last_seen": "2026-03-17 20:18:11 UTC", "sightings": 1 }, { "indicator": "http://83.229.17.114/Dior.arm4", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "gafgyt", "ua-wget" ], "first_seen": "2026-03-17 20:18:11 UTC", "last_seen": "2026-03-17 20:18:11 UTC", "sightings": 1 }, { "indicator": "http://83.229.17.114/Dior.m68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-17 20:18:11 UTC", "last_seen": "2026-03-17 20:18:11 UTC", "sightings": 1 }, { "indicator": "https://nmgixmc.catflow.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 20:18:10 UTC", "last_seen": "2026-03-17 20:18:10 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.48/android_x86", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-17 20:15:14 UTC", "last_seen": "2026-03-17 20:15:14 UTC", "sightings": 1 }, { "indicator": "http://123.179.234.175:41505/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-17 20:14:19 UTC", "last_seen": "2026-03-17 20:14:19 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.43/hiddenbin/boatnet.x86", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-17 20:14:16 UTC", "last_seen": "2026-03-17 20:14:16 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.43/hiddenbin/boatnet.arm", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-17 20:13:17 UTC", "last_seen": "2026-03-17 20:13:17 UTC", "sightings": 1 }, { "indicator": "http://110.36.20.111:38850/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 20:12:18 UTC", "last_seen": "2026-03-17 20:12:18 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.43/hiddenbin/boatnet.m68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-17 20:12:18 UTC", "last_seen": "2026-03-17 20:12:18 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.43/hiddenbin/boatnet.ppc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-17 20:12:18 UTC", "last_seen": "2026-03-17 20:12:18 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.43/hiddenbin/boatnet.spc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-17 20:12:18 UTC", "last_seen": "2026-03-17 20:12:18 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.43/hiddenbin/boatnet.mpsl", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-17 20:11:14 UTC", "last_seen": "2026-03-17 20:11:14 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.43/hiddenbin/boatnet.arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-17 20:11:13 UTC", "last_seen": "2026-03-17 20:11:13 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.43/hiddenbin/boatnet.arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-17 20:11:13 UTC", "last_seen": "2026-03-17 20:11:13 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.43/hiddenbin/boatnet.mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-17 20:11:13 UTC", "last_seen": "2026-03-17 20:11:13 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.43/hiddenbin/boatnet.sh4", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-17 20:11:13 UTC", "last_seen": "2026-03-17 20:11:13 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.43/hiddenbin/boatnet.arm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-17 20:11:13 UTC", "last_seen": "2026-03-17 20:11:13 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.43/ohshit.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai", "sh", "ua-wget" ], "first_seen": "2026-03-17 20:11:13 UTC", "last_seen": "2026-03-17 20:11:13 UTC", "sightings": 1 }, { "indicator": "https://openpure.catflow.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 20:10:09 UTC", "last_seen": "2026-03-17 20:10:09 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.67/vps.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "sh", "ua-wget" ], "first_seen": "2026-03-17 20:07:15 UTC", "last_seen": "2026-03-17 20:07:15 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.67/sa.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "sh", "ua-wget" ], "first_seen": "2026-03-17 20:06:19 UTC", "last_seen": "2026-03-17 20:06:19 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.67/za.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "sh", "ua-wget" ], "first_seen": "2026-03-17 20:06:13 UTC", "last_seen": "2026-03-17 20:06:13 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.67/spoofer.base64", "indicator_type": "url", "source": "URLhaus", "tags": [ "base64", "ua-wget" ], "first_seen": "2026-03-17 20:04:09 UTC", "last_seen": "2026-03-17 20:04:09 UTC", "sightings": 1 }, { "indicator": "http://182.127.177.145:55513/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 20:03:18 UTC", "last_seen": "2026-03-17 20:03:18 UTC", "sightings": 1 }, { "indicator": "https://gat3wa-craft.slowcube.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 20:03:07 UTC", "last_seen": "2026-03-17 20:03:07 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.67/spoofer.b64", "indicator_type": "url", "source": "URLhaus", "tags": [ "base64", "ua-wget" ], "first_seen": "2026-03-17 20:03:07 UTC", "last_seen": "2026-03-17 20:03:07 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.67/spoofer.hex", "indicator_type": "url", "source": "URLhaus", "tags": [ "ua-wget" ], "first_seen": "2026-03-17 20:03:06 UTC", "last_seen": "2026-03-17 20:03:06 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.67/spoofer.b642", "indicator_type": "url", "source": "URLhaus", "tags": [ "base64", "ua-wget" ], "first_seen": "2026-03-17 20:03:05 UTC", "last_seen": "2026-03-17 20:03:05 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.67/spof1", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-17 20:02:20 UTC", "last_seen": "2026-03-17 20:02:20 UTC", "sightings": 1 }, { "indicator": "https://1609tkt.slowcube.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 19:55:07 UTC", "last_seen": "2026-03-17 19:55:07 UTC", "sightings": 1 }, { "indicator": "http://115.61.120.173:40150/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 19:49:14 UTC", "last_seen": "2026-03-17 19:49:14 UTC", "sightings": 1 }, { "indicator": "http://110.36.19.101:38626/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 19:48:17 UTC", "last_seen": "2026-03-17 19:48:17 UTC", "sightings": 1 }, { "indicator": "https://launchprocess.slowcube.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 19:48:08 UTC", "last_seen": "2026-03-17 19:48:08 UTC", "sightings": 1 }, { "indicator": "https://cedarclient.slowcube.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 19:41:06 UTC", "last_seen": "2026-03-17 19:41:06 UTC", "sightings": 1 }, { "indicator": "http://125.41.227.150:47048/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 19:40:17 UTC", "last_seen": "2026-03-17 19:40:17 UTC", "sightings": 1 }, { "indicator": "https://znnyfo.sandball.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 19:32:07 UTC", "last_seen": "2026-03-17 19:32:07 UTC", "sightings": 1 }, { "indicator": "http://182.127.177.145:55513/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 19:30:08 UTC", "last_seen": "2026-03-17 19:30:08 UTC", "sightings": 1 }, { "indicator": "https://sertideex1.sandball.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 19:26:07 UTC", "last_seen": "2026-03-17 19:26:07 UTC", "sightings": 1 }, { "indicator": "http://82.140.232.162:36937/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 19:23:19 UTC", "last_seen": "2026-03-17 19:23:19 UTC", "sightings": 1 }, { "indicator": "https://klvkpw.sandball.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 19:23:06 UTC", "last_seen": "2026-03-17 19:23:06 UTC", "sightings": 1 }, { "indicator": "http://178.16.54.73/O2KseZ2Rs2kK4F", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-17 19:22:13 UTC", "last_seen": "2026-03-17 19:22:13 UTC", "sightings": 1 }, { "indicator": "http://178.16.54.73/7lmqyBAjov9oMU", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-17 19:21:11 UTC", "last_seen": "2026-03-17 19:21:11 UTC", "sightings": 1 }, { "indicator": "http://178.16.54.73/FZXSOupfc3xz", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-17 19:20:13 UTC", "last_seen": "2026-03-17 19:20:13 UTC", "sightings": 1 }, { "indicator": "http://178.16.54.73/1MstuFfwhCXulrI", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-17 19:20:12 UTC", "last_seen": "2026-03-17 19:20:12 UTC", "sightings": 1 }, { "indicator": "http://178.16.54.73/mOv9lSkDu5BYI3", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-17 19:20:12 UTC", "last_seen": "2026-03-17 19:20:12 UTC", "sightings": 1 }, { "indicator": "http://178.16.54.73/cwpj9HGq8KjAUVTU", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-17 19:20:12 UTC", "last_seen": "2026-03-17 19:20:12 UTC", "sightings": 1 }, { "indicator": "http://178.16.54.73/zGA6GUqtaiYtKV", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-17 19:20:12 UTC", "last_seen": "2026-03-17 19:20:12 UTC", "sightings": 1 }, { "indicator": "http://178.16.54.73/N9OXfQc1EvrvIymQ", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-17 19:20:12 UTC", "last_seen": "2026-03-17 19:20:12 UTC", "sightings": 1 }, { "indicator": "http://178.16.54.73/nN5oWS8MHN04Ygt", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-17 19:20:12 UTC", "last_seen": "2026-03-17 19:20:12 UTC", "sightings": 1 }, { "indicator": "http://178.16.54.73/F3yJCc1PmcByE3DUNEqZ5n", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-17 19:20:12 UTC", "last_seen": "2026-03-17 19:20:12 UTC", "sightings": 1 }, { "indicator": "http://178.16.54.73/rHSgIuc6bWCRNhnI", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-17 19:20:12 UTC", "last_seen": "2026-03-17 19:20:12 UTC", "sightings": 1 }, { "indicator": "http://178.16.54.73/D6B8YmcOcvmdInZ7", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-17 19:20:12 UTC", "last_seen": "2026-03-17 19:20:12 UTC", "sightings": 1 }, { "indicator": "http://178.16.54.73/aPG03YviN7x46", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-17 19:20:12 UTC", "last_seen": "2026-03-17 19:20:12 UTC", "sightings": 1 }, { "indicator": "http://123.12.230.144:52774/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 19:19:19 UTC", "last_seen": "2026-03-17 19:19:19 UTC", "sightings": 1 }, { "indicator": "http://178.16.54.73/8pr95K9.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai", "sh", "ua-wget" ], "first_seen": "2026-03-17 19:19:12 UTC", "last_seen": "2026-03-17 19:19:12 UTC", "sightings": 1 }, { "indicator": "http://110.36.19.101:38626/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 19:18:11 UTC", "last_seen": "2026-03-17 19:18:11 UTC", "sightings": 1 }, { "indicator": "http://125.41.227.150:47048/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 19:15:20 UTC", "last_seen": "2026-03-17 19:15:20 UTC", "sightings": 1 }, { "indicator": "http://115.53.220.73:59477/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 19:13:19 UTC", "last_seen": "2026-03-17 19:13:19 UTC", "sightings": 1 }, { "indicator": "https://26u4.sandball.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 19:09:06 UTC", "last_seen": "2026-03-17 19:09:06 UTC", "sightings": 1 }, { "indicator": "https://peak-tra.saltball.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 19:02:07 UTC", "last_seen": "2026-03-17 19:02:07 UTC", "sightings": 1 }, { "indicator": "https://geo-5car1et.saltball.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 18:59:07 UTC", "last_seen": "2026-03-17 18:59:07 UTC", "sightings": 1 }, { "indicator": "http://42.226.76.67:48366/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 18:58:16 UTC", "last_seen": "2026-03-17 18:58:16 UTC", "sightings": 1 }, { "indicator": "http://82.140.232.162:36937/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 18:57:08 UTC", "last_seen": "2026-03-17 18:57:08 UTC", "sightings": 1 }, { "indicator": "http://182.119.229.216:57784/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 18:51:07 UTC", "last_seen": "2026-03-17 18:51:07 UTC", "sightings": 1 }, { "indicator": "https://uc450c98c4c09a1c00cf0340baec.dl.dropboxusercontent.com/cd/0/get/C8228at75u6tc2NC4O1EiWEWiXIq_rbgv7DSoBYHJji9JfYoqnvtLUGyUlOu_rnrg8bUDGvyVWeD8sFmbsmc6deHFwWltU7lgILgJz_FIS2YT-ODkOk_6KD_sPP7iftikz7vFh74lDk2l422c1g87lD7PsAfvskbEGew1aIU3ytNtA/file?dl=1#", "indicator_type": "url", "source": "URLhaus", "tags": [ "zip" ], "first_seen": "2026-03-17 18:49:34 UTC", "last_seen": "2026-03-17 18:49:34 UTC", "sightings": 1 }, { "indicator": "https://truemeasur.saltball.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 18:47:07 UTC", "last_seen": "2026-03-17 18:47:07 UTC", "sightings": 1 }, { "indicator": "https://biomefocus.saltball.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 18:39:06 UTC", "last_seen": "2026-03-17 18:39:06 UTC", "sightings": 1 }, { "indicator": "http://42.226.76.67:48366/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 18:32:26 UTC", "last_seen": "2026-03-17 18:32:26 UTC", "sightings": 1 }, { "indicator": "https://compdark.darkboll.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 18:31:07 UTC", "last_seen": "2026-03-17 18:31:07 UTC", "sightings": 1 }, { "indicator": "http://123.10.230.211:47872/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 18:30:19 UTC", "last_seen": "2026-03-17 18:30:19 UTC", "sightings": 1 }, { "indicator": "https://eyw3w.darkboll.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 18:24:08 UTC", "last_seen": "2026-03-17 18:24:08 UTC", "sightings": 1 }, { "indicator": "http://213.87.112.128:47907/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 18:23:11 UTC", "last_seen": "2026-03-17 18:23:11 UTC", "sightings": 1 }, { "indicator": "http://123.10.230.211:47872/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 18:22:20 UTC", "last_seen": "2026-03-17 18:22:20 UTC", "sightings": 1 }, { "indicator": "http://110.37.35.89:58671/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 18:20:17 UTC", "last_seen": "2026-03-17 18:20:17 UTC", "sightings": 1 }, { "indicator": "http://42.178.22.249:52748/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 18:17:21 UTC", "last_seen": "2026-03-17 18:17:21 UTC", "sightings": 1 }, { "indicator": "https://4utu6-forge.darkboll.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 18:15:07 UTC", "last_seen": "2026-03-17 18:15:07 UTC", "sightings": 1 }, { "indicator": "http://61.176.198.170:45950/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 18:11:19 UTC", "last_seen": "2026-03-17 18:11:19 UTC", "sightings": 1 }, { "indicator": "https://hub-phase.darkboll.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 18:08:11 UTC", "last_seen": "2026-03-17 18:08:11 UTC", "sightings": 1 }, { "indicator": "http://110.37.55.92:35466/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 18:04:15 UTC", "last_seen": "2026-03-17 18:04:15 UTC", "sightings": 1 }, { "indicator": "https://circuitpublis.inkpit.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 18:02:06 UTC", "last_seen": "2026-03-17 18:02:06 UTC", "sightings": 1 }, { "indicator": "http://110.37.35.89:58671/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 17:59:18 UTC", "last_seen": "2026-03-17 17:59:18 UTC", "sightings": 1 }, { "indicator": "https://02kbny.inkpit.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 17:59:05 UTC", "last_seen": "2026-03-17 17:59:05 UTC", "sightings": 1 }, { "indicator": "http://121.238.128.82:50544/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-17 17:50:22 UTC", "last_seen": "2026-03-17 17:50:22 UTC", "sightings": 1 }, { "indicator": "http://27.202.231.120:34028/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 17:46:20 UTC", "last_seen": "2026-03-17 17:46:20 UTC", "sightings": 1 }, { "indicator": "https://urb4n-gate.inkpit.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 17:46:10 UTC", "last_seen": "2026-03-17 17:46:10 UTC", "sightings": 1 }, { "indicator": "http://125.40.158.234:34778/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 17:42:17 UTC", "last_seen": "2026-03-17 17:42:17 UTC", "sightings": 1 }, { "indicator": "https://kelvenis7.inkpit.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 17:37:06 UTC", "last_seen": "2026-03-17 17:37:06 UTC", "sightings": 1 }, { "indicator": "http://117.209.24.96:45613/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 17:36:23 UTC", "last_seen": "2026-03-17 17:36:23 UTC", "sightings": 1 }, { "indicator": "https://d15p6-cast.inksky.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 17:29:06 UTC", "last_seen": "2026-03-17 17:29:06 UTC", "sightings": 1 }, { "indicator": "http://117.209.24.96:45613/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 17:24:27 UTC", "last_seen": "2026-03-17 17:24:27 UTC", "sightings": 1 }, { "indicator": "https://neo-t1ny.inksky.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 17:22:07 UTC", "last_seen": "2026-03-17 17:22:07 UTC", "sightings": 1 }, { "indicator": "http://221.14.46.93:34838/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 17:15:10 UTC", "last_seen": "2026-03-17 17:15:10 UTC", "sightings": 1 }, { "indicator": "https://golsec.inksky.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 17:14:06 UTC", "last_seen": "2026-03-17 17:14:06 UTC", "sightings": 1 }, { "indicator": "http://115.48.47.68:55835/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 17:13:21 UTC", "last_seen": "2026-03-17 17:13:21 UTC", "sightings": 1 }, { "indicator": "http://110.37.55.92:35466/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 17:07:22 UTC", "last_seen": "2026-03-17 17:07:22 UTC", "sightings": 1 }, { "indicator": "https://zentide0on.tempiso.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 17:04:06 UTC", "last_seen": "2026-03-17 17:04:06 UTC", "sightings": 1 }, { "indicator": "http://125.40.158.234:34778/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 17:02:25 UTC", "last_seen": "2026-03-17 17:02:25 UTC", "sightings": 1 }, { "indicator": "https://royalmonitor.tempiso.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 16:58:06 UTC", "last_seen": "2026-03-17 16:58:06 UTC", "sightings": 1 }, { "indicator": "http://182.114.194.200:52589/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 16:52:24 UTC", "last_seen": "2026-03-17 16:52:24 UTC", "sightings": 1 }, { "indicator": "https://5c4r-trail.tempiso.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 16:52:07 UTC", "last_seen": "2026-03-17 16:52:07 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.7/files/8180653200/gDNCxUR.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "donutloader", "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-17 16:49:17 UTC", "last_seen": "2026-03-17 16:49:17 UTC", "sightings": 1 }, { "indicator": "https://proto-ed1t.tempiso.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 16:46:11 UTC", "last_seen": "2026-03-17 16:46:11 UTC", "sightings": 1 }, { "indicator": "https://4gen-switch.tempink.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 16:41:07 UTC", "last_seen": "2026-03-17 16:41:07 UTC", "sightings": 1 }, { "indicator": "https://silverins.tempink.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 16:38:07 UTC", "last_seen": "2026-03-17 16:38:07 UTC", "sightings": 1 }, { "indicator": "http://42.224.67.243:41637/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 16:30:20 UTC", "last_seen": "2026-03-17 16:30:20 UTC", "sightings": 1 }, { "indicator": "http://42.87.138.219:34258/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 16:24:20 UTC", "last_seen": "2026-03-17 16:24:20 UTC", "sightings": 1 }, { "indicator": "https://aviator-chek.online/firewall/gfdvxcvn.rar", "indicator_type": "url", "source": "URLhaus", "tags": [ "opendir", "rar" ], "first_seen": "2026-03-17 16:22:11 UTC", "last_seen": "2026-03-17 16:22:11 UTC", "sightings": 1 }, { "indicator": "https://aviator-chek.online/firewall/FileArchiver.rar", "indicator_type": "url", "source": "URLhaus", "tags": [ "opendir", "rar" ], "first_seen": "2026-03-17 16:22:11 UTC", "last_seen": "2026-03-17 16:22:11 UTC", "sightings": 1 }, { "indicator": "https://aviator-chek.online/firewall/driver.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "exe", "opendir" ], "first_seen": "2026-03-17 16:22:11 UTC", "last_seen": "2026-03-17 16:22:11 UTC", "sightings": 1 }, { "indicator": "http://125.41.183.37:45183/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 16:21:09 UTC", "last_seen": "2026-03-17 16:21:09 UTC", "sightings": 1 }, { "indicator": "http://42.224.67.243:41637/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 16:19:19 UTC", "last_seen": "2026-03-17 16:19:19 UTC", "sightings": 1 }, { "indicator": "http://58.37.243.86:58352/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-17 16:17:09 UTC", "last_seen": "2026-03-17 16:17:09 UTC", "sightings": 1 }, { "indicator": "http://27.202.231.120:34028/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 16:15:21 UTC", "last_seen": "2026-03-17 16:15:21 UTC", "sightings": 1 }, { "indicator": "http://110.39.249.174:55516/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 16:07:17 UTC", "last_seen": "2026-03-17 16:07:17 UTC", "sightings": 1 }, { "indicator": "http://77.247.93.40:36940/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-17 15:59:16 UTC", "last_seen": "2026-03-17 15:59:16 UTC", "sightings": 1 }, { "indicator": "http://58.37.243.86:58352/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-17 15:56:12 UTC", "last_seen": "2026-03-17 15:56:12 UTC", "sightings": 1 }, { "indicator": "http://125.41.183.37:45183/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 15:55:26 UTC", "last_seen": "2026-03-17 15:55:26 UTC", "sightings": 1 }, { "indicator": "https://jhh0yt.highjoke.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 15:55:07 UTC", "last_seen": "2026-03-17 15:55:07 UTC", "sightings": 1 }, { "indicator": "http://188.137.230.88/1.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey", "Vidar" ], "first_seen": "2026-03-17 15:49:11 UTC", "last_seen": "2026-03-17 15:49:11 UTC", "sightings": 1 }, { "indicator": "https://alzaptop.online/MSI_084537.png", "indicator_type": "url", "source": "URLhaus", "tags": [ "xworm" ], "first_seen": "2026-03-17 15:48:10 UTC", "last_seen": "2026-03-17 15:48:10 UTC", "sightings": 1 }, { "indicator": "https://alzapdigoo.net/bkp/", "indicator_type": "url", "source": "URLhaus", "tags": [ "ascii", "js", "xworm" ], "first_seen": "2026-03-17 15:48:09 UTC", "last_seen": "2026-03-17 15:48:09 UTC", "sightings": 1 }, { "indicator": "http://182.114.194.200:52589/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 15:47:18 UTC", "last_seen": "2026-03-17 15:47:18 UTC", "sightings": 1 }, { "indicator": "http://169.40.135.69/1000mgofpotassiumaday/arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai", "potassium" ], "first_seen": "2026-03-17 15:47:07 UTC", "last_seen": "2026-03-17 15:47:07 UTC", "sightings": 1 }, { "indicator": "https://lum-draa.jokerun.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 15:46:06 UTC", "last_seen": "2026-03-17 15:46:06 UTC", "sightings": 1 }, { "indicator": "http://196.251.107.24/q8348.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "exe", "QuasarRAT" ], "first_seen": "2026-03-17 15:44:07 UTC", "last_seen": "2026-03-17 15:44:07 UTC", "sightings": 1 }, { "indicator": "http://196.251.107.24/n743.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "exe", "njRAT" ], "first_seen": "2026-03-17 15:44:06 UTC", "last_seen": "2026-03-17 15:44:06 UTC", "sightings": 1 }, { "indicator": "http://196.251.107.24/x834.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "exe", "xworm" ], "first_seen": "2026-03-17 15:44:06 UTC", "last_seen": "2026-03-17 15:44:06 UTC", "sightings": 1 }, { "indicator": "http://196.251.107.24/v38438.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "exe", "VenomRAT" ], "first_seen": "2026-03-17 15:44:06 UTC", "last_seen": "2026-03-17 15:44:06 UTC", "sightings": 1 }, { "indicator": "http://196.251.107.24/UniversalBrowser.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "exe" ], "first_seen": "2026-03-17 15:44:06 UTC", "last_seen": "2026-03-17 15:44:06 UTC", "sightings": 1 }, { "indicator": "http://196.251.107.24/s287.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "exe" ], "first_seen": "2026-03-17 15:44:06 UTC", "last_seen": "2026-03-17 15:44:06 UTC", "sightings": 1 }, { "indicator": "https://firebasestorage.googleapis.com/v0/b/mis-archivos-2026-4b0c7.firebasestorage.app/o/tumfuf.txt?alt=media&token=1fcca767-bf37-4570-9a19-e24cdf9ba210", "indicator_type": "url", "source": "URLhaus", "tags": [ "ascii", "Formbook", "rev-base64-loader" ], "first_seen": "2026-03-17 15:43:09 UTC", "last_seen": "2026-03-17 15:43:09 UTC", "sightings": 1 }, { "indicator": "https://firebasestorage.googleapis.com/v0/b/rodriakd-8413d.appspot.com/o/SV%2FPrince%20Denrik.txt?alt=media&token=a161f2b0-9ad8-4d6e-a621-ea9f4a944d6a", "indicator_type": "url", "source": "URLhaus", "tags": [ "ascii", "Formbook", "rev-base64-loader" ], "first_seen": "2026-03-17 15:43:09 UTC", "last_seen": "2026-03-17 15:43:09 UTC", "sightings": 1 }, { "indicator": "https://gitlab.com/risuyhksadjd-group/risuyhksadjd-project/-/raw/main/cryprodaaa.txt", "indicator_type": "url", "source": "URLhaus", "tags": [ "ascii", "Encoded", "rev-base64-loader" ], "first_seen": "2026-03-17 15:41:10 UTC", "last_seen": "2026-03-17 15:41:10 UTC", "sightings": 1 }, { "indicator": "https://gitlab.com/risuyhksadjd-group/risuyhksadjd-project/-/raw/main/base64.txt", "indicator_type": "url", "source": "URLhaus", "tags": [ "ascii", "Encoded", "rev-base64-loader" ], "first_seen": "2026-03-17 15:41:09 UTC", "last_seen": "2026-03-17 15:41:09 UTC", "sightings": 1 }, { "indicator": "https://gitlab.com/risuyhksadjd-group/risuyhksadjd-project/-/raw/main/cryprodaaa.txt?inline=fal", "indicator_type": "url", "source": "URLhaus", "tags": [ "ascii", "Encoded", "Formbook", "rev-base64-loader" ], "first_seen": "2026-03-17 15:41:08 UTC", "last_seen": "2026-03-17 15:41:08 UTC", "sightings": 1 }, { "indicator": "https://gitlab.com/risuyhksadjd-group/risuyhksadjd-project/-/raw/main/base64_purelog.txt", "indicator_type": "url", "source": "URLhaus", "tags": [ "ascii", "Encoded", "rev-base64-loader" ], "first_seen": "2026-03-17 15:41:08 UTC", "last_seen": "2026-03-17 15:41:08 UTC", "sightings": 1 }, { "indicator": "https://firebasestorage.googleapis.com/v0/b/mis-archivos-2026-4b0c7.firebasestorage.app/o/class.txt?alt=media&token=f1fda03a-6259-44d8-9bfc-013db5668695", "indicator_type": "url", "source": "URLhaus", "tags": [ "ascii", "base64-loader", "Encoded", "Formbook" ], "first_seen": "2026-03-17 15:40:11 UTC", "last_seen": "2026-03-17 15:40:11 UTC", "sightings": 1 }, { "indicator": "http://178.141.186.36:45251/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 15:37:21 UTC", "last_seen": "2026-03-17 15:37:21 UTC", "sightings": 1 }, { "indicator": "http://182.113.47.114:52958/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 15:37:21 UTC", "last_seen": "2026-03-17 15:37:21 UTC", "sightings": 1 }, { "indicator": "https://qpml0.cokefun.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 15:37:07 UTC", "last_seen": "2026-03-17 15:37:07 UTC", "sightings": 1 }, { "indicator": "http://77.247.93.40:36940/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-17 15:33:20 UTC", "last_seen": "2026-03-17 15:33:20 UTC", "sightings": 1 }, { "indicator": "https://github.com/labenty/Silentum-Spoofer/raw/refs/heads/main/Silentum_Spoofer.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "BRAT", "exe" ], "first_seen": "2026-03-17 15:24:12 UTC", "last_seen": "2026-03-17 15:24:12 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/labenty/Silentum-Spoofer/refs/heads/main/Silentum_Spoofer.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "BRAT", "exe" ], "first_seen": "2026-03-17 15:24:08 UTC", "last_seen": "2026-03-17 15:24:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/fillyex/FiveM-Spoofer/raw/refs/heads/main/CFXBypass.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "BRAT", "exe" ], "first_seen": "2026-03-17 15:21:10 UTC", "last_seen": "2026-03-17 15:21:10 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/fillyex/FiveM-Spoofer/refs/heads/main/CFXBypass.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "BRAT", "exe" ], "first_seen": "2026-03-17 15:21:08 UTC", "last_seen": "2026-03-17 15:21:08 UTC", "sightings": 1 }, { "indicator": "https://everycarebd.com/imagecopy0956.png", "indicator_type": "url", "source": "URLhaus", "tags": [ "PureHVNC" ], "first_seen": "2026-03-17 15:19:20 UTC", "last_seen": "2026-03-17 15:19:20 UTC", "sightings": 1 }, { "indicator": "https://rizvexeno.ws/%D0%92ootstap%D1%80%D0%B5%D0%B3Ul.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "pw-ryos", "zip" ], "first_seen": "2026-03-17 15:17:11 UTC", "last_seen": "2026-03-17 15:17:11 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.7/files/8574065846/HPlEReH.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey", "Vidar" ], "first_seen": "2026-03-17 15:17:07 UTC", "last_seen": "2026-03-17 15:17:07 UTC", "sightings": 1 }, { "indicator": "http://42.59.114.46:37740/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 15:16:29 UTC", "last_seen": "2026-03-17 15:16:29 UTC", "sightings": 1 }, { "indicator": "http://115.48.151.208:56327/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 15:16:26 UTC", "last_seen": "2026-03-17 15:16:26 UTC", "sightings": 1 }, { "indicator": "http://110.36.19.51:44103/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 15:13:17 UTC", "last_seen": "2026-03-17 15:13:17 UTC", "sightings": 1 }, { "indicator": "https://tridraar2.backyard.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 15:11:07 UTC", "last_seen": "2026-03-17 15:11:07 UTC", "sightings": 1 }, { "indicator": "http://115.48.151.208:56327/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 15:10:21 UTC", "last_seen": "2026-03-17 15:10:21 UTC", "sightings": 1 }, { "indicator": "http://182.115.161.138:51640/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 15:03:18 UTC", "last_seen": "2026-03-17 15:03:18 UTC", "sightings": 1 }, { "indicator": "http://61.52.58.181:42222/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 15:02:19 UTC", "last_seen": "2026-03-17 15:02:19 UTC", "sightings": 1 }, { "indicator": "https://6klywpf.norsdwest.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 15:00:09 UTC", "last_seen": "2026-03-17 15:00:09 UTC", "sightings": 1 }, { "indicator": "http://42.59.114.46:37740/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 14:59:22 UTC", "last_seen": "2026-03-17 14:59:22 UTC", "sightings": 1 }, { "indicator": "https://tr3nd-plate.norsdwest.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 14:55:09 UTC", "last_seen": "2026-03-17 14:55:09 UTC", "sightings": 1 }, { "indicator": "https://spring8-branch.easttea.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 14:50:09 UTC", "last_seen": "2026-03-17 14:50:09 UTC", "sightings": 1 }, { "indicator": "http://110.36.19.51:44103/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 14:48:25 UTC", "last_seen": "2026-03-17 14:48:25 UTC", "sightings": 1 }, { "indicator": "http://110.37.42.62:52235/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 14:48:19 UTC", "last_seen": "2026-03-17 14:48:19 UTC", "sightings": 1 }, { "indicator": "http://182.113.47.114:52958/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 14:44:10 UTC", "last_seen": "2026-03-17 14:44:10 UTC", "sightings": 1 }, { "indicator": "http://110.186.230.250:43361/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-17 14:44:09 UTC", "last_seen": "2026-03-17 14:44:09 UTC", "sightings": 1 }, { "indicator": "http://182.115.161.138:51640/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 14:38:22 UTC", "last_seen": "2026-03-17 14:38:22 UTC", "sightings": 1 }, { "indicator": "http://110.186.230.250:43361/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-17 14:30:24 UTC", "last_seen": "2026-03-17 14:30:24 UTC", "sightings": 1 }, { "indicator": "http://110.37.42.62:52235/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 14:25:21 UTC", "last_seen": "2026-03-17 14:25:21 UTC", "sightings": 1 }, { "indicator": "http://117.244.68.72:59891/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 14:24:20 UTC", "last_seen": "2026-03-17 14:24:20 UTC", "sightings": 1 }, { "indicator": "http://110.38.201.35:37915/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 14:23:09 UTC", "last_seen": "2026-03-17 14:23:09 UTC", "sightings": 1 }, { "indicator": "http://123.190.231.231:48718/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 14:21:27 UTC", "last_seen": "2026-03-17 14:21:27 UTC", "sightings": 1 }, { "indicator": "http://113.75.76.23:55690/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-17 14:18:22 UTC", "last_seen": "2026-03-17 14:18:22 UTC", "sightings": 1 }, { "indicator": "http://113.75.76.23:55690/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-17 14:16:20 UTC", "last_seen": "2026-03-17 14:16:20 UTC", "sightings": 1 }, { "indicator": "http://222.138.64.12:44625/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-17 14:04:13 UTC", "last_seen": "2026-03-17 14:04:13 UTC", "sightings": 1 }, { "indicator": "https://c1ien-forge.octagonon.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 13:53:09 UTC", "last_seen": "2026-03-17 13:53:09 UTC", "sightings": 1 }, { "indicator": "http://222.127.53.189:42889/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-17 13:49:16 UTC", "last_seen": "2026-03-17 13:49:16 UTC", "sightings": 1 }, { "indicator": "http://222.138.64.12:44625/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-17 13:45:18 UTC", "last_seen": "2026-03-17 13:45:18 UTC", "sightings": 1 }, { "indicator": "http://123.190.231.231:48718/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 13:44:30 UTC", "last_seen": "2026-03-17 13:44:30 UTC", "sightings": 1 }, { "indicator": "http://115.55.51.170:40829/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 13:44:19 UTC", "last_seen": "2026-03-17 13:44:19 UTC", "sightings": 1 }, { "indicator": "https://neo-sc4r1.blowoff.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 13:43:09 UTC", "last_seen": "2026-03-17 13:43:09 UTC", "sightings": 1 }, { "indicator": "https://geo-reg1st.blowoff.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 13:40:09 UTC", "last_seen": "2026-03-17 13:40:09 UTC", "sightings": 1 }, { "indicator": "https://bkg-fix.com/at.7z", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport", "pw-ppp", "pwn-ppp" ], "first_seen": "2026-03-17 13:35:07 UTC", "last_seen": "2026-03-17 13:35:07 UTC", "sightings": 1 }, { "indicator": "http://46.62.197.232:7000/LogMeInResolve_Unattended.msi", "indicator_type": "url", "source": "URLhaus", "tags": [ "GoToResolve" ], "first_seen": "2026-03-17 13:33:29 UTC", "last_seen": "2026-03-17 13:33:29 UTC", "sightings": 1 }, { "indicator": "https://happyglamper.ro/wp-content/plugins/mammoth-custom-for/captcha.html", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-17 13:33:22 UTC", "last_seen": "2026-03-17 13:33:22 UTC", "sightings": 1 }, { "indicator": "https://glhoteles.com/myapp.7z", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-17 13:33:14 UTC", "last_seen": "2026-03-17 13:33:14 UTC", "sightings": 1 }, { "indicator": "https://crixup.com/downloads/cleanRumbtimized_MSI.png", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-17 13:33:13 UTC", "last_seen": "2026-03-17 13:33:13 UTC", "sightings": 1 }, { "indicator": "https://files.wildskreen.shop/MSI_063445.png", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-17 13:33:13 UTC", "last_seen": "2026-03-17 13:33:13 UTC", "sightings": 1 }, { "indicator": "http://bkng-updt.com/at.7z", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport", "pw-ppp", "pwn-ppp" ], "first_seen": "2026-03-17 13:33:13 UTC", "last_seen": "2026-03-17 13:33:13 UTC", "sightings": 1 }, { "indicator": "https://beckupfinal.online/optimized_MSI.png", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-17 13:33:13 UTC", "last_seen": "2026-03-17 13:33:13 UTC", "sightings": 1 }, { "indicator": "https://gateway.lighthouse.storage/ipfs/bafybeid7kfr3qmhawhsbjllvuw3dqn2bui7rspqc6dctrypplwrmrp6mda", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-17 13:33:12 UTC", "last_seen": "2026-03-17 13:33:12 UTC", "sightings": 1 }, { "indicator": "https://funducci.org/challenge.", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-17 13:33:12 UTC", "last_seen": "2026-03-17 13:33:12 UTC", "sightings": 1 }, { "indicator": "https://payables-notification.com/SvOjCPew/optimized_MSI.png", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-17 13:33:12 UTC", "last_seen": "2026-03-17 13:33:12 UTC", "sightings": 1 }, { "indicator": "https://dl.dropboxusercontent.com/scl/fi/5h9hwpknqlaqd1xzrlgu3/optimized_MSI.png?rlkey=1s9l0t6hnyy4xycnfkcwy1e32&dl=0", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-17 13:33:10 UTC", "last_seen": "2026-03-17 13:33:10 UTC", "sightings": 1 }, { "indicator": "https://res.cloudinary.com/dzptvoj1b/image/upload/v1773339102/MSI_PRO_with_b64_wavpuj.jpg", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-17 13:33:10 UTC", "last_seen": "2026-03-17 13:33:10 UTC", "sightings": 1 }, { "indicator": "https://files.wildskreen.shop/MSI_175244.png", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-17 13:33:10 UTC", "last_seen": "2026-03-17 13:33:10 UTC", "sightings": 1 }, { "indicator": "https://res.cloudinary.com/dn6bpc2yo/image/upload/v1773640942/optimized_MSI_eheqzz.jpg", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-17 13:33:10 UTC", "last_seen": "2026-03-17 13:33:10 UTC", "sightings": 1 }, { "indicator": "https://kloudtechnology.in/step", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-17 13:33:09 UTC", "last_seen": "2026-03-17 13:33:09 UTC", "sightings": 1 }, { "indicator": "https://gateway.lighthouse.storage/ipfs/bafybeid7kfr3qmhawhsbjllvuw3dqn2bui7rspqc6dctrypplwrmrp6mda/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-17 13:33:09 UTC", "last_seen": "2026-03-17 13:33:09 UTC", "sightings": 1 }, { "indicator": "http://bnsbackend.mydevsystems.com/redirect", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-17 13:33:08 UTC", "last_seen": "2026-03-17 13:33:08 UTC", "sightings": 1 }, { "indicator": "http://rbcoeconsulting.com/wp-content/plugins/pretty-manager/captcha.html", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-17 13:33:07 UTC", "last_seen": "2026-03-17 13:33:07 UTC", "sightings": 1 }, { "indicator": "https://bkg-fix.com/myapp.7z", "indicator_type": "url", "source": "URLhaus", "tags": [ "pw-ppp", "pwn-ppp" ], "first_seen": "2026-03-17 13:33:07 UTC", "last_seen": "2026-03-17 13:33:07 UTC", "sightings": 1 }, { "indicator": "http://weblive.tv/wait", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-17 13:33:07 UTC", "last_seen": "2026-03-17 13:33:07 UTC", "sightings": 1 }, { "indicator": "http://res.cloudinary.com/dupkwncfh/image/upload/v1773379890/optimized_MSI_bmsp8d.jpg", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-17 13:33:06 UTC", "last_seen": "2026-03-17 13:33:06 UTC", "sightings": 1 }, { "indicator": "http://bakhtov.com.ua/images/optimized_MSI.png", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-17 13:33:06 UTC", "last_seen": "2026-03-17 13:33:06 UTC", "sightings": 1 }, { "indicator": "https://bnsbackend.mydevsystems.com/redirect", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-17 13:33:06 UTC", "last_seen": "2026-03-17 13:33:06 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/man-rgb/jpeg/refs/heads/main/MSIconfigs.png", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-17 13:33:05 UTC", "last_seen": "2026-03-17 13:33:05 UTC", "sightings": 1 }, { "indicator": "http://124.6.169.46:50737/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-17 13:25:22 UTC", "last_seen": "2026-03-17 13:25:22 UTC", "sightings": 1 }, { "indicator": "http://222.127.53.189:42889/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-17 13:24:24 UTC", "last_seen": "2026-03-17 13:24:24 UTC", "sightings": 1 }, { "indicator": "http://115.55.51.170:40829/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 13:18:21 UTC", "last_seen": "2026-03-17 13:18:21 UTC", "sightings": 1 }, { "indicator": "http://113.237.111.57:56765/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 13:15:20 UTC", "last_seen": "2026-03-17 13:15:20 UTC", "sightings": 1 }, { "indicator": "https://57ntnp6h.lakebit.digital/?=check&&actmn=TKZAacWVBcmoPsdP", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-17 13:14:06 UTC", "last_seen": "2026-03-17 13:14:06 UTC", "sightings": 1 }, { "indicator": "https://stac5-signal.jokerun.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 13:13:07 UTC", "last_seen": "2026-03-17 13:13:07 UTC", "sightings": 1 }, { "indicator": "https://kp1vwn9m.lakebit.digital/?=check&&actmn=fUCEFKrvdLSrQfdw", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-17 13:09:09 UTC", "last_seen": "2026-03-17 13:09:09 UTC", "sightings": 1 }, { "indicator": "http://61.52.58.181:42222/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 13:07:19 UTC", "last_seen": "2026-03-17 13:07:19 UTC", "sightings": 1 }, { "indicator": "http://124.6.169.46:50737/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-17 12:59:10 UTC", "last_seen": "2026-03-17 12:59:10 UTC", "sightings": 1 }, { "indicator": "http://117.209.89.178:43116/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 12:57:17 UTC", "last_seen": "2026-03-17 12:57:17 UTC", "sightings": 1 }, { "indicator": "https://routcha.cokefun.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 12:49:07 UTC", "last_seen": "2026-03-17 12:49:07 UTC", "sightings": 1 }, { "indicator": "http://117.216.177.26:39447/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 12:44:19 UTC", "last_seen": "2026-03-17 12:44:19 UTC", "sightings": 1 }, { "indicator": "http://182.123.210.244:34100/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 12:44:10 UTC", "last_seen": "2026-03-17 12:44:10 UTC", "sightings": 1 }, { "indicator": "http://115.48.148.72:35282/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 12:41:16 UTC", "last_seen": "2026-03-17 12:41:16 UTC", "sightings": 1 }, { "indicator": "http://218.59.12.92:42984/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 12:38:17 UTC", "last_seen": "2026-03-17 12:38:17 UTC", "sightings": 1 }, { "indicator": "http://180.190.184.188:47946/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-17 12:36:18 UTC", "last_seen": "2026-03-17 12:36:18 UTC", "sightings": 1 }, { "indicator": "http://42.226.68.229:39408/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 12:33:24 UTC", "last_seen": "2026-03-17 12:33:24 UTC", "sightings": 1 }, { "indicator": "http://117.209.89.178:43116/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 12:30:21 UTC", "last_seen": "2026-03-17 12:30:21 UTC", "sightings": 1 }, { "indicator": "http://120.61.194.154:43753/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 12:29:11 UTC", "last_seen": "2026-03-17 12:29:11 UTC", "sightings": 1 }, { "indicator": "http://36.70.70.32:33290/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-17 12:19:21 UTC", "last_seen": "2026-03-17 12:19:21 UTC", "sightings": 1 }, { "indicator": "http://182.123.210.244:34100/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 12:15:23 UTC", "last_seen": "2026-03-17 12:15:23 UTC", "sightings": 1 }, { "indicator": "http://218.59.12.92:42984/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 12:14:17 UTC", "last_seen": "2026-03-17 12:14:17 UTC", "sightings": 1 }, { "indicator": "https://p0rta-node.backyard.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 12:12:09 UTC", "last_seen": "2026-03-17 12:12:09 UTC", "sightings": 1 }, { "indicator": "http://180.190.184.188:47946/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-17 12:11:13 UTC", "last_seen": "2026-03-17 12:11:13 UTC", "sightings": 1 }, { "indicator": "http://112.248.83.208:57628/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 12:08:30 UTC", "last_seen": "2026-03-17 12:08:30 UTC", "sightings": 1 }, { "indicator": "http://117.235.97.73:57669/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-17 12:08:17 UTC", "last_seen": "2026-03-17 12:08:17 UTC", "sightings": 1 }, { "indicator": "http://117.26.227.81:60419/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-17 12:05:18 UTC", "last_seen": "2026-03-17 12:05:18 UTC", "sightings": 1 }, { "indicator": "http://42.226.68.229:39408/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 12:03:12 UTC", "last_seen": "2026-03-17 12:03:12 UTC", "sightings": 1 }, { "indicator": "http://61.3.137.53:34032/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 11:58:09 UTC", "last_seen": "2026-03-17 11:58:09 UTC", "sightings": 1 }, { "indicator": "http://120.61.194.154:43753/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 11:58:09 UTC", "last_seen": "2026-03-17 11:58:09 UTC", "sightings": 1 }, { "indicator": "http://36.70.70.32:33290/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-17 11:56:13 UTC", "last_seen": "2026-03-17 11:56:13 UTC", "sightings": 1 }, { "indicator": "http://61.52.42.221:45804/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 11:51:17 UTC", "last_seen": "2026-03-17 11:51:17 UTC", "sightings": 1 }, { "indicator": "http://117.235.97.73:57669/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-17 11:48:26 UTC", "last_seen": "2026-03-17 11:48:26 UTC", "sightings": 1 }, { "indicator": "https://f0rrn-core.norsdwest.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 11:45:07 UTC", "last_seen": "2026-03-17 11:45:07 UTC", "sightings": 1 }, { "indicator": "http://112.248.83.208:57628/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 11:41:18 UTC", "last_seen": "2026-03-17 11:41:18 UTC", "sightings": 1 }, { "indicator": "http://115.48.151.233:56650/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 11:40:34 UTC", "last_seen": "2026-03-17 11:40:34 UTC", "sightings": 1 }, { "indicator": "http://115.49.30.5:59203/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 11:40:21 UTC", "last_seen": "2026-03-17 11:40:21 UTC", "sightings": 1 }, { "indicator": "http://117.26.227.81:60419/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-17 11:40:21 UTC", "last_seen": "2026-03-17 11:40:21 UTC", "sightings": 1 }, { "indicator": "http://59.95.95.138:33899/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 11:39:17 UTC", "last_seen": "2026-03-17 11:39:17 UTC", "sightings": 1 }, { "indicator": "https://2dqe6hsl.norsdwest.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 11:38:09 UTC", "last_seen": "2026-03-17 11:38:09 UTC", "sightings": 1 }, { "indicator": "http://123.14.238.168:42364/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 11:37:17 UTC", "last_seen": "2026-03-17 11:37:17 UTC", "sightings": 1 }, { "indicator": "https://ser-draon.easttea.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 11:32:07 UTC", "last_seen": "2026-03-17 11:32:07 UTC", "sightings": 1 }, { "indicator": "http://123.14.238.168:42364/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 11:28:19 UTC", "last_seen": "2026-03-17 11:28:19 UTC", "sightings": 1 }, { "indicator": "http://61.3.137.53:34032/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 11:28:19 UTC", "last_seen": "2026-03-17 11:28:19 UTC", "sightings": 1 }, { "indicator": "https://tinyruntime.easttea.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 11:26:06 UTC", "last_seen": "2026-03-17 11:26:06 UTC", "sightings": 1 }, { "indicator": "http://61.52.42.221:45804/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 11:25:20 UTC", "last_seen": "2026-03-17 11:25:20 UTC", "sightings": 1 }, { "indicator": "http://110.38.221.182:55873/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 11:23:13 UTC", "last_seen": "2026-03-17 11:23:13 UTC", "sightings": 1 }, { "indicator": "https://castgrani.easttea.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 11:23:05 UTC", "last_seen": "2026-03-17 11:23:05 UTC", "sightings": 1 }, { "indicator": "http://110.38.221.182:55873/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 11:22:15 UTC", "last_seen": "2026-03-17 11:22:15 UTC", "sightings": 1 }, { "indicator": "http://221.11.172.25:50021/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-17 11:17:20 UTC", "last_seen": "2026-03-17 11:17:20 UTC", "sightings": 1 }, { "indicator": "http://115.49.30.5:59203/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 11:13:19 UTC", "last_seen": "2026-03-17 11:13:19 UTC", "sightings": 1 }, { "indicator": "http://59.95.95.138:33899/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 11:11:22 UTC", "last_seen": "2026-03-17 11:11:22 UTC", "sightings": 1 }, { "indicator": "https://mujlhpe.grosstao.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 11:11:06 UTC", "last_seen": "2026-03-17 11:11:06 UTC", "sightings": 1 }, { "indicator": "http://182.96.163.254:33407/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-17 11:06:11 UTC", "last_seen": "2026-03-17 11:06:11 UTC", "sightings": 1 }, { "indicator": "https://framsun.grosstao.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 11:06:07 UTC", "last_seen": "2026-03-17 11:06:07 UTC", "sightings": 1 }, { "indicator": "http://58.47.67.71:51752/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-17 11:01:11 UTC", "last_seen": "2026-03-17 11:01:11 UTC", "sightings": 1 }, { "indicator": "https://tal-lineal.grosstao.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 10:58:10 UTC", "last_seen": "2026-03-17 10:58:10 UTC", "sightings": 1 }, { "indicator": "http://221.11.172.25:50021/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-17 10:56:08 UTC", "last_seen": "2026-03-17 10:56:08 UTC", "sightings": 1 }, { "indicator": "https://m3rge4-point.gronstat.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 10:52:07 UTC", "last_seen": "2026-03-17 10:52:07 UTC", "sightings": 1 }, { "indicator": "http://123.130.140.101:35615/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 10:50:21 UTC", "last_seen": "2026-03-17 10:50:21 UTC", "sightings": 1 }, { "indicator": "https://taldraor1.gronstat.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 10:46:07 UTC", "last_seen": "2026-03-17 10:46:07 UTC", "sightings": 1 }, { "indicator": "http://222.139.106.179:43780/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 10:44:21 UTC", "last_seen": "2026-03-17 10:44:21 UTC", "sightings": 1 }, { "indicator": "https://6tojdb.gronstat.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 10:43:06 UTC", "last_seen": "2026-03-17 10:43:06 UTC", "sightings": 1 }, { "indicator": "http://58.47.67.71:51752/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-17 10:39:18 UTC", "last_seen": "2026-03-17 10:39:18 UTC", "sightings": 1 }, { "indicator": "http://59.176.89.218:41521/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 10:34:18 UTC", "last_seen": "2026-03-17 10:34:18 UTC", "sightings": 1 }, { "indicator": "https://f41th8-spark.flowwow.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 10:32:09 UTC", "last_seen": "2026-03-17 10:32:09 UTC", "sightings": 1 }, { "indicator": "http://59.96.143.116:55917/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 10:26:17 UTC", "last_seen": "2026-03-17 10:26:17 UTC", "sightings": 1 }, { "indicator": "http://59.88.130.154:51594/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 10:25:15 UTC", "last_seen": "2026-03-17 10:25:15 UTC", "sightings": 1 }, { "indicator": "https://solmesha7.flowwow.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 10:25:09 UTC", "last_seen": "2026-03-17 10:25:09 UTC", "sightings": 1 }, { "indicator": "http://59.182.86.69:57996/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 10:24:19 UTC", "last_seen": "2026-03-17 10:24:19 UTC", "sightings": 1 }, { "indicator": "http://27.193.158.155:51549/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 10:20:16 UTC", "last_seen": "2026-03-17 10:20:16 UTC", "sightings": 1 }, { "indicator": "https://synt-sheet.fabulos.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 10:17:07 UTC", "last_seen": "2026-03-17 10:17:07 UTC", "sightings": 1 }, { "indicator": "http://115.48.161.193:38333/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 10:15:21 UTC", "last_seen": "2026-03-17 10:15:21 UTC", "sightings": 1 }, { "indicator": "http://59.176.89.218:41521/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 10:08:14 UTC", "last_seen": "2026-03-17 10:08:14 UTC", "sightings": 1 }, { "indicator": "https://pasturepow.fabulos.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 10:05:07 UTC", "last_seen": "2026-03-17 10:05:07 UTC", "sightings": 1 }, { "indicator": "http://59.182.86.69:57996/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 10:04:20 UTC", "last_seen": "2026-03-17 10:04:20 UTC", "sightings": 1 }, { "indicator": "http://59.96.143.116:55917/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 10:00:19 UTC", "last_seen": "2026-03-17 10:00:19 UTC", "sightings": 1 }, { "indicator": "https://00adv0.fabulos.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 09:59:08 UTC", "last_seen": "2026-03-17 09:59:08 UTC", "sightings": 1 }, { "indicator": "http://39.79.81.83:37106/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 09:54:09 UTC", "last_seen": "2026-03-17 09:54:09 UTC", "sightings": 1 }, { "indicator": "https://le4r-vector.octagonon.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 09:53:06 UTC", "last_seen": "2026-03-17 09:53:06 UTC", "sightings": 1 }, { "indicator": "http://39.79.81.83:37106/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 09:49:19 UTC", "last_seen": "2026-03-17 09:49:19 UTC", "sightings": 1 }, { "indicator": "http://115.48.161.193:38333/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 09:48:20 UTC", "last_seen": "2026-03-17 09:48:20 UTC", "sightings": 1 }, { "indicator": "http://123.130.140.101:35615/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 09:47:26 UTC", "last_seen": "2026-03-17 09:47:26 UTC", "sightings": 1 }, { "indicator": "http://110.39.233.226:60828/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 09:45:20 UTC", "last_seen": "2026-03-17 09:45:20 UTC", "sightings": 1 }, { "indicator": "http://110.39.233.226:60828/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 09:45:20 UTC", "last_seen": "2026-03-17 09:45:20 UTC", "sightings": 1 }, { "indicator": "https://rbvjsji.octagonon.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 09:45:09 UTC", "last_seen": "2026-03-17 09:45:09 UTC", "sightings": 1 }, { "indicator": "https://j40frzwa.octagonon.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 09:40:08 UTC", "last_seen": "2026-03-17 09:40:08 UTC", "sightings": 1 }, { "indicator": "http://124.6.169.54:50115/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-17 09:39:18 UTC", "last_seen": "2026-03-17 09:39:18 UTC", "sightings": 1 }, { "indicator": "http://175.23.69.144:33671/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-17 09:39:18 UTC", "last_seen": "2026-03-17 09:39:18 UTC", "sightings": 1 }, { "indicator": "http://121.238.128.82:50544/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-17 09:37:23 UTC", "last_seen": "2026-03-17 09:37:23 UTC", "sightings": 1 }, { "indicator": "https://measurecircu.blowoff.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 09:33:08 UTC", "last_seen": "2026-03-17 09:33:08 UTC", "sightings": 1 }, { "indicator": "http://175.148.151.207:54180/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 09:32:20 UTC", "last_seen": "2026-03-17 09:32:20 UTC", "sightings": 1 }, { "indicator": "http://59.176.82.151:35154/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "mirai" ], "first_seen": "2026-03-17 09:32:18 UTC", "last_seen": "2026-03-17 09:32:18 UTC", "sightings": 1 }, { "indicator": "http://93.157.253.209:44285/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 09:29:17 UTC", "last_seen": "2026-03-17 09:29:17 UTC", "sightings": 1 }, { "indicator": "https://18z4.blowoff.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 09:26:06 UTC", "last_seen": "2026-03-17 09:26:06 UTC", "sightings": 1 }, { "indicator": "http://59.97.178.6:40441/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 09:21:21 UTC", "last_seen": "2026-03-17 09:21:21 UTC", "sightings": 1 }, { "indicator": "https://gcyryi.blowoff.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 09:20:07 UTC", "last_seen": "2026-03-17 09:20:07 UTC", "sightings": 1 }, { "indicator": "http://175.23.69.144:33671/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-17 09:15:32 UTC", "last_seen": "2026-03-17 09:15:32 UTC", "sightings": 1 }, { "indicator": "http://88.85.183.120:40874/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-17 09:14:07 UTC", "last_seen": "2026-03-17 09:14:07 UTC", "sightings": 1 }, { "indicator": "https://raibark.highjoke.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 09:13:08 UTC", "last_seen": "2026-03-17 09:13:08 UTC", "sightings": 1 }, { "indicator": "http://124.6.169.54:50115/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-17 09:10:28 UTC", "last_seen": "2026-03-17 09:10:28 UTC", "sightings": 1 }, { "indicator": "https://a08ulcab.highjoke.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 09:06:07 UTC", "last_seen": "2026-03-17 09:06:07 UTC", "sightings": 1 }, { "indicator": "http://59.176.82.151:35154/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "mirai" ], "first_seen": "2026-03-17 09:05:29 UTC", "last_seen": "2026-03-17 09:05:29 UTC", "sightings": 1 }, { "indicator": "https://yzkzwt.highjoke.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 08:59:09 UTC", "last_seen": "2026-03-17 08:59:09 UTC", "sightings": 1 }, { "indicator": "http://59.97.178.6:40441/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 08:57:24 UTC", "last_seen": "2026-03-17 08:57:24 UTC", "sightings": 1 }, { "indicator": "http://117.235.230.237:45372/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 08:56:23 UTC", "last_seen": "2026-03-17 08:56:23 UTC", "sightings": 1 }, { "indicator": "https://warmcha.jokerun.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 08:54:07 UTC", "last_seen": "2026-03-17 08:54:07 UTC", "sightings": 1 }, { "indicator": "https://opticwin.jokerun.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 08:52:12 UTC", "last_seen": "2026-03-17 08:52:12 UTC", "sightings": 1 }, { "indicator": "http://88.85.183.120:40874/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-17 08:50:09 UTC", "last_seen": "2026-03-17 08:50:09 UTC", "sightings": 1 }, { "indicator": "http://221.14.46.93:34838/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 08:48:19 UTC", "last_seen": "2026-03-17 08:48:19 UTC", "sightings": 1 }, { "indicator": "http://117.235.230.237:45372/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 08:44:24 UTC", "last_seen": "2026-03-17 08:44:24 UTC", "sightings": 1 }, { "indicator": "http://115.55.117.82:35777/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 08:44:20 UTC", "last_seen": "2026-03-17 08:44:20 UTC", "sightings": 1 }, { "indicator": "http://14.0.136.205:36849/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 08:43:21 UTC", "last_seen": "2026-03-17 08:43:21 UTC", "sightings": 1 }, { "indicator": "https://ro4d-stream.jokerun.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 08:40:07 UTC", "last_seen": "2026-03-17 08:40:07 UTC", "sightings": 1 }, { "indicator": "http://219.157.50.209:46320/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "mirai" ], "first_seen": "2026-03-17 08:36:12 UTC", "last_seen": "2026-03-17 08:36:12 UTC", "sightings": 1 }, { "indicator": "http://42.55.60.139:46861/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 08:34:34 UTC", "last_seen": "2026-03-17 08:34:34 UTC", "sightings": 1 }, { "indicator": "https://bloorn-bridge.cokefun.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 08:33:11 UTC", "last_seen": "2026-03-17 08:33:11 UTC", "sightings": 1 }, { "indicator": "http://14.0.136.205:36849/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 08:29:26 UTC", "last_seen": "2026-03-17 08:29:26 UTC", "sightings": 1 }, { "indicator": "https://tren-sai.cokefun.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 08:27:07 UTC", "last_seen": "2026-03-17 08:27:07 UTC", "sightings": 1 }, { "indicator": "http://120.60.237.243:41350/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 08:25:25 UTC", "last_seen": "2026-03-17 08:25:25 UTC", "sightings": 1 }, { "indicator": "http://59.88.231.137:33310/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 08:24:35 UTC", "last_seen": "2026-03-17 08:24:35 UTC", "sightings": 1 }, { "indicator": "https://gr0wt4-layer.cokefun.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 08:20:10 UTC", "last_seen": "2026-03-17 08:20:10 UTC", "sightings": 1 }, { "indicator": "https://zeh4rg.cokenote.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 08:13:08 UTC", "last_seen": "2026-03-17 08:13:08 UTC", "sightings": 1 }, { "indicator": "https://quorcrest2en.cokenote.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 08:06:06 UTC", "last_seen": "2026-03-17 08:06:06 UTC", "sightings": 1 }, { "indicator": "https://notifi-vault.cokenote.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 07:59:09 UTC", "last_seen": "2026-03-17 07:59:09 UTC", "sightings": 1 }, { "indicator": "http://120.60.237.243:41350/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 07:56:22 UTC", "last_seen": "2026-03-17 07:56:22 UTC", "sightings": 1 }, { "indicator": "http://59.88.231.137:33310/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 07:56:20 UTC", "last_seen": "2026-03-17 07:56:20 UTC", "sightings": 1 }, { "indicator": "https://esjxi.backyard.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 07:54:06 UTC", "last_seen": "2026-03-17 07:54:06 UTC", "sightings": 1 }, { "indicator": "http://121.228.68.41:34422/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-17 07:52:10 UTC", "last_seen": "2026-03-17 07:52:10 UTC", "sightings": 1 }, { "indicator": "http://117.217.35.219:44787/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 07:51:11 UTC", "last_seen": "2026-03-17 07:51:11 UTC", "sightings": 1 }, { "indicator": "https://i08da.backyard.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 07:47:07 UTC", "last_seen": "2026-03-17 07:47:07 UTC", "sightings": 1 }, { "indicator": "http://115.55.117.82:35777/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 07:43:12 UTC", "last_seen": "2026-03-17 07:43:12 UTC", "sightings": 1 }, { "indicator": "https://videobiome.backyard.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 07:42:09 UTC", "last_seen": "2026-03-17 07:42:09 UTC", "sightings": 1 }, { "indicator": "http://42.55.60.139:46861/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 07:34:20 UTC", "last_seen": "2026-03-17 07:34:20 UTC", "sightings": 1 }, { "indicator": "http://221.15.18.162:47725/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 07:34:18 UTC", "last_seen": "2026-03-17 07:34:18 UTC", "sightings": 1 }, { "indicator": "https://58broegq.norsdwest.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 07:34:07 UTC", "last_seen": "2026-03-17 07:34:07 UTC", "sightings": 1 }, { "indicator": "http://117.217.35.219:44787/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 07:31:17 UTC", "last_seen": "2026-03-17 07:31:17 UTC", "sightings": 1 }, { "indicator": "https://format5-scope.norsdwest.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 07:30:09 UTC", "last_seen": "2026-03-17 07:30:09 UTC", "sightings": 1 }, { "indicator": "http://115.55.55.68:52168/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 07:28:17 UTC", "last_seen": "2026-03-17 07:28:17 UTC", "sightings": 1 }, { "indicator": "http://117.193.132.104:33650/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 07:27:16 UTC", "last_seen": "2026-03-17 07:27:16 UTC", "sightings": 1 }, { "indicator": "http://185.97.113.40:35953/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 07:25:07 UTC", "last_seen": "2026-03-17 07:25:07 UTC", "sightings": 1 }, { "indicator": "http://123.14.217.145:42028/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 07:22:21 UTC", "last_seen": "2026-03-17 07:22:21 UTC", "sightings": 1 }, { "indicator": "http://121.228.68.41:34422/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-17 07:21:20 UTC", "last_seen": "2026-03-17 07:21:20 UTC", "sightings": 1 }, { "indicator": "http://182.127.152.97:48670/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 07:18:18 UTC", "last_seen": "2026-03-17 07:18:18 UTC", "sightings": 1 }, { "indicator": "https://trailertrue.easttea.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 07:14:06 UTC", "last_seen": "2026-03-17 07:14:06 UTC", "sightings": 1 }, { "indicator": "http://123.10.234.36:35599/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 07:13:17 UTC", "last_seen": "2026-03-17 07:13:17 UTC", "sightings": 1 }, { "indicator": "http://221.15.18.162:47725/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 07:12:18 UTC", "last_seen": "2026-03-17 07:12:18 UTC", "sightings": 1 }, { "indicator": "https://yefwc3t.easttea.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 07:08:05 UTC", "last_seen": "2026-03-17 07:08:05 UTC", "sightings": 1 }, { "indicator": "http://117.193.132.104:33650/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 07:06:18 UTC", "last_seen": "2026-03-17 07:06:18 UTC", "sightings": 1 }, { "indicator": "http://42.235.53.37:40440/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 07:05:22 UTC", "last_seen": "2026-03-17 07:05:22 UTC", "sightings": 1 }, { "indicator": "https://check-gate.easttea.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 07:02:08 UTC", "last_seen": "2026-03-17 07:02:08 UTC", "sightings": 1 }, { "indicator": "https://1ette6-graph.grosstao.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 06:59:06 UTC", "last_seen": "2026-03-17 06:59:06 UTC", "sightings": 1 }, { "indicator": "http://110.37.13.16:59544/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 06:55:17 UTC", "last_seen": "2026-03-17 06:55:17 UTC", "sightings": 1 }, { "indicator": "http://115.52.28.2:49846/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 06:54:18 UTC", "last_seen": "2026-03-17 06:54:18 UTC", "sightings": 1 }, { "indicator": "http://42.224.112.157:35503/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 06:51:16 UTC", "last_seen": "2026-03-17 06:51:16 UTC", "sightings": 1 }, { "indicator": "http://110.37.104.99:53838/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 06:50:18 UTC", "last_seen": "2026-03-17 06:50:18 UTC", "sightings": 1 }, { "indicator": "https://b9a9ec0ece343a68.brambleufer.ru/notebk-91267b64-989f-49b4-89b4-984e0154d4d5", "indicator_type": "url", "source": "URLhaus", "tags": [ "ascii" ], "first_seen": "2026-03-17 06:50:11 UTC", "last_seen": "2026-03-17 06:50:11 UTC", "sightings": 1 }, { "indicator": "http://123.14.217.145:42028/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 06:49:19 UTC", "last_seen": "2026-03-17 06:49:19 UTC", "sightings": 1 }, { "indicator": "http://123.10.234.36:35599/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 06:49:19 UTC", "last_seen": "2026-03-17 06:49:19 UTC", "sightings": 1 }, { "indicator": "https://zk370qhd.grosstao.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 06:46:06 UTC", "last_seen": "2026-03-17 06:46:06 UTC", "sightings": 1 }, { "indicator": "http://117.209.10.71:51895/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 06:45:13 UTC", "last_seen": "2026-03-17 06:45:13 UTC", "sightings": 1 }, { "indicator": "http://sbstorage.club/HQWDTQ.vmp.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "exe", "Loda" ], "first_seen": "2026-03-17 06:44:10 UTC", "last_seen": "2026-03-17 06:44:10 UTC", "sightings": 1 }, { "indicator": "http://185.97.113.40:35953/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 06:42:15 UTC", "last_seen": "2026-03-17 06:42:15 UTC", "sightings": 1 }, { "indicator": "https://clinicpulse.grosstao.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 06:41:10 UTC", "last_seen": "2026-03-17 06:41:10 UTC", "sightings": 1 }, { "indicator": "https://assets.fxd-hz-tk-loop.in.net/vk_swiftshader_icd.json", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ascii" ], "first_seen": "2026-03-17 06:40:06 UTC", "last_seen": "2026-03-17 06:40:06 UTC", "sightings": 1 }, { "indicator": "http://36.64.184.26:39749/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-17 06:39:16 UTC", "last_seen": "2026-03-17 06:39:16 UTC", "sightings": 1 }, { "indicator": "http://113.237.111.57:56765/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 06:35:09 UTC", "last_seen": "2026-03-17 06:35:09 UTC", "sightings": 1 }, { "indicator": "https://wu9h.highjoke.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 06:34:06 UTC", "last_seen": "2026-03-17 06:34:06 UTC", "sightings": 1 }, { "indicator": "http://42.239.158.142:41670/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 06:31:16 UTC", "last_seen": "2026-03-17 06:31:16 UTC", "sightings": 1 }, { "indicator": "http://42.224.112.157:35503/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 06:31:15 UTC", "last_seen": "2026-03-17 06:31:15 UTC", "sightings": 1 }, { "indicator": "http://115.55.55.68:52168/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 06:30:20 UTC", "last_seen": "2026-03-17 06:30:20 UTC", "sightings": 1 }, { "indicator": "https://gustfil.highjoke.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 06:27:06 UTC", "last_seen": "2026-03-17 06:27:06 UTC", "sightings": 1 }, { "indicator": "http://110.36.19.215:38657/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 06:26:16 UTC", "last_seen": "2026-03-17 06:26:16 UTC", "sightings": 1 }, { "indicator": "http://117.209.10.71:51895/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 06:25:13 UTC", "last_seen": "2026-03-17 06:25:13 UTC", "sightings": 1 }, { "indicator": "http://110.37.13.16:59544/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 06:23:10 UTC", "last_seen": "2026-03-17 06:23:10 UTC", "sightings": 1 }, { "indicator": "http://110.36.19.215:38657/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 06:22:19 UTC", "last_seen": "2026-03-17 06:22:19 UTC", "sightings": 1 }, { "indicator": "http://115.63.52.240:50164/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 06:22:19 UTC", "last_seen": "2026-03-17 06:22:19 UTC", "sightings": 1 }, { "indicator": "http://117.248.25.245:45423/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 06:20:11 UTC", "last_seen": "2026-03-17 06:20:11 UTC", "sightings": 1 }, { "indicator": "http://110.37.104.99:53838/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 06:20:10 UTC", "last_seen": "2026-03-17 06:20:10 UTC", "sightings": 1 }, { "indicator": "https://s3cre-plate.highjoke.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 06:20:06 UTC", "last_seen": "2026-03-17 06:20:06 UTC", "sightings": 1 }, { "indicator": "http://110.39.233.38:36415/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-17 06:18:07 UTC", "last_seen": "2026-03-17 06:18:07 UTC", "sightings": 1 }, { "indicator": "http://27.215.48.214:38963/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-17 06:17:22 UTC", "last_seen": "2026-03-17 06:17:22 UTC", "sightings": 1 }, { "indicator": "http://42.239.232.30:37377/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-17 06:17:22 UTC", "last_seen": "2026-03-17 06:17:22 UTC", "sightings": 1 }, { "indicator": "http://85.93.9.218/arm", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-17 06:17:22 UTC", "last_seen": "2026-03-17 06:17:22 UTC", "sightings": 1 }, { "indicator": "http://59.94.117.168:47625/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-17 06:17:22 UTC", "last_seen": "2026-03-17 06:17:22 UTC", "sightings": 1 }, { "indicator": "http://119.200.78.153:19480/.i", "indicator_type": "url", "source": "URLhaus", "tags": [ "hajime" ], "first_seen": "2026-03-17 06:17:11 UTC", "last_seen": "2026-03-17 06:17:11 UTC", "sightings": 1 }, { "indicator": "https://nelark.icu/xftaswx/res/post_proc.php?fpath=a.ps1", "indicator_type": "url", "source": "URLhaus", "tags": [ "lnk-dropper", "ps1" ], "first_seen": "2026-03-17 06:17:11 UTC", "last_seen": "2026-03-17 06:17:11 UTC", "sightings": 1 }, { "indicator": "http://122.193.74.168:38744/.i", "indicator_type": "url", "source": "URLhaus", "tags": [ "hajime" ], "first_seen": "2026-03-17 06:17:11 UTC", "last_seen": "2026-03-17 06:17:11 UTC", "sightings": 1 }, { "indicator": "http://110.36.15.18:47600/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-17 06:17:10 UTC", "last_seen": "2026-03-17 06:17:10 UTC", "sightings": 1 }, { "indicator": "http://110.39.233.38:36415/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-17 06:17:10 UTC", "last_seen": "2026-03-17 06:17:10 UTC", "sightings": 1 }, { "indicator": "http://76.49.31.147:54653/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-17 06:17:10 UTC", "last_seen": "2026-03-17 06:17:10 UTC", "sightings": 1 }, { "indicator": "http://118.232.137.101:50006/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-17 06:17:10 UTC", "last_seen": "2026-03-17 06:17:10 UTC", "sightings": 1 }, { "indicator": "https://nelark.icu/xftaswx/res/get-command.php", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2", "ps1" ], "first_seen": "2026-03-17 06:17:10 UTC", "last_seen": "2026-03-17 06:17:10 UTC", "sightings": 1 }, { "indicator": "http://118.232.137.101:50006/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-17 06:17:10 UTC", "last_seen": "2026-03-17 06:17:10 UTC", "sightings": 1 }, { "indicator": "http://42.5.232.33:43626/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-17 06:17:10 UTC", "last_seen": "2026-03-17 06:17:10 UTC", "sightings": 1 }, { "indicator": "http://42.5.232.33:43626/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-17 06:17:10 UTC", "last_seen": "2026-03-17 06:17:10 UTC", "sightings": 1 }, { "indicator": "http://5.69.113.172:40214/.i", "indicator_type": "url", "source": "URLhaus", "tags": [ "hajime" ], "first_seen": "2026-03-17 06:17:10 UTC", "last_seen": "2026-03-17 06:17:10 UTC", "sightings": 1 }, { "indicator": "http://110.39.247.209:47036/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-17 06:17:07 UTC", "last_seen": "2026-03-17 06:17:07 UTC", "sightings": 1 }, { "indicator": "http://110.39.247.209:47036/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-17 06:17:07 UTC", "last_seen": "2026-03-17 06:17:07 UTC", "sightings": 1 }, { "indicator": "https://nelark.icu/xftaswx/res/post_proc.php?fpath=bypass.b", "indicator_type": "url", "source": "URLhaus", "tags": [ "bat", "uac-bypass" ], "first_seen": "2026-03-17 06:16:08 UTC", "last_seen": "2026-03-17 06:16:08 UTC", "sightings": 1 }, { "indicator": "https://nelark.icu/xftaswx/res/post_proc.php?fpath=bpersist.ps1", "indicator_type": "url", "source": "URLhaus", "tags": [ "lnk-dropper", "ps1" ], "first_seen": "2026-03-17 06:16:08 UTC", "last_seen": "2026-03-17 06:16:08 UTC", "sightings": 1 }, { "indicator": "https://nelark.icu/xftaswx/res/bb.php", "indicator_type": "url", "source": "URLhaus", "tags": [ "lnk-dropper", "ps1" ], "first_seen": "2026-03-17 06:16:08 UTC", "last_seen": "2026-03-17 06:16:08 UTC", "sightings": 1 }, { "indicator": "https://nelark.icu/xftaswx/res/post_proc.php?fpath=scheduler-once", "indicator_type": "url", "source": "URLhaus", "tags": [ "lnk-dropper", "ps1" ], "first_seen": "2026-03-17 06:16:08 UTC", "last_seen": "2026-03-17 06:16:08 UTC", "sightings": 1 }, { "indicator": "http://115.61.120.184:40150/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 06:09:09 UTC", "last_seen": "2026-03-17 06:09:09 UTC", "sightings": 1 }, { "indicator": "http://27.206.58.209:57622/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 06:04:08 UTC", "last_seen": "2026-03-17 06:04:08 UTC", "sightings": 1 }, { "indicator": "http://115.63.52.240:50164/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 06:02:12 UTC", "last_seen": "2026-03-17 06:02:12 UTC", "sightings": 1 }, { "indicator": "http://123.14.45.22:52047/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 05:56:15 UTC", "last_seen": "2026-03-17 05:56:15 UTC", "sightings": 1 }, { "indicator": "https://zeee.jokerun.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 05:55:08 UTC", "last_seen": "2026-03-17 05:55:08 UTC", "sightings": 1 }, { "indicator": "http://123.10.5.12:47023/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 05:54:13 UTC", "last_seen": "2026-03-17 05:54:13 UTC", "sightings": 1 }, { "indicator": "http://103.190.22.80:47632/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-17 05:53:07 UTC", "last_seen": "2026-03-17 05:53:07 UTC", "sightings": 1 }, { "indicator": "http://117.223.140.33:50942/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 05:51:12 UTC", "last_seen": "2026-03-17 05:51:12 UTC", "sightings": 1 }, { "indicator": "http://110.36.15.42:50987/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 05:49:14 UTC", "last_seen": "2026-03-17 05:49:14 UTC", "sightings": 1 }, { "indicator": "http://27.206.58.209:57622/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 05:48:08 UTC", "last_seen": "2026-03-17 05:48:08 UTC", "sightings": 1 }, { "indicator": "https://clustercheck.jokerun.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 05:47:07 UTC", "last_seen": "2026-03-17 05:47:07 UTC", "sightings": 1 }, { "indicator": "http://36.69.68.79:54589/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-17 05:45:08 UTC", "last_seen": "2026-03-17 05:45:08 UTC", "sightings": 1 }, { "indicator": "https://5ilve-vector.cokefun.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 05:41:07 UTC", "last_seen": "2026-03-17 05:41:07 UTC", "sightings": 1 }, { "indicator": "http://36.69.68.79:54589/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-17 05:38:21 UTC", "last_seen": "2026-03-17 05:38:21 UTC", "sightings": 1 }, { "indicator": "https://8vxgsoq9.cokefun.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 05:35:11 UTC", "last_seen": "2026-03-17 05:35:11 UTC", "sightings": 1 }, { "indicator": "http://110.37.115.91:39915/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 05:33:15 UTC", "last_seen": "2026-03-17 05:33:15 UTC", "sightings": 1 }, { "indicator": "http://123.14.45.22:52047/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 05:32:15 UTC", "last_seen": "2026-03-17 05:32:15 UTC", "sightings": 1 }, { "indicator": "https://crbn95bh.cokefun.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 05:28:06 UTC", "last_seen": "2026-03-17 05:28:06 UTC", "sightings": 1 }, { "indicator": "http://110.36.15.42:50987/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 05:27:08 UTC", "last_seen": "2026-03-17 05:27:08 UTC", "sightings": 1 }, { "indicator": "http://110.39.231.36:46609/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 05:26:14 UTC", "last_seen": "2026-03-17 05:26:14 UTC", "sightings": 1 }, { "indicator": "http://59.97.182.173:38057/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 05:25:07 UTC", "last_seen": "2026-03-17 05:25:07 UTC", "sightings": 1 }, { "indicator": "https://ts2hfdf.cokefun.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 05:21:09 UTC", "last_seen": "2026-03-17 05:21:09 UTC", "sightings": 1 }, { "indicator": "https://3nsojlm.cokenote.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 05:14:06 UTC", "last_seen": "2026-03-17 05:14:06 UTC", "sightings": 1 }, { "indicator": "http://113.221.27.140:35843/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-17 05:10:13 UTC", "last_seen": "2026-03-17 05:10:13 UTC", "sightings": 1 }, { "indicator": "https://cour1e1-beam.cokenote.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 05:08:05 UTC", "last_seen": "2026-03-17 05:08:05 UTC", "sightings": 1 }, { "indicator": "http://110.39.231.36:46609/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 05:01:14 UTC", "last_seen": "2026-03-17 05:01:14 UTC", "sightings": 1 }, { "indicator": "https://vorven9is.cokenote.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 05:01:06 UTC", "last_seen": "2026-03-17 05:01:06 UTC", "sightings": 1 }, { "indicator": "http://59.97.182.173:38057/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 04:59:13 UTC", "last_seen": "2026-03-17 04:59:13 UTC", "sightings": 1 }, { "indicator": "http://182.247.205.241:56295/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-17 04:58:15 UTC", "last_seen": "2026-03-17 04:58:15 UTC", "sightings": 1 }, { "indicator": "http://123.10.5.12:47023/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 04:57:14 UTC", "last_seen": "2026-03-17 04:57:14 UTC", "sightings": 1 }, { "indicator": "http://110.37.123.237:37712/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 04:56:07 UTC", "last_seen": "2026-03-17 04:56:07 UTC", "sightings": 1 }, { "indicator": "http://110.36.1.80:43304/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 04:56:07 UTC", "last_seen": "2026-03-17 04:56:07 UTC", "sightings": 1 }, { "indicator": "https://5t0r-hold.cokenote.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 04:55:08 UTC", "last_seen": "2026-03-17 04:55:08 UTC", "sightings": 1 }, { "indicator": "https://hfcn.backyard.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 04:48:06 UTC", "last_seen": "2026-03-17 04:48:06 UTC", "sightings": 1 }, { "indicator": "http://175.149.146.87:47304/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 04:44:20 UTC", "last_seen": "2026-03-17 04:44:20 UTC", "sightings": 1 }, { "indicator": "http://115.61.120.184:40150/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 04:41:09 UTC", "last_seen": "2026-03-17 04:41:09 UTC", "sightings": 1 }, { "indicator": "https://quortideex3.backyard.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 04:41:06 UTC", "last_seen": "2026-03-17 04:41:06 UTC", "sightings": 1 }, { "indicator": "http://42.228.232.155:55013/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 04:38:15 UTC", "last_seen": "2026-03-17 04:38:15 UTC", "sightings": 1 }, { "indicator": "https://banne4-frame.backyard.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 04:35:10 UTC", "last_seen": "2026-03-17 04:35:10 UTC", "sightings": 1 }, { "indicator": "https://t1d3-reach.backyard.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 04:33:06 UTC", "last_seen": "2026-03-17 04:33:06 UTC", "sightings": 1 }, { "indicator": "http://42.228.232.155:55013/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 04:29:18 UTC", "last_seen": "2026-03-17 04:29:18 UTC", "sightings": 1 }, { "indicator": "http://110.37.123.237:37712/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 04:28:07 UTC", "last_seen": "2026-03-17 04:28:07 UTC", "sightings": 1 }, { "indicator": "http://112.254.87.147:47306/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-17 04:26:13 UTC", "last_seen": "2026-03-17 04:26:13 UTC", "sightings": 1 }, { "indicator": "http://219.155.200.55:46156/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 04:25:14 UTC", "last_seen": "2026-03-17 04:25:14 UTC", "sightings": 1 }, { "indicator": "https://sales-path.norsdwest.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 04:22:06 UTC", "last_seen": "2026-03-17 04:22:06 UTC", "sightings": 1 }, { "indicator": "https://853rfm15.norsdwest.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 04:15:10 UTC", "last_seen": "2026-03-17 04:15:10 UTC", "sightings": 1 }, { "indicator": "http://182.127.221.6:42731/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 04:10:15 UTC", "last_seen": "2026-03-17 04:10:15 UTC", "sightings": 1 }, { "indicator": "http://110.38.223.5:51730/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 04:10:14 UTC", "last_seen": "2026-03-17 04:10:14 UTC", "sightings": 1 }, { "indicator": "https://solvenum.norsdwest.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 04:09:06 UTC", "last_seen": "2026-03-17 04:09:06 UTC", "sightings": 1 }, { "indicator": "http://113.221.27.140:35843/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-17 04:07:16 UTC", "last_seen": "2026-03-17 04:07:16 UTC", "sightings": 1 }, { "indicator": "http://112.254.87.147:47306/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-17 04:01:36 UTC", "last_seen": "2026-03-17 04:01:36 UTC", "sightings": 1 }, { "indicator": "https://c1e4-point.easttea.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 03:59:06 UTC", "last_seen": "2026-03-17 03:59:06 UTC", "sightings": 1 }, { "indicator": "https://gjugxvg.easttea.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 03:54:05 UTC", "last_seen": "2026-03-17 03:54:05 UTC", "sightings": 1 }, { "indicator": "http://218.21.121.71:34615/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-17 03:53:15 UTC", "last_seen": "2026-03-17 03:53:15 UTC", "sightings": 1 }, { "indicator": "https://gust-exp.easttea.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 03:50:07 UTC", "last_seen": "2026-03-17 03:50:07 UTC", "sightings": 1 }, { "indicator": "http://110.38.223.5:51730/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 03:47:06 UTC", "last_seen": "2026-03-17 03:47:06 UTC", "sightings": 1 }, { "indicator": "https://yefa.easttea.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 03:44:08 UTC", "last_seen": "2026-03-17 03:44:08 UTC", "sightings": 1 }, { "indicator": "http://182.127.221.6:42731/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 03:41:16 UTC", "last_seen": "2026-03-17 03:41:16 UTC", "sightings": 1 }, { "indicator": "http://119.116.58.96:58849/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 03:20:16 UTC", "last_seen": "2026-03-17 03:20:16 UTC", "sightings": 1 }, { "indicator": "http://115.49.218.255:38914/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 03:12:17 UTC", "last_seen": "2026-03-17 03:12:17 UTC", "sightings": 1 }, { "indicator": "http://27.223.255.131:34154/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 03:06:08 UTC", "last_seen": "2026-03-17 03:06:08 UTC", "sightings": 1 }, { "indicator": "http://115.63.133.39:34520/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 03:06:07 UTC", "last_seen": "2026-03-17 03:06:07 UTC", "sightings": 1 }, { "indicator": "http://217.24.176.168:52147/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 03:06:06 UTC", "last_seen": "2026-03-17 03:06:06 UTC", "sightings": 1 }, { "indicator": "http://115.61.114.175:40761/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 02:58:08 UTC", "last_seen": "2026-03-17 02:58:08 UTC", "sightings": 1 }, { "indicator": "http://123.7.221.197:48009/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 02:53:06 UTC", "last_seen": "2026-03-17 02:53:06 UTC", "sightings": 1 }, { "indicator": "https://cor46-layer.grosstao.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 02:52:09 UTC", "last_seen": "2026-03-17 02:52:09 UTC", "sightings": 1 }, { "indicator": "https://markterminal.grosstao.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 02:46:10 UTC", "last_seen": "2026-03-17 02:46:10 UTC", "sightings": 1 }, { "indicator": "http://115.63.133.39:34520/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 02:45:16 UTC", "last_seen": "2026-03-17 02:45:16 UTC", "sightings": 1 }, { "indicator": "http://222.139.106.179:43780/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 02:44:10 UTC", "last_seen": "2026-03-17 02:44:10 UTC", "sightings": 1 }, { "indicator": "http://219.156.172.168:36670/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 02:42:08 UTC", "last_seen": "2026-03-17 02:42:08 UTC", "sightings": 1 }, { "indicator": "http://42.231.250.218:46008/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 02:31:09 UTC", "last_seen": "2026-03-17 02:31:09 UTC", "sightings": 1 }, { "indicator": "http://115.61.114.175:40761/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 02:29:07 UTC", "last_seen": "2026-03-17 02:29:07 UTC", "sightings": 1 }, { "indicator": "http://113.224.122.202:47709/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 02:24:14 UTC", "last_seen": "2026-03-17 02:24:14 UTC", "sightings": 1 }, { "indicator": "http://110.37.65.64:49864/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 02:19:10 UTC", "last_seen": "2026-03-17 02:19:10 UTC", "sightings": 1 }, { "indicator": "http://120.84.212.138:38495/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 02:14:13 UTC", "last_seen": "2026-03-17 02:14:13 UTC", "sightings": 1 }, { "indicator": "http://42.231.250.218:46008/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 02:07:14 UTC", "last_seen": "2026-03-17 02:07:14 UTC", "sightings": 1 }, { "indicator": "http://42.239.188.177:35354/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 02:06:07 UTC", "last_seen": "2026-03-17 02:06:07 UTC", "sightings": 1 }, { "indicator": "http://110.37.3.239:60885/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 01:51:12 UTC", "last_seen": "2026-03-17 01:51:12 UTC", "sightings": 1 }, { "indicator": "http://219.70.90.108:51405/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-17 01:50:09 UTC", "last_seen": "2026-03-17 01:50:09 UTC", "sightings": 1 }, { "indicator": "https://l0-main-v7.navispazio.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 01:44:08 UTC", "last_seen": "2026-03-17 01:44:08 UTC", "sightings": 1 }, { "indicator": "http://42.239.188.177:35354/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 01:39:12 UTC", "last_seen": "2026-03-17 01:39:12 UTC", "sightings": 1 }, { "indicator": "http://219.70.90.108:51405/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-17 01:38:13 UTC", "last_seen": "2026-03-17 01:38:13 UTC", "sightings": 1 }, { "indicator": "https://s5-sync-x1.navispazio.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 01:37:09 UTC", "last_seen": "2026-03-17 01:37:09 UTC", "sightings": 1 }, { "indicator": "http://110.37.48.162:59847/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 01:34:07 UTC", "last_seen": "2026-03-17 01:34:07 UTC", "sightings": 1 }, { "indicator": "https://f2-gate-v0.navispazio.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 01:32:06 UTC", "last_seen": "2026-03-17 01:32:06 UTC", "sightings": 1 }, { "indicator": "http://61.3.31.57:49203/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 01:29:16 UTC", "last_seen": "2026-03-17 01:29:16 UTC", "sightings": 1 }, { "indicator": "http://110.37.3.239:60885/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 01:28:15 UTC", "last_seen": "2026-03-17 01:28:15 UTC", "sightings": 1 }, { "indicator": "https://j8-web-infra.navispazio.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 01:26:07 UTC", "last_seen": "2026-03-17 01:26:07 UTC", "sightings": 1 }, { "indicator": "http://110.37.48.162:59847/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 01:25:10 UTC", "last_seen": "2026-03-17 01:25:10 UTC", "sightings": 1 }, { "indicator": "http://115.59.11.122:55367/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 01:23:15 UTC", "last_seen": "2026-03-17 01:23:15 UTC", "sightings": 1 }, { "indicator": "https://t4-link-x2.muralis-tech.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 01:20:10 UTC", "last_seen": "2026-03-17 01:20:10 UTC", "sightings": 1 }, { "indicator": "http://110.37.97.32:45212/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 01:15:16 UTC", "last_seen": "2026-03-17 01:15:16 UTC", "sightings": 1 }, { "indicator": "http://219.156.172.168:36670/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 01:15:16 UTC", "last_seen": "2026-03-17 01:15:16 UTC", "sightings": 1 }, { "indicator": "https://r1-core-v3.muralis-tech.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 01:14:07 UTC", "last_seen": "2026-03-17 01:14:07 UTC", "sightings": 1 }, { "indicator": "https://q7-base-99.muralis-tech.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 01:10:08 UTC", "last_seen": "2026-03-17 01:10:08 UTC", "sightings": 1 }, { "indicator": "http://115.59.11.122:55367/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 01:06:09 UTC", "last_seen": "2026-03-17 01:06:09 UTC", "sightings": 1 }, { "indicator": "http://110.37.97.32:45212/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 01:06:08 UTC", "last_seen": "2026-03-17 01:06:08 UTC", "sightings": 1 }, { "indicator": "http://112.248.102.159:52762/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 01:04:15 UTC", "last_seen": "2026-03-17 01:04:15 UTC", "sightings": 1 }, { "indicator": "http://61.3.31.57:49203/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 01:04:15 UTC", "last_seen": "2026-03-17 01:04:15 UTC", "sightings": 1 }, { "indicator": "https://u2-orbit-z.muralis-tech.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 01:03:06 UTC", "last_seen": "2026-03-17 01:03:06 UTC", "sightings": 1 }, { "indicator": "https://x9-space-v5.stratagrid.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 00:59:08 UTC", "last_seen": "2026-03-17 00:59:08 UTC", "sightings": 1 }, { "indicator": "http://196.190.16.141:56409/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-17 00:55:08 UTC", "last_seen": "2026-03-17 00:55:08 UTC", "sightings": 1 }, { "indicator": "http://39.82.70.52:60516/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 00:53:08 UTC", "last_seen": "2026-03-17 00:53:08 UTC", "sightings": 1 }, { "indicator": "https://z0-field-x.stratagrid.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 00:53:06 UTC", "last_seen": "2026-03-17 00:53:06 UTC", "sightings": 1 }, { "indicator": "https://v4-zone-12.stratagrid.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 00:47:08 UTC", "last_seen": "2026-03-17 00:47:08 UTC", "sightings": 1 }, { "indicator": "http://110.36.80.170:52680/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 00:43:12 UTC", "last_seen": "2026-03-17 00:43:12 UTC", "sightings": 1 }, { "indicator": "https://w1-rim-node.stratagrid.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 00:41:06 UTC", "last_seen": "2026-03-17 00:41:06 UTC", "sightings": 1 }, { "indicator": "https://k7-sync-v2.fossaflow.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 00:36:07 UTC", "last_seen": "2026-03-17 00:36:07 UTC", "sightings": 1 }, { "indicator": "http://182.247.205.241:56295/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-17 00:30:24 UTC", "last_seen": "2026-03-17 00:30:24 UTC", "sightings": 1 }, { "indicator": "https://p0-scan-x8.fossaflow.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 00:30:08 UTC", "last_seen": "2026-03-17 00:30:08 UTC", "sightings": 1 }, { "indicator": "http://39.82.70.52:60516/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 00:25:14 UTC", "last_seen": "2026-03-17 00:25:14 UTC", "sightings": 1 }, { "indicator": "https://n4-bridge-z.fossaflow.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 00:25:11 UTC", "last_seen": "2026-03-17 00:25:11 UTC", "sightings": 1 }, { "indicator": "http://115.210.194.175:39635/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-17 00:17:15 UTC", "last_seen": "2026-03-17 00:17:15 UTC", "sightings": 1 }, { "indicator": "https://m5-vision-9.columnasol.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 00:14:06 UTC", "last_seen": "2026-03-17 00:14:06 UTC", "sightings": 1 }, { "indicator": "https://a2-ghost-v3.columnasol.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 00:07:07 UTC", "last_seen": "2026-03-17 00:07:07 UTC", "sightings": 1 }, { "indicator": "http://117.209.95.157:53392/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 00:01:18 UTC", "last_seen": "2026-03-17 00:01:18 UTC", "sightings": 1 }, { "indicator": "https://e9-trace-x.columnasol.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-17 00:01:07 UTC", "last_seen": "2026-03-17 00:01:07 UTC", "sightings": 1 }, { "indicator": "http://110.36.80.170:52680/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-17 00:00:07 UTC", "last_seen": "2026-03-17 00:00:07 UTC", "sightings": 1 }, { "indicator": "https://d3-shell-0.columnasol.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 23:58:06 UTC", "last_seen": "2026-03-16 23:58:06 UTC", "sightings": 1 }, { "indicator": "http://39.91.3.146:41601/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 23:56:17 UTC", "last_seen": "2026-03-16 23:56:17 UTC", "sightings": 1 }, { "indicator": "http://115.210.194.175:39635/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-16 23:55:21 UTC", "last_seen": "2026-03-16 23:55:21 UTC", "sightings": 1 }, { "indicator": "http://219.156.90.247:55592/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 23:53:07 UTC", "last_seen": "2026-03-16 23:53:07 UTC", "sightings": 1 }, { "indicator": "https://y1-point-v7.viametrica.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 23:51:10 UTC", "last_seen": "2026-03-16 23:51:10 UTC", "sightings": 1 }, { "indicator": "http://42.229.220.26:58512/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 23:48:19 UTC", "last_seen": "2026-03-16 23:48:19 UTC", "sightings": 1 }, { "indicator": "http://39.91.3.146:41601/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 23:48:19 UTC", "last_seen": "2026-03-16 23:48:19 UTC", "sightings": 1 }, { "indicator": "https://g0-data-z9.viametrica.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 23:46:07 UTC", "last_seen": "2026-03-16 23:46:07 UTC", "sightings": 1 }, { "indicator": "http://45.164.179.97:10768/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 23:45:08 UTC", "last_seen": "2026-03-16 23:45:08 UTC", "sightings": 1 }, { "indicator": "http://125.45.8.113:35368/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 23:41:18 UTC", "last_seen": "2026-03-16 23:41:18 UTC", "sightings": 1 }, { "indicator": "http://218.21.121.71:34615/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-16 23:40:22 UTC", "last_seen": "2026-03-16 23:40:22 UTC", "sightings": 1 }, { "indicator": "https://t5-auth-x4.viametrica.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 23:39:06 UTC", "last_seen": "2026-03-16 23:39:06 UTC", "sightings": 1 }, { "indicator": "https://l2-net-base.viametrica.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 23:33:07 UTC", "last_seen": "2026-03-16 23:33:07 UTC", "sightings": 1 }, { "indicator": "http://115.49.218.255:38914/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 23:32:11 UTC", "last_seen": "2026-03-16 23:32:11 UTC", "sightings": 1 }, { "indicator": "https://f8-flow-v11.basalticnode.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 23:28:12 UTC", "last_seen": "2026-03-16 23:28:12 UTC", "sightings": 1 }, { "indicator": "http://125.45.8.113:35368/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 23:25:16 UTC", "last_seen": "2026-03-16 23:25:16 UTC", "sightings": 1 }, { "indicator": "http://117.209.82.149:55767/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 23:22:11 UTC", "last_seen": "2026-03-16 23:22:11 UTC", "sightings": 1 }, { "indicator": "https://j3-hub-stat.basalticnode.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 23:22:07 UTC", "last_seen": "2026-03-16 23:22:07 UTC", "sightings": 1 }, { "indicator": "http://45.164.179.97:10768/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 23:19:18 UTC", "last_seen": "2026-03-16 23:19:18 UTC", "sightings": 1 }, { "indicator": "http://110.37.61.44:39722/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-16 23:18:15 UTC", "last_seen": "2026-03-16 23:18:15 UTC", "sightings": 1 }, { "indicator": "http://110.39.235.164:45675/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 23:16:13 UTC", "last_seen": "2026-03-16 23:16:13 UTC", "sightings": 1 }, { "indicator": "https://q4-sys-grid.basalticnode.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 23:16:09 UTC", "last_seen": "2026-03-16 23:16:09 UTC", "sightings": 1 }, { "indicator": "http://42.225.62.100:58800/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 23:12:25 UTC", "last_seen": "2026-03-16 23:12:25 UTC", "sightings": 1 }, { "indicator": "http://219.156.90.247:55592/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 23:12:21 UTC", "last_seen": "2026-03-16 23:12:21 UTC", "sightings": 1 }, { "indicator": "https://b1-store-v2.basalticnode.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 23:11:06 UTC", "last_seen": "2026-03-16 23:11:06 UTC", "sightings": 1 }, { "indicator": "https://v6-api-node.pietraforte.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 23:07:06 UTC", "last_seen": "2026-03-16 23:07:06 UTC", "sightings": 1 }, { "indicator": "https://k2-dist-x7.pietraforte.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 22:58:09 UTC", "last_seen": "2026-03-16 22:58:09 UTC", "sightings": 1 }, { "indicator": "http://110.37.61.44:39722/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-16 22:53:18 UTC", "last_seen": "2026-03-16 22:53:18 UTC", "sightings": 1 }, { "indicator": "https://h4-node-00.pietraforte.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 22:49:07 UTC", "last_seen": "2026-03-16 22:49:07 UTC", "sightings": 1 }, { "indicator": "http://110.39.235.164:45675/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 22:47:20 UTC", "last_seen": "2026-03-16 22:47:20 UTC", "sightings": 1 }, { "indicator": "http://115.54.154.222:50789/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 22:46:17 UTC", "last_seen": "2026-03-16 22:46:17 UTC", "sightings": 1 }, { "indicator": "https://m8-app-unit.arcostruttura.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 22:43:08 UTC", "last_seen": "2026-03-16 22:43:08 UTC", "sightings": 1 }, { "indicator": "https://w2-web-cache.arcostruttura.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 22:37:07 UTC", "last_seen": "2026-03-16 22:37:07 UTC", "sightings": 1 }, { "indicator": "http://112.245.255.226:38499/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 22:33:18 UTC", "last_seen": "2026-03-16 22:33:18 UTC", "sightings": 1 }, { "indicator": "https://p1-sync-v9.arcostruttura.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 22:32:09 UTC", "last_seen": "2026-03-16 22:32:09 UTC", "sightings": 1 }, { "indicator": "https://x5-gate-33.arcostruttura.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 22:26:07 UTC", "last_seen": "2026-03-16 22:26:07 UTC", "sightings": 1 }, { "indicator": "http://220.202.91.31:38589/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 22:22:17 UTC", "last_seen": "2026-03-16 22:22:17 UTC", "sightings": 1 }, { "indicator": "https://n7-core-db.terrafirma.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 22:21:07 UTC", "last_seen": "2026-03-16 22:21:07 UTC", "sightings": 1 }, { "indicator": "http://112.245.255.226:38499/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 22:17:22 UTC", "last_seen": "2026-03-16 22:17:22 UTC", "sightings": 1 }, { "indicator": "https://s1-ext-link.terrafirma.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 22:15:08 UTC", "last_seen": "2026-03-16 22:15:08 UTC", "sightings": 1 }, { "indicator": "http://220.202.91.31:38589/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 22:12:18 UTC", "last_seen": "2026-03-16 22:12:18 UTC", "sightings": 1 }, { "indicator": "https://r3-mon-v8.terrafirma.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 22:10:07 UTC", "last_seen": "2026-03-16 22:10:07 UTC", "sightings": 1 }, { "indicator": "https://u9-bal-01.terrafirma.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 22:06:07 UTC", "last_seen": "2026-03-16 22:06:07 UTC", "sightings": 1 }, { "indicator": "http://42.7.99.125:37963/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 22:05:15 UTC", "last_seen": "2026-03-16 22:05:15 UTC", "sightings": 1 }, { "indicator": "https://main-v1-point.cellanode.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 22:02:07 UTC", "last_seen": "2026-03-16 22:02:07 UTC", "sightings": 1 }, { "indicator": "http://117.241.199.92:48991/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 22:01:15 UTC", "last_seen": "2026-03-16 22:01:15 UTC", "sightings": 1 }, { "indicator": "http://222.134.173.187:34457/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 22:00:20 UTC", "last_seen": "2026-03-16 22:00:20 UTC", "sightings": 1 }, { "indicator": "http://119.118.34.218:60862/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 21:58:22 UTC", "last_seen": "2026-03-16 21:58:22 UTC", "sightings": 1 }, { "indicator": "http://110.36.1.80:43304/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 21:58:20 UTC", "last_seen": "2026-03-16 21:58:20 UTC", "sightings": 1 }, { "indicator": "https://sync-z3-data.cellanode.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 21:55:09 UTC", "last_seen": "2026-03-16 21:55:09 UTC", "sightings": 1 }, { "indicator": "https://gate-x8-proxy.cellanode.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 21:48:06 UTC", "last_seen": "2026-03-16 21:48:06 UTC", "sightings": 1 }, { "indicator": "https://web-v02-infra.cellanode.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 21:41:07 UTC", "last_seen": "2026-03-16 21:41:07 UTC", "sightings": 1 }, { "indicator": "http://27.24.73.156:42919/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-16 21:40:23 UTC", "last_seen": "2026-03-16 21:40:23 UTC", "sightings": 1 }, { "indicator": "http://117.241.199.92:48991/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 21:35:26 UTC", "last_seen": "2026-03-16 21:35:26 UTC", "sightings": 1 }, { "indicator": "http://222.134.173.187:34457/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 21:35:18 UTC", "last_seen": "2026-03-16 21:35:18 UTC", "sightings": 1 }, { "indicator": "https://link-v1-sat.vitalocus.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 21:35:08 UTC", "last_seen": "2026-03-16 21:35:08 UTC", "sightings": 1 }, { "indicator": "http://60.23.232.193:39924/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 21:34:16 UTC", "last_seen": "2026-03-16 21:34:16 UTC", "sightings": 1 }, { "indicator": "http://119.118.34.218:60862/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 21:31:25 UTC", "last_seen": "2026-03-16 21:31:25 UTC", "sightings": 1 }, { "indicator": "https://core-x9-rock.vitalocus.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 21:29:07 UTC", "last_seen": "2026-03-16 21:29:07 UTC", "sightings": 1 }, { "indicator": "http://182.113.196.186:51842/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 21:23:19 UTC", "last_seen": "2026-03-16 21:23:19 UTC", "sightings": 1 }, { "indicator": "http://27.37.126.131:44175/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 21:22:13 UTC", "last_seen": "2026-03-16 21:22:13 UTC", "sightings": 1 }, { "indicator": "https://base-z3-steel.vitalocus.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 21:22:07 UTC", "last_seen": "2026-03-16 21:22:07 UTC", "sightings": 1 }, { "indicator": "http://61.3.99.120:43343/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 21:20:29 UTC", "last_seen": "2026-03-16 21:20:29 UTC", "sightings": 1 }, { "indicator": "https://orbit-v7-moon.vitalocus.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 21:16:06 UTC", "last_seen": "2026-03-16 21:16:06 UTC", "sightings": 1 }, { "indicator": "http://61.3.99.120:43343/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 21:11:21 UTC", "last_seen": "2026-03-16 21:11:21 UTC", "sightings": 1 }, { "indicator": "https://space-x0-open.chemflow.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 21:10:08 UTC", "last_seen": "2026-03-16 21:10:08 UTC", "sightings": 1 }, { "indicator": "http://60.23.232.193:39924/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 21:07:30 UTC", "last_seen": "2026-03-16 21:07:30 UTC", "sightings": 1 }, { "indicator": "https://field-z1-vast.chemflow.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 21:06:06 UTC", "last_seen": "2026-03-16 21:06:06 UTC", "sightings": 1 }, { "indicator": "http://vmi3152445.contaboserver.net/memory_bin_dir/memory_load.mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mips", "mirai", "ua-wget" ], "first_seen": "2026-03-16 21:05:20 UTC", "last_seen": "2026-03-16 21:05:20 UTC", "sightings": 1 }, { "indicator": "http://27.37.126.131:44175/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 20:56:27 UTC", "last_seen": "2026-03-16 20:56:27 UTC", "sightings": 1 }, { "indicator": "http://182.113.196.186:51842/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 20:55:22 UTC", "last_seen": "2026-03-16 20:55:22 UTC", "sightings": 1 }, { "indicator": "https://rim-x4-outer.chemflow.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 20:49:07 UTC", "last_seen": "2026-03-16 20:49:07 UTC", "sightings": 1 }, { "indicator": "http://91.92.242.3:7777/noesisllc.online/fisherzxcc/fisherxx/tgckftbiqazqkklwtwtu7vhhnh6foxc.js", "indicator_type": "url", "source": "URLhaus", "tags": [ "ascii", "js" ], "first_seen": "2026-03-16 20:49:07 UTC", "last_seen": "2026-03-16 20:49:07 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.67/bins/spoofer.spc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-16 20:45:21 UTC", "last_seen": "2026-03-16 20:45:21 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.67/bins/spoofer.x86", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-16 20:45:21 UTC", "last_seen": "2026-03-16 20:45:21 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.67/bins/spoofer.ppc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-16 20:45:21 UTC", "last_seen": "2026-03-16 20:45:21 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.67/bins/spoofer.arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-16 20:45:20 UTC", "last_seen": "2026-03-16 20:45:20 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.67/bins/spoofer.sh4", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-16 20:45:20 UTC", "last_seen": "2026-03-16 20:45:20 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.67/bins/spoofer.m68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-16 20:45:20 UTC", "last_seen": "2026-03-16 20:45:20 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.67/bins/spoofer.arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-16 20:45:20 UTC", "last_seen": "2026-03-16 20:45:20 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.67/bins/spoofer.arm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-16 20:45:20 UTC", "last_seen": "2026-03-16 20:45:20 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.67/bins/spoofer.arm", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-16 20:45:20 UTC", "last_seen": "2026-03-16 20:45:20 UTC", "sightings": 1 }, { "indicator": "http://88.214.20.14/bins/tuxnokill.arm4", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-16 20:45:20 UTC", "last_seen": "2026-03-16 20:45:20 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.67/bins/spoofer.mpsl", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-16 20:45:20 UTC", "last_seen": "2026-03-16 20:45:20 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.67/bins/spoofer.mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-16 20:45:20 UTC", "last_seen": "2026-03-16 20:45:20 UTC", "sightings": 1 }, { "indicator": "https://mountaingoats4sale.xyz/AV12.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "exe" ], "first_seen": "2026-03-16 20:44:07 UTC", "last_seen": "2026-03-16 20:44:07 UTC", "sightings": 1 }, { "indicator": "https://mountaingoats4sale.xyz/WDS.bat", "indicator_type": "url", "source": "URLhaus", "tags": [ "ascii", "bat" ], "first_seen": "2026-03-16 20:44:07 UTC", "last_seen": "2026-03-16 20:44:07 UTC", "sightings": 1 }, { "indicator": "https://mountaingoats4sale.xyz/dab.ps1", "indicator_type": "url", "source": "URLhaus", "tags": [ "ascii", "powershell", "ps1" ], "first_seen": "2026-03-16 20:44:06 UTC", "last_seen": "2026-03-16 20:44:06 UTC", "sightings": 1 }, { "indicator": "https://net-v8-access.medivault.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 20:43:09 UTC", "last_seen": "2026-03-16 20:43:09 UTC", "sightings": 1 }, { "indicator": "http://60.21.172.164:47587/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 20:42:17 UTC", "last_seen": "2026-03-16 20:42:17 UTC", "sightings": 1 }, { "indicator": "http://220.202.66.244:34322/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 20:41:21 UTC", "last_seen": "2026-03-16 20:41:21 UTC", "sightings": 1 }, { "indicator": "http://103.190.22.80:47632/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-16 20:38:22 UTC", "last_seen": "2026-03-16 20:38:22 UTC", "sightings": 1 }, { "indicator": "http://88.214.20.14/bins/tuxnokill.arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-16 20:37:08 UTC", "last_seen": "2026-03-16 20:37:08 UTC", "sightings": 1 }, { "indicator": "http://88.214.20.14/bins/tuxnokill.x86", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-16 20:37:07 UTC", "last_seen": "2026-03-16 20:37:07 UTC", "sightings": 1 }, { "indicator": "http://88.214.20.14/bins/tuxnokill.arm", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-16 20:37:07 UTC", "last_seen": "2026-03-16 20:37:07 UTC", "sightings": 1 }, { "indicator": "https://qz.697539.com/q4/apzx48.apk", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-16 20:36:40 UTC", "last_seen": "2026-03-16 20:36:40 UTC", "sightings": 1 }, { "indicator": "https://venturewthrift.com/as.zip", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-16 20:36:38 UTC", "last_seen": "2026-03-16 20:36:38 UTC", "sightings": 1 }, { "indicator": "https://19-wgdvxb-xbneiu-zbvxgg.oss-ap-northeast-2.aliyuncs.com/SafeWitopd_2631625632.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "donutloader" ], "first_seen": "2026-03-16 20:36:36 UTC", "last_seen": "2026-03-16 20:36:36 UTC", "sightings": 1 }, { "indicator": "https://wcdr.cyrb.live/Cyrex.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "pw-cyrex" ], "first_seen": "2026-03-16 20:36:28 UTC", "last_seen": "2026-03-16 20:36:28 UTC", "sightings": 1 }, { "indicator": "https://oldapp.top/static/apk_files/com.github.tvbox.osc-1.apk", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-16 20:36:22 UTC", "last_seen": "2026-03-16 20:36:22 UTC", "sightings": 1 }, { "indicator": "https://oldapp.top/static/apk_files/com.youyu-1.apk", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-16 20:36:21 UTC", "last_seen": "2026-03-16 20:36:21 UTC", "sightings": 1 }, { "indicator": "https://pub-4d92724396914938abfc9555857af443.r2.dev/Zoom%20Setup.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "DattoRMM" ], "first_seen": "2026-03-16 20:36:21 UTC", "last_seen": "2026-03-16 20:36:21 UTC", "sightings": 1 }, { "indicator": "https://oldapp.top/static/apk_files/juniojsv.mtk.easy.su-210.apk", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-16 20:36:18 UTC", "last_seen": "2026-03-16 20:36:18 UTC", "sightings": 1 }, { "indicator": "https://pub-1ec2bbf13b3f4e7a9f948cb72ded816d.r2.dev/ScreenConnect.ClientSetup.msi", "indicator_type": "url", "source": "URLhaus", "tags": [ "connectwise" ], "first_seen": "2026-03-16 20:36:14 UTC", "last_seen": "2026-03-16 20:36:14 UTC", "sightings": 1 }, { "indicator": "https://wutb.voidarena.sbs/Visual%20Studio.zip", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-16 20:36:13 UTC", "last_seen": "2026-03-16 20:36:13 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/decxda/bobevil-client/refs/heads/main/Bob_Evil-3.2.1.jar", "indicator_type": "url", "source": "URLhaus", "tags": [ "jar", "WeedHack" ], "first_seen": "2026-03-16 20:36:13 UTC", "last_seen": "2026-03-16 20:36:13 UTC", "sightings": 1 }, { "indicator": "https://alternatifportbet88.blog/aplikasi/Portbet88.apk", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-16 20:36:13 UTC", "last_seen": "2026-03-16 20:36:13 UTC", "sightings": 1 }, { "indicator": "https://anondrop.net/1480759612251570226/1.png", "indicator_type": "url", "source": "URLhaus", "tags": [ "TokGrabber", "zip" ], "first_seen": "2026-03-16 20:36:12 UTC", "last_seen": "2026-03-16 20:36:12 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/decxda/Zinc-Client/refs/heads/main/Zinc_Client-3.2.1.jar", "indicator_type": "url", "source": "URLhaus", "tags": [ "jar", "WeedHack" ], "first_seen": "2026-03-16 20:36:11 UTC", "last_seen": "2026-03-16 20:36:11 UTC", "sightings": 1 }, { "indicator": "https://apkinsta.com/apk/APKInsta_v2.4.1.apk", "indicator_type": "url", "source": "URLhaus", "tags": [ "Ahmyth" ], "first_seen": "2026-03-16 20:36:10 UTC", "last_seen": "2026-03-16 20:36:10 UTC", "sightings": 1 }, { "indicator": "https://chromium-client.github.io/main/ChromiumClient-.jar", "indicator_type": "url", "source": "URLhaus", "tags": [ "jar", "WeedHack" ], "first_seen": "2026-03-16 20:36:10 UTC", "last_seen": "2026-03-16 20:36:10 UTC", "sightings": 1 }, { "indicator": "http://88.214.20.14/bins/tuxnokill.mpsl", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-16 20:36:09 UTC", "last_seen": "2026-03-16 20:36:09 UTC", "sightings": 1 }, { "indicator": "http://88.214.20.14/bins/tux.spc", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-16 20:36:09 UTC", "last_seen": "2026-03-16 20:36:09 UTC", "sightings": 1 }, { "indicator": "http://88.214.20.14/bins/tuxnokill.spc", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-16 20:36:09 UTC", "last_seen": "2026-03-16 20:36:09 UTC", "sightings": 1 }, { "indicator": "http://88.214.20.14/bins/tuxnokill.arc", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-16 20:36:09 UTC", "last_seen": "2026-03-16 20:36:09 UTC", "sightings": 1 }, { "indicator": "http://88.214.20.14/bins/tuxnokill.mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-16 20:36:09 UTC", "last_seen": "2026-03-16 20:36:09 UTC", "sightings": 1 }, { "indicator": "http://88.214.20.14/bins/tuxnokill.arm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-16 20:36:09 UTC", "last_seen": "2026-03-16 20:36:09 UTC", "sightings": 1 }, { "indicator": "http://88.214.20.14/bins/tuxnokill.ppc", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-16 20:36:09 UTC", "last_seen": "2026-03-16 20:36:09 UTC", "sightings": 1 }, { "indicator": "http://88.214.20.14/bins/tuxnokill.m68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-16 20:36:09 UTC", "last_seen": "2026-03-16 20:36:09 UTC", "sightings": 1 }, { "indicator": "https://xwang02.com/xwang.xyz_v2.0.apk", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-16 20:36:09 UTC", "last_seen": "2026-03-16 20:36:09 UTC", "sightings": 1 }, { "indicator": "http://www.keaya.com/e/class/4044.zip", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-16 20:36:09 UTC", "last_seen": "2026-03-16 20:36:09 UTC", "sightings": 1 }, { "indicator": "http://88.214.20.14/bins/tuxnokill.arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-16 20:36:09 UTC", "last_seen": "2026-03-16 20:36:09 UTC", "sightings": 1 }, { "indicator": "http://88.214.20.14/bins/tuxnokill.sh4", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-16 20:36:09 UTC", "last_seen": "2026-03-16 20:36:09 UTC", "sightings": 1 }, { "indicator": "http://88.214.20.14/ipcams.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-16 20:36:05 UTC", "last_seen": "2026-03-16 20:36:05 UTC", "sightings": 1 }, { "indicator": "http://88.214.20.14/nvr.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-16 20:36:05 UTC", "last_seen": "2026-03-16 20:36:05 UTC", "sightings": 1 }, { "indicator": "http://88.214.20.14/bins.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-16 20:36:05 UTC", "last_seen": "2026-03-16 20:36:05 UTC", "sightings": 1 }, { "indicator": "http://163.142.94.187:46073/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 20:35:22 UTC", "last_seen": "2026-03-16 20:35:22 UTC", "sightings": 1 }, { "indicator": "https://auth-x5-user.medivault.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 20:35:08 UTC", "last_seen": "2026-03-16 20:35:08 UTC", "sightings": 1 }, { "indicator": "http://76.49.31.147:54653/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-16 20:32:22 UTC", "last_seen": "2026-03-16 20:32:22 UTC", "sightings": 1 }, { "indicator": "http://42.227.34.48:58536/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 20:32:21 UTC", "last_seen": "2026-03-16 20:32:21 UTC", "sightings": 1 }, { "indicator": "https://db-z3-point.medivault.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 20:31:07 UTC", "last_seen": "2026-03-16 20:31:07 UTC", "sightings": 1 }, { "indicator": "https://base-v11-infra.medivault.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 20:28:06 UTC", "last_seen": "2026-03-16 20:28:06 UTC", "sightings": 1 }, { "indicator": "http://182.113.196.209:40874/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 20:23:23 UTC", "last_seen": "2026-03-16 20:23:23 UTC", "sightings": 1 }, { "indicator": "http://163.142.94.187:46073/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 20:15:25 UTC", "last_seen": "2026-03-16 20:15:25 UTC", "sightings": 1 }, { "indicator": "https://sync-v0-vision.opticlocus.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 20:15:08 UTC", "last_seen": "2026-03-16 20:15:08 UTC", "sightings": 1 }, { "indicator": "http://220.202.66.244:34322/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 20:14:17 UTC", "last_seen": "2026-03-16 20:14:17 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.67/spoofer.mpsl", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mips", "mirai", "opendir", "ua-wget" ], "first_seen": "2026-03-16 20:10:20 UTC", "last_seen": "2026-03-16 20:10:20 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.67/spoofer.x86", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "opendir", "ua-wget", "x86" ], "first_seen": "2026-03-16 20:10:20 UTC", "last_seen": "2026-03-16 20:10:20 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.67/spoofer.arm", "indicator_type": "url", "source": "URLhaus", "tags": [ "arm", "elf", "mirai", "opendir", "ua-wget" ], "first_seen": "2026-03-16 20:10:20 UTC", "last_seen": "2026-03-16 20:10:20 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.67/cat.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai", "opendir", "sh", "ua-wget" ], "first_seen": "2026-03-16 20:10:20 UTC", "last_seen": "2026-03-16 20:10:20 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.67/spoofer.ppc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "opendir", "PowerPC", "ua-wget" ], "first_seen": "2026-03-16 20:10:20 UTC", "last_seen": "2026-03-16 20:10:20 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.67/spoofer.arm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "arm", "elf", "mirai", "opendir", "ua-wget" ], "first_seen": "2026-03-16 20:10:20 UTC", "last_seen": "2026-03-16 20:10:20 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.67/spoofer.m68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "m68k", "mirai", "opendir", "ua-wget" ], "first_seen": "2026-03-16 20:10:20 UTC", "last_seen": "2026-03-16 20:10:20 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.67/spoofer.arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "arm", "elf", "mirai", "opendir", "ua-wget" ], "first_seen": "2026-03-16 20:10:20 UTC", "last_seen": "2026-03-16 20:10:20 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.67/spoofer.arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "arm", "elf", "mirai", "opendir", "ua-wget" ], "first_seen": "2026-03-16 20:10:20 UTC", "last_seen": "2026-03-16 20:10:20 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.67/spoofer.spc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "opendir", "sparc", "ua-wget" ], "first_seen": "2026-03-16 20:10:20 UTC", "last_seen": "2026-03-16 20:10:20 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.67/spoofer.mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mips", "mirai", "opendir", "ua-wget" ], "first_seen": "2026-03-16 20:10:20 UTC", "last_seen": "2026-03-16 20:10:20 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.67/spoofer.sh4", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "opendir", "SuperH", "ua-wget" ], "first_seen": "2026-03-16 20:10:20 UTC", "last_seen": "2026-03-16 20:10:20 UTC", "sightings": 1 }, { "indicator": "https://scan-z9-point.opticlocus.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 20:10:06 UTC", "last_seen": "2026-03-16 20:10:06 UTC", "sightings": 1 }, { "indicator": "http://42.227.34.48:58536/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 20:07:18 UTC", "last_seen": "2026-03-16 20:07:18 UTC", "sightings": 1 }, { "indicator": "https://bridge-x1-light.opticlocus.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 20:03:06 UTC", "last_seen": "2026-03-16 20:03:06 UTC", "sightings": 1 }, { "indicator": "http://110.39.242.135:34844/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 19:59:18 UTC", "last_seen": "2026-03-16 19:59:18 UTC", "sightings": 1 }, { "indicator": "https://room-v7-dark.opticlocus.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 19:57:06 UTC", "last_seen": "2026-03-16 19:57:06 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.7/files/7341834371/ZaB5quI.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543", "Stealc" ], "first_seen": "2026-03-16 19:51:08 UTC", "last_seen": "2026-03-16 19:51:08 UTC", "sightings": 1 }, { "indicator": "https://vision-v4-sync.genomax.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 19:49:08 UTC", "last_seen": "2026-03-16 19:49:08 UTC", "sightings": 1 }, { "indicator": "http://182.113.196.209:40874/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 19:47:11 UTC", "last_seen": "2026-03-16 19:47:11 UTC", "sightings": 1 }, { "indicator": "https://ghost-z2-node.genomax.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 19:43:05 UTC", "last_seen": "2026-03-16 19:43:05 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.7/files/7341834371/7AfcfsM.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543", "Smoke Loader" ], "first_seen": "2026-03-16 19:37:07 UTC", "last_seen": "2026-03-16 19:37:07 UTC", "sightings": 1 }, { "indicator": "https://shell-v9-core.genomax.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 19:36:05 UTC", "last_seen": "2026-03-16 19:36:05 UTC", "sightings": 1 }, { "indicator": "https://trace-x1-alpha.genomax.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 19:30:13 UTC", "last_seen": "2026-03-16 19:30:13 UTC", "sightings": 1 }, { "indicator": "http://110.39.242.135:34844/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 19:30:12 UTC", "last_seen": "2026-03-16 19:30:12 UTC", "sightings": 1 }, { "indicator": "https://net-v6-global.biosphera.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 19:25:06 UTC", "last_seen": "2026-03-16 19:25:06 UTC", "sightings": 1 }, { "indicator": "http://60.21.172.164:47587/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 19:24:18 UTC", "last_seen": "2026-03-16 19:24:18 UTC", "sightings": 1 }, { "indicator": "https://flow-z0-work.biosphera.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 19:22:11 UTC", "last_seen": "2026-03-16 19:22:11 UTC", "sightings": 1 }, { "indicator": "http://212.34.111.149:56488/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 19:18:08 UTC", "last_seen": "2026-03-16 19:18:08 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.7/files/8167064937/DAIs3ZV.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543", "WallStealer" ], "first_seen": "2026-03-16 19:13:08 UTC", "last_seen": "2026-03-16 19:13:08 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.7/files/7782139129/VGAGvKd.msi", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-03-16 19:12:07 UTC", "last_seen": "2026-03-16 19:12:07 UTC", "sightings": 1 }, { "indicator": "https://hub-v11-local.biosphera.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 19:10:13 UTC", "last_seen": "2026-03-16 19:10:13 UTC", "sightings": 1 }, { "indicator": "https://sys-x8-monitor.biosphera.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 19:04:07 UTC", "last_seen": "2026-03-16 19:04:07 UTC", "sightings": 1 }, { "indicator": "http://115.55.63.61:51329/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 18:55:11 UTC", "last_seen": "2026-03-16 18:55:11 UTC", "sightings": 1 }, { "indicator": "http://122.190.162.101:60054/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-16 18:55:10 UTC", "last_seen": "2026-03-16 18:55:10 UTC", "sightings": 1 }, { "indicator": "https://cloud-v5-store.plasmaviva.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 18:39:07 UTC", "last_seen": "2026-03-16 18:39:07 UTC", "sightings": 1 }, { "indicator": "https://gate-v1-entry.enzymecore.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 18:35:08 UTC", "last_seen": "2026-03-16 18:35:08 UTC", "sightings": 1 }, { "indicator": "http://99.154.56.170:38138/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-16 18:32:11 UTC", "last_seen": "2026-03-16 18:32:11 UTC", "sightings": 1 }, { "indicator": "http://212.34.111.149:56488/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 18:32:11 UTC", "last_seen": "2026-03-16 18:32:11 UTC", "sightings": 1 }, { "indicator": "https://web-90-cache.enzymecore.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 18:28:05 UTC", "last_seen": "2026-03-16 18:28:05 UTC", "sightings": 1 }, { "indicator": "https://app-v3-flow.enzymecore.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 18:16:06 UTC", "last_seen": "2026-03-16 18:16:06 UTC", "sightings": 1 }, { "indicator": "https://srv-x12-unit.enzymecore.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 18:11:06 UTC", "last_seen": "2026-03-16 18:11:06 UTC", "sightings": 1 }, { "indicator": "http://125.43.36.123:34986/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 18:03:19 UTC", "last_seen": "2026-03-16 18:03:19 UTC", "sightings": 1 }, { "indicator": "https://infra-v9-core.neurosync.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 18:03:07 UTC", "last_seen": "2026-03-16 18:03:07 UTC", "sightings": 1 }, { "indicator": "https://result-z4-meta.neurosync.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 17:57:06 UTC", "last_seen": "2026-03-16 17:57:06 UTC", "sightings": 1 }, { "indicator": "https://data-x7-sync.neurosync.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 17:53:06 UTC", "last_seen": "2026-03-16 17:53:06 UTC", "sightings": 1 }, { "indicator": "http://175.150.178.144:44761/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 17:51:18 UTC", "last_seen": "2026-03-16 17:51:18 UTC", "sightings": 1 }, { "indicator": "https://lab-v01-node.neurosync.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 17:49:06 UTC", "last_seen": "2026-03-16 17:49:06 UTC", "sightings": 1 }, { "indicator": "http://125.43.36.123:34986/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 17:37:13 UTC", "last_seen": "2026-03-16 17:37:13 UTC", "sightings": 1 }, { "indicator": "https://tal-coreal.fastpink.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 17:37:06 UTC", "last_seen": "2026-03-16 17:37:06 UTC", "sightings": 1 }, { "indicator": "https://norlineis2.fastpink.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 17:30:09 UTC", "last_seen": "2026-03-16 17:30:09 UTC", "sightings": 1 }, { "indicator": "https://ky29r.fastpink.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 17:23:09 UTC", "last_seen": "2026-03-16 17:23:09 UTC", "sightings": 1 }, { "indicator": "http://61.52.198.54:37507/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 17:19:17 UTC", "last_seen": "2026-03-16 17:19:17 UTC", "sightings": 1 }, { "indicator": "https://fund8-gate.fastpink.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 17:17:07 UTC", "last_seen": "2026-03-16 17:17:07 UTC", "sightings": 1 }, { "indicator": "https://studioalign.tempink.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 17:13:07 UTC", "last_seen": "2026-03-16 17:13:07 UTC", "sightings": 1 }, { "indicator": "https://f3rn-trace.tempink.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 17:10:10 UTC", "last_seen": "2026-03-16 17:10:10 UTC", "sightings": 1 }, { "indicator": "http://117.244.64.207:57996/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 17:08:13 UTC", "last_seen": "2026-03-16 17:08:13 UTC", "sightings": 1 }, { "indicator": "http://27.37.63.88:53303/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 17:06:17 UTC", "last_seen": "2026-03-16 17:06:17 UTC", "sightings": 1 }, { "indicator": "http://120.28.168.70:60284/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-16 17:03:11 UTC", "last_seen": "2026-03-16 17:03:11 UTC", "sightings": 1 }, { "indicator": "https://norcrestal.tempink.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 16:57:07 UTC", "last_seen": "2026-03-16 16:57:07 UTC", "sightings": 1 }, { "indicator": "https://solcresta1.tempink.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 16:54:07 UTC", "last_seen": "2026-03-16 16:54:07 UTC", "sightings": 1 }, { "indicator": "http://42.232.86.100:37933/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 16:47:16 UTC", "last_seen": "2026-03-16 16:47:16 UTC", "sightings": 1 }, { "indicator": "http://27.37.63.88:53303/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 16:40:34 UTC", "last_seen": "2026-03-16 16:40:34 UTC", "sightings": 1 }, { "indicator": "https://quor-spireon.tempiso.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 16:38:10 UTC", "last_seen": "2026-03-16 16:38:10 UTC", "sightings": 1 }, { "indicator": "http://120.28.168.70:60284/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-16 16:36:20 UTC", "last_seen": "2026-03-16 16:36:20 UTC", "sightings": 1 }, { "indicator": "https://gig0wg7.tempiso.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 16:33:07 UTC", "last_seen": "2026-03-16 16:33:07 UTC", "sightings": 1 }, { "indicator": "https://k56gfm6.tempiso.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 16:29:06 UTC", "last_seen": "2026-03-16 16:29:06 UTC", "sightings": 1 }, { "indicator": "http://110.37.101.252:43339/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-16 16:26:15 UTC", "last_seen": "2026-03-16 16:26:15 UTC", "sightings": 1 }, { "indicator": "https://clea-line.inksky.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 16:20:10 UTC", "last_seen": "2026-03-16 16:20:10 UTC", "sightings": 1 }, { "indicator": "http://110.186.231.22:43361/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-16 16:16:20 UTC", "last_seen": "2026-03-16 16:16:20 UTC", "sightings": 1 }, { "indicator": "http://222.141.78.243:54885/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 16:04:12 UTC", "last_seen": "2026-03-16 16:04:12 UTC", "sightings": 1 }, { "indicator": "http://110.37.101.252:43339/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-16 16:03:18 UTC", "last_seen": "2026-03-16 16:03:18 UTC", "sightings": 1 }, { "indicator": "http://182.122.153.187:39049/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 16:01:23 UTC", "last_seen": "2026-03-16 16:01:23 UTC", "sightings": 1 }, { "indicator": "https://compres6-well.inkpit.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 15:56:07 UTC", "last_seen": "2026-03-16 15:56:07 UTC", "sightings": 1 }, { "indicator": "http://61.54.63.205:39194/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 15:55:21 UTC", "last_seen": "2026-03-16 15:55:21 UTC", "sightings": 1 }, { "indicator": "http://222.141.78.243:54885/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 15:52:26 UTC", "last_seen": "2026-03-16 15:52:26 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.7/files/8520831842/Z2IntHf.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-16 15:52:10 UTC", "last_seen": "2026-03-16 15:52:10 UTC", "sightings": 1 }, { "indicator": "http://120.28.194.30:32821/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-16 15:51:14 UTC", "last_seen": "2026-03-16 15:51:14 UTC", "sightings": 1 }, { "indicator": "https://geo-f0x.inkpit.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 15:45:08 UTC", "last_seen": "2026-03-16 15:45:08 UTC", "sightings": 1 }, { "indicator": "https://snapsgene.inkpit.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 15:41:08 UTC", "last_seen": "2026-03-16 15:41:08 UTC", "sightings": 1 }, { "indicator": "http://182.117.48.189:56056/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 15:37:19 UTC", "last_seen": "2026-03-16 15:37:19 UTC", "sightings": 1 }, { "indicator": "http://110.186.231.22:43361/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-16 15:32:12 UTC", "last_seen": "2026-03-16 15:32:12 UTC", "sightings": 1 }, { "indicator": "http://182.122.153.187:39049/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 15:29:19 UTC", "last_seen": "2026-03-16 15:29:19 UTC", "sightings": 1 }, { "indicator": "https://reage2-crest.darkboll.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 15:26:07 UTC", "last_seen": "2026-03-16 15:26:07 UTC", "sightings": 1 }, { "indicator": "http://42.229.220.26:58512/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 15:24:09 UTC", "last_seen": "2026-03-16 15:24:09 UTC", "sightings": 1 }, { "indicator": "http://221.15.134.43:55633/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 15:21:22 UTC", "last_seen": "2026-03-16 15:21:22 UTC", "sightings": 1 }, { "indicator": "http://120.28.194.30:32821/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-16 15:21:22 UTC", "last_seen": "2026-03-16 15:21:22 UTC", "sightings": 1 }, { "indicator": "https://trivale8et.darkboll.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 15:20:12 UTC", "last_seen": "2026-03-16 15:20:12 UTC", "sightings": 1 }, { "indicator": "http://123.10.0.14:54431/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 15:15:19 UTC", "last_seen": "2026-03-16 15:15:19 UTC", "sightings": 1 }, { "indicator": "https://tru59-chain.darkboll.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 15:14:08 UTC", "last_seen": "2026-03-16 15:14:08 UTC", "sightings": 1 }, { "indicator": "http://123.5.148.65:56104/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 15:13:20 UTC", "last_seen": "2026-03-16 15:13:20 UTC", "sightings": 1 }, { "indicator": "http://182.117.48.189:56056/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 15:13:20 UTC", "last_seen": "2026-03-16 15:13:20 UTC", "sightings": 1 }, { "indicator": "https://appjm.darkboll.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 15:09:07 UTC", "last_seen": "2026-03-16 15:09:07 UTC", "sightings": 1 }, { "indicator": "http://36.79.155.28:34267/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 15:08:14 UTC", "last_seen": "2026-03-16 15:08:14 UTC", "sightings": 1 }, { "indicator": "https://ewg75280.saltball.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 15:04:08 UTC", "last_seen": "2026-03-16 15:04:08 UTC", "sightings": 1 }, { "indicator": "http://123.5.148.65:56104/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 15:03:22 UTC", "last_seen": "2026-03-16 15:03:22 UTC", "sightings": 1 }, { "indicator": "https://bpdwtj.saltball.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 14:57:08 UTC", "last_seen": "2026-03-16 14:57:08 UTC", "sightings": 1 }, { "indicator": "http://116.139.137.30:55268/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 14:55:39 UTC", "last_seen": "2026-03-16 14:55:39 UTC", "sightings": 1 }, { "indicator": "http://221.15.134.43:55633/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 14:53:14 UTC", "last_seen": "2026-03-16 14:53:14 UTC", "sightings": 1 }, { "indicator": "https://5ter1-loop.saltball.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 14:53:08 UTC", "last_seen": "2026-03-16 14:53:08 UTC", "sightings": 1 }, { "indicator": "http://123.10.0.14:54431/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 14:47:24 UTC", "last_seen": "2026-03-16 14:47:24 UTC", "sightings": 1 }, { "indicator": "https://kelspireal3.saltball.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 14:47:09 UTC", "last_seen": "2026-03-16 14:47:09 UTC", "sightings": 1 }, { "indicator": "http://36.79.155.28:34267/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 14:41:17 UTC", "last_seen": "2026-03-16 14:41:17 UTC", "sightings": 1 }, { "indicator": "https://scenecompr.sandball.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 14:41:07 UTC", "last_seen": "2026-03-16 14:41:07 UTC", "sightings": 1 }, { "indicator": "https://code-mesh.sandball.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 14:35:09 UTC", "last_seen": "2026-03-16 14:35:09 UTC", "sightings": 1 }, { "indicator": "https://thyc.sandball.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 14:30:10 UTC", "last_seen": "2026-03-16 14:30:10 UTC", "sightings": 1 }, { "indicator": "http://124.94.244.215:55530/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 14:28:21 UTC", "last_seen": "2026-03-16 14:28:21 UTC", "sightings": 1 }, { "indicator": "http://42.226.66.161:33573/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 14:25:25 UTC", "last_seen": "2026-03-16 14:25:25 UTC", "sightings": 1 }, { "indicator": "http://59.183.108.60:53180/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 14:24:32 UTC", "last_seen": "2026-03-16 14:24:32 UTC", "sightings": 1 }, { "indicator": "https://coretor.sandball.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 14:24:10 UTC", "last_seen": "2026-03-16 14:24:10 UTC", "sightings": 1 }, { "indicator": "http://59.98.68.37:50016/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 14:21:21 UTC", "last_seen": "2026-03-16 14:21:21 UTC", "sightings": 1 }, { "indicator": "http://39.88.91.134:43294/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 14:18:24 UTC", "last_seen": "2026-03-16 14:18:24 UTC", "sightings": 1 }, { "indicator": "http://39.88.91.134:43294/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 14:18:17 UTC", "last_seen": "2026-03-16 14:18:17 UTC", "sightings": 1 }, { "indicator": "https://flh72g.highjoke.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 14:18:07 UTC", "last_seen": "2026-03-16 14:18:07 UTC", "sightings": 1 }, { "indicator": "https://4ldo6v.highjoke.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 14:13:07 UTC", "last_seen": "2026-03-16 14:13:07 UTC", "sightings": 1 }, { "indicator": "http://59.89.25.96:59023/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 14:10:24 UTC", "last_seen": "2026-03-16 14:10:24 UTC", "sightings": 1 }, { "indicator": "http://117.196.187.149:33412/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 14:09:19 UTC", "last_seen": "2026-03-16 14:09:19 UTC", "sightings": 1 }, { "indicator": "http://124.94.244.215:55530/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 14:07:29 UTC", "last_seen": "2026-03-16 14:07:29 UTC", "sightings": 1 }, { "indicator": "https://trace3-bridge.highjoke.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 14:07:09 UTC", "last_seen": "2026-03-16 14:07:09 UTC", "sightings": 1 }, { "indicator": "https://1huqs.highjoke.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 14:04:09 UTC", "last_seen": "2026-03-16 14:04:09 UTC", "sightings": 1 }, { "indicator": "http://27.215.83.0:60315/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 14:00:23 UTC", "last_seen": "2026-03-16 14:00:23 UTC", "sightings": 1 }, { "indicator": "http://115.55.217.90:46467/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 13:59:17 UTC", "last_seen": "2026-03-16 13:59:17 UTC", "sightings": 1 }, { "indicator": "http://110.39.235.153:58402/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 13:58:19 UTC", "last_seen": "2026-03-16 13:58:19 UTC", "sightings": 1 }, { "indicator": "https://kelline3a.jokerun.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 13:56:06 UTC", "last_seen": "2026-03-16 13:56:06 UTC", "sightings": 1 }, { "indicator": "https://kelvalear3.jokerun.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 13:44:08 UTC", "last_seen": "2026-03-16 13:44:08 UTC", "sightings": 1 }, { "indicator": "http://219.68.46.54:44716/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-16 13:43:26 UTC", "last_seen": "2026-03-16 13:43:26 UTC", "sightings": 1 }, { "indicator": "http://123.14.159.35:57851/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 13:41:18 UTC", "last_seen": "2026-03-16 13:41:18 UTC", "sightings": 1 }, { "indicator": "https://ub5309hp.jokerun.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 13:39:06 UTC", "last_seen": "2026-03-16 13:39:06 UTC", "sightings": 1 }, { "indicator": "http://117.196.187.149:33412/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 13:38:18 UTC", "last_seen": "2026-03-16 13:38:18 UTC", "sightings": 1 }, { "indicator": "https://l0yal-grid.cokefun.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 13:35:08 UTC", "last_seen": "2026-03-16 13:35:08 UTC", "sightings": 1 }, { "indicator": "http://115.55.217.90:46467/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 13:31:20 UTC", "last_seen": "2026-03-16 13:31:20 UTC", "sightings": 1 }, { "indicator": "https://dyncore5et.cokefun.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 13:27:08 UTC", "last_seen": "2026-03-16 13:27:08 UTC", "sightings": 1 }, { "indicator": "http://175.147.230.226:59389/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 13:25:30 UTC", "last_seen": "2026-03-16 13:25:30 UTC", "sightings": 1 }, { "indicator": "http://123.14.159.35:57851/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 13:24:10 UTC", "last_seen": "2026-03-16 13:24:10 UTC", "sightings": 1 }, { "indicator": "http://219.68.46.54:44716/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-16 13:23:18 UTC", "last_seen": "2026-03-16 13:23:18 UTC", "sightings": 1 }, { "indicator": "https://encproce.cokefun.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 13:23:08 UTC", "last_seen": "2026-03-16 13:23:08 UTC", "sightings": 1 }, { "indicator": "https://keldraix.cokefun.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 13:19:08 UTC", "last_seen": "2026-03-16 13:19:08 UTC", "sightings": 1 }, { "indicator": "http://27.215.83.0:60315/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 13:18:21 UTC", "last_seen": "2026-03-16 13:18:21 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.7/files/8283992944/RriJPMz.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey", "SantaStealer" ], "first_seen": "2026-03-16 13:16:08 UTC", "last_seen": "2026-03-16 13:16:08 UTC", "sightings": 1 }, { "indicator": "https://mer-drais.cokenote.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 13:15:10 UTC", "last_seen": "2026-03-16 13:15:10 UTC", "sightings": 1 }, { "indicator": "http://183.128.66.77:34459/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-16 13:14:13 UTC", "last_seen": "2026-03-16 13:14:13 UTC", "sightings": 1 }, { "indicator": "https://n0rt7-cast.cokenote.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 13:05:09 UTC", "last_seen": "2026-03-16 13:05:09 UTC", "sightings": 1 }, { "indicator": "http://108.170.136.155:59216/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 13:01:19 UTC", "last_seen": "2026-03-16 13:01:19 UTC", "sightings": 1 }, { "indicator": "http://110.37.52.120:49847/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 13:00:15 UTC", "last_seen": "2026-03-16 13:00:15 UTC", "sightings": 1 }, { "indicator": "http://175.174.100.157:60664/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 13:00:15 UTC", "last_seen": "2026-03-16 13:00:15 UTC", "sightings": 1 }, { "indicator": "https://zbyhm.cokenote.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 12:59:14 UTC", "last_seen": "2026-03-16 12:59:14 UTC", "sightings": 1 }, { "indicator": "https://jyhl.cokenote.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 12:54:07 UTC", "last_seen": "2026-03-16 12:54:07 UTC", "sightings": 1 }, { "indicator": "https://wiowyaea.lakebit.digital/?=check&&actmn=bQVRicjiWGHhxCEb", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-16 12:51:08 UTC", "last_seen": "2026-03-16 12:51:08 UTC", "sightings": 1 }, { "indicator": "http://110.37.52.120:49847/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 12:49:18 UTC", "last_seen": "2026-03-16 12:49:18 UTC", "sightings": 1 }, { "indicator": "https://tal-meshex.backyard.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 12:49:08 UTC", "last_seen": "2026-03-16 12:49:08 UTC", "sightings": 1 }, { "indicator": "https://measur0-mark.backyard.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 12:42:08 UTC", "last_seen": "2026-03-16 12:42:08 UTC", "sightings": 1 }, { "indicator": "http://61.53.89.110:50141/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 12:38:22 UTC", "last_seen": "2026-03-16 12:38:22 UTC", "sightings": 1 }, { "indicator": "https://passivecor.backyard.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 12:38:08 UTC", "last_seen": "2026-03-16 12:38:08 UTC", "sightings": 1 }, { "indicator": "http://110.36.70.112:60678/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 12:33:09 UTC", "last_seen": "2026-03-16 12:33:09 UTC", "sightings": 1 }, { "indicator": "http://108.170.136.155:59216/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 12:33:09 UTC", "last_seen": "2026-03-16 12:33:09 UTC", "sightings": 1 }, { "indicator": "https://kggkm.backyard.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 12:31:08 UTC", "last_seen": "2026-03-16 12:31:08 UTC", "sightings": 1 }, { "indicator": "http://110.36.76.43:44855/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 12:27:11 UTC", "last_seen": "2026-03-16 12:27:11 UTC", "sightings": 1 }, { "indicator": "https://camporgani.norsdwest.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 12:26:08 UTC", "last_seen": "2026-03-16 12:26:08 UTC", "sightings": 1 }, { "indicator": "http://115.56.152.61:34354/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 12:25:22 UTC", "last_seen": "2026-03-16 12:25:22 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.7/files/6691015685/Nb2YOyu.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543", "Vidar" ], "first_seen": "2026-03-16 12:24:09 UTC", "last_seen": "2026-03-16 12:24:09 UTC", "sightings": 1 }, { "indicator": "https://atomi-point.norsdwest.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 12:20:08 UTC", "last_seen": "2026-03-16 12:20:08 UTC", "sightings": 1 }, { "indicator": "https://3xten9-dock.norsdwest.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 12:16:09 UTC", "last_seen": "2026-03-16 12:16:09 UTC", "sightings": 1 }, { "indicator": "http://125.43.9.29:46866/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 12:13:16 UTC", "last_seen": "2026-03-16 12:13:16 UTC", "sightings": 1 }, { "indicator": "https://arrscre.norsdwest.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 12:12:06 UTC", "last_seen": "2026-03-16 12:12:06 UTC", "sightings": 1 }, { "indicator": "http://115.56.152.61:34354/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 12:09:17 UTC", "last_seen": "2026-03-16 12:09:17 UTC", "sightings": 1 }, { "indicator": "https://trilithon.easttea.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 12:09:07 UTC", "last_seen": "2026-03-16 12:09:07 UTC", "sightings": 1 }, { "indicator": "http://222.127.75.70:43991/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-16 12:06:31 UTC", "last_seen": "2026-03-16 12:06:31 UTC", "sightings": 1 }, { "indicator": "https://dbiecm.easttea.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 11:58:06 UTC", "last_seen": "2026-03-16 11:58:06 UTC", "sightings": 1 }, { "indicator": "https://25vsikqn.easttea.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 11:54:08 UTC", "last_seen": "2026-03-16 11:54:08 UTC", "sightings": 1 }, { "indicator": "https://p1tc2-logic.easttea.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 11:47:06 UTC", "last_seen": "2026-03-16 11:47:06 UTC", "sightings": 1 }, { "indicator": "https://solfluxet1.grosstao.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 11:41:06 UTC", "last_seen": "2026-03-16 11:41:06 UTC", "sightings": 1 }, { "indicator": "https://vellitha7.grosstao.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 11:36:06 UTC", "last_seen": "2026-03-16 11:36:06 UTC", "sightings": 1 }, { "indicator": "https://balancepilot.grosstao.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 11:32:08 UTC", "last_seen": "2026-03-16 11:32:08 UTC", "sightings": 1 }, { "indicator": "https://dpwqj.gronstat.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 11:24:11 UTC", "last_seen": "2026-03-16 11:24:11 UTC", "sightings": 1 }, { "indicator": "http://196.189.68.239:41997/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-16 11:19:16 UTC", "last_seen": "2026-03-16 11:19:16 UTC", "sightings": 1 }, { "indicator": "http://123.5.125.123:33856/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 11:19:16 UTC", "last_seen": "2026-03-16 11:19:16 UTC", "sightings": 1 }, { "indicator": "https://vinebay.gronstat.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 11:13:07 UTC", "last_seen": "2026-03-16 11:13:07 UTC", "sightings": 1 }, { "indicator": "http://222.127.75.70:43991/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-16 11:08:19 UTC", "last_seen": "2026-03-16 11:08:19 UTC", "sightings": 1 }, { "indicator": "https://uz51av.gronstat.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 11:08:07 UTC", "last_seen": "2026-03-16 11:08:07 UTC", "sightings": 1 }, { "indicator": "https://columnneedle.gronstat.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 11:02:06 UTC", "last_seen": "2026-03-16 11:02:06 UTC", "sightings": 1 }, { "indicator": "http://96.44.159.250/img_212607.png", "indicator_type": "url", "source": "URLhaus", "tags": [ "rat", "RemcosRAT" ], "first_seen": "2026-03-16 11:01:06 UTC", "last_seen": "2026-03-16 11:01:06 UTC", "sightings": 1 }, { "indicator": "http://101.108.111.128:42218/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-16 10:59:18 UTC", "last_seen": "2026-03-16 10:59:18 UTC", "sightings": 1 }, { "indicator": "https://9069srn1.flowwow.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 10:57:08 UTC", "last_seen": "2026-03-16 10:57:08 UTC", "sightings": 1 }, { "indicator": "http://117.207.116.151:50971/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 10:54:14 UTC", "last_seen": "2026-03-16 10:54:14 UTC", "sightings": 1 }, { "indicator": "http://196.189.68.239:41997/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-16 10:54:13 UTC", "last_seen": "2026-03-16 10:54:13 UTC", "sightings": 1 }, { "indicator": "https://tr4d3-sheet.flowwow.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 10:51:06 UTC", "last_seen": "2026-03-16 10:51:06 UTC", "sightings": 1 }, { "indicator": "http://175.149.67.143:40270/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 10:47:16 UTC", "last_seen": "2026-03-16 10:47:16 UTC", "sightings": 1 }, { "indicator": "http://91.219.23.145/skimokeep", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-16 10:46:10 UTC", "last_seen": "2026-03-16 10:46:10 UTC", "sightings": 1 }, { "indicator": "https://github.com/4realgg/Helper-Update1.0/releases/download/update1/mw--58389c35-c76b-46ac-b33e-7efe83b65fda.zip/", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport" ], "first_seen": "2026-03-16 10:46:10 UTC", "last_seen": "2026-03-16 10:46:10 UTC", "sightings": 1 }, { "indicator": "http://91.219.23.145/deceit-freebie", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-16 10:46:08 UTC", "last_seen": "2026-03-16 10:46:08 UTC", "sightings": 1 }, { "indicator": "http://91.219.23.145/residentchatting", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-16 10:46:08 UTC", "last_seen": "2026-03-16 10:46:08 UTC", "sightings": 1 }, { "indicator": "http://91.219.23.145/entangledcirculate", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-16 10:46:07 UTC", "last_seen": "2026-03-16 10:46:07 UTC", "sightings": 1 }, { "indicator": "https://91.219.23.145/wobbling-twitter/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-16 10:46:06 UTC", "last_seen": "2026-03-16 10:46:06 UTC", "sightings": 1 }, { "indicator": "https://91.219.23.145/entangledcirculate", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-16 10:46:06 UTC", "last_seen": "2026-03-16 10:46:06 UTC", "sightings": 1 }, { "indicator": "https://91.219.23.145/pampereddislocate", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-16 10:46:06 UTC", "last_seen": "2026-03-16 10:46:06 UTC", "sightings": 1 }, { "indicator": "https://91.219.23.145/deceit-freebie", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-16 10:46:06 UTC", "last_seen": "2026-03-16 10:46:06 UTC", "sightings": 1 }, { "indicator": "https://91.219.23.145/skimokeep", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-16 10:46:06 UTC", "last_seen": "2026-03-16 10:46:06 UTC", "sightings": 1 }, { "indicator": "https://91.219.23.145/residentchatting", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-16 10:46:06 UTC", "last_seen": "2026-03-16 10:46:06 UTC", "sightings": 1 }, { "indicator": "http://91.219.23.145/wobbling-twitter/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-16 10:46:06 UTC", "last_seen": "2026-03-16 10:46:06 UTC", "sightings": 1 }, { "indicator": "http://91.219.23.145/pampereddislocate", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-16 10:46:06 UTC", "last_seen": "2026-03-16 10:46:06 UTC", "sightings": 1 }, { "indicator": "http://112.248.83.134:40872/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 10:45:16 UTC", "last_seen": "2026-03-16 10:45:16 UTC", "sightings": 1 }, { "indicator": "https://pr0xy9-craft.flowwow.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 10:45:08 UTC", "last_seen": "2026-03-16 10:45:08 UTC", "sightings": 1 }, { "indicator": "https://depoff.flowwow.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 10:40:08 UTC", "last_seen": "2026-03-16 10:40:08 UTC", "sightings": 1 }, { "indicator": "https://kel-forgeum.fabulos.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 10:34:08 UTC", "last_seen": "2026-03-16 10:34:08 UTC", "sightings": 1 }, { "indicator": "http://117.207.116.151:50971/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 10:30:15 UTC", "last_seen": "2026-03-16 10:30:15 UTC", "sightings": 1 }, { "indicator": "https://vordra3on.fabulos.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 10:28:07 UTC", "last_seen": "2026-03-16 10:28:07 UTC", "sightings": 1 }, { "indicator": "https://slowdemand.fabulos.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 10:23:07 UTC", "last_seen": "2026-03-16 10:23:07 UTC", "sightings": 1 }, { "indicator": "https://draftharv.fabulos.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 10:17:07 UTC", "last_seen": "2026-03-16 10:17:07 UTC", "sightings": 1 }, { "indicator": "http://61.52.198.54:37507/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 10:16:10 UTC", "last_seen": "2026-03-16 10:16:10 UTC", "sightings": 1 }, { "indicator": "https://swiftbasalt.octagonon.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 10:12:09 UTC", "last_seen": "2026-03-16 10:12:09 UTC", "sightings": 1 }, { "indicator": "http://110.137.158.208:51710/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-16 10:11:21 UTC", "last_seen": "2026-03-16 10:11:21 UTC", "sightings": 1 }, { "indicator": "https://lc94pexb.octagonon.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 10:09:06 UTC", "last_seen": "2026-03-16 10:09:06 UTC", "sightings": 1 }, { "indicator": "https://hyp3r8-stream.octagonon.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 10:06:07 UTC", "last_seen": "2026-03-16 10:06:07 UTC", "sightings": 1 }, { "indicator": "http://112.248.83.134:40872/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 10:02:18 UTC", "last_seen": "2026-03-16 10:02:18 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.7/files/7782139129/S6xWuZ1.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey", "Vidar" ], "first_seen": "2026-03-16 09:58:18 UTC", "last_seen": "2026-03-16 09:58:18 UTC", "sightings": 1 }, { "indicator": "https://ujsl.octagonon.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 09:57:07 UTC", "last_seen": "2026-03-16 09:57:07 UTC", "sightings": 1 }, { "indicator": "https://clip-ten.blowoff.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 09:54:08 UTC", "last_seen": "2026-03-16 09:54:08 UTC", "sightings": 1 }, { "indicator": "http://59.180.183.202:36583/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 09:51:18 UTC", "last_seen": "2026-03-16 09:51:18 UTC", "sightings": 1 }, { "indicator": "http://117.200.125.134:58194/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 09:45:20 UTC", "last_seen": "2026-03-16 09:45:20 UTC", "sightings": 1 }, { "indicator": "http://117.209.93.29:50754/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 09:45:19 UTC", "last_seen": "2026-03-16 09:45:19 UTC", "sightings": 1 }, { "indicator": "https://tgua.blowoff.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 09:44:07 UTC", "last_seen": "2026-03-16 09:44:07 UTC", "sightings": 1 }, { "indicator": "http://123.5.125.123:33856/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 09:43:18 UTC", "last_seen": "2026-03-16 09:43:18 UTC", "sightings": 1 }, { "indicator": "http://110.39.246.84:51998/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 09:42:15 UTC", "last_seen": "2026-03-16 09:42:15 UTC", "sightings": 1 }, { "indicator": "https://gathe-core.blowoff.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 09:39:09 UTC", "last_seen": "2026-03-16 09:39:09 UTC", "sightings": 1 }, { "indicator": "https://qkmnf.blowoff.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 09:36:08 UTC", "last_seen": "2026-03-16 09:36:08 UTC", "sightings": 1 }, { "indicator": "http://188.137.230.45/1.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543", "Vidar" ], "first_seen": "2026-03-16 09:32:16 UTC", "last_seen": "2026-03-16 09:32:16 UTC", "sightings": 1 }, { "indicator": "http://112.225.195.111:53904/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 09:31:25 UTC", "last_seen": "2026-03-16 09:31:25 UTC", "sightings": 1 }, { "indicator": "http://115.56.64.32:51693/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 09:18:17 UTC", "last_seen": "2026-03-16 09:18:17 UTC", "sightings": 1 }, { "indicator": "https://sfb1sn6.onelight.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 09:17:07 UTC", "last_seen": "2026-03-16 09:17:07 UTC", "sightings": 1 }, { "indicator": "https://5ap-field.onelight.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 09:14:06 UTC", "last_seen": "2026-03-16 09:14:06 UTC", "sightings": 1 }, { "indicator": "http://112.225.195.111:53904/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 09:12:43 UTC", "last_seen": "2026-03-16 09:12:43 UTC", "sightings": 1 }, { "indicator": "http://59.182.158.29:45378/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 09:11:24 UTC", "last_seen": "2026-03-16 09:11:24 UTC", "sightings": 1 }, { "indicator": "http://115.50.93.211:38848/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 09:11:23 UTC", "last_seen": "2026-03-16 09:11:23 UTC", "sightings": 1 }, { "indicator": "http://110.39.246.84:51998/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 09:09:20 UTC", "last_seen": "2026-03-16 09:09:20 UTC", "sightings": 1 }, { "indicator": "http://115.50.93.211:38848/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 09:08:22 UTC", "last_seen": "2026-03-16 09:08:22 UTC", "sightings": 1 }, { "indicator": "https://f4bric7-point.oilglass.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 08:53:07 UTC", "last_seen": "2026-03-16 08:53:07 UTC", "sightings": 1 }, { "indicator": "http://115.56.64.32:51693/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 08:51:20 UTC", "last_seen": "2026-03-16 08:51:20 UTC", "sightings": 1 }, { "indicator": "http://39.73.126.106:43071/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 08:51:19 UTC", "last_seen": "2026-03-16 08:51:19 UTC", "sightings": 1 }, { "indicator": "https://true-mar.oilglass.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 08:47:08 UTC", "last_seen": "2026-03-16 08:47:08 UTC", "sightings": 1 }, { "indicator": "https://deep-pat.yellglass.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 08:42:09 UTC", "last_seen": "2026-03-16 08:42:09 UTC", "sightings": 1 }, { "indicator": "http://117.209.92.244:33415/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 08:41:20 UTC", "last_seen": "2026-03-16 08:41:20 UTC", "sightings": 1 }, { "indicator": "http://59.182.158.29:45378/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 08:40:24 UTC", "last_seen": "2026-03-16 08:40:24 UTC", "sightings": 1 }, { "indicator": "https://3hca.yellglass.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 08:37:08 UTC", "last_seen": "2026-03-16 08:37:08 UTC", "sightings": 1 }, { "indicator": "http://59.42.91.85:56735/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-16 08:33:23 UTC", "last_seen": "2026-03-16 08:33:23 UTC", "sightings": 1 }, { "indicator": "http://42.233.104.38:32938/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 08:31:30 UTC", "last_seen": "2026-03-16 08:31:30 UTC", "sightings": 1 }, { "indicator": "https://kelforge1al.rassvet.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 08:29:09 UTC", "last_seen": "2026-03-16 08:29:09 UTC", "sightings": 1 }, { "indicator": "http://39.73.126.106:43071/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 08:20:25 UTC", "last_seen": "2026-03-16 08:20:25 UTC", "sightings": 1 }, { "indicator": "http://123.5.186.57:43216/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 08:16:21 UTC", "last_seen": "2026-03-16 08:16:21 UTC", "sightings": 1 }, { "indicator": "http://42.230.219.32:56810/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 08:12:11 UTC", "last_seen": "2026-03-16 08:12:11 UTC", "sightings": 1 }, { "indicator": "http://117.209.92.244:33415/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 08:10:18 UTC", "last_seen": "2026-03-16 08:10:18 UTC", "sightings": 1 }, { "indicator": "http://109.107.168.138:8080/files/52.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "chr", "exe" ], "first_seen": "2026-03-16 08:09:08 UTC", "last_seen": "2026-03-16 08:09:08 UTC", "sightings": 1 }, { "indicator": "https://kel-meshum.dotnet.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 08:09:07 UTC", "last_seen": "2026-03-16 08:09:07 UTC", "sightings": 1 }, { "indicator": "http://109.107.168.138:8080/files/build.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "exe", "WallStealer" ], "first_seen": "2026-03-16 08:06:06 UTC", "last_seen": "2026-03-16 08:06:06 UTC", "sightings": 1 }, { "indicator": "http://42.233.104.38:32938/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 08:05:18 UTC", "last_seen": "2026-03-16 08:05:18 UTC", "sightings": 1 }, { "indicator": "http://59.42.91.85:56735/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-16 08:05:18 UTC", "last_seen": "2026-03-16 08:05:18 UTC", "sightings": 1 }, { "indicator": "https://6gx6.dotnet.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 08:03:09 UTC", "last_seen": "2026-03-16 08:03:09 UTC", "sightings": 1 }, { "indicator": "http://124.6.167.113:53894/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-16 08:00:27 UTC", "last_seen": "2026-03-16 08:00:27 UTC", "sightings": 1 }, { "indicator": "https://plasmatransmit.gobright.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 07:58:07 UTC", "last_seen": "2026-03-16 07:58:07 UTC", "sightings": 1 }, { "indicator": "http://123.5.186.57:43216/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 07:53:18 UTC", "last_seen": "2026-03-16 07:53:18 UTC", "sightings": 1 }, { "indicator": "https://notifiersenso.gobright.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 07:51:10 UTC", "last_seen": "2026-03-16 07:51:10 UTC", "sightings": 1 }, { "indicator": "http://42.230.219.32:56810/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 07:50:20 UTC", "last_seen": "2026-03-16 07:50:20 UTC", "sightings": 1 }, { "indicator": "http://42.224.96.253:37623/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 07:49:08 UTC", "last_seen": "2026-03-16 07:49:08 UTC", "sightings": 1 }, { "indicator": "https://massivereagen.highligh.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 07:46:11 UTC", "last_seen": "2026-03-16 07:46:11 UTC", "sightings": 1 }, { "indicator": "http://196.189.96.59:35397/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-16 07:42:14 UTC", "last_seen": "2026-03-16 07:42:14 UTC", "sightings": 1 }, { "indicator": "https://timb3r-cast.highligh.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 07:41:08 UTC", "last_seen": "2026-03-16 07:41:08 UTC", "sightings": 1 }, { "indicator": "https://ad65x.omnifree.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 07:35:10 UTC", "last_seen": "2026-03-16 07:35:10 UTC", "sightings": 1 }, { "indicator": "http://124.6.167.113:53894/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-16 07:34:21 UTC", "last_seen": "2026-03-16 07:34:21 UTC", "sightings": 1 }, { "indicator": "http://42.224.96.253:37623/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 07:30:24 UTC", "last_seen": "2026-03-16 07:30:24 UTC", "sightings": 1 }, { "indicator": "https://mc9wq0.omnifree.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 07:29:06 UTC", "last_seen": "2026-03-16 07:29:06 UTC", "sightings": 1 }, { "indicator": "http://115.49.30.14:53900/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 07:27:17 UTC", "last_seen": "2026-03-16 07:27:17 UTC", "sightings": 1 }, { "indicator": "http://115.53.29.7:51151/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 07:26:21 UTC", "last_seen": "2026-03-16 07:26:21 UTC", "sightings": 1 }, { "indicator": "http://196.189.96.59:35397/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-16 07:26:19 UTC", "last_seen": "2026-03-16 07:26:19 UTC", "sightings": 1 }, { "indicator": "https://tal-lithum.omnifree.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 07:25:08 UTC", "last_seen": "2026-03-16 07:25:08 UTC", "sightings": 1 }, { "indicator": "http://72.194.227.46:49573/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 07:18:14 UTC", "last_seen": "2026-03-16 07:18:14 UTC", "sightings": 1 }, { "indicator": "https://ser-fluxa.omnifree.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 07:18:08 UTC", "last_seen": "2026-03-16 07:18:08 UTC", "sightings": 1 }, { "indicator": "http://42.54.152.244:58375/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 07:17:12 UTC", "last_seen": "2026-03-16 07:17:12 UTC", "sightings": 1 }, { "indicator": "http://183.128.66.77:34459/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-16 07:15:22 UTC", "last_seen": "2026-03-16 07:15:22 UTC", "sightings": 1 }, { "indicator": "https://fund-lab.takefree.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 07:15:09 UTC", "last_seen": "2026-03-16 07:15:09 UTC", "sightings": 1 }, { "indicator": "http://115.53.29.7:51151/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 07:11:22 UTC", "last_seen": "2026-03-16 07:11:22 UTC", "sightings": 1 }, { "indicator": "https://ndhxikv.takefree.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 07:11:07 UTC", "last_seen": "2026-03-16 07:11:07 UTC", "sightings": 1 }, { "indicator": "http://115.49.30.14:53900/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 07:07:12 UTC", "last_seen": "2026-03-16 07:07:12 UTC", "sightings": 1 }, { "indicator": "http://117.196.136.14:55390/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 07:04:14 UTC", "last_seen": "2026-03-16 07:04:14 UTC", "sightings": 1 }, { "indicator": "https://wvswfck.takefree.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 07:02:08 UTC", "last_seen": "2026-03-16 07:02:08 UTC", "sightings": 1 }, { "indicator": "http://42.239.232.30:37377/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 06:56:26 UTC", "last_seen": "2026-03-16 06:56:26 UTC", "sightings": 1 }, { "indicator": "http://72.194.227.46:49573/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 06:55:25 UTC", "last_seen": "2026-03-16 06:55:25 UTC", "sightings": 1 }, { "indicator": "https://modelultra.takefree.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 06:55:12 UTC", "last_seen": "2026-03-16 06:55:12 UTC", "sightings": 1 }, { "indicator": "http://42.54.152.244:58375/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 06:54:23 UTC", "last_seen": "2026-03-16 06:54:23 UTC", "sightings": 1 }, { "indicator": "http://59.177.109.227:37055/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 06:51:25 UTC", "last_seen": "2026-03-16 06:51:25 UTC", "sightings": 1 }, { "indicator": "http://121.226.150.171:54900/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-16 06:50:22 UTC", "last_seen": "2026-03-16 06:50:22 UTC", "sightings": 1 }, { "indicator": "https://partnerdust.taketwo.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 06:50:12 UTC", "last_seen": "2026-03-16 06:50:12 UTC", "sightings": 1 }, { "indicator": "http://196.190.0.118:59093/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-16 06:48:16 UTC", "last_seen": "2026-03-16 06:48:16 UTC", "sightings": 1 }, { "indicator": "https://rural-ash.taketwo.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 06:44:07 UTC", "last_seen": "2026-03-16 06:44:07 UTC", "sightings": 1 }, { "indicator": "https://5cann5-wave.taketwo.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 06:39:09 UTC", "last_seen": "2026-03-16 06:39:09 UTC", "sightings": 1 }, { "indicator": "http://117.196.136.14:55390/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 06:36:21 UTC", "last_seen": "2026-03-16 06:36:21 UTC", "sightings": 1 }, { "indicator": "https://ijsbcf.taketwo.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 06:34:08 UTC", "last_seen": "2026-03-16 06:34:08 UTC", "sightings": 1 }, { "indicator": "http://120.61.240.54:49142/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-16 06:33:22 UTC", "last_seen": "2026-03-16 06:33:22 UTC", "sightings": 1 }, { "indicator": "http://59.88.149.106:34183/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-16 06:33:22 UTC", "last_seen": "2026-03-16 06:33:22 UTC", "sightings": 1 }, { "indicator": "http://222.141.141.29:44817/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-16 06:33:22 UTC", "last_seen": "2026-03-16 06:33:22 UTC", "sightings": 1 }, { "indicator": "http://115.57.69.80:55633/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-16 06:33:22 UTC", "last_seen": "2026-03-16 06:33:22 UTC", "sightings": 1 }, { "indicator": "http://61.52.210.241:36633/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-16 06:33:22 UTC", "last_seen": "2026-03-16 06:33:22 UTC", "sightings": 1 }, { "indicator": "http://115.57.69.80:55633/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-16 06:33:22 UTC", "last_seen": "2026-03-16 06:33:22 UTC", "sightings": 1 }, { "indicator": "http://5.175.223.113:2342/bins/bins.sh/nigga.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-16 06:33:21 UTC", "last_seen": "2026-03-16 06:33:21 UTC", "sightings": 1 }, { "indicator": "http://123.12.42.68:49807/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-16 06:33:21 UTC", "last_seen": "2026-03-16 06:33:21 UTC", "sightings": 1 }, { "indicator": "http://110.37.39.234:35531/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-16 06:33:21 UTC", "last_seen": "2026-03-16 06:33:21 UTC", "sightings": 1 }, { "indicator": "http://110.37.39.234:35531/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-16 06:33:21 UTC", "last_seen": "2026-03-16 06:33:21 UTC", "sightings": 1 }, { "indicator": "http://61.52.210.241:36633/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-16 06:33:21 UTC", "last_seen": "2026-03-16 06:33:21 UTC", "sightings": 1 }, { "indicator": "http://5.175.223.113:2342", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-16 06:33:21 UTC", "last_seen": "2026-03-16 06:33:21 UTC", "sightings": 1 }, { "indicator": "http://110.77.170.38:48490/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-16 06:33:21 UTC", "last_seen": "2026-03-16 06:33:21 UTC", "sightings": 1 }, { "indicator": "http://121.142.70.6:49677/.i", "indicator_type": "url", "source": "URLhaus", "tags": [ "hajime" ], "first_seen": "2026-03-16 06:33:11 UTC", "last_seen": "2026-03-16 06:33:11 UTC", "sightings": 1 }, { "indicator": "http://171.248.167.23:11264/.i", "indicator_type": "url", "source": "URLhaus", "tags": [ "hajime" ], "first_seen": "2026-03-16 06:33:11 UTC", "last_seen": "2026-03-16 06:33:11 UTC", "sightings": 1 }, { "indicator": "http://42.235.47.215:57010/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-16 06:33:10 UTC", "last_seen": "2026-03-16 06:33:10 UTC", "sightings": 1 }, { "indicator": "http://42.235.47.215:57010/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-16 06:33:10 UTC", "last_seen": "2026-03-16 06:33:10 UTC", "sightings": 1 }, { "indicator": "http://222.95.214.29:38175/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-16 06:33:10 UTC", "last_seen": "2026-03-16 06:33:10 UTC", "sightings": 1 }, { "indicator": "http://89.47.251.189:17148/.i", "indicator_type": "url", "source": "URLhaus", "tags": [ "hajime" ], "first_seen": "2026-03-16 06:33:10 UTC", "last_seen": "2026-03-16 06:33:10 UTC", "sightings": 1 }, { "indicator": "http://46.6.6.235:57610/.i", "indicator_type": "url", "source": "URLhaus", "tags": [ "hajime" ], "first_seen": "2026-03-16 06:33:10 UTC", "last_seen": "2026-03-16 06:33:10 UTC", "sightings": 1 }, { "indicator": "http://83.25.45.248:56441/.i", "indicator_type": "url", "source": "URLhaus", "tags": [ "hajime" ], "first_seen": "2026-03-16 06:33:10 UTC", "last_seen": "2026-03-16 06:33:10 UTC", "sightings": 1 }, { "indicator": "http://182.112.228.164:54039/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-16 06:33:09 UTC", "last_seen": "2026-03-16 06:33:09 UTC", "sightings": 1 }, { "indicator": "http://46.6.12.101:16726/.i", "indicator_type": "url", "source": "URLhaus", "tags": [ "hajime" ], "first_seen": "2026-03-16 06:33:09 UTC", "last_seen": "2026-03-16 06:33:09 UTC", "sightings": 1 }, { "indicator": "http://27.215.48.214:38963/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-16 06:33:09 UTC", "last_seen": "2026-03-16 06:33:09 UTC", "sightings": 1 }, { "indicator": "http://45.143.167.210:8080/sentinel.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-16 06:33:08 UTC", "last_seen": "2026-03-16 06:33:08 UTC", "sightings": 1 }, { "indicator": "http://193.31.201.20:52137/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-16 06:33:08 UTC", "last_seen": "2026-03-16 06:33:08 UTC", "sightings": 1 }, { "indicator": "http://130.12.181.62:8888/arm", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-16 06:33:06 UTC", "last_seen": "2026-03-16 06:33:06 UTC", "sightings": 1 }, { "indicator": "http://130.12.181.62:8888/k", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-16 06:33:06 UTC", "last_seen": "2026-03-16 06:33:06 UTC", "sightings": 1 }, { "indicator": "http://130.12.181.62:8888/mipsel", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-16 06:33:06 UTC", "last_seen": "2026-03-16 06:33:06 UTC", "sightings": 1 }, { "indicator": "http://110.37.123.237:35919/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-16 06:33:06 UTC", "last_seen": "2026-03-16 06:33:06 UTC", "sightings": 1 }, { "indicator": "http://110.37.123.237:35919/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-16 06:33:06 UTC", "last_seen": "2026-03-16 06:33:06 UTC", "sightings": 1 }, { "indicator": "http://130.12.181.62:8888/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-16 06:33:06 UTC", "last_seen": "2026-03-16 06:33:06 UTC", "sightings": 1 }, { "indicator": "http://110.36.23.216:58319/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-16 06:33:06 UTC", "last_seen": "2026-03-16 06:33:06 UTC", "sightings": 1 }, { "indicator": "http://182.112.228.164:54039/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-16 06:32:11 UTC", "last_seen": "2026-03-16 06:32:11 UTC", "sightings": 1 }, { "indicator": "http://176.65.148.189/sh.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-16 06:32:07 UTC", "last_seen": "2026-03-16 06:32:07 UTC", "sightings": 1 }, { "indicator": "http://130.12.181.62:8888/x86", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-16 06:32:06 UTC", "last_seen": "2026-03-16 06:32:06 UTC", "sightings": 1 }, { "indicator": "https://kel-tideen.tunetwo.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 06:28:08 UTC", "last_seen": "2026-03-16 06:28:08 UTC", "sightings": 1 }, { "indicator": "http://110.36.80.171:35504/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 06:21:19 UTC", "last_seen": "2026-03-16 06:21:19 UTC", "sightings": 1 }, { "indicator": "https://tirs47so.tunetwo.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 06:21:08 UTC", "last_seen": "2026-03-16 06:21:08 UTC", "sightings": 1 }, { "indicator": "http://110.36.80.171:35504/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 06:19:18 UTC", "last_seen": "2026-03-16 06:19:18 UTC", "sightings": 1 }, { "indicator": "https://ycmfs.tunetwo.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 06:16:07 UTC", "last_seen": "2026-03-16 06:16:07 UTC", "sightings": 1 }, { "indicator": "https://velnex7is.tunetwo.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 06:11:08 UTC", "last_seen": "2026-03-16 06:11:08 UTC", "sightings": 1 }, { "indicator": "http://59.88.255.119:60546/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 06:08:22 UTC", "last_seen": "2026-03-16 06:08:22 UTC", "sightings": 1 }, { "indicator": "https://0g94h.tuneone.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 06:06:09 UTC", "last_seen": "2026-03-16 06:06:09 UTC", "sightings": 1 }, { "indicator": "https://talfluxa.tuneone.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 05:59:09 UTC", "last_seen": "2026-03-16 05:59:09 UTC", "sightings": 1 }, { "indicator": "https://gateext.tuneone.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 05:54:08 UTC", "last_seen": "2026-03-16 05:54:08 UTC", "sightings": 1 }, { "indicator": "https://glyp-line.tuneone.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 05:49:08 UTC", "last_seen": "2026-03-16 05:49:08 UTC", "sightings": 1 }, { "indicator": "https://sercrestet.tunefour.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 05:43:07 UTC", "last_seen": "2026-03-16 05:43:07 UTC", "sightings": 1 }, { "indicator": "https://launchwind.tunefour.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 05:37:11 UTC", "last_seen": "2026-03-16 05:37:11 UTC", "sightings": 1 }, { "indicator": "https://api8-well.slowcube.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 05:19:08 UTC", "last_seen": "2026-03-16 05:19:08 UTC", "sightings": 1 }, { "indicator": "https://cedar-focu.catflow.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 05:00:10 UTC", "last_seen": "2026-03-16 05:00:10 UTC", "sightings": 1 }, { "indicator": "http://72.255.29.0:48844/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-16 04:59:13 UTC", "last_seen": "2026-03-16 04:59:13 UTC", "sightings": 1 }, { "indicator": "http://72.255.29.0:48844/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-16 04:57:18 UTC", "last_seen": "2026-03-16 04:57:18 UTC", "sightings": 1 }, { "indicator": "https://rn1x-mesh.catflow.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 04:57:11 UTC", "last_seen": "2026-03-16 04:57:11 UTC", "sightings": 1 }, { "indicator": "http://42.7.243.35:44961/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 04:54:09 UTC", "last_seen": "2026-03-16 04:54:09 UTC", "sightings": 1 }, { "indicator": "https://cavvoya.catflow.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 04:42:07 UTC", "last_seen": "2026-03-16 04:42:07 UTC", "sightings": 1 }, { "indicator": "https://assetproxy.catflat.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 04:35:09 UTC", "last_seen": "2026-03-16 04:35:09 UTC", "sightings": 1 }, { "indicator": "http://117.198.10.53:53163/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 04:31:22 UTC", "last_seen": "2026-03-16 04:31:22 UTC", "sightings": 1 }, { "indicator": "https://gard-cano.catflat.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 04:30:08 UTC", "last_seen": "2026-03-16 04:30:08 UTC", "sightings": 1 }, { "indicator": "http://203.161.47.138/oop/nope3.johnsmith", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mips", "mirai", "ua-wget" ], "first_seen": "2026-03-16 04:26:19 UTC", "last_seen": "2026-03-16 04:26:19 UTC", "sightings": 1 }, { "indicator": "https://ewt2o.catflat.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 04:24:10 UTC", "last_seen": "2026-03-16 04:24:10 UTC", "sightings": 1 }, { "indicator": "http://112.248.163.41:51949/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 04:22:16 UTC", "last_seen": "2026-03-16 04:22:16 UTC", "sightings": 1 }, { "indicator": "https://goo8039f.catflat.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 04:19:07 UTC", "last_seen": "2026-03-16 04:19:07 UTC", "sightings": 1 }, { "indicator": "http://182.60.14.185:56210/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 04:16:18 UTC", "last_seen": "2026-03-16 04:16:18 UTC", "sightings": 1 }, { "indicator": "http://113.236.134.2:41627/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 04:14:19 UTC", "last_seen": "2026-03-16 04:14:19 UTC", "sightings": 1 }, { "indicator": "https://gvo7j.ratflat.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 04:13:10 UTC", "last_seen": "2026-03-16 04:13:10 UTC", "sightings": 1 }, { "indicator": "https://channelash.ratflat.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 04:08:07 UTC", "last_seen": "2026-03-16 04:08:07 UTC", "sightings": 1 }, { "indicator": "http://117.198.10.53:53163/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 04:03:10 UTC", "last_seen": "2026-03-16 04:03:10 UTC", "sightings": 1 }, { "indicator": "https://storybroad.ratflat.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 04:02:07 UTC", "last_seen": "2026-03-16 04:02:07 UTC", "sightings": 1 }, { "indicator": "http://125.44.253.132:48719/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 04:00:17 UTC", "last_seen": "2026-03-16 04:00:17 UTC", "sightings": 1 }, { "indicator": "https://lte05ohe.ratflat.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 03:56:09 UTC", "last_seen": "2026-03-16 03:56:09 UTC", "sightings": 1 }, { "indicator": "https://j9-main-point.ferroviva.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 03:50:13 UTC", "last_seen": "2026-03-16 03:50:13 UTC", "sightings": 1 }, { "indicator": "http://182.60.14.185:56210/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 03:47:28 UTC", "last_seen": "2026-03-16 03:47:28 UTC", "sightings": 1 }, { "indicator": "http://125.43.9.29:46866/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 03:42:16 UTC", "last_seen": "2026-03-16 03:42:16 UTC", "sightings": 1 }, { "indicator": "http://115.56.188.79:58816/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 03:42:12 UTC", "last_seen": "2026-03-16 03:42:12 UTC", "sightings": 1 }, { "indicator": "http://110.37.97.71:53031/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-16 03:40:19 UTC", "last_seen": "2026-03-16 03:40:19 UTC", "sightings": 1 }, { "indicator": "https://p7-gate-proxy.ferroviva.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 03:39:07 UTC", "last_seen": "2026-03-16 03:39:07 UTC", "sightings": 1 }, { "indicator": "http://115.56.188.79:58816/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 03:36:20 UTC", "last_seen": "2026-03-16 03:36:20 UTC", "sightings": 1 }, { "indicator": "https://s3-web-infra.ferroviva.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 03:34:07 UTC", "last_seen": "2026-03-16 03:34:07 UTC", "sightings": 1 }, { "indicator": "http://113.236.134.2:41627/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 03:28:21 UTC", "last_seen": "2026-03-16 03:28:21 UTC", "sightings": 1 }, { "indicator": "https://r5-link-sat.secretovalle.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 03:28:07 UTC", "last_seen": "2026-03-16 03:28:07 UTC", "sightings": 1 }, { "indicator": "https://q1-core-rock.secretovalle.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 03:22:07 UTC", "last_seen": "2026-03-16 03:22:07 UTC", "sightings": 1 }, { "indicator": "https://b9-base-steel.secretovalle.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 03:18:08 UTC", "last_seen": "2026-03-16 03:18:08 UTC", "sightings": 1 }, { "indicator": "https://n4-orbit-moon.secretovalle.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 03:13:06 UTC", "last_seen": "2026-03-16 03:13:06 UTC", "sightings": 1 }, { "indicator": "https://x0-space-open.altasphera.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 03:10:11 UTC", "last_seen": "2026-03-16 03:10:11 UTC", "sightings": 1 }, { "indicator": "http://117.221.54.194:38886/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 03:07:22 UTC", "last_seen": "2026-03-16 03:07:22 UTC", "sightings": 1 }, { "indicator": "http://117.221.54.194:38886/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 03:06:21 UTC", "last_seen": "2026-03-16 03:06:21 UTC", "sightings": 1 }, { "indicator": "http://110.38.192.158:35845/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 03:00:24 UTC", "last_seen": "2026-03-16 03:00:24 UTC", "sightings": 1 }, { "indicator": "https://k9-rim-outer.altasphera.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 02:49:08 UTC", "last_seen": "2026-03-16 02:49:08 UTC", "sightings": 1 }, { "indicator": "https://m8-sync-vision.puroflusso.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 02:44:07 UTC", "last_seen": "2026-03-16 02:44:07 UTC", "sightings": 1 }, { "indicator": "http://112.248.163.41:51949/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 02:42:38 UTC", "last_seen": "2026-03-16 02:42:38 UTC", "sightings": 1 }, { "indicator": "https://a4-scan-point.puroflusso.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 02:38:08 UTC", "last_seen": "2026-03-16 02:38:08 UTC", "sightings": 1 }, { "indicator": "http://220.168.236.202:59698/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-16 02:37:15 UTC", "last_seen": "2026-03-16 02:37:15 UTC", "sightings": 1 }, { "indicator": "http://123.11.15.83:44381/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 02:37:11 UTC", "last_seen": "2026-03-16 02:37:11 UTC", "sightings": 1 }, { "indicator": "http://125.47.51.191:50321/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 02:33:22 UTC", "last_seen": "2026-03-16 02:33:22 UTC", "sightings": 1 }, { "indicator": "https://e6-bridge-light.puroflusso.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 02:33:07 UTC", "last_seen": "2026-03-16 02:33:07 UTC", "sightings": 1 }, { "indicator": "https://v0-room-dark.puroflusso.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 02:27:07 UTC", "last_seen": "2026-03-16 02:27:07 UTC", "sightings": 1 }, { "indicator": "https://i1-vision-sync.duronodo.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 02:25:08 UTC", "last_seen": "2026-03-16 02:25:08 UTC", "sightings": 1 }, { "indicator": "http://60.18.9.66:50556/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 02:16:23 UTC", "last_seen": "2026-03-16 02:16:23 UTC", "sightings": 1 }, { "indicator": "http://196.190.0.118:59093/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-16 02:15:22 UTC", "last_seen": "2026-03-16 02:15:22 UTC", "sightings": 1 }, { "indicator": "http://182.121.205.61:39747/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 02:07:10 UTC", "last_seen": "2026-03-16 02:07:10 UTC", "sightings": 1 }, { "indicator": "http://117.244.65.224:34549/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 02:06:19 UTC", "last_seen": "2026-03-16 02:06:19 UTC", "sightings": 1 }, { "indicator": "http://85.101.204.41:55204/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 01:56:24 UTC", "last_seen": "2026-03-16 01:56:24 UTC", "sightings": 1 }, { "indicator": "https://y2-trace-alpha.duronodo.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 01:54:06 UTC", "last_seen": "2026-03-16 01:54:06 UTC", "sightings": 1 }, { "indicator": "http://42.85.233.136:46890/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 01:52:09 UTC", "last_seen": "2026-03-16 01:52:09 UTC", "sightings": 1 }, { "indicator": "http://60.18.9.66:50556/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 01:50:23 UTC", "last_seen": "2026-03-16 01:50:23 UTC", "sightings": 1 }, { "indicator": "https://l9-auth-user.velocicorsa.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 01:48:08 UTC", "last_seen": "2026-03-16 01:48:08 UTC", "sightings": 1 }, { "indicator": "http://219.157.22.244:52117/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 01:45:16 UTC", "last_seen": "2026-03-16 01:45:16 UTC", "sightings": 1 }, { "indicator": "https://g7-db-point.velocicorsa.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 01:44:06 UTC", "last_seen": "2026-03-16 01:44:06 UTC", "sightings": 1 }, { "indicator": "https://f4-base-infra.velocicorsa.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 01:37:08 UTC", "last_seen": "2026-03-16 01:37:08 UTC", "sightings": 1 }, { "indicator": "http://85.101.204.41:55204/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 01:33:21 UTC", "last_seen": "2026-03-16 01:33:21 UTC", "sightings": 1 }, { "indicator": "https://d8-net-global.velocicorsa.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 01:31:06 UTC", "last_seen": "2026-03-16 01:31:06 UTC", "sightings": 1 }, { "indicator": "https://j1-flow-work.ombragrigia.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 01:26:09 UTC", "last_seen": "2026-03-16 01:26:09 UTC", "sightings": 1 }, { "indicator": "https://h3-hub-local.ombragrigia.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 01:23:08 UTC", "last_seen": "2026-03-16 01:23:08 UTC", "sightings": 1 }, { "indicator": "http://59.182.124.226:56433/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 01:21:40 UTC", "last_seen": "2026-03-16 01:21:40 UTC", "sightings": 1 }, { "indicator": "https://p0-link-power.ombragrigia.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 01:19:07 UTC", "last_seen": "2026-03-16 01:19:07 UTC", "sightings": 1 }, { "indicator": "http://110.37.59.132:48496/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 01:07:18 UTC", "last_seen": "2026-03-16 01:07:18 UTC", "sightings": 1 }, { "indicator": "http://117.210.212.26:48778/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 01:06:36 UTC", "last_seen": "2026-03-16 01:06:36 UTC", "sightings": 1 }, { "indicator": "http://27.215.48.141:37530/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 01:06:16 UTC", "last_seen": "2026-03-16 01:06:16 UTC", "sightings": 1 }, { "indicator": "http://125.113.147.231:44113/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 01:04:16 UTC", "last_seen": "2026-03-16 01:04:16 UTC", "sightings": 1 }, { "indicator": "https://r2-gate-entry.terralibre.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 01:04:07 UTC", "last_seen": "2026-03-16 01:04:07 UTC", "sightings": 1 }, { "indicator": "http://61.52.156.107:42109/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 01:00:13 UTC", "last_seen": "2026-03-16 01:00:13 UTC", "sightings": 1 }, { "indicator": "https://q4-dev-host.terralibre.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 00:58:07 UTC", "last_seen": "2026-03-16 00:58:07 UTC", "sightings": 1 }, { "indicator": "https://rizvexeno.ws/Bo%D0%BEtsta%D1%80%D1%80%D0%B5%D0%B3%D1%85Ul.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "pw-ryos", "zip" ], "first_seen": "2026-03-16 00:55:09 UTC", "last_seen": "2026-03-16 00:55:09 UTC", "sightings": 1 }, { "indicator": "http://221.15.243.172:55802/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 00:54:14 UTC", "last_seen": "2026-03-16 00:54:14 UTC", "sightings": 1 }, { "indicator": "https://n8-api-remote.terralibre.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 00:53:07 UTC", "last_seen": "2026-03-16 00:53:07 UTC", "sightings": 1 }, { "indicator": "http://42.87.138.219:34258/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 00:52:12 UTC", "last_seen": "2026-03-16 00:52:12 UTC", "sightings": 1 }, { "indicator": "https://b1-cloud-store.terralibre.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 00:49:06 UTC", "last_seen": "2026-03-16 00:49:06 UTC", "sightings": 1 }, { "indicator": "http://61.52.156.107:42109/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 00:47:27 UTC", "last_seen": "2026-03-16 00:47:27 UTC", "sightings": 1 }, { "indicator": "http://27.215.48.141:37530/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 00:47:24 UTC", "last_seen": "2026-03-16 00:47:24 UTC", "sightings": 1 }, { "indicator": "https://c2-core-sync.focozero.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 00:47:08 UTC", "last_seen": "2026-03-16 00:47:08 UTC", "sightings": 1 }, { "indicator": "https://x5-web-proxy.focozero.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 00:36:06 UTC", "last_seen": "2026-03-16 00:36:06 UTC", "sightings": 1 }, { "indicator": "https://z3-app-data.focozero.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 00:29:06 UTC", "last_seen": "2026-03-16 00:29:06 UTC", "sightings": 1 }, { "indicator": "https://v7-srv-gate.focozero.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 00:24:10 UTC", "last_seen": "2026-03-16 00:24:10 UTC", "sightings": 1 }, { "indicator": "https://m1-infra-static.ventonovo.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 00:19:07 UTC", "last_seen": "2026-03-16 00:19:07 UTC", "sightings": 1 }, { "indicator": "https://w9-dist-meta.ventonovo.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 00:13:07 UTC", "last_seen": "2026-03-16 00:13:07 UTC", "sightings": 1 }, { "indicator": "https://k4-sync-auth.ventonovo.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 00:07:08 UTC", "last_seen": "2026-03-16 00:07:08 UTC", "sightings": 1 }, { "indicator": "http://99.154.56.170:38138/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-16 00:06:24 UTC", "last_seen": "2026-03-16 00:06:24 UTC", "sightings": 1 }, { "indicator": "http://119.179.252.133:53841/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 00:05:14 UTC", "last_seen": "2026-03-16 00:05:14 UTC", "sightings": 1 }, { "indicator": "http://196.190.224.62:44774/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-16 00:05:13 UTC", "last_seen": "2026-03-16 00:05:13 UTC", "sightings": 1 }, { "indicator": "http://115.55.247.183:43935/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-16 00:04:17 UTC", "last_seen": "2026-03-16 00:04:17 UTC", "sightings": 1 }, { "indicator": "https://t0-node-edge.ventonovo.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-16 00:02:07 UTC", "last_seen": "2026-03-16 00:02:07 UTC", "sightings": 1 }, { "indicator": "http://182.116.113.104:36572/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 23:57:09 UTC", "last_seen": "2026-03-15 23:57:09 UTC", "sightings": 1 }, { "indicator": "http://45.153.34.77/bins/psh4", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-15 23:54:18 UTC", "last_seen": "2026-03-15 23:54:18 UTC", "sightings": 1 }, { "indicator": "http://45.153.34.77/bins/parm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-15 23:54:17 UTC", "last_seen": "2026-03-15 23:54:17 UTC", "sightings": 1 }, { "indicator": "http://45.153.34.77/bins/pmips", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-15 23:54:17 UTC", "last_seen": "2026-03-15 23:54:17 UTC", "sightings": 1 }, { "indicator": "http://45.153.34.77/bins/parm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-15 23:54:17 UTC", "last_seen": "2026-03-15 23:54:17 UTC", "sightings": 1 }, { "indicator": "http://125.41.111.29:45183/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 23:53:18 UTC", "last_seen": "2026-03-15 23:53:18 UTC", "sightings": 1 }, { "indicator": "http://45.153.34.77/bins/pmpsl", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-15 23:53:18 UTC", "last_seen": "2026-03-15 23:53:18 UTC", "sightings": 1 }, { "indicator": "http://45.153.34.77/bins/pspc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-15 23:53:18 UTC", "last_seen": "2026-03-15 23:53:18 UTC", "sightings": 1 }, { "indicator": "http://45.153.34.77/bins/parm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-15 23:53:18 UTC", "last_seen": "2026-03-15 23:53:18 UTC", "sightings": 1 }, { "indicator": "http://45.153.34.77/bins/pm68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-15 23:53:18 UTC", "last_seen": "2026-03-15 23:53:18 UTC", "sightings": 1 }, { "indicator": "http://45.153.34.77/bins/px86", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-15 23:53:18 UTC", "last_seen": "2026-03-15 23:53:18 UTC", "sightings": 1 }, { "indicator": "http://45.153.34.77/bins/parm", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-15 23:53:18 UTC", "last_seen": "2026-03-15 23:53:18 UTC", "sightings": 1 }, { "indicator": "https://sync-z2-data.metalloarea.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 23:51:07 UTC", "last_seen": "2026-03-15 23:51:07 UTC", "sightings": 1 }, { "indicator": "http://115.55.247.183:43935/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 23:46:20 UTC", "last_seen": "2026-03-15 23:46:20 UTC", "sightings": 1 }, { "indicator": "https://gate-x11-proxy.metalloarea.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 23:45:08 UTC", "last_seen": "2026-03-15 23:45:08 UTC", "sightings": 1 }, { "indicator": "http://119.179.252.133:53841/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 23:44:19 UTC", "last_seen": "2026-03-15 23:44:19 UTC", "sightings": 1 }, { "indicator": "https://web-v8-infra.metalloarea.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 23:40:10 UTC", "last_seen": "2026-03-15 23:40:10 UTC", "sightings": 1 }, { "indicator": "http://196.190.224.62:44774/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-15 23:39:15 UTC", "last_seen": "2026-03-15 23:39:15 UTC", "sightings": 1 }, { "indicator": "https://link-z0-sat.grandeserveur.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 23:34:08 UTC", "last_seen": "2026-03-15 23:34:08 UTC", "sightings": 1 }, { "indicator": "http://125.41.111.29:45183/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 23:29:11 UTC", "last_seen": "2026-03-15 23:29:11 UTC", "sightings": 1 }, { "indicator": "https://core-x2-rock.grandeserveur.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 23:29:07 UTC", "last_seen": "2026-03-15 23:29:07 UTC", "sightings": 1 }, { "indicator": "https://base-v55-steel.grandeserveur.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 23:23:09 UTC", "last_seen": "2026-03-15 23:23:09 UTC", "sightings": 1 }, { "indicator": "https://orbit-z1-moon.grandeserveur.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 23:17:07 UTC", "last_seen": "2026-03-15 23:17:07 UTC", "sightings": 1 }, { "indicator": "https://space-x9-open.silberstromz.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 23:12:06 UTC", "last_seen": "2026-03-15 23:12:06 UTC", "sightings": 1 }, { "indicator": "http://123.13.154.237:41215/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 23:11:08 UTC", "last_seen": "2026-03-15 23:11:08 UTC", "sightings": 1 }, { "indicator": "https://field-z4-vast.silberstromz.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 23:05:09 UTC", "last_seen": "2026-03-15 23:05:09 UTC", "sightings": 1 }, { "indicator": "http://203.177.237.148:54312/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-15 23:03:12 UTC", "last_seen": "2026-03-15 23:03:12 UTC", "sightings": 1 }, { "indicator": "https://zone-v11-area.silberstromz.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 23:01:09 UTC", "last_seen": "2026-03-15 23:01:09 UTC", "sightings": 1 }, { "indicator": "http://27.37.76.96:53171/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 22:57:23 UTC", "last_seen": "2026-03-15 22:57:23 UTC", "sightings": 1 }, { "indicator": "http://27.37.76.96:53171/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 22:57:23 UTC", "last_seen": "2026-03-15 22:57:23 UTC", "sightings": 1 }, { "indicator": "https://rim-x7-outer.silberstromz.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 22:55:07 UTC", "last_seen": "2026-03-15 22:55:07 UTC", "sightings": 1 }, { "indicator": "https://sync-v0-vision.altosistema.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 22:48:08 UTC", "last_seen": "2026-03-15 22:48:08 UTC", "sightings": 1 }, { "indicator": "http://123.13.154.237:41215/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 22:47:21 UTC", "last_seen": "2026-03-15 22:47:21 UTC", "sightings": 1 }, { "indicator": "https://scan-z2-point.altosistema.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 22:44:06 UTC", "last_seen": "2026-03-15 22:44:06 UTC", "sightings": 1 }, { "indicator": "http://203.177.237.148:54312/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-15 22:38:17 UTC", "last_seen": "2026-03-15 22:38:17 UTC", "sightings": 1 }, { "indicator": "https://bridge-x4-light.altosistema.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 22:37:10 UTC", "last_seen": "2026-03-15 22:37:10 UTC", "sightings": 1 }, { "indicator": "http://46.163.184.136:34454/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 22:36:18 UTC", "last_seen": "2026-03-15 22:36:18 UTC", "sightings": 1 }, { "indicator": "https://room-v51-dark.altosistema.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 22:33:08 UTC", "last_seen": "2026-03-15 22:33:08 UTC", "sightings": 1 }, { "indicator": "http://5.175.223.124/data.mipsel", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "gafgyt", "mips", "mirai", "ua-wget" ], "first_seen": "2026-03-15 22:28:24 UTC", "last_seen": "2026-03-15 22:28:24 UTC", "sightings": 1 }, { "indicator": "http://5.175.223.124/data.mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "gafgyt", "mips", "mirai", "ua-wget" ], "first_seen": "2026-03-15 22:27:16 UTC", "last_seen": "2026-03-15 22:27:16 UTC", "sightings": 1 }, { "indicator": "http://5.175.223.124/t.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "gafgyt", "sh", "ua-wget" ], "first_seen": "2026-03-15 22:27:16 UTC", "last_seen": "2026-03-15 22:27:16 UTC", "sightings": 1 }, { "indicator": "http://80.89.237.190/1.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543", "Vidar" ], "first_seen": "2026-03-15 22:23:15 UTC", "last_seen": "2026-03-15 22:23:15 UTC", "sightings": 1 }, { "indicator": "http://182.127.128.122:60774/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 22:23:09 UTC", "last_seen": "2026-03-15 22:23:09 UTC", "sightings": 1 }, { "indicator": "https://ghost-v3-node.froidenodal.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 22:22:06 UTC", "last_seen": "2026-03-15 22:22:06 UTC", "sightings": 1 }, { "indicator": "http://125.41.247.110:55971/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 22:20:10 UTC", "last_seen": "2026-03-15 22:20:10 UTC", "sightings": 1 }, { "indicator": "https://trace-z9-alpha.froidenodal.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 22:15:08 UTC", "last_seen": "2026-03-15 22:15:08 UTC", "sightings": 1 }, { "indicator": "http://111.127.226.51:53957/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-15 22:09:17 UTC", "last_seen": "2026-03-15 22:09:17 UTC", "sightings": 1 }, { "indicator": "http://111.127.226.51:53957/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-15 22:08:14 UTC", "last_seen": "2026-03-15 22:08:14 UTC", "sightings": 1 }, { "indicator": "https://auth-v1-user.mondosicuro.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 22:04:07 UTC", "last_seen": "2026-03-15 22:04:07 UTC", "sightings": 1 }, { "indicator": "https://db-z12-point.mondosicuro.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 21:59:08 UTC", "last_seen": "2026-03-15 21:59:08 UTC", "sightings": 1 }, { "indicator": "http://110.38.196.249:51883/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-15 21:55:18 UTC", "last_seen": "2026-03-15 21:55:18 UTC", "sightings": 1 }, { "indicator": "https://base-x7-infra.mondosicuro.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-15 21:53:06 UTC", "last_seen": "2026-03-15 21:53:06 UTC", "sightings": 1 }, { "indicator": "http://116.139.137.30:55268/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 21:45:14 UTC", "last_seen": "2026-03-15 21:45:14 UTC", "sightings": 1 }, { "indicator": "https://flow-x5-work.starkewahl.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-15 21:42:09 UTC", "last_seen": "2026-03-15 21:42:09 UTC", "sightings": 1 }, { "indicator": "http://222.137.144.93:41198/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 21:41:14 UTC", "last_seen": "2026-03-15 21:41:14 UTC", "sightings": 1 }, { "indicator": "http://182.114.199.236:52589/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 21:41:14 UTC", "last_seen": "2026-03-15 21:41:14 UTC", "sightings": 1 }, { "indicator": "http://182.114.199.236:52589/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 21:38:15 UTC", "last_seen": "2026-03-15 21:38:15 UTC", "sightings": 1 }, { "indicator": "https://hub-z0-local.starkewahl.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-15 21:36:06 UTC", "last_seen": "2026-03-15 21:36:06 UTC", "sightings": 1 }, { "indicator": "http://39.64.243.58:39833/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 21:27:33 UTC", "last_seen": "2026-03-15 21:27:33 UTC", "sightings": 1 }, { "indicator": "https://sys-x2-monitor.starkewahl.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-15 21:25:09 UTC", "last_seen": "2026-03-15 21:25:09 UTC", "sightings": 1 }, { "indicator": "http://125.41.247.110:55971/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 21:21:16 UTC", "last_seen": "2026-03-15 21:21:16 UTC", "sightings": 1 }, { "indicator": "https://link-v7-entry.petittravail.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-15 21:20:08 UTC", "last_seen": "2026-03-15 21:20:08 UTC", "sightings": 1 }, { "indicator": "http://110.137.158.208:51710/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-15 21:16:21 UTC", "last_seen": "2026-03-15 21:16:21 UTC", "sightings": 1 }, { "indicator": "https://dev-x44-host.petittravail.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 21:14:06 UTC", "last_seen": "2026-03-15 21:14:06 UTC", "sightings": 1 }, { "indicator": "https://api-z1-remote.petittravail.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-15 21:09:07 UTC", "last_seen": "2026-03-15 21:09:07 UTC", "sightings": 1 }, { "indicator": "http://123.5.174.14:60996/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 21:05:20 UTC", "last_seen": "2026-03-15 21:05:20 UTC", "sightings": 1 }, { "indicator": "http://188.137.254.207/1.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543", "Vidar" ], "first_seen": "2026-03-15 21:05:19 UTC", "last_seen": "2026-03-15 21:05:19 UTC", "sightings": 1 }, { "indicator": "https://cloud-v10-store.petittravail.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-15 21:04:06 UTC", "last_seen": "2026-03-15 21:04:06 UTC", "sightings": 1 }, { "indicator": "https://infra-v3-sync.schnellnetz.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-15 20:57:06 UTC", "last_seen": "2026-03-15 20:57:06 UTC", "sightings": 1 }, { "indicator": "http://174.105.154.212:40964/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 20:55:19 UTC", "last_seen": "2026-03-15 20:55:19 UTC", "sightings": 1 }, { "indicator": "https://web-99-proxy.schnellnetz.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-15 20:52:06 UTC", "last_seen": "2026-03-15 20:52:06 UTC", "sightings": 1 }, { "indicator": "http://110.38.197.49:53125/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 20:49:16 UTC", "last_seen": "2026-03-15 20:49:16 UTC", "sightings": 1 }, { "indicator": "https://data-x1-core.schnellnetz.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-15 20:47:07 UTC", "last_seen": "2026-03-15 20:47:07 UTC", "sightings": 1 }, { "indicator": "https://auth-z7-gate.schnellnetz.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-15 20:44:06 UTC", "last_seen": "2026-03-15 20:44:06 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.7/files/7782139129/Y9lcbSi.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey", "Stealc" ], "first_seen": "2026-03-15 20:43:07 UTC", "last_seen": "2026-03-15 20:43:07 UTC", "sightings": 1 }, { "indicator": "http://123.5.174.14:60996/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 20:42:17 UTC", "last_seen": "2026-03-15 20:42:17 UTC", "sightings": 1 }, { "indicator": "http://112.248.108.165:47998/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 20:23:46 UTC", "last_seen": "2026-03-15 20:23:46 UTC", "sightings": 1 }, { "indicator": "https://dist-z02-edge.ponteluna.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-15 20:23:08 UTC", "last_seen": "2026-03-15 20:23:08 UTC", "sightings": 1 }, { "indicator": "https://sync-v9-data.metallopunto.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-15 20:08:07 UTC", "last_seen": "2026-03-15 20:08:07 UTC", "sightings": 1 }, { "indicator": "https://gate-x3-proxy.metallopunto.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-15 20:03:07 UTC", "last_seen": "2026-03-15 20:03:07 UTC", "sightings": 1 }, { "indicator": "https://web-z7-infra.metallopunto.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-15 19:57:09 UTC", "last_seen": "2026-03-15 19:57:09 UTC", "sightings": 1 }, { "indicator": "http://94.156.152.67/botguaymolonl7_arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "opendir", "ua-wget", "x86" ], "first_seen": "2026-03-15 19:55:15 UTC", "last_seen": "2026-03-15 19:55:15 UTC", "sightings": 1 }, { "indicator": "http://110.37.114.50:53307/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-15 19:52:13 UTC", "last_seen": "2026-03-15 19:52:13 UTC", "sightings": 1 }, { "indicator": "https://link-v11-sat.grandevitesse.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-15 19:52:09 UTC", "last_seen": "2026-03-15 19:52:09 UTC", "sightings": 1 }, { "indicator": "http://141.196.207.18:36969/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 19:49:12 UTC", "last_seen": "2026-03-15 19:49:12 UTC", "sightings": 1 }, { "indicator": "https://base-z9-steel.grandevitesse.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-15 19:40:12 UTC", "last_seen": "2026-03-15 19:40:12 UTC", "sightings": 1 }, { "indicator": "http://110.39.237.192:52002/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 19:38:08 UTC", "last_seen": "2026-03-15 19:38:08 UTC", "sightings": 1 }, { "indicator": "https://orbit-v0-moon.grandevitesse.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-15 19:35:09 UTC", "last_seen": "2026-03-15 19:35:09 UTC", "sightings": 1 }, { "indicator": "http://110.39.237.192:52002/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 19:32:18 UTC", "last_seen": "2026-03-15 19:32:18 UTC", "sightings": 1 }, { "indicator": "https://field-z5-vast.silberstromx.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-15 19:23:08 UTC", "last_seen": "2026-03-15 19:23:08 UTC", "sightings": 1 }, { "indicator": "http://110.37.114.50:53307/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-15 19:20:14 UTC", "last_seen": "2026-03-15 19:20:14 UTC", "sightings": 1 }, { "indicator": "https://zone-v2-area.silberstromx.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-15 19:18:07 UTC", "last_seen": "2026-03-15 19:18:07 UTC", "sightings": 1 }, { "indicator": "http://182.240.3.9:43335/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-15 19:13:25 UTC", "last_seen": "2026-03-15 19:13:25 UTC", "sightings": 1 }, { "indicator": "https://rim-x81-outer.silberstromx.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-15 19:13:06 UTC", "last_seen": "2026-03-15 19:13:06 UTC", "sightings": 1 }, { "indicator": "https://sync-z1-vision.altolivello.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-15 19:06:07 UTC", "last_seen": "2026-03-15 19:06:07 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.7/files/7460962853/qZGuNez.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey", "RatonRAT" ], "first_seen": "2026-03-15 19:02:08 UTC", "last_seen": "2026-03-15 19:02:08 UTC", "sightings": 1 }, { "indicator": "https://bridge-00-light.altolivello.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-15 18:56:07 UTC", "last_seen": "2026-03-15 18:56:07 UTC", "sightings": 1 }, { "indicator": "https://api.wewpwsw.su/gate.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-03-15 18:53:22 UTC", "last_seen": "2026-03-15 18:53:22 UTC", "sightings": 1 }, { "indicator": "https://room-x12-dark.altolivello.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-15 18:49:07 UTC", "last_seen": "2026-03-15 18:49:07 UTC", "sightings": 1 }, { "indicator": "https://vision-z3-sync.froidefibre.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-15 18:46:07 UTC", "last_seen": "2026-03-15 18:46:07 UTC", "sightings": 1 }, { "indicator": "https://ghost-v9-node.froidefibre.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-15 18:43:07 UTC", "last_seen": "2026-03-15 18:43:07 UTC", "sightings": 1 }, { "indicator": "http://60.23.203.150:50591/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 18:39:17 UTC", "last_seen": "2026-03-15 18:39:17 UTC", "sightings": 1 }, { "indicator": "https://trace-x7-alpha.froidefibre.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 18:27:07 UTC", "last_seen": "2026-03-15 18:27:07 UTC", "sightings": 1 }, { "indicator": "https://auth-v2-user.mondolucente.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 18:22:07 UTC", "last_seen": "2026-03-15 18:22:07 UTC", "sightings": 1 }, { "indicator": "http://180.190.203.41:46607/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-15 18:21:16 UTC", "last_seen": "2026-03-15 18:21:16 UTC", "sightings": 1 }, { "indicator": "https://db-x55-point.mondolucente.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 18:17:06 UTC", "last_seen": "2026-03-15 18:17:06 UTC", "sightings": 1 }, { "indicator": "http://60.23.203.150:50591/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 18:12:18 UTC", "last_seen": "2026-03-15 18:12:18 UTC", "sightings": 1 }, { "indicator": "https://base-z3-infra.mondolucente.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 18:11:05 UTC", "last_seen": "2026-03-15 18:11:05 UTC", "sightings": 1 }, { "indicator": "https://net-v11-global.mondolucente.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 18:05:09 UTC", "last_seen": "2026-03-15 18:05:09 UTC", "sightings": 1 }, { "indicator": "https://flow-z4-work.starkewolke.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 18:00:09 UTC", "last_seen": "2026-03-15 18:00:09 UTC", "sightings": 1 }, { "indicator": "https://hub-v22-local.starkewolke.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 17:54:06 UTC", "last_seen": "2026-03-15 17:54:06 UTC", "sightings": 1 }, { "indicator": "https://link-x9-power.starkewolke.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 17:48:06 UTC", "last_seen": "2026-03-15 17:48:06 UTC", "sightings": 1 }, { "indicator": "https://sys-01-monitor.starkewolke.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 17:42:06 UTC", "last_seen": "2026-03-15 17:42:06 UTC", "sightings": 1 }, { "indicator": "https://gate-v5-entry.petitreseauv.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 17:37:07 UTC", "last_seen": "2026-03-15 17:37:07 UTC", "sightings": 1 }, { "indicator": "https://dev-x11-host.petitreseauv.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 17:32:09 UTC", "last_seen": "2026-03-15 17:32:09 UTC", "sightings": 1 }, { "indicator": "https://api-z8-remote.petitreseauv.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 17:26:08 UTC", "last_seen": "2026-03-15 17:26:08 UTC", "sightings": 1 }, { "indicator": "http://115.48.44.222:57999/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 17:20:18 UTC", "last_seen": "2026-03-15 17:20:18 UTC", "sightings": 1 }, { "indicator": "https://cloud-v2-store.petitreseauv.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 17:20:11 UTC", "last_seen": "2026-03-15 17:20:11 UTC", "sightings": 1 }, { "indicator": "http://110.36.2.23:39331/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 17:18:13 UTC", "last_seen": "2026-03-15 17:18:13 UTC", "sightings": 1 }, { "indicator": "http://115.48.44.222:57999/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 17:17:10 UTC", "last_seen": "2026-03-15 17:17:10 UTC", "sightings": 1 }, { "indicator": "http://115.53.200.55:33629/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 17:14:19 UTC", "last_seen": "2026-03-15 17:14:19 UTC", "sightings": 1 }, { "indicator": "http://42.231.110.189:60391/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 17:14:19 UTC", "last_seen": "2026-03-15 17:14:19 UTC", "sightings": 1 }, { "indicator": "http://110.36.86.83:40734/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 17:14:18 UTC", "last_seen": "2026-03-15 17:14:18 UTC", "sightings": 1 }, { "indicator": "https://core-x1-sync.schnellestat.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 17:14:07 UTC", "last_seen": "2026-03-15 17:14:07 UTC", "sightings": 1 }, { "indicator": "https://web-303-proxy.schnellestat.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 17:09:07 UTC", "last_seen": "2026-03-15 17:09:07 UTC", "sightings": 1 }, { "indicator": "http://46.163.181.104:47481/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 17:07:19 UTC", "last_seen": "2026-03-15 17:07:19 UTC", "sightings": 1 }, { "indicator": "https://app-v9-data.schnellestat.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 17:03:06 UTC", "last_seen": "2026-03-15 17:03:06 UTC", "sightings": 1 }, { "indicator": "http://59.176.74.69:50628/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 16:59:20 UTC", "last_seen": "2026-03-15 16:59:20 UTC", "sightings": 1 }, { "indicator": "https://srv-z44-meta.schnellestat.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 16:58:07 UTC", "last_seen": "2026-03-15 16:58:07 UTC", "sightings": 1 }, { "indicator": "http://110.37.89.197:55699/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-15 16:56:17 UTC", "last_seen": "2026-03-15 16:56:17 UTC", "sightings": 1 }, { "indicator": "http://110.36.2.23:39331/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 16:55:20 UTC", "last_seen": "2026-03-15 16:55:20 UTC", "sightings": 1 }, { "indicator": "http://59.176.74.69:50628/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 16:54:21 UTC", "last_seen": "2026-03-15 16:54:21 UTC", "sightings": 1 }, { "indicator": "https://infra-v1-static.pontesicuro.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 16:52:07 UTC", "last_seen": "2026-03-15 16:52:07 UTC", "sightings": 1 }, { "indicator": "http://42.231.110.189:60391/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 16:50:21 UTC", "last_seen": "2026-03-15 16:50:21 UTC", "sightings": 1 }, { "indicator": "http://120.59.128.36:33351/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 16:48:16 UTC", "last_seen": "2026-03-15 16:48:16 UTC", "sightings": 1 }, { "indicator": "http://58.255.46.66:52268/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 16:48:16 UTC", "last_seen": "2026-03-15 16:48:16 UTC", "sightings": 1 }, { "indicator": "http://113.238.180.161:50054/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 16:47:10 UTC", "last_seen": "2026-03-15 16:47:10 UTC", "sightings": 1 }, { "indicator": "http://200.59.83.67:60349/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 16:47:09 UTC", "last_seen": "2026-03-15 16:47:09 UTC", "sightings": 1 }, { "indicator": "https://dist-7-cache.pontesicuro.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 16:46:07 UTC", "last_seen": "2026-03-15 16:46:07 UTC", "sightings": 1 }, { "indicator": "http://115.53.200.55:33629/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 16:41:18 UTC", "last_seen": "2026-03-15 16:41:18 UTC", "sightings": 1 }, { "indicator": "https://sync-v02-edge.pontesicuro.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 16:40:09 UTC", "last_seen": "2026-03-15 16:40:09 UTC", "sightings": 1 }, { "indicator": "https://node-x91-auth.pontesicuro.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 16:35:08 UTC", "last_seen": "2026-03-15 16:35:08 UTC", "sightings": 1 }, { "indicator": "http://5.175.223.124/w_a.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "script" ], "first_seen": "2026-03-15 16:32:21 UTC", "last_seen": "2026-03-15 16:32:21 UTC", "sightings": 1 }, { "indicator": "https://cc-a89.pages.dev/static/apk/duanj.me.apk", "indicator_type": "url", "source": "URLhaus", "tags": [ "CoinMiner" ], "first_seen": "2026-03-15 16:32:14 UTC", "last_seen": "2026-03-15 16:32:14 UTC", "sightings": 1 }, { "indicator": "http://2.58.82.231/memory_bin_dir/memory_load.arc", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-15 16:32:12 UTC", "last_seen": "2026-03-15 16:32:12 UTC", "sightings": 1 }, { "indicator": "http://2.58.82.231/memory_bin_dir/memory_load.ppc", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-15 16:32:12 UTC", "last_seen": "2026-03-15 16:32:12 UTC", "sightings": 1 }, { "indicator": "http://2.58.82.231/memory_bin_dir/memory_load.mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-15 16:32:12 UTC", "last_seen": "2026-03-15 16:32:12 UTC", "sightings": 1 }, { "indicator": "http://2.58.82.231/memory_bin_dir/memory_load.arm", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-15 16:32:12 UTC", "last_seen": "2026-03-15 16:32:12 UTC", "sightings": 1 }, { "indicator": "http://2.58.82.231/memory_bin_dir/memory_load.arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-15 16:32:12 UTC", "last_seen": "2026-03-15 16:32:12 UTC", "sightings": 1 }, { "indicator": "http://2.58.82.231/memory_bin_dir/memory_load.arm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-15 16:32:12 UTC", "last_seen": "2026-03-15 16:32:12 UTC", "sightings": 1 }, { "indicator": "http://114.134.251.144:47416/.i", "indicator_type": "url", "source": "URLhaus", "tags": [ "hajime" ], "first_seen": "2026-03-15 16:32:12 UTC", "last_seen": "2026-03-15 16:32:12 UTC", "sightings": 1 }, { "indicator": "http://2.58.82.231/memory_bin_dir/memory_load.i686", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-15 16:32:10 UTC", "last_seen": "2026-03-15 16:32:10 UTC", "sightings": 1 }, { "indicator": "http://2.58.82.231/memory_bin_dir/memory_load.i486", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-15 16:32:10 UTC", "last_seen": "2026-03-15 16:32:10 UTC", "sightings": 1 }, { "indicator": "http://2.58.82.231/memory_bin_dir/memory_load.mpsl", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-15 16:32:10 UTC", "last_seen": "2026-03-15 16:32:10 UTC", "sightings": 1 }, { "indicator": "http://2.58.82.231/memory_bin_dir/memory_load.arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-15 16:32:10 UTC", "last_seen": "2026-03-15 16:32:10 UTC", "sightings": 1 }, { "indicator": "http://2.58.82.231/memory_bin_dir/memory_load.sh4", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-15 16:32:10 UTC", "last_seen": "2026-03-15 16:32:10 UTC", "sightings": 1 }, { "indicator": "http://2.58.82.231/memory_bin_dir/memory_load.m68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-15 16:32:10 UTC", "last_seen": "2026-03-15 16:32:10 UTC", "sightings": 1 }, { "indicator": "http://2.58.82.231/memory_bin_dir/memory_load.x86", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-15 16:32:10 UTC", "last_seen": "2026-03-15 16:32:10 UTC", "sightings": 1 }, { "indicator": "http://2.58.82.231/memory_bin_dir/memory_load.spc", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-15 16:32:10 UTC", "last_seen": "2026-03-15 16:32:10 UTC", "sightings": 1 }, { "indicator": "http://2.58.82.231/memory_bin_dir/memory_load.x86_64", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-15 16:32:10 UTC", "last_seen": "2026-03-15 16:32:10 UTC", "sightings": 1 }, { "indicator": "https://dynnexos.getlight.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 16:30:08 UTC", "last_seen": "2026-03-15 16:30:08 UTC", "sightings": 1 }, { "indicator": "https://proto-p1an.getlight.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 16:25:09 UTC", "last_seen": "2026-03-15 16:25:09 UTC", "sightings": 1 }, { "indicator": "http://105.184.25.148:52511/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-15 16:24:09 UTC", "last_seen": "2026-03-15 16:24:09 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.7/files/7782139129/7GKCAjW.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-03-15 16:18:07 UTC", "last_seen": "2026-03-15 16:18:07 UTC", "sightings": 1 }, { "indicator": "https://irnport-array.getlight.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 16:15:07 UTC", "last_seen": "2026-03-15 16:15:07 UTC", "sightings": 1 }, { "indicator": "https://forrn4-mark.getlight.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 16:11:06 UTC", "last_seen": "2026-03-15 16:11:06 UTC", "sightings": 1 }, { "indicator": "http://110.37.59.132:48496/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 16:08:08 UTC", "last_seen": "2026-03-15 16:08:08 UTC", "sightings": 1 }, { "indicator": "https://rmly.onelight.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 16:04:06 UTC", "last_seen": "2026-03-15 16:04:06 UTC", "sightings": 1 }, { "indicator": "https://xivuhpzc.onelight.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 15:59:06 UTC", "last_seen": "2026-03-15 15:59:06 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.7/files/1591294058/oi2RE3G.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-15 15:57:08 UTC", "last_seen": "2026-03-15 15:57:08 UTC", "sightings": 1 }, { "indicator": "http://117.215.208.253:56555/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 15:55:19 UTC", "last_seen": "2026-03-15 15:55:19 UTC", "sightings": 1 }, { "indicator": "https://zenlithis.onelight.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 15:53:07 UTC", "last_seen": "2026-03-15 15:53:07 UTC", "sightings": 1 }, { "indicator": "http://180.190.203.41:46607/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-15 15:52:21 UTC", "last_seen": "2026-03-15 15:52:21 UTC", "sightings": 1 }, { "indicator": "http://115.57.194.89:39421/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 15:51:20 UTC", "last_seen": "2026-03-15 15:51:20 UTC", "sightings": 1 }, { "indicator": "https://hyp3-grid.onelight.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 15:48:10 UTC", "last_seen": "2026-03-15 15:48:10 UTC", "sightings": 1 }, { "indicator": "http://181.66.9.240:60776/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 15:43:21 UTC", "last_seen": "2026-03-15 15:43:21 UTC", "sightings": 1 }, { "indicator": "https://kelline7en.biglight.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 15:41:06 UTC", "last_seen": "2026-03-15 15:41:06 UTC", "sightings": 1 }, { "indicator": "http://115.57.194.89:39421/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 15:36:23 UTC", "last_seen": "2026-03-15 15:36:23 UTC", "sightings": 1 }, { "indicator": "https://neo-dep0.biglight.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 15:36:06 UTC", "last_seen": "2026-03-15 15:36:06 UTC", "sightings": 1 }, { "indicator": "http://27.37.63.168:44188/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 15:30:27 UTC", "last_seen": "2026-03-15 15:30:27 UTC", "sightings": 1 }, { "indicator": "http://117.215.208.253:56555/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 15:28:33 UTC", "last_seen": "2026-03-15 15:28:33 UTC", "sightings": 1 }, { "indicator": "http://219.155.194.54:43638/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 15:28:24 UTC", "last_seen": "2026-03-15 15:28:24 UTC", "sightings": 1 }, { "indicator": "https://ultra-10ader.biglight.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 15:25:10 UTC", "last_seen": "2026-03-15 15:25:10 UTC", "sightings": 1 }, { "indicator": "https://owgnjyia.oilglass.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 15:20:09 UTC", "last_seen": "2026-03-15 15:20:09 UTC", "sightings": 1 }, { "indicator": "https://alt-4g3nt.oilglass.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 15:13:06 UTC", "last_seen": "2026-03-15 15:13:06 UTC", "sightings": 1 }, { "indicator": "https://c11p8-route.oilglass.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 15:09:06 UTC", "last_seen": "2026-03-15 15:09:06 UTC", "sightings": 1 }, { "indicator": "http://181.66.9.240:60776/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 15:03:20 UTC", "last_seen": "2026-03-15 15:03:20 UTC", "sightings": 1 }, { "indicator": "https://awzsl.oilglass.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 15:02:07 UTC", "last_seen": "2026-03-15 15:02:07 UTC", "sightings": 1 }, { "indicator": "https://ihs9w42t.rocksys.digital/?=check&&actmn=lnUKOvfTzEhQkegZ", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-15 15:00:09 UTC", "last_seen": "2026-03-15 15:00:09 UTC", "sightings": 1 }, { "indicator": "http://27.37.63.168:44188/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 14:57:24 UTC", "last_seen": "2026-03-15 14:57:24 UTC", "sightings": 1 }, { "indicator": "http://106.4.101.215:60031/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-15 14:57:22 UTC", "last_seen": "2026-03-15 14:57:22 UTC", "sightings": 1 }, { "indicator": "https://schem2-span.yellglass.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 14:57:08 UTC", "last_seen": "2026-03-15 14:57:08 UTC", "sightings": 1 }, { "indicator": "https://lkzsajn.yellglass.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 14:51:06 UTC", "last_seen": "2026-03-15 14:51:06 UTC", "sightings": 1 }, { "indicator": "http://163.142.78.131:43810/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 14:49:22 UTC", "last_seen": "2026-03-15 14:49:22 UTC", "sightings": 1 }, { "indicator": "https://67hl8p.yellglass.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 14:46:07 UTC", "last_seen": "2026-03-15 14:46:07 UTC", "sightings": 1 }, { "indicator": "http://59.95.82.201:52068/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 14:41:21 UTC", "last_seen": "2026-03-15 14:41:21 UTC", "sightings": 1 }, { "indicator": "https://timbermerge.yellglass.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 14:40:10 UTC", "last_seen": "2026-03-15 14:40:10 UTC", "sightings": 1 }, { "indicator": "http://106.4.101.215:60031/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-15 14:39:18 UTC", "last_seen": "2026-03-15 14:39:18 UTC", "sightings": 1 }, { "indicator": "https://blendlayout.rassvet.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 14:34:06 UTC", "last_seen": "2026-03-15 14:34:06 UTC", "sightings": 1 }, { "indicator": "http://193.233.193.12/yeye/yeye.mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-15 14:31:24 UTC", "last_seen": "2026-03-15 14:31:24 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.7/files/6712224411/BD96its.msi", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-15 14:29:07 UTC", "last_seen": "2026-03-15 14:29:07 UTC", "sightings": 1 }, { "indicator": "http://178.34.124.79:33914/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-15 14:28:17 UTC", "last_seen": "2026-03-15 14:28:17 UTC", "sightings": 1 }, { "indicator": "https://bridgsock.rassvet.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 14:28:08 UTC", "last_seen": "2026-03-15 14:28:08 UTC", "sightings": 1 }, { "indicator": "https://66baw.rassvet.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 14:23:08 UTC", "last_seen": "2026-03-15 14:23:08 UTC", "sightings": 1 }, { "indicator": "http://115.49.78.223:48777/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 14:22:22 UTC", "last_seen": "2026-03-15 14:22:22 UTC", "sightings": 1 }, { "indicator": "http://163.142.78.131:43810/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 14:18:37 UTC", "last_seen": "2026-03-15 14:18:37 UTC", "sightings": 1 }, { "indicator": "https://cellcol.rassvet.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 14:17:07 UTC", "last_seen": "2026-03-15 14:17:07 UTC", "sightings": 1 }, { "indicator": "https://vorlithar5.bluelight.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 14:13:10 UTC", "last_seen": "2026-03-15 14:13:10 UTC", "sightings": 1 }, { "indicator": "http://59.95.82.201:52068/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 14:12:24 UTC", "last_seen": "2026-03-15 14:12:24 UTC", "sightings": 1 }, { "indicator": "http://182.124.115.245:57876/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 14:10:29 UTC", "last_seen": "2026-03-15 14:10:29 UTC", "sightings": 1 }, { "indicator": "https://4ud18-ring.bluelight.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 14:06:08 UTC", "last_seen": "2026-03-15 14:06:08 UTC", "sightings": 1 }, { "indicator": "https://surve-spool.bluelight.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 14:01:08 UTC", "last_seen": "2026-03-15 14:01:08 UTC", "sightings": 1 }, { "indicator": "https://routercanva.bluelight.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 13:56:09 UTC", "last_seen": "2026-03-15 13:56:09 UTC", "sightings": 1 }, { "indicator": "http://178.34.124.79:33914/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-15 13:55:20 UTC", "last_seen": "2026-03-15 13:55:20 UTC", "sightings": 1 }, { "indicator": "http://115.49.78.223:48777/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 13:54:09 UTC", "last_seen": "2026-03-15 13:54:09 UTC", "sightings": 1 }, { "indicator": "https://dynlineum5.dotnet.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 13:49:07 UTC", "last_seen": "2026-03-15 13:49:07 UTC", "sightings": 1 }, { "indicator": "http://182.124.115.245:57876/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 13:44:18 UTC", "last_seen": "2026-03-15 13:44:18 UTC", "sightings": 1 }, { "indicator": "https://splitcrim.dotnet.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 13:44:08 UTC", "last_seen": "2026-03-15 13:44:08 UTC", "sightings": 1 }, { "indicator": "http://221.15.185.191:50815/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 13:42:18 UTC", "last_seen": "2026-03-15 13:42:18 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.7/files/5986970905/zDhPBxo.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-15 13:42:11 UTC", "last_seen": "2026-03-15 13:42:11 UTC", "sightings": 1 }, { "indicator": "https://br4nd-crest.dotnet.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 13:33:08 UTC", "last_seen": "2026-03-15 13:33:08 UTC", "sightings": 1 }, { "indicator": "http://120.33.246.240:54630/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-15 13:33:08 UTC", "last_seen": "2026-03-15 13:33:08 UTC", "sightings": 1 }, { "indicator": "https://n4rr-wave.gobright.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 13:26:08 UTC", "last_seen": "2026-03-15 13:26:08 UTC", "sightings": 1 }, { "indicator": "https://canopyform.gobright.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 13:21:06 UTC", "last_seen": "2026-03-15 13:21:06 UTC", "sightings": 1 }, { "indicator": "https://bran-gen.gobright.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 13:16:07 UTC", "last_seen": "2026-03-15 13:16:07 UTC", "sightings": 1 }, { "indicator": "https://shoalthorn.gobright.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 13:10:12 UTC", "last_seen": "2026-03-15 13:10:12 UTC", "sightings": 1 }, { "indicator": "http://120.33.246.240:54630/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-15 13:08:19 UTC", "last_seen": "2026-03-15 13:08:19 UTC", "sightings": 1 }, { "indicator": "https://9kmz1s.highligh.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 13:05:10 UTC", "last_seen": "2026-03-15 13:05:10 UTC", "sightings": 1 }, { "indicator": "http://222.127.251.163:54865/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-15 13:02:28 UTC", "last_seen": "2026-03-15 13:02:28 UTC", "sightings": 1 }, { "indicator": "https://quorcore5et.highligh.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 12:59:10 UTC", "last_seen": "2026-03-15 12:59:10 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.7/files/8749876778/6jzL3JU.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-15 12:59:10 UTC", "last_seen": "2026-03-15 12:59:10 UTC", "sightings": 1 }, { "indicator": "https://mooinne.highligh.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 12:54:07 UTC", "last_seen": "2026-03-15 12:54:07 UTC", "sightings": 1 }, { "indicator": "http://27.37.76.223:40510/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 12:50:18 UTC", "last_seen": "2026-03-15 12:50:18 UTC", "sightings": 1 }, { "indicator": "http://111.76.224.52:37151/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-15 12:50:13 UTC", "last_seen": "2026-03-15 12:50:13 UTC", "sightings": 1 }, { "indicator": "http://125.47.197.38:39759/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-15 12:50:12 UTC", "last_seen": "2026-03-15 12:50:12 UTC", "sightings": 1 }, { "indicator": "https://workerembe.highligh.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 12:49:08 UTC", "last_seen": "2026-03-15 12:49:08 UTC", "sightings": 1 }, { "indicator": "http://61.1.24.65:38240/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 12:48:21 UTC", "last_seen": "2026-03-15 12:48:21 UTC", "sightings": 1 }, { "indicator": "http://61.1.24.65:38240/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 12:44:09 UTC", "last_seen": "2026-03-15 12:44:09 UTC", "sightings": 1 }, { "indicator": "https://c0ve-grid.ziparch.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 12:42:06 UTC", "last_seen": "2026-03-15 12:42:06 UTC", "sightings": 1 }, { "indicator": "https://c72ole.ziparch.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 12:37:05 UTC", "last_seen": "2026-03-15 12:37:05 UTC", "sightings": 1 }, { "indicator": "http://117.215.50.42:48096/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 12:36:18 UTC", "last_seen": "2026-03-15 12:36:18 UTC", "sightings": 1 }, { "indicator": "http://222.127.251.163:54865/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-15 12:34:28 UTC", "last_seen": "2026-03-15 12:34:28 UTC", "sightings": 1 }, { "indicator": "https://ser-tidear.ziparch.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 12:32:06 UTC", "last_seen": "2026-03-15 12:32:06 UTC", "sightings": 1 }, { "indicator": "https://quotasun.ziparch.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 12:25:15 UTC", "last_seen": "2026-03-15 12:25:15 UTC", "sightings": 1 }, { "indicator": "https://clousupply.farngo.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 12:20:09 UTC", "last_seen": "2026-03-15 12:20:09 UTC", "sightings": 1 }, { "indicator": "https://shiel-track.farngo.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 12:15:08 UTC", "last_seen": "2026-03-15 12:15:08 UTC", "sightings": 1 }, { "indicator": "http://125.47.197.38:39759/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-15 12:14:18 UTC", "last_seen": "2026-03-15 12:14:18 UTC", "sightings": 1 }, { "indicator": "http://117.215.50.42:48096/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 12:11:25 UTC", "last_seen": "2026-03-15 12:11:25 UTC", "sightings": 1 }, { "indicator": "https://flee-peta.farngo.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 12:08:06 UTC", "last_seen": "2026-03-15 12:08:06 UTC", "sightings": 1 }, { "indicator": "http://221.15.17.84:48451/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 12:07:18 UTC", "last_seen": "2026-03-15 12:07:18 UTC", "sightings": 1 }, { "indicator": "http://27.37.76.223:40510/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 12:07:13 UTC", "last_seen": "2026-03-15 12:07:13 UTC", "sightings": 1 }, { "indicator": "https://geo-4uth.farngo.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 12:03:07 UTC", "last_seen": "2026-03-15 12:03:07 UTC", "sightings": 1 }, { "indicator": "http://27.215.210.61:35655/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 12:02:15 UTC", "last_seen": "2026-03-15 12:02:15 UTC", "sightings": 1 }, { "indicator": "https://ff6se.idealup.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 11:58:07 UTC", "last_seen": "2026-03-15 11:58:07 UTC", "sightings": 1 }, { "indicator": "https://curiouswholesale.idealup.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 11:53:06 UTC", "last_seen": "2026-03-15 11:53:06 UTC", "sightings": 1 }, { "indicator": "http://175.150.52.154:39767/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 11:48:17 UTC", "last_seen": "2026-03-15 11:48:17 UTC", "sightings": 1 }, { "indicator": "http://117.204.164.52:40671/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 11:48:17 UTC", "last_seen": "2026-03-15 11:48:17 UTC", "sightings": 1 }, { "indicator": "https://brookurban.idealup.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 11:46:10 UTC", "last_seen": "2026-03-15 11:46:10 UTC", "sightings": 1 }, { "indicator": "https://5tab1-pulse.idealup.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 11:40:09 UTC", "last_seen": "2026-03-15 11:40:09 UTC", "sightings": 1 }, { "indicator": "https://y7nk5xw8.bluehub.digital/?=check&&actmn=wBLyCHchoiYkDgOt", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-15 11:35:08 UTC", "last_seen": "2026-03-15 11:35:08 UTC", "sightings": 1 }, { "indicator": "https://bhzrypm.idealno.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 11:35:07 UTC", "last_seen": "2026-03-15 11:35:07 UTC", "sightings": 1 }, { "indicator": "http://39.64.243.58:39833/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 11:30:19 UTC", "last_seen": "2026-03-15 11:30:19 UTC", "sightings": 1 }, { "indicator": "https://bd6vpbg.idealno.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 11:29:06 UTC", "last_seen": "2026-03-15 11:29:06 UTC", "sightings": 1 }, { "indicator": "http://117.204.164.52:40671/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 11:26:21 UTC", "last_seen": "2026-03-15 11:26:21 UTC", "sightings": 1 }, { "indicator": "http://182.117.78.34:60189/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 11:23:23 UTC", "last_seen": "2026-03-15 11:23:23 UTC", "sightings": 1 }, { "indicator": "https://g447cjsx.idealno.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 11:23:07 UTC", "last_seen": "2026-03-15 11:23:07 UTC", "sightings": 1 }, { "indicator": "https://talfluxen.idealno.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 11:19:05 UTC", "last_seen": "2026-03-15 11:19:05 UTC", "sightings": 1 }, { "indicator": "http://175.150.52.154:39767/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 11:18:15 UTC", "last_seen": "2026-03-15 11:18:15 UTC", "sightings": 1 }, { "indicator": "http://110.39.237.185:38484/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 11:15:17 UTC", "last_seen": "2026-03-15 11:15:17 UTC", "sightings": 1 }, { "indicator": "https://0hm6uq.trustdom.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 11:12:05 UTC", "last_seen": "2026-03-15 11:12:05 UTC", "sightings": 1 }, { "indicator": "http://110.36.86.83:40734/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 11:10:19 UTC", "last_seen": "2026-03-15 11:10:19 UTC", "sightings": 1 }, { "indicator": "http://87.110.15.80:49178/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 11:09:14 UTC", "last_seen": "2026-03-15 11:09:14 UTC", "sightings": 1 }, { "indicator": "https://gu5t-spark.trustdom.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 11:07:06 UTC", "last_seen": "2026-03-15 11:07:06 UTC", "sightings": 1 }, { "indicator": "https://54p9sle.trustdom.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 11:00:08 UTC", "last_seen": "2026-03-15 11:00:08 UTC", "sightings": 1 }, { "indicator": "https://vgbf.trustdom.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 10:54:06 UTC", "last_seen": "2026-03-15 10:54:06 UTC", "sightings": 1 }, { "indicator": "http://115.99.89.131:55954/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 10:49:18 UTC", "last_seen": "2026-03-15 10:49:18 UTC", "sightings": 1 }, { "indicator": "https://meta-val1dat.trustsum.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 10:48:07 UTC", "last_seen": "2026-03-15 10:48:07 UTC", "sightings": 1 }, { "indicator": "http://59.95.83.206:33780/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 10:43:11 UTC", "last_seen": "2026-03-15 10:43:11 UTC", "sightings": 1 }, { "indicator": "https://pf1dxwdy.trustsum.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 10:43:07 UTC", "last_seen": "2026-03-15 10:43:07 UTC", "sightings": 1 }, { "indicator": "http://110.39.237.185:38484/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 10:41:14 UTC", "last_seen": "2026-03-15 10:41:14 UTC", "sightings": 1 }, { "indicator": "http://61.53.141.55:45385/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 10:40:19 UTC", "last_seen": "2026-03-15 10:40:19 UTC", "sightings": 1 }, { "indicator": "https://drawsout.trustsum.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 10:37:07 UTC", "last_seen": "2026-03-15 10:37:07 UTC", "sightings": 1 }, { "indicator": "https://sp3c6-vault.trustsum.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 10:32:07 UTC", "last_seen": "2026-03-15 10:32:07 UTC", "sightings": 1 }, { "indicator": "https://baow.man4get.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 10:26:09 UTC", "last_seen": "2026-03-15 10:26:09 UTC", "sightings": 1 }, { "indicator": "http://115.99.89.131:55954/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 10:22:19 UTC", "last_seen": "2026-03-15 10:22:19 UTC", "sightings": 1 }, { "indicator": "https://solcrest8on.man4get.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 10:20:10 UTC", "last_seen": "2026-03-15 10:20:10 UTC", "sightings": 1 }, { "indicator": "http://59.95.83.206:33780/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 10:19:09 UTC", "last_seen": "2026-03-15 10:19:09 UTC", "sightings": 1 }, { "indicator": "http://61.53.141.55:45385/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 10:16:21 UTC", "last_seen": "2026-03-15 10:16:21 UTC", "sightings": 1 }, { "indicator": "https://v3lv-watch.man4get.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 10:14:07 UTC", "last_seen": "2026-03-15 10:14:07 UTC", "sightings": 1 }, { "indicator": "https://soldraex2.man4get.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 10:09:06 UTC", "last_seen": "2026-03-15 10:09:06 UTC", "sightings": 1 }, { "indicator": "https://airwaybroker.m4gnet.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 10:03:07 UTC", "last_seen": "2026-03-15 10:03:07 UTC", "sightings": 1 }, { "indicator": "http://123.4.235.174:34085/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 09:59:23 UTC", "last_seen": "2026-03-15 09:59:23 UTC", "sightings": 1 }, { "indicator": "https://solmarkex.m4gnet.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 09:52:07 UTC", "last_seen": "2026-03-15 09:52:07 UTC", "sightings": 1 }, { "indicator": "https://7y35a.m4gnet.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 09:47:09 UTC", "last_seen": "2026-03-15 09:47:09 UTC", "sightings": 1 }, { "indicator": "http://120.60.236.89:52539/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 09:45:26 UTC", "last_seen": "2026-03-15 09:45:26 UTC", "sightings": 1 }, { "indicator": "http://119.179.252.253:47218/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 09:43:22 UTC", "last_seen": "2026-03-15 09:43:22 UTC", "sightings": 1 }, { "indicator": "https://spr1ng-field.farmanager.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 09:41:08 UTC", "last_seen": "2026-03-15 09:41:08 UTC", "sightings": 1 }, { "indicator": "http://123.4.235.174:34085/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 09:39:29 UTC", "last_seen": "2026-03-15 09:39:29 UTC", "sightings": 1 }, { "indicator": "http://119.187.255.3:40075/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 09:37:16 UTC", "last_seen": "2026-03-15 09:37:16 UTC", "sightings": 1 }, { "indicator": "https://salestru.farmanager.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 09:36:11 UTC", "last_seen": "2026-03-15 09:36:11 UTC", "sightings": 1 }, { "indicator": "https://temp0-beam.farmanager.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 09:29:06 UTC", "last_seen": "2026-03-15 09:29:06 UTC", "sightings": 1 }, { "indicator": "http://188.137.229.136/1.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543", "Vidar" ], "first_seen": "2026-03-15 09:26:16 UTC", "last_seen": "2026-03-15 09:26:16 UTC", "sightings": 1 }, { "indicator": "https://slopar.farmanager.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 09:24:09 UTC", "last_seen": "2026-03-15 09:24:09 UTC", "sightings": 1 }, { "indicator": "http://119.179.252.253:47218/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 09:23:22 UTC", "last_seen": "2026-03-15 09:23:22 UTC", "sightings": 1 }, { "indicator": "http://222.140.180.235:49670/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 09:23:21 UTC", "last_seen": "2026-03-15 09:23:21 UTC", "sightings": 1 }, { "indicator": "http://115.63.15.5:56284/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 09:21:23 UTC", "last_seen": "2026-03-15 09:21:23 UTC", "sightings": 1 }, { "indicator": "https://alt-w4go.checkstor.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 09:21:08 UTC", "last_seen": "2026-03-15 09:21:08 UTC", "sightings": 1 }, { "indicator": "https://6tym.checkstor.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 09:14:07 UTC", "last_seen": "2026-03-15 09:14:07 UTC", "sightings": 1 }, { "indicator": "http://119.187.255.3:40075/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 09:10:23 UTC", "last_seen": "2026-03-15 09:10:23 UTC", "sightings": 1 }, { "indicator": "https://privateflame.checkstor.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 09:10:10 UTC", "last_seen": "2026-03-15 09:10:10 UTC", "sightings": 1 }, { "indicator": "http://42.227.200.97:47576/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 09:09:20 UTC", "last_seen": "2026-03-15 09:09:20 UTC", "sightings": 1 }, { "indicator": "http://115.58.135.123:34848/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 09:05:22 UTC", "last_seen": "2026-03-15 09:05:22 UTC", "sightings": 1 }, { "indicator": "http://222.138.116.39:36199/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 09:02:20 UTC", "last_seen": "2026-03-15 09:02:20 UTC", "sightings": 1 }, { "indicator": "https://bloomhaul.checkstor.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 09:01:08 UTC", "last_seen": "2026-03-15 09:01:08 UTC", "sightings": 1 }, { "indicator": "http://115.63.15.5:56284/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 08:52:18 UTC", "last_seen": "2026-03-15 08:52:18 UTC", "sightings": 1 }, { "indicator": "http://42.227.200.97:47576/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 08:41:21 UTC", "last_seen": "2026-03-15 08:41:21 UTC", "sightings": 1 }, { "indicator": "http://222.138.116.39:36199/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 08:40:26 UTC", "last_seen": "2026-03-15 08:40:26 UTC", "sightings": 1 }, { "indicator": "http://115.58.135.123:34848/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 08:38:15 UTC", "last_seen": "2026-03-15 08:38:15 UTC", "sightings": 1 }, { "indicator": "https://638490.idealgo.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 08:34:09 UTC", "last_seen": "2026-03-15 08:34:09 UTC", "sightings": 1 }, { "indicator": "http://222.141.233.82:43919/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 08:33:21 UTC", "last_seen": "2026-03-15 08:33:21 UTC", "sightings": 1 }, { "indicator": "http://182.123.208.65:44601/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 08:30:22 UTC", "last_seen": "2026-03-15 08:30:22 UTC", "sightings": 1 }, { "indicator": "http://1.181.226.40:56308/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-15 08:22:31 UTC", "last_seen": "2026-03-15 08:22:31 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.7/files/2043702969/Ln9yol3.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543", "rustystealer" ], "first_seen": "2026-03-15 08:19:09 UTC", "last_seen": "2026-03-15 08:19:09 UTC", "sightings": 1 }, { "indicator": "https://genomecouri.idealgo.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 08:17:12 UTC", "last_seen": "2026-03-15 08:17:12 UTC", "sightings": 1 }, { "indicator": "https://guidecoral.idealgo.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 08:11:07 UTC", "last_seen": "2026-03-15 08:11:07 UTC", "sightings": 1 }, { "indicator": "http://222.140.180.235:49670/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 08:10:29 UTC", "last_seen": "2026-03-15 08:10:29 UTC", "sightings": 1 }, { "indicator": "http://39.187.82.244:35064/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 08:07:22 UTC", "last_seen": "2026-03-15 08:07:22 UTC", "sightings": 1 }, { "indicator": "http://123.12.36.229:54136/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 08:05:21 UTC", "last_seen": "2026-03-15 08:05:21 UTC", "sightings": 1 }, { "indicator": "http://182.123.208.65:44601/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 08:04:19 UTC", "last_seen": "2026-03-15 08:04:19 UTC", "sightings": 1 }, { "indicator": "https://mer-forgeon.idealgo.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 08:04:07 UTC", "last_seen": "2026-03-15 08:04:07 UTC", "sightings": 1 }, { "indicator": "http://117.209.90.123:57542/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 08:00:20 UTC", "last_seen": "2026-03-15 08:00:20 UTC", "sightings": 1 }, { "indicator": "http://221.13.251.187:45463/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 07:59:20 UTC", "last_seen": "2026-03-15 07:59:20 UTC", "sightings": 1 }, { "indicator": "http://110.37.78.200:47188/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 07:58:22 UTC", "last_seen": "2026-03-15 07:58:22 UTC", "sightings": 1 }, { "indicator": "http://110.186.231.59:43361/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-15 07:49:23 UTC", "last_seen": "2026-03-15 07:49:23 UTC", "sightings": 1 }, { "indicator": "http://220.201.18.40:38168/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 07:47:30 UTC", "last_seen": "2026-03-15 07:47:30 UTC", "sightings": 1 }, { "indicator": "http://117.209.82.141:38016/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 07:42:08 UTC", "last_seen": "2026-03-15 07:42:08 UTC", "sightings": 1 }, { "indicator": "http://123.12.36.229:54136/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 07:41:21 UTC", "last_seen": "2026-03-15 07:41:21 UTC", "sightings": 1 }, { "indicator": "http://221.13.251.187:45463/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 07:37:16 UTC", "last_seen": "2026-03-15 07:37:16 UTC", "sightings": 1 }, { "indicator": "http://117.209.90.123:57542/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 07:32:11 UTC", "last_seen": "2026-03-15 07:32:11 UTC", "sightings": 1 }, { "indicator": "http://110.37.78.200:47188/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 07:31:23 UTC", "last_seen": "2026-03-15 07:31:23 UTC", "sightings": 1 }, { "indicator": "http://110.186.231.59:43361/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-15 07:22:12 UTC", "last_seen": "2026-03-15 07:22:12 UTC", "sightings": 1 }, { "indicator": "http://117.209.82.141:38016/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 07:12:26 UTC", "last_seen": "2026-03-15 07:12:26 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.7/files/7362035837/FbbqcXE.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-15 07:11:06 UTC", "last_seen": "2026-03-15 07:11:06 UTC", "sightings": 1 }, { "indicator": "http://123.188.60.20:50438/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 07:09:22 UTC", "last_seen": "2026-03-15 07:09:22 UTC", "sightings": 1 }, { "indicator": "http://60.23.233.53:52596/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 07:00:24 UTC", "last_seen": "2026-03-15 07:00:24 UTC", "sightings": 1 }, { "indicator": "https://bf-chromefdghd.oss-cn-hongkong.aliyuncs.com/bf-chrome-03-12-01.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SilverFox" ], "first_seen": "2026-03-15 06:50:37 UTC", "last_seen": "2026-03-15 06:50:37 UTC", "sightings": 1 }, { "indicator": "https://sgnfyn.oss-cn-shenzhen.aliyuncs.com/googlechr1.18.9.83.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SilverFox" ], "first_seen": "2026-03-15 06:50:36 UTC", "last_seen": "2026-03-15 06:50:36 UTC", "sightings": 1 }, { "indicator": "https://virtual-cdncloud.sbs/api/css.js", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClickFix", "ErrTraffic" ], "first_seen": "2026-03-15 06:50:11 UTC", "last_seen": "2026-03-15 06:50:11 UTC", "sightings": 1 }, { "indicator": "http://cloflart.com/7z.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClickFix", "NetSupport" ], "first_seen": "2026-03-15 06:50:11 UTC", "last_seen": "2026-03-15 06:50:11 UTC", "sightings": 1 }, { "indicator": "http://cloflart.com/7z.dll", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClickFix", "NetSupport" ], "first_seen": "2026-03-15 06:50:11 UTC", "last_seen": "2026-03-15 06:50:11 UTC", "sightings": 1 }, { "indicator": "http://cloflart.com/at.7z", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClickFix", "NetSupport" ], "first_seen": "2026-03-15 06:50:11 UTC", "last_seen": "2026-03-15 06:50:11 UTC", "sightings": 1 }, { "indicator": "http://cloflart.com/lnk.7z", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClickFix", "NetSupport" ], "first_seen": "2026-03-15 06:50:10 UTC", "last_seen": "2026-03-15 06:50:10 UTC", "sightings": 1 }, { "indicator": "https://download.google-chrome.cyou/downloads/chrome.php", "indicator_type": "url", "source": "URLhaus", "tags": [ "SilverFox" ], "first_seen": "2026-03-15 06:50:09 UTC", "last_seen": "2026-03-15 06:50:09 UTC", "sightings": 1 }, { "indicator": "https://longsauce.com/DAv/DEFault/data.LnK", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-15 06:50:08 UTC", "last_seen": "2026-03-15 06:50:08 UTC", "sightings": 1 }, { "indicator": "http://cloflart.com/cf.php", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClickFix", "NetSupport", "powershell" ], "first_seen": "2026-03-15 06:50:08 UTC", "last_seen": "2026-03-15 06:50:08 UTC", "sightings": 1 }, { "indicator": "https://wellnessmedcare.org/buch/Favorites/document.doc.LnK", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-15 06:50:07 UTC", "last_seen": "2026-03-15 06:50:07 UTC", "sightings": 1 }, { "indicator": "https://mytaxclientcopy.com/xlab22.hta", "indicator_type": "url", "source": "URLhaus", "tags": [ "boxter", "hta", "phishing" ], "first_seen": "2026-03-15 06:50:07 UTC", "last_seen": "2026-03-15 06:50:07 UTC", "sightings": 1 }, { "indicator": "https://wellnesscaremed.com/venezia/Favorites/document.doc.LnK", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-15 06:50:07 UTC", "last_seen": "2026-03-15 06:50:07 UTC", "sightings": 1 }, { "indicator": "https://freefoodaid.com/ankara/Favorites/document.doc.LnK", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-15 06:50:07 UTC", "last_seen": "2026-03-15 06:50:07 UTC", "sightings": 1 }, { "indicator": "https://qpiihw67.zipfolder.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 06:49:07 UTC", "last_seen": "2026-03-15 06:49:07 UTC", "sightings": 1 }, { "indicator": "https://hyper-sc4n.zipfolder.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 06:47:08 UTC", "last_seen": "2026-03-15 06:47:08 UTC", "sightings": 1 }, { "indicator": "http://61.53.91.240:42361/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 06:45:23 UTC", "last_seen": "2026-03-15 06:45:23 UTC", "sightings": 1 }, { "indicator": "http://36.158.74.30:38155/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-15 06:45:23 UTC", "last_seen": "2026-03-15 06:45:23 UTC", "sightings": 1 }, { "indicator": "https://main-z7-point.metallocampo.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 06:43:06 UTC", "last_seen": "2026-03-15 06:43:06 UTC", "sightings": 1 }, { "indicator": "http://117.241.61.44:51835/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-15 06:42:18 UTC", "last_seen": "2026-03-15 06:42:18 UTC", "sightings": 1 }, { "indicator": "https://sync-x1-data.metallocampo.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 06:38:10 UTC", "last_seen": "2026-03-15 06:38:10 UTC", "sightings": 1 }, { "indicator": "https://gate-v8-proxy.metallocampo.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 06:33:08 UTC", "last_seen": "2026-03-15 06:33:08 UTC", "sightings": 1 }, { "indicator": "http://123.188.60.20:50438/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 06:28:19 UTC", "last_seen": "2026-03-15 06:28:19 UTC", "sightings": 1 }, { "indicator": "http://60.19.221.36:60080/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 06:27:25 UTC", "last_seen": "2026-03-15 06:27:25 UTC", "sightings": 1 }, { "indicator": "https://link-z2-sat.grandeparole.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 06:22:08 UTC", "last_seen": "2026-03-15 06:22:08 UTC", "sightings": 1 }, { "indicator": "http://61.53.91.240:42361/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 06:21:18 UTC", "last_seen": "2026-03-15 06:21:18 UTC", "sightings": 1 }, { "indicator": "http://36.158.74.30:38155/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-15 06:20:11 UTC", "last_seen": "2026-03-15 06:20:11 UTC", "sightings": 1 }, { "indicator": "http://125.47.194.56:38288/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 06:19:16 UTC", "last_seen": "2026-03-15 06:19:16 UTC", "sightings": 1 }, { "indicator": "http://222.141.82.185:55206/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 06:18:17 UTC", "last_seen": "2026-03-15 06:18:17 UTC", "sightings": 1 }, { "indicator": "http://113.236.113.47:56563/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 06:15:20 UTC", "last_seen": "2026-03-15 06:15:20 UTC", "sightings": 1 }, { "indicator": "https://core-x3-rock.grandeparole.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 06:14:08 UTC", "last_seen": "2026-03-15 06:14:08 UTC", "sightings": 1 }, { "indicator": "https://base-v5-steel.grandeparole.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 06:09:07 UTC", "last_seen": "2026-03-15 06:09:07 UTC", "sightings": 1 }, { "indicator": "http://60.19.221.36:60080/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 06:07:20 UTC", "last_seen": "2026-03-15 06:07:20 UTC", "sightings": 1 }, { "indicator": "https://orbit-90-moon.grandeparole.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 06:03:09 UTC", "last_seen": "2026-03-15 06:03:09 UTC", "sightings": 1 }, { "indicator": "https://space-v7-open.silberfluss.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 05:59:12 UTC", "last_seen": "2026-03-15 05:59:12 UTC", "sightings": 1 }, { "indicator": "http://175.147.194.248:34555/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 05:58:21 UTC", "last_seen": "2026-03-15 05:58:21 UTC", "sightings": 1 }, { "indicator": "http://59.177.98.29:37055/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 05:53:19 UTC", "last_seen": "2026-03-15 05:53:19 UTC", "sightings": 1 }, { "indicator": "http://222.141.82.185:55206/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 05:53:17 UTC", "last_seen": "2026-03-15 05:53:17 UTC", "sightings": 1 }, { "indicator": "https://field-x4-vast.silberfluss.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 05:52:11 UTC", "last_seen": "2026-03-15 05:52:11 UTC", "sightings": 1 }, { "indicator": "http://125.47.194.56:38288/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 05:50:19 UTC", "last_seen": "2026-03-15 05:50:19 UTC", "sightings": 1 }, { "indicator": "http://61.2.159.201:50581/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 05:49:16 UTC", "last_seen": "2026-03-15 05:49:16 UTC", "sightings": 1 }, { "indicator": "http://60.23.233.123:40028/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 05:43:22 UTC", "last_seen": "2026-03-15 05:43:22 UTC", "sightings": 1 }, { "indicator": "https://rim-v9-outer.silberfluss.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 05:43:08 UTC", "last_seen": "2026-03-15 05:43:08 UTC", "sightings": 1 }, { "indicator": "http://113.236.113.47:56563/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 05:41:18 UTC", "last_seen": "2026-03-15 05:41:18 UTC", "sightings": 1 }, { "indicator": "http://123.12.238.172:54953/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 05:40:11 UTC", "last_seen": "2026-03-15 05:40:11 UTC", "sightings": 1 }, { "indicator": "http://115.61.9.48:57243/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 05:39:19 UTC", "last_seen": "2026-03-15 05:39:19 UTC", "sightings": 1 }, { "indicator": "https://sync-z0-vision.altotensione.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 05:39:08 UTC", "last_seen": "2026-03-15 05:39:08 UTC", "sightings": 1 }, { "indicator": "http://117.235.140.192:58805/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 05:35:31 UTC", "last_seen": "2026-03-15 05:35:31 UTC", "sightings": 1 }, { "indicator": "https://point-x2-scan.altotensione.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 05:34:10 UTC", "last_seen": "2026-03-15 05:34:10 UTC", "sightings": 1 }, { "indicator": "http://108.168.0.60:49880/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 05:31:20 UTC", "last_seen": "2026-03-15 05:31:20 UTC", "sightings": 1 }, { "indicator": "https://bridge-v4-light.altotensione.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 05:28:10 UTC", "last_seen": "2026-03-15 05:28:10 UTC", "sightings": 1 }, { "indicator": "http://125.161.142.194:36629/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-15 05:25:19 UTC", "last_seen": "2026-03-15 05:25:19 UTC", "sightings": 1 }, { "indicator": "https://room-51-dark.altotensione.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 05:25:10 UTC", "last_seen": "2026-03-15 05:25:10 UTC", "sightings": 1 }, { "indicator": "http://61.2.159.201:50581/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 05:23:11 UTC", "last_seen": "2026-03-15 05:23:11 UTC", "sightings": 1 }, { "indicator": "http://115.61.9.48:57243/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 05:21:23 UTC", "last_seen": "2026-03-15 05:21:23 UTC", "sightings": 1 }, { "indicator": "https://shell-v7-core.froidelumiere.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 05:10:08 UTC", "last_seen": "2026-03-15 05:10:08 UTC", "sightings": 1 }, { "indicator": "http://123.12.238.172:54953/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 05:08:19 UTC", "last_seen": "2026-03-15 05:08:19 UTC", "sightings": 1 }, { "indicator": "http://117.241.53.119:47293/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 05:04:19 UTC", "last_seen": "2026-03-15 05:04:19 UTC", "sightings": 1 }, { "indicator": "https://trace-44-alpha.froidelumiere.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 04:50:08 UTC", "last_seen": "2026-03-15 04:50:08 UTC", "sightings": 1 }, { "indicator": "http://115.57.163.225:41390/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 04:44:18 UTC", "last_seen": "2026-03-15 04:44:18 UTC", "sightings": 1 }, { "indicator": "https://auth-z9-user.mondofuturo.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 04:44:06 UTC", "last_seen": "2026-03-15 04:44:06 UTC", "sightings": 1 }, { "indicator": "https://vaultx.lol/downloads/launcher.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "zip" ], "first_seen": "2026-03-15 04:39:17 UTC", "last_seen": "2026-03-15 04:39:17 UTC", "sightings": 1 }, { "indicator": "http://117.241.53.119:47293/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 04:38:12 UTC", "last_seen": "2026-03-15 04:38:12 UTC", "sightings": 1 }, { "indicator": "http://110.83.135.207:50260/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-15 04:38:08 UTC", "last_seen": "2026-03-15 04:38:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/WindSkyUnveil39/Warzone-Cheat-2026/releases/download/Latest/WarLauncher.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "pw-2026", "rustystealer", "zip" ], "first_seen": "2026-03-15 04:35:10 UTC", "last_seen": "2026-03-15 04:35:10 UTC", "sightings": 1 }, { "indicator": "https://db-v12-point.mondofuturo.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 04:32:07 UTC", "last_seen": "2026-03-15 04:32:07 UTC", "sightings": 1 }, { "indicator": "http://117.209.7.112:34252/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 04:20:30 UTC", "last_seen": "2026-03-15 04:20:30 UTC", "sightings": 1 }, { "indicator": "https://base-x5-infra.mondofuturo.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 04:20:10 UTC", "last_seen": "2026-03-15 04:20:10 UTC", "sightings": 1 }, { "indicator": "http://182.114.197.17:40698/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 04:17:17 UTC", "last_seen": "2026-03-15 04:17:17 UTC", "sightings": 1 }, { "indicator": "http://110.83.135.207:50260/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-15 04:13:10 UTC", "last_seen": "2026-03-15 04:13:10 UTC", "sightings": 1 }, { "indicator": "http://183.214.149.164:49135/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-15 04:12:18 UTC", "last_seen": "2026-03-15 04:12:18 UTC", "sightings": 1 }, { "indicator": "https://zontiz.com/%D0%92%D0%BE%D0%BEtcit%D1%83%20JEI.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "pw-2026", "zip" ], "first_seen": "2026-03-15 04:12:07 UTC", "last_seen": "2026-03-15 04:12:07 UTC", "sightings": 1 }, { "indicator": "http://182.112.4.89:39907/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 04:11:16 UTC", "last_seen": "2026-03-15 04:11:16 UTC", "sightings": 1 }, { "indicator": "http://182.112.4.89:39907/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 04:10:17 UTC", "last_seen": "2026-03-15 04:10:17 UTC", "sightings": 1 }, { "indicator": "https://rizvexeno.ws/%D0%92ootst%D0%B0%D1%80%D1%80%D0%B5%D0%B3Ul.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "pw-ryos", "zip" ], "first_seen": "2026-03-15 04:09:08 UTC", "last_seen": "2026-03-15 04:09:08 UTC", "sightings": 1 }, { "indicator": "https://net-88-global.mondofuturo.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 04:09:06 UTC", "last_seen": "2026-03-15 04:09:06 UTC", "sightings": 1 }, { "indicator": "http://46.146.238.1:39657/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 04:03:06 UTC", "last_seen": "2026-03-15 04:03:06 UTC", "sightings": 1 }, { "indicator": "http://110.37.61.41:40623/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 04:02:18 UTC", "last_seen": "2026-03-15 04:02:18 UTC", "sightings": 1 }, { "indicator": "http://110.39.235.164:34303/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 04:02:18 UTC", "last_seen": "2026-03-15 04:02:18 UTC", "sightings": 1 }, { "indicator": "https://flow-v3-work.starkewand.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 03:53:05 UTC", "last_seen": "2026-03-15 03:53:05 UTC", "sightings": 1 }, { "indicator": "http://182.114.197.17:40698/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 03:50:29 UTC", "last_seen": "2026-03-15 03:50:29 UTC", "sightings": 1 }, { "indicator": "http://42.87.114.188:51962/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 03:49:22 UTC", "last_seen": "2026-03-15 03:49:22 UTC", "sightings": 1 }, { "indicator": "http://110.39.235.164:34303/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 03:49:20 UTC", "last_seen": "2026-03-15 03:49:20 UTC", "sightings": 1 }, { "indicator": "http://183.214.149.164:49135/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-15 03:49:19 UTC", "last_seen": "2026-03-15 03:49:19 UTC", "sightings": 1 }, { "indicator": "https://hub-x0-local.starkewand.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 03:49:06 UTC", "last_seen": "2026-03-15 03:49:06 UTC", "sightings": 1 }, { "indicator": "http://120.28.169.1:39627/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-15 03:47:24 UTC", "last_seen": "2026-03-15 03:47:24 UTC", "sightings": 1 }, { "indicator": "http://115.57.163.225:41390/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 03:45:26 UTC", "last_seen": "2026-03-15 03:45:26 UTC", "sightings": 1 }, { "indicator": "https://link-v2-power.starkewand.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 03:44:07 UTC", "last_seen": "2026-03-15 03:44:07 UTC", "sightings": 1 }, { "indicator": "http://113.230.54.89:56570/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 03:42:16 UTC", "last_seen": "2026-03-15 03:42:16 UTC", "sightings": 1 }, { "indicator": "https://sys-99-monitor.starkewand.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 03:38:11 UTC", "last_seen": "2026-03-15 03:38:11 UTC", "sightings": 1 }, { "indicator": "http://46.146.238.1:39657/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 03:35:17 UTC", "last_seen": "2026-03-15 03:35:17 UTC", "sightings": 1 }, { "indicator": "http://117.235.225.147:42128/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 03:34:24 UTC", "last_seen": "2026-03-15 03:34:24 UTC", "sightings": 1 }, { "indicator": "https://gate-v9-entry.petitniveaux.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 03:32:06 UTC", "last_seen": "2026-03-15 03:32:06 UTC", "sightings": 1 }, { "indicator": "http://120.37.212.125:52208/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-15 03:27:34 UTC", "last_seen": "2026-03-15 03:27:34 UTC", "sightings": 1 }, { "indicator": "https://dev-x7-host.petitniveaux.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 03:26:08 UTC", "last_seen": "2026-03-15 03:26:08 UTC", "sightings": 1 }, { "indicator": "http://27.37.88.200:39162/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 03:22:35 UTC", "last_seen": "2026-03-15 03:22:35 UTC", "sightings": 1 }, { "indicator": "http://110.36.95.246:45059/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 03:17:21 UTC", "last_seen": "2026-03-15 03:17:21 UTC", "sightings": 1 }, { "indicator": "https://api-v0-remote.petitniveaux.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 03:17:08 UTC", "last_seen": "2026-03-15 03:17:08 UTC", "sightings": 1 }, { "indicator": "http://117.208.244.60:43391/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 03:06:26 UTC", "last_seen": "2026-03-15 03:06:26 UTC", "sightings": 1 }, { "indicator": "http://45.120.55.37:8181/rckklmnop/charliekirk.arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai" ], "first_seen": "2026-03-15 03:02:24 UTC", "last_seen": "2026-03-15 03:02:24 UTC", "sightings": 1 }, { "indicator": "https://cloud-z1-store.petitniveaux.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 02:58:07 UTC", "last_seen": "2026-03-15 02:58:07 UTC", "sightings": 1 }, { "indicator": "http://27.37.88.200:39162/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 02:53:26 UTC", "last_seen": "2026-03-15 02:53:26 UTC", "sightings": 1 }, { "indicator": "http://110.36.95.246:45059/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 02:53:25 UTC", "last_seen": "2026-03-15 02:53:25 UTC", "sightings": 1 }, { "indicator": "http://117.198.22.182:44663/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 02:50:24 UTC", "last_seen": "2026-03-15 02:50:24 UTC", "sightings": 1 }, { "indicator": "https://core-x2-sync.schnellerechner.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 02:50:09 UTC", "last_seen": "2026-03-15 02:50:09 UTC", "sightings": 1 }, { "indicator": "https://web-901-proxy.schnellerechner.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 02:45:10 UTC", "last_seen": "2026-03-15 02:45:10 UTC", "sightings": 1 }, { "indicator": "http://117.208.244.60:43391/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 02:42:33 UTC", "last_seen": "2026-03-15 02:42:33 UTC", "sightings": 1 }, { "indicator": "https://app-v4-data.schnellerechner.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 02:40:09 UTC", "last_seen": "2026-03-15 02:40:09 UTC", "sightings": 1 }, { "indicator": "https://srv-77-meta.schnellerechner.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 02:35:11 UTC", "last_seen": "2026-03-15 02:35:11 UTC", "sightings": 1 }, { "indicator": "https://infra-static-z.vittoriaviva.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 02:28:07 UTC", "last_seen": "2026-03-15 02:28:07 UTC", "sightings": 1 }, { "indicator": "https://dist-v8-cache.vittoriaviva.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 02:23:06 UTC", "last_seen": "2026-03-15 02:23:06 UTC", "sightings": 1 }, { "indicator": "http://123.146.189.28:60941/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-15 02:16:19 UTC", "last_seen": "2026-03-15 02:16:19 UTC", "sightings": 1 }, { "indicator": "http://42.230.30.221:39150/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 02:15:25 UTC", "last_seen": "2026-03-15 02:15:25 UTC", "sightings": 1 }, { "indicator": "http://110.37.66.90:59355/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 02:15:25 UTC", "last_seen": "2026-03-15 02:15:25 UTC", "sightings": 1 }, { "indicator": "https://github.com/KartikRawat0504/crawlbase-cyberweek-deals-2025/raw/refs/heads/main/henequen/deals_cyberweek_crawlbase_v2.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-15 02:13:08 UTC", "last_seen": "2026-03-15 02:13:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/KartikRawat0504/crawlbase-cyberweek-deals-2025/refs/heads/main/henequen/deals_cyberweek_crawlbase_v2.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-15 02:13:07 UTC", "last_seen": "2026-03-15 02:13:07 UTC", "sightings": 1 }, { "indicator": "https://github.com/JohnWiiUfan/free-ip-stresser/raw/refs/heads/main/antirumor/free_stresser_ip_hemiteratics.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-15 02:12:08 UTC", "last_seen": "2026-03-15 02:12:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/tanmoy6787/layer-7-ddos/refs/heads/main/polliwig/ddos-layer-v3.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-15 02:11:08 UTC", "last_seen": "2026-03-15 02:11:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/tanmoy6787/layer-7-ddos/raw/refs/heads/main/polliwig/ddos-layer-v3.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-15 02:11:07 UTC", "last_seen": "2026-03-15 02:11:07 UTC", "sightings": 1 }, { "indicator": "https://github.com/Dhruv171711/Vehicle-Report-CAPTCHA-Bypasser/raw/refs/heads/main/irresponsible/CAPTCH_Bypasser_Report_Vehicle_hastati.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-15 02:10:09 UTC", "last_seen": "2026-03-15 02:10:09 UTC", "sightings": 1 }, { "indicator": "https://sync-01-edge.vittoriaviva.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 02:10:09 UTC", "last_seen": "2026-03-15 02:10:09 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Dhruv171711/Vehicle-Report-CAPTCHA-Bypasser/refs/heads/main/irresponsible/CAPTCH_Bypasser_Report_Vehicle_hastati.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-15 02:10:09 UTC", "last_seen": "2026-03-15 02:10:09 UTC", "sightings": 1 }, { "indicator": "http://123.146.189.28:60941/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-15 01:58:32 UTC", "last_seen": "2026-03-15 01:58:32 UTC", "sightings": 1 }, { "indicator": "https://node-b92-auth.vittoriaviva.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 01:56:07 UTC", "last_seen": "2026-03-15 01:56:07 UTC", "sightings": 1 }, { "indicator": "http://117.209.240.47:50453/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 01:53:20 UTC", "last_seen": "2026-03-15 01:53:20 UTC", "sightings": 1 }, { "indicator": "http://110.37.66.90:59355/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 01:52:14 UTC", "last_seen": "2026-03-15 01:52:14 UTC", "sightings": 1 }, { "indicator": "https://main-point-v.silberstrom.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 01:48:07 UTC", "last_seen": "2026-03-15 01:48:07 UTC", "sightings": 1 }, { "indicator": "http://42.230.30.221:39150/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 01:45:11 UTC", "last_seen": "2026-03-15 01:45:11 UTC", "sightings": 1 }, { "indicator": "https://data-sync-01.silberstrom.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 01:41:08 UTC", "last_seen": "2026-03-15 01:41:08 UTC", "sightings": 1 }, { "indicator": "http://123.11.14.145:38005/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 01:32:18 UTC", "last_seen": "2026-03-15 01:32:18 UTC", "sightings": 1 }, { "indicator": "http://115.51.242.112:38512/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 01:29:15 UTC", "last_seen": "2026-03-15 01:29:15 UTC", "sightings": 1 }, { "indicator": "https://gate-proxy-x.silberstrom.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 01:29:08 UTC", "last_seen": "2026-03-15 01:29:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/Maddouri-Ahmed/XEvil-Captcha-Solver/raw/refs/heads/main/pariahship/Solver-X-Evil-Captcha-1.4.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-15 01:22:06 UTC", "last_seen": "2026-03-15 01:22:06 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Maddouri-Ahmed/XEvil-Captcha-Solver/refs/heads/main/pariahship/Solver-X-Evil-Captcha-1.4.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-15 01:22:06 UTC", "last_seen": "2026-03-15 01:22:06 UTC", "sightings": 1 }, { "indicator": "https://github.com/ahmadfatnanali/Captcha-Solver-CNN-Keras-Tensorflow/raw/refs/heads/main/Chrissie/CN-Tensorflow-Captcha-Solver-Keras-2.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-15 01:22:05 UTC", "last_seen": "2026-03-15 01:22:05 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/ahmadfatnanali/Captcha-Solver-CNN-Keras-Tensorflow/refs/heads/main/Chrissie/CN-Tensorflow-Captcha-Solver-Keras-2.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-15 01:21:11 UTC", "last_seen": "2026-03-15 01:21:11 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/ahmadfatnanali/Captcha-Solver-CNN-Keras-Tensorflow/refs/heads/main/auric/Captcha-Solver-CNN-Keras-Tensorflow.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-15 01:21:07 UTC", "last_seen": "2026-03-15 01:21:07 UTC", "sightings": 1 }, { "indicator": "https://github.com/ahmadfatnanali/Captcha-Solver-CNN-Keras-Tensorflow/raw/refs/heads/main/auric/Captcha-Solver-CNN-Keras-Tensorflow.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-15 01:21:07 UTC", "last_seen": "2026-03-15 01:21:07 UTC", "sightings": 1 }, { "indicator": "http://123.11.14.145:38005/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 01:20:19 UTC", "last_seen": "2026-03-15 01:20:19 UTC", "sightings": 1 }, { "indicator": "https://github.com/HRZht/Bitquant-Auto-Bot/raw/refs/heads/main/Florideae/Auto_Bot_Bitquant_v3.9-alpha.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-15 01:20:12 UTC", "last_seen": "2026-03-15 01:20:12 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/HRZht/Bitquant-Auto-Bot/refs/heads/main/Florideae/Auto_Bot_Bitquant_v3.9-alpha.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-15 01:20:07 UTC", "last_seen": "2026-03-15 01:20:07 UTC", "sightings": 1 }, { "indicator": "https://github.com/nhan571/btk-sorgu/raw/refs/heads/main/Nummulites/sorgu_btk_v1.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-15 01:19:11 UTC", "last_seen": "2026-03-15 01:19:11 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/nhan571/btk-sorgu/refs/heads/main/Nummulites/sorgu_btk_v1.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-15 01:19:07 UTC", "last_seen": "2026-03-15 01:19:07 UTC", "sightings": 1 }, { "indicator": "http://221.15.6.92:37013/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 01:17:16 UTC", "last_seen": "2026-03-15 01:17:16 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/FarofeiroBR/pydoll-capsolver/refs/heads/main/gobonated/capsolver-pydoll-2.5-alpha.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-15 01:17:07 UTC", "last_seen": "2026-03-15 01:17:07 UTC", "sightings": 1 }, { "indicator": "https://github.com/FarofeiroBR/pydoll-capsolver/raw/refs/heads/main/gobonated/capsolver-pydoll-2.5-alpha.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-15 01:17:06 UTC", "last_seen": "2026-03-15 01:17:06 UTC", "sightings": 1 }, { "indicator": "http://175.31.170.117:48057/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-15 01:16:18 UTC", "last_seen": "2026-03-15 01:16:18 UTC", "sightings": 1 }, { "indicator": "http://110.37.55.92:32810/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 01:16:16 UTC", "last_seen": "2026-03-15 01:16:16 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/rohit7872/agent-captcha/refs/heads/master/app/src/main/res/values-night/captcha-agent-v2.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-15 01:16:07 UTC", "last_seen": "2026-03-15 01:16:07 UTC", "sightings": 1 }, { "indicator": "https://github.com/rohit7872/agent-captcha/raw/refs/heads/master/app/src/main/res/values-night/captcha-agent-v2.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-15 01:16:07 UTC", "last_seen": "2026-03-15 01:16:07 UTC", "sightings": 1 }, { "indicator": "http://27.202.191.50:56824/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 01:15:16 UTC", "last_seen": "2026-03-15 01:15:16 UTC", "sightings": 1 }, { "indicator": "http://115.58.91.169:33968/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 01:14:08 UTC", "last_seen": "2026-03-15 01:14:08 UTC", "sightings": 1 }, { "indicator": "https://infra-web-v2.silberstrom.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 01:03:07 UTC", "last_seen": "2026-03-15 01:03:07 UTC", "sightings": 1 }, { "indicator": "http://221.15.6.92:37013/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 00:59:17 UTC", "last_seen": "2026-03-15 00:59:17 UTC", "sightings": 1 }, { "indicator": "http://110.37.115.21:37870/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 00:59:16 UTC", "last_seen": "2026-03-15 00:59:16 UTC", "sightings": 1 }, { "indicator": "https://sat-uplink-0.vitaserena.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 00:56:05 UTC", "last_seen": "2026-03-15 00:56:05 UTC", "sightings": 1 }, { "indicator": "http://139.218.43.94:34571/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-15 00:53:09 UTC", "last_seen": "2026-03-15 00:53:09 UTC", "sightings": 1 }, { "indicator": "http://27.202.191.50:56824/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 00:52:23 UTC", "last_seen": "2026-03-15 00:52:23 UTC", "sightings": 1 }, { "indicator": "http://115.48.161.210:38333/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 00:51:10 UTC", "last_seen": "2026-03-15 00:51:10 UTC", "sightings": 1 }, { "indicator": "http://175.31.170.117:48057/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-15 00:51:09 UTC", "last_seen": "2026-03-15 00:51:09 UTC", "sightings": 1 }, { "indicator": "http://115.48.161.210:38333/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 00:51:09 UTC", "last_seen": "2026-03-15 00:51:09 UTC", "sightings": 1 }, { "indicator": "https://rock-core-z4.vitaserena.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 00:51:06 UTC", "last_seen": "2026-03-15 00:51:06 UTC", "sightings": 1 }, { "indicator": "https://steel-base-x.vitaserena.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 00:45:07 UTC", "last_seen": "2026-03-15 00:45:07 UTC", "sightings": 1 }, { "indicator": "https://moon-orbit-v1.vitaserena.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 00:42:06 UTC", "last_seen": "2026-03-15 00:42:06 UTC", "sightings": 1 }, { "indicator": "http://110.37.106.54:50182/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 00:41:06 UTC", "last_seen": "2026-03-15 00:41:06 UTC", "sightings": 1 }, { "indicator": "https://open-space-z.espacesombre.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 00:37:07 UTC", "last_seen": "2026-03-15 00:37:07 UTC", "sightings": 1 }, { "indicator": "http://110.37.115.21:37870/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 00:36:19 UTC", "last_seen": "2026-03-15 00:36:19 UTC", "sightings": 1 }, { "indicator": "http://219.155.194.54:43638/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 00:29:16 UTC", "last_seen": "2026-03-15 00:29:16 UTC", "sightings": 1 }, { "indicator": "https://vast-field-1.espacesombre.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 00:29:06 UTC", "last_seen": "2026-03-15 00:29:06 UTC", "sightings": 1 }, { "indicator": "http://120.61.255.229:46929/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 00:27:28 UTC", "last_seen": "2026-03-15 00:27:28 UTC", "sightings": 1 }, { "indicator": "http://139.218.43.94:34571/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-15 00:27:20 UTC", "last_seen": "2026-03-15 00:27:20 UTC", "sightings": 1 }, { "indicator": "http://110.36.95.252:51310/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 00:21:18 UTC", "last_seen": "2026-03-15 00:21:18 UTC", "sightings": 1 }, { "indicator": "http://110.36.95.252:51310/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 00:20:16 UTC", "last_seen": "2026-03-15 00:20:16 UTC", "sightings": 1 }, { "indicator": "http://117.247.210.196:56555/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 00:19:20 UTC", "last_seen": "2026-03-15 00:19:20 UTC", "sightings": 1 }, { "indicator": "https://area-zone-v3.espacesombre.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 00:17:06 UTC", "last_seen": "2026-03-15 00:17:06 UTC", "sightings": 1 }, { "indicator": "https://outer-rim-09.espacesombre.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 00:13:08 UTC", "last_seen": "2026-03-15 00:13:08 UTC", "sightings": 1 }, { "indicator": "https://vision-sync-v.kaltemech.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 00:09:06 UTC", "last_seen": "2026-03-15 00:09:06 UTC", "sightings": 1 }, { "indicator": "http://115.49.25.47:48470/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-15 00:04:20 UTC", "last_seen": "2026-03-15 00:04:20 UTC", "sightings": 1 }, { "indicator": "https://scan-point-2.kaltemech.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-15 00:04:06 UTC", "last_seen": "2026-03-15 00:04:06 UTC", "sightings": 1 }, { "indicator": "http://222.127.71.141:33416/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-15 00:02:30 UTC", "last_seen": "2026-03-15 00:02:30 UTC", "sightings": 1 }, { "indicator": "http://110.38.220.112:55041/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-15 00:01:15 UTC", "last_seen": "2026-03-15 00:01:15 UTC", "sightings": 1 }, { "indicator": "https://light-bridge-x.kaltemech.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 23:59:06 UTC", "last_seen": "2026-03-14 23:59:06 UTC", "sightings": 1 }, { "indicator": "http://115.54.96.14:34807/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 23:57:18 UTC", "last_seen": "2026-03-14 23:57:18 UTC", "sightings": 1 }, { "indicator": "http://110.37.96.89:39259/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 23:56:29 UTC", "last_seen": "2026-03-14 23:56:29 UTC", "sightings": 1 }, { "indicator": "https://dark-room-v5.kaltemech.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 23:56:08 UTC", "last_seen": "2026-03-14 23:56:08 UTC", "sightings": 1 }, { "indicator": "http://110.37.96.89:39259/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 23:55:25 UTC", "last_seen": "2026-03-14 23:55:25 UTC", "sightings": 1 }, { "indicator": "https://rizvexeno.ws/%D0%92ootsta%D1%80%D1%80%D0%B5%D0%B3%D1%85UI.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "pw-ryos", "zip" ], "first_seen": "2026-03-14 23:50:08 UTC", "last_seen": "2026-03-14 23:50:08 UTC", "sightings": 1 }, { "indicator": "http://110.37.48.94:35988/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 23:49:09 UTC", "last_seen": "2026-03-14 23:49:09 UTC", "sightings": 1 }, { "indicator": "https://ghost-node-0.fiumeveloce.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 23:48:08 UTC", "last_seen": "2026-03-14 23:48:08 UTC", "sightings": 1 }, { "indicator": "http://113.221.98.242:34920/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-14 23:42:09 UTC", "last_seen": "2026-03-14 23:42:09 UTC", "sightings": 1 }, { "indicator": "https://user-auth-x3.fiumeveloce.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 23:42:07 UTC", "last_seen": "2026-03-14 23:42:07 UTC", "sightings": 1 }, { "indicator": "http://222.127.71.141:33416/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-14 23:37:21 UTC", "last_seen": "2026-03-14 23:37:21 UTC", "sightings": 1 }, { "indicator": "http://115.54.96.14:34807/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 23:36:21 UTC", "last_seen": "2026-03-14 23:36:21 UTC", "sightings": 1 }, { "indicator": "http://115.49.25.47:48470/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 23:36:20 UTC", "last_seen": "2026-03-14 23:36:20 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.7/files/8530419136/wt3Pima.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-03-14 23:36:10 UTC", "last_seen": "2026-03-14 23:36:10 UTC", "sightings": 1 }, { "indicator": "https://core-shell-z8.fiumeveloce.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 23:36:07 UTC", "last_seen": "2026-03-14 23:36:07 UTC", "sightings": 1 }, { "indicator": "http://59.91.250.90:46175/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 23:27:21 UTC", "last_seen": "2026-03-14 23:27:21 UTC", "sightings": 1 }, { "indicator": "http://182.127.40.180:41670/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 23:26:19 UTC", "last_seen": "2026-03-14 23:26:19 UTC", "sightings": 1 }, { "indicator": "https://alpha-trace-v.fiumeveloce.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 23:24:10 UTC", "last_seen": "2026-03-14 23:24:10 UTC", "sightings": 1 }, { "indicator": "http://110.37.48.94:35988/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 23:23:19 UTC", "last_seen": "2026-03-14 23:23:19 UTC", "sightings": 1 }, { "indicator": "https://point-entry-4.grandestat.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 23:22:07 UTC", "last_seen": "2026-03-14 23:22:07 UTC", "sightings": 1 }, { "indicator": "http://110.38.220.112:55041/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-14 23:17:18 UTC", "last_seen": "2026-03-14 23:17:18 UTC", "sightings": 1 }, { "indicator": "https://data-base-v5.grandestat.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 23:16:08 UTC", "last_seen": "2026-03-14 23:16:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Shon1998/9863/refs/heads/main/6598/36.txt", "indicator_type": "url", "source": "URLhaus", "tags": [ "lua", "SmartLoader" ], "first_seen": "2026-03-14 23:16:08 UTC", "last_seen": "2026-03-14 23:16:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/Shon1998/9863/raw/refs/heads/main/6598/36.txt", "indicator_type": "url", "source": "URLhaus", "tags": [ "lua", "SmartLoader" ], "first_seen": "2026-03-14 23:16:08 UTC", "last_seen": "2026-03-14 23:16:08 UTC", "sightings": 1 }, { "indicator": "http://113.221.98.242:34920/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-14 23:15:14 UTC", "last_seen": "2026-03-14 23:15:14 UTC", "sightings": 1 }, { "indicator": "http://120.37.212.125:52208/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-14 23:13:19 UTC", "last_seen": "2026-03-14 23:13:19 UTC", "sightings": 1 }, { "indicator": "https://base-infra-99.grandestat.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 23:12:08 UTC", "last_seen": "2026-03-14 23:12:08 UTC", "sightings": 1 }, { "indicator": "https://global-net-v1.grandestat.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 23:08:09 UTC", "last_seen": "2026-03-14 23:08:09 UTC", "sightings": 1 }, { "indicator": "http://59.91.250.90:46175/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 23:07:09 UTC", "last_seen": "2026-03-14 23:07:09 UTC", "sightings": 1 }, { "indicator": "http://103.164.128.162:43453/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 23:07:09 UTC", "last_seen": "2026-03-14 23:07:09 UTC", "sightings": 1 }, { "indicator": "http://175.148.159.4:49295/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 23:05:21 UTC", "last_seen": "2026-03-14 23:05:21 UTC", "sightings": 1 }, { "indicator": "http://182.127.40.180:41670/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 23:01:12 UTC", "last_seen": "2026-03-14 23:01:12 UTC", "sightings": 1 }, { "indicator": "https://local-hub-x9.mondolibre.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 22:57:07 UTC", "last_seen": "2026-03-14 22:57:07 UTC", "sightings": 1 }, { "indicator": "https://staff-portal-1.mondolibre.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 22:52:08 UTC", "last_seen": "2026-03-14 22:52:08 UTC", "sightings": 1 }, { "indicator": "http://119.186.141.211:39086/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 22:50:17 UTC", "last_seen": "2026-03-14 22:50:17 UTC", "sightings": 1 }, { "indicator": "http://42.239.188.206:49017/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 22:49:17 UTC", "last_seen": "2026-03-14 22:49:17 UTC", "sightings": 1 }, { "indicator": "http://42.239.188.206:49017/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 22:45:10 UTC", "last_seen": "2026-03-14 22:45:10 UTC", "sightings": 1 }, { "indicator": "http://58.255.45.207:42841/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 22:40:16 UTC", "last_seen": "2026-03-14 22:40:16 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.7/files/8749876778/sK5aAVe.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-14 22:39:14 UTC", "last_seen": "2026-03-14 22:39:14 UTC", "sightings": 1 }, { "indicator": "https://work-flow-v0.mondolibre.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 22:39:13 UTC", "last_seen": "2026-03-14 22:39:13 UTC", "sightings": 1 }, { "indicator": "http://110.37.39.88:55434/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-14 22:35:11 UTC", "last_seen": "2026-03-14 22:35:11 UTC", "sightings": 1 }, { "indicator": "http://123.11.77.92:34669/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 22:33:18 UTC", "last_seen": "2026-03-14 22:33:18 UTC", "sightings": 1 }, { "indicator": "http://42.235.7.78:51740/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 22:32:17 UTC", "last_seen": "2026-03-14 22:32:17 UTC", "sightings": 1 }, { "indicator": "https://power-link-z5.mondolibre.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 22:30:08 UTC", "last_seen": "2026-03-14 22:30:08 UTC", "sightings": 1 }, { "indicator": "http://58.255.45.207:42841/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 22:18:24 UTC", "last_seen": "2026-03-14 22:18:24 UTC", "sightings": 1 }, { "indicator": "http://110.37.44.250:55807/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-14 22:17:08 UTC", "last_seen": "2026-03-14 22:17:08 UTC", "sightings": 1 }, { "indicator": "http://110.37.28.65:59519/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 22:13:07 UTC", "last_seen": "2026-03-14 22:13:07 UTC", "sightings": 1 }, { "indicator": "http://119.179.8.199:18421/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 22:13:07 UTC", "last_seen": "2026-03-14 22:13:07 UTC", "sightings": 1 }, { "indicator": "http://115.57.232.2:33691/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 22:13:07 UTC", "last_seen": "2026-03-14 22:13:07 UTC", "sightings": 1 }, { "indicator": "http://42.235.7.78:51740/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 22:12:17 UTC", "last_seen": "2026-03-14 22:12:17 UTC", "sightings": 1 }, { "indicator": "https://backend-node-v.stillewasser.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 22:10:09 UTC", "last_seen": "2026-03-14 22:10:09 UTC", "sightings": 1 }, { "indicator": "http://110.37.39.88:55434/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-14 22:05:09 UTC", "last_seen": "2026-03-14 22:05:09 UTC", "sightings": 1 }, { "indicator": "http://222.141.43.157:40061/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 22:00:12 UTC", "last_seen": "2026-03-14 22:00:12 UTC", "sightings": 1 }, { "indicator": "https://app-data-hub.fortezzarossa.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 22:00:10 UTC", "last_seen": "2026-03-14 22:00:10 UTC", "sightings": 1 }, { "indicator": "http://222.137.144.93:41198/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 21:57:08 UTC", "last_seen": "2026-03-14 21:57:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/abdullah7cv/Axios-with-proxies/raw/refs/heads/main/opalish/proxies-Axios-with-2.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 21:57:07 UTC", "last_seen": "2026-03-14 21:57:07 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/abdullah7cv/abdullah7cv.github.io/refs/heads/main/pneumoperitoneum/io_github_abdullah_cv_v3.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 21:57:07 UTC", "last_seen": "2026-03-14 21:57:07 UTC", "sightings": 1 }, { "indicator": "https://github.com/abdullah7cv/abdullah7cv.github.io/raw/refs/heads/main/pneumoperitoneum/io_github_abdullah_cv_v3.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 21:57:07 UTC", "last_seen": "2026-03-14 21:57:07 UTC", "sightings": 1 }, { "indicator": "https://web-proxy-alt.fortezzarossa.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 21:56:07 UTC", "last_seen": "2026-03-14 21:56:07 UTC", "sightings": 1 }, { "indicator": "http://110.37.44.250:55807/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-14 21:55:10 UTC", "last_seen": "2026-03-14 21:55:10 UTC", "sightings": 1 }, { "indicator": "http://119.179.8.199:18421/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 21:52:23 UTC", "last_seen": "2026-03-14 21:52:23 UTC", "sightings": 1 }, { "indicator": "http://115.55.244.62:55261/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 21:49:23 UTC", "last_seen": "2026-03-14 21:49:23 UTC", "sightings": 1 }, { "indicator": "http://123.4.180.185:53655/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 21:48:17 UTC", "last_seen": "2026-03-14 21:48:17 UTC", "sightings": 1 }, { "indicator": "https://srv-cluster-01.fortezzarossa.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 21:48:11 UTC", "last_seen": "2026-03-14 21:48:11 UTC", "sightings": 1 }, { "indicator": "https://zontiz.com/%D0%92%D0%BE%D0%BEtst%D0%B0z%20v4.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "pw-2026", "zip" ], "first_seen": "2026-03-14 21:47:09 UTC", "last_seen": "2026-03-14 21:47:09 UTC", "sightings": 1 }, { "indicator": "https://cloud-drive-v7.fortezzarossa.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 21:44:08 UTC", "last_seen": "2026-03-14 21:44:08 UTC", "sightings": 1 }, { "indicator": "https://metrics-sync-1.petitnuage.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 21:41:11 UTC", "last_seen": "2026-03-14 21:41:11 UTC", "sightings": 1 }, { "indicator": "https://github.com/rodroguezjuliocesar41-creator/GenerativeAI-Foundations/raw/refs/heads/master/var_transformation/Foundations-A-Generative-2.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 21:39:08 UTC", "last_seen": "2026-03-14 21:39:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/rodroguezjuliocesar41-creator/GenerativeAI-Foundations/refs/heads/master/var_transformation/Foundations-A-Generative-2.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 21:39:07 UTC", "last_seen": "2026-03-14 21:39:07 UTC", "sightings": 1 }, { "indicator": "https://kl0ub3sc.goldbox.digital/?=check&&actmn=etWvwISQlinByRGD", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-14 21:37:17 UTC", "last_seen": "2026-03-14 21:37:17 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Maamitiana/cybersec-projects/refs/heads/main/Projects/Offensive/Wireless%20protocol%20fuzzing/projects-cybersec-2.6.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 21:37:07 UTC", "last_seen": "2026-03-14 21:37:07 UTC", "sightings": 1 }, { "indicator": "https://github.com/Maamitiana/cybersec-projects/raw/refs/heads/main/Projects/Offensive/Wireless%20protocol%20fuzzing/projects-cybersec-2.6.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 21:37:07 UTC", "last_seen": "2026-03-14 21:37:07 UTC", "sightings": 1 }, { "indicator": "https://api-v3-storage.petitnuage.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 21:33:08 UTC", "last_seen": "2026-03-14 21:33:08 UTC", "sightings": 1 }, { "indicator": "http://115.53.216.150:35500/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 21:32:21 UTC", "last_seen": "2026-03-14 21:32:21 UTC", "sightings": 1 }, { "indicator": "https://github.com/GabrielW13Nai/phase-0-completing-assignments/raw/refs/heads/master/test/assignments_phase_completing_v3.7.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 21:32:09 UTC", "last_seen": "2026-03-14 21:32:09 UTC", "sightings": 1 }, { "indicator": "https://github.com/GabrielW13Nai/phase-0-html-experiencing-html-lab/raw/refs/heads/master/.github/experiencing_phase_lab_html_v2.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 21:32:09 UTC", "last_seen": "2026-03-14 21:32:09 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/GabrielW13Nai/LocalShop/refs/heads/main/node_modules/blob/Local-Shop-v3.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 21:32:09 UTC", "last_seen": "2026-03-14 21:32:09 UTC", "sightings": 1 }, { "indicator": "https://github.com/GabrielW13Nai/LocalShop/raw/refs/heads/main/node_modules/blob/Local-Shop-v3.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 21:32:08 UTC", "last_seen": "2026-03-14 21:32:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/GabrielW13Nai/phase-0-html-experiencing-html-lab/refs/heads/master/.github/experiencing_phase_lab_html_v2.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 21:32:07 UTC", "last_seen": "2026-03-14 21:32:07 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/GabrielW13Nai/phase-0-completing-assignments/refs/heads/master/test/assignments_phase_completing_v3.7.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 21:32:07 UTC", "last_seen": "2026-03-14 21:32:07 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/GabrielW13Nai/phase-0-git-basics-lab/refs/heads/master/.github/basics_phase_lab_git_v3.3-alpha.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 21:32:07 UTC", "last_seen": "2026-03-14 21:32:07 UTC", "sightings": 1 }, { "indicator": "https://github.com/GabrielW13Nai/phase-0-git-basics-lab/raw/refs/heads/master/.github/basics_phase_lab_git_v3.3-alpha.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 21:32:07 UTC", "last_seen": "2026-03-14 21:32:07 UTC", "sightings": 1 }, { "indicator": "http://115.57.232.2:33691/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 21:31:29 UTC", "last_seen": "2026-03-14 21:31:29 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/GabrielW13Nai/evilbot/refs/heads/main/js/Software-v2.0.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 21:28:07 UTC", "last_seen": "2026-03-14 21:28:07 UTC", "sightings": 1 }, { "indicator": "https://github.com/GabrielW13Nai/evilbot/raw/refs/heads/main/js/Software-v2.0.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 21:28:07 UTC", "last_seen": "2026-03-14 21:28:07 UTC", "sightings": 1 }, { "indicator": "https://cdn-static-v5.petitnuage.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 21:27:10 UTC", "last_seen": "2026-03-14 21:27:10 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/KennnOnnb/Universal-Bot/refs/heads/main/bot/modules/downloader/sources/Universal_Bot_v1.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 21:27:09 UTC", "last_seen": "2026-03-14 21:27:09 UTC", "sightings": 1 }, { "indicator": "https://github.com/KennnOnnb/Universal-Bot/raw/refs/heads/main/bot/modules/downloader/sources/Universal_Bot_v1.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 21:27:09 UTC", "last_seen": "2026-03-14 21:27:09 UTC", "sightings": 1 }, { "indicator": "http://main-point-1.metallocielo.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 21:27:09 UTC", "last_seen": "2026-03-14 21:27:09 UTC", "sightings": 1 }, { "indicator": "http://123.189.138.204:53128/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 21:25:39 UTC", "last_seen": "2026-03-14 21:25:39 UTC", "sightings": 1 }, { "indicator": "http://115.55.244.62:55261/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 21:24:18 UTC", "last_seen": "2026-03-14 21:24:18 UTC", "sightings": 1 }, { "indicator": "http://222.141.43.157:40061/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 21:24:17 UTC", "last_seen": "2026-03-14 21:24:17 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Rxp-ture/Video-Materials-AutoGEN-Workstation/refs/heads/main/asr/runtime/Lib/site-packages/qframelesswindow/__pycache__/Auto_Workstation_Video_GE_Materials_1.9.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 21:24:08 UTC", "last_seen": "2026-03-14 21:24:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/Rxp-ture/Video-Materials-AutoGEN-Workstation/raw/refs/heads/main/asr/runtime/Lib/site-packages/qframelesswindow/__pycache__/Auto_Workstation_Video_GE_Materials_1.9.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 21:24:08 UTC", "last_seen": "2026-03-14 21:24:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/aned-300/Huddle01-Testnet-Airdrop-bot/refs/heads/main/pariahdom/Airdrop_Testnet_Huddle_bot_v3.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 21:23:08 UTC", "last_seen": "2026-03-14 21:23:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/aned-300/Huddle01-Testnet-Airdrop-bot/raw/refs/heads/main/pariahdom/Airdrop_Testnet_Huddle_bot_v3.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 21:23:08 UTC", "last_seen": "2026-03-14 21:23:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/nguyenducduy-dev/Tank-Game-Script/refs/heads/main/Khasa/Script_Tank_Game_v3.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 21:22:09 UTC", "last_seen": "2026-03-14 21:22:09 UTC", "sightings": 1 }, { "indicator": "https://github.com/nguyenducduy-dev/Tank-Game-Script/raw/refs/heads/main/Khasa/Script_Tank_Game_v3.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 21:22:09 UTC", "last_seen": "2026-03-14 21:22:09 UTC", "sightings": 1 }, { "indicator": "http://110.37.95.41:35611/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 21:21:18 UTC", "last_seen": "2026-03-14 21:21:18 UTC", "sightings": 1 }, { "indicator": "https://github.com/Jackson-492/JRVS/raw/refs/heads/main/issues/Software-1.2-beta.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 21:21:08 UTC", "last_seen": "2026-03-14 21:21:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Jackson-492/JRVS/refs/heads/main/issues/Software-1.2-beta.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 21:21:08 UTC", "last_seen": "2026-03-14 21:21:08 UTC", "sightings": 1 }, { "indicator": "https://data-sync-x9.metallocielo.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 21:21:08 UTC", "last_seen": "2026-03-14 21:21:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/nubipxr/comfy_launch/raw/refs/heads/master/unsyndicated/comfy-launch-ungarrisoned.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 21:20:09 UTC", "last_seen": "2026-03-14 21:20:09 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/nubipxr/comfy_launch/refs/heads/master/unsyndicated/comfy-launch-ungarrisoned.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 21:20:08 UTC", "last_seen": "2026-03-14 21:20:08 UTC", "sightings": 1 }, { "indicator": "http://196.188.80.240:42110/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-14 21:19:21 UTC", "last_seen": "2026-03-14 21:19:21 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/lenteragung/MPX-AirBless/refs/heads/main/SUBless/Air_Bless_MP_v2.4.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 21:19:07 UTC", "last_seen": "2026-03-14 21:19:07 UTC", "sightings": 1 }, { "indicator": "https://github.com/lenteragung/MPX-AirBless/raw/refs/heads/main/SUBless/Air_Bless_MP_v2.4.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 21:19:07 UTC", "last_seen": "2026-03-14 21:19:07 UTC", "sightings": 1 }, { "indicator": "https://github.com/ramonmontenegro/nikki-ai-cli-assistent/raw/refs/heads/main/roles/cli_ai_nikki_assistent_Alcae.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 21:18:08 UTC", "last_seen": "2026-03-14 21:18:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/ramonmontenegro/nikki-ai-cli-assistent/refs/heads/main/roles/cli_ai_nikki_assistent_Alcae.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 21:18:08 UTC", "last_seen": "2026-03-14 21:18:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/kahoikreations/profile_info/raw/refs/heads/main/components/info-profile-v2.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 21:17:06 UTC", "last_seen": "2026-03-14 21:17:06 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/kahoikreations/profile_info/refs/heads/main/components/info-profile-v2.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 21:17:06 UTC", "last_seen": "2026-03-14 21:17:06 UTC", "sightings": 1 }, { "indicator": "http://110.37.95.41:35611/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 21:16:20 UTC", "last_seen": "2026-03-14 21:16:20 UTC", "sightings": 1 }, { "indicator": "https://gate-proxy-z.metallocielo.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 21:15:11 UTC", "last_seen": "2026-03-14 21:15:11 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/newbiecs50JV/fal-wan26-video-factory/refs/heads/main/templates/video_fal_factory_wan_1.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 21:15:11 UTC", "last_seen": "2026-03-14 21:15:11 UTC", "sightings": 1 }, { "indicator": "https://github.com/newbiecs50JV/fal-wan26-video-factory/raw/refs/heads/main/templates/video_fal_factory_wan_1.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 21:15:10 UTC", "last_seen": "2026-03-14 21:15:10 UTC", "sightings": 1 }, { "indicator": "https://infra-web-01.metallocielo.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 21:06:07 UTC", "last_seen": "2026-03-14 21:06:07 UTC", "sightings": 1 }, { "indicator": "http://115.53.216.150:35500/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 21:05:25 UTC", "last_seen": "2026-03-14 21:05:25 UTC", "sightings": 1 }, { "indicator": "https://sat-uplink-5.grandevision.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 21:03:09 UTC", "last_seen": "2026-03-14 21:03:09 UTC", "sightings": 1 }, { "indicator": "https://rock-core-v2.grandevision.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 20:53:07 UTC", "last_seen": "2026-03-14 20:53:07 UTC", "sightings": 1 }, { "indicator": "http://120.84.215.13:48403/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 20:51:20 UTC", "last_seen": "2026-03-14 20:51:20 UTC", "sightings": 1 }, { "indicator": "http://117.220.147.30:40709/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 20:51:19 UTC", "last_seen": "2026-03-14 20:51:19 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/EZdanshak/ezdanshak.github.io/refs/heads/main/bizarreness/github_ezdanshak_io_1.9.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 20:47:12 UTC", "last_seen": "2026-03-14 20:47:12 UTC", "sightings": 1 }, { "indicator": "https://github.com/EZdanshak/ezdanshak.github.io/raw/refs/heads/main/bizarreness/github_ezdanshak_io_1.9.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 20:47:08 UTC", "last_seen": "2026-03-14 20:47:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/DjordjeDacovic/TikTok-Report-Bot/refs/heads/main/old/v2/Tik-Report-Tok-Bot-tarantulary.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 20:45:11 UTC", "last_seen": "2026-03-14 20:45:11 UTC", "sightings": 1 }, { "indicator": "https://github.com/DjordjeDacovic/TikTok-Report-Bot/raw/refs/heads/main/old/v2/Tik-Report-Tok-Bot-tarantulary.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 20:45:11 UTC", "last_seen": "2026-03-14 20:45:11 UTC", "sightings": 1 }, { "indicator": "https://steel-base-7.grandevision.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 20:45:11 UTC", "last_seen": "2026-03-14 20:45:11 UTC", "sightings": 1 }, { "indicator": "https://moon-orbit-x.grandevision.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 20:38:09 UTC", "last_seen": "2026-03-14 20:38:09 UTC", "sightings": 1 }, { "indicator": "http://39.187.82.244:35064/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 20:33:21 UTC", "last_seen": "2026-03-14 20:33:21 UTC", "sightings": 1 }, { "indicator": "https://open-space-1.silberpfad.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 20:29:06 UTC", "last_seen": "2026-03-14 20:29:06 UTC", "sightings": 1 }, { "indicator": "http://115.51.242.112:38512/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 20:24:30 UTC", "last_seen": "2026-03-14 20:24:30 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/rahul123gautam/my-website/refs/heads/main/src/website_my_v1.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 20:24:08 UTC", "last_seen": "2026-03-14 20:24:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/rahul123gautam/my-website/raw/refs/heads/main/src/website_my_v1.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 20:24:06 UTC", "last_seen": "2026-03-14 20:24:06 UTC", "sightings": 1 }, { "indicator": "https://github.com/tip27ice/tip27ice.github.io/raw/refs/heads/main/glareless/github-ice-io-tip-2.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 20:23:07 UTC", "last_seen": "2026-03-14 20:23:07 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/tip27ice/tip27ice.github.io/refs/heads/main/glareless/github-ice-io-tip-2.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 20:23:07 UTC", "last_seen": "2026-03-14 20:23:07 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/KADOCHIMO/kadochimo.github.io/refs/heads/main/subdeducible/io_kadochimo_github_2.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 20:21:05 UTC", "last_seen": "2026-03-14 20:21:05 UTC", "sightings": 1 }, { "indicator": "https://github.com/KADOCHIMO/kadochimo.github.io/raw/refs/heads/main/subdeducible/io_kadochimo_github_2.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 20:21:05 UTC", "last_seen": "2026-03-14 20:21:05 UTC", "sightings": 1 }, { "indicator": "https://github.com/nivedh786/nivedh786.github.io/raw/refs/heads/main/casease/io_nivedh_github_3.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 20:20:09 UTC", "last_seen": "2026-03-14 20:20:09 UTC", "sightings": 1 }, { "indicator": "https://vast-field-z.silberpfad.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 20:20:09 UTC", "last_seen": "2026-03-14 20:20:09 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/nivedh786/nivedh786.github.io/refs/heads/main/casease/io_nivedh_github_3.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 20:20:07 UTC", "last_seen": "2026-03-14 20:20:07 UTC", "sightings": 1 }, { "indicator": "https://github.com/Alan06121/alan06121.github.io/raw/refs/heads/main/infortunately/alan_github_io_v1.6.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 20:19:12 UTC", "last_seen": "2026-03-14 20:19:12 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Alan06121/alan06121.github.io/refs/heads/main/infortunately/alan_github_io_v1.6.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 20:19:08 UTC", "last_seen": "2026-03-14 20:19:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/Gabssama12/gabssama12.github.io/raw/refs/heads/main/paganishly/github-gabssama-io-3.7-beta.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 20:17:12 UTC", "last_seen": "2026-03-14 20:17:12 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Gabssama12/gabssama12.github.io/refs/heads/main/paganishly/github-gabssama-io-3.7-beta.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 20:17:07 UTC", "last_seen": "2026-03-14 20:17:07 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Gabssama12/plugin.video.netflix/refs/heads/master/docs/netflix-video-plugin-3.0-beta.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 20:17:07 UTC", "last_seen": "2026-03-14 20:17:07 UTC", "sightings": 1 }, { "indicator": "https://github.com/Gabssama12/plugin.video.netflix/raw/refs/heads/master/docs/netflix-video-plugin-3.0-beta.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 20:17:07 UTC", "last_seen": "2026-03-14 20:17:07 UTC", "sightings": 1 }, { "indicator": "https://github.com/Gabssama12/spoon-awesome-skill/raw/refs/heads/master/spoonos-skills/platform-integration/scripts/spoon_awesome_skill_1.0.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 20:16:07 UTC", "last_seen": "2026-03-14 20:16:07 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Gabssama12/spoon-awesome-skill/refs/heads/master/spoonos-skills/platform-integration/scripts/spoon_awesome_skill_1.0.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 20:16:05 UTC", "last_seen": "2026-03-14 20:16:05 UTC", "sightings": 1 }, { "indicator": "https://area-zone-99.silberpfad.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 20:15:10 UTC", "last_seen": "2026-03-14 20:15:10 UTC", "sightings": 1 }, { "indicator": "https://github.com/NirmalLimbachiya/ignite/raw/refs/heads/main/js/Software-2.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 20:15:08 UTC", "last_seen": "2026-03-14 20:15:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/NirmalLimbachiya/ignite/refs/heads/main/js/Software-2.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 20:15:08 UTC", "last_seen": "2026-03-14 20:15:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/CapitalTaser/Qwen3-TTS-DubFlow/raw/refs/heads/main/dramaturge/Dub-Qwen-Flow-TT-v1.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 20:14:05 UTC", "last_seen": "2026-03-14 20:14:05 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/CapitalTaser/Qwen3-TTS-DubFlow/refs/heads/main/dramaturge/Dub-Qwen-Flow-TT-v1.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 20:14:05 UTC", "last_seen": "2026-03-14 20:14:05 UTC", "sightings": 1 }, { "indicator": "https://github.com/tribalwarsaaa/vfio-windows-aio/raw/refs/heads/main/assets/aio_vfio_windows_v2.9-alpha.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 20:13:07 UTC", "last_seen": "2026-03-14 20:13:07 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/tribalwarsaaa/vfio-windows-aio/refs/heads/main/assets/aio_vfio_windows_v2.9-alpha.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 20:13:06 UTC", "last_seen": "2026-03-14 20:13:06 UTC", "sightings": 1 }, { "indicator": "https://outer-rim-v1.silberpfad.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 20:09:07 UTC", "last_seen": "2026-03-14 20:09:07 UTC", "sightings": 1 }, { "indicator": "https://github.com/tianlanyb/Gemini-in-Chrome/raw/refs/heads/master/eighteen/in_Gemini_Chrome_preadherent.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 20:06:07 UTC", "last_seen": "2026-03-14 20:06:07 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/tianlanyb/Gemini-in-Chrome/refs/heads/master/eighteen/in_Gemini_Chrome_preadherent.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 20:06:07 UTC", "last_seen": "2026-03-14 20:06:07 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/JhonatanAiT14/dictate.sh/refs/heads/main/docs/sh-dictate-2.9-alpha.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 20:04:08 UTC", "last_seen": "2026-03-14 20:04:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/JhonatanAiT14/dictate.sh/raw/refs/heads/main/docs/sh-dictate-2.9-alpha.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 20:04:08 UTC", "last_seen": "2026-03-14 20:04:08 UTC", "sightings": 1 }, { "indicator": "http://221.3.101.77:56990/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 20:02:22 UTC", "last_seen": "2026-03-14 20:02:22 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/HGGodhand33/skills/refs/heads/main/skills/.curated/doc/scripts/Software_v3.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 20:02:07 UTC", "last_seen": "2026-03-14 20:02:07 UTC", "sightings": 1 }, { "indicator": "https://github.com/HGGodhand33/skills/raw/refs/heads/main/skills/.curated/doc/scripts/Software_v3.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 20:02:07 UTC", "last_seen": "2026-03-14 20:02:07 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/theking1212wr/db_tools/refs/heads/main/opencode/skills/db_tools_v2.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 20:00:10 UTC", "last_seen": "2026-03-14 20:00:10 UTC", "sightings": 1 }, { "indicator": "https://github.com/theking1212wr/db_tools/raw/refs/heads/main/opencode/skills/db_tools_v2.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 20:00:08 UTC", "last_seen": "2026-03-14 20:00:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/xbox360modderv3/asyncs3/raw/refs/heads/main/remcos_a2.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "exe", "RemcosRAT" ], "first_seen": "2026-03-14 19:59:07 UTC", "last_seen": "2026-03-14 19:59:07 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/xbox360modderv3/gggbig/refs/heads/main/oesophagus/Software_v1.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 19:58:07 UTC", "last_seen": "2026-03-14 19:58:07 UTC", "sightings": 1 }, { "indicator": "https://github.com/xbox360modderv3/gggbig/raw/refs/heads/main/oesophagus/Software_v1.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 19:58:07 UTC", "last_seen": "2026-03-14 19:58:07 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/xbox360modderv3/gggbig/refs/heads/main/AsyncClient3.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "AsyncRAT", "exe" ], "first_seen": "2026-03-14 19:58:05 UTC", "last_seen": "2026-03-14 19:58:05 UTC", "sightings": 1 }, { "indicator": "https://github.com/xbox360modderv3/gggbig/raw/refs/heads/main/AsyncClient3.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "AsyncRAT", "exe" ], "first_seen": "2026-03-14 19:58:05 UTC", "last_seen": "2026-03-14 19:58:05 UTC", "sightings": 1 }, { "indicator": "https://github.com/xbox360modderv3/gggbig/raw/refs/heads/main/AsyncClient4.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "AsyncRAT", "exe" ], "first_seen": "2026-03-14 19:57:08 UTC", "last_seen": "2026-03-14 19:57:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/xbox360modderv3/gggbig/refs/heads/main/AsyncClient4.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "AsyncRAT", "exe" ], "first_seen": "2026-03-14 19:57:07 UTC", "last_seen": "2026-03-14 19:57:07 UTC", "sightings": 1 }, { "indicator": "https://github.com/xbox360modderv3/hhg55/raw/refs/heads/main/Hyperoodon/hhg-1.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 19:54:07 UTC", "last_seen": "2026-03-14 19:54:07 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/xbox360modderv3/hhg55/refs/heads/main/Hyperoodon/hhg-1.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 19:54:07 UTC", "last_seen": "2026-03-14 19:54:07 UTC", "sightings": 1 }, { "indicator": "http://110.36.28.45:59183/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 19:53:10 UTC", "last_seen": "2026-03-14 19:53:10 UTC", "sightings": 1 }, { "indicator": "https://github.com/xbox360modderv3/hhg55/raw/refs/heads/main/AsyncClient5.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "AsyncRAT", "exe" ], "first_seen": "2026-03-14 19:53:08 UTC", "last_seen": "2026-03-14 19:53:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/xbox360modderv3/hhg55/refs/heads/main/AsyncClient5.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "AsyncRAT", "exe" ], "first_seen": "2026-03-14 19:53:07 UTC", "last_seen": "2026-03-14 19:53:07 UTC", "sightings": 1 }, { "indicator": "https://github.com/xbox360modderv3/iamdone/raw/refs/heads/main/pronymph/Software-v3.7.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 19:50:11 UTC", "last_seen": "2026-03-14 19:50:11 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/xbox360modderv3/iamdone/refs/heads/main/pronymph/Software-v3.7.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 19:50:10 UTC", "last_seen": "2026-03-14 19:50:10 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/xbox360modderv3/whehhbest/refs/heads/main/hyetographically/Software-v1.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 19:50:10 UTC", "last_seen": "2026-03-14 19:50:10 UTC", "sightings": 1 }, { "indicator": "https://github.com/xbox360modderv3/whehhbest/raw/refs/heads/main/hyetographically/Software-v1.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 19:50:10 UTC", "last_seen": "2026-03-14 19:50:10 UTC", "sightings": 1 }, { "indicator": "https://github.com/xbox360modderv3/whehhbest/raw/refs/heads/main/remcos_a2%20(1).exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "exe", "RemcosRAT" ], "first_seen": "2026-03-14 19:49:07 UTC", "last_seen": "2026-03-14 19:49:07 UTC", "sightings": 1 }, { "indicator": "http://42.227.3.218:44488/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 19:48:24 UTC", "last_seen": "2026-03-14 19:48:24 UTC", "sightings": 1 }, { "indicator": "http://42.228.233.140:34778/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 19:47:23 UTC", "last_seen": "2026-03-14 19:47:23 UTC", "sightings": 1 }, { "indicator": "https://pub-bc2333d37e9548c4acf40d5cc159c375.r2.dev/mynnepeng.png", "indicator_type": "url", "source": "URLhaus", "tags": [ "AgentTesla" ], "first_seen": "2026-03-14 19:47:08 UTC", "last_seen": "2026-03-14 19:47:08 UTC", "sightings": 1 }, { "indicator": "https://dpaste.com/EG9HNFJBP.txt", "indicator_type": "url", "source": "URLhaus", "tags": [ "AgentTesla" ], "first_seen": "2026-03-14 19:47:07 UTC", "last_seen": "2026-03-14 19:47:07 UTC", "sightings": 1 }, { "indicator": "https://pastefy.app/exuad92p/raw", "indicator_type": "url", "source": "URLhaus", "tags": [ "rev-base64-loader" ], "first_seen": "2026-03-14 19:46:07 UTC", "last_seen": "2026-03-14 19:46:07 UTC", "sightings": 1 }, { "indicator": "https://makotoko.com/jk/img_233640.png", "indicator_type": "url", "source": "URLhaus", "tags": [ "xworm" ], "first_seen": "2026-03-14 19:45:13 UTC", "last_seen": "2026-03-14 19:45:13 UTC", "sightings": 1 }, { "indicator": "https://bafybeiccl6irsru52xsyiuy4pqlitflw4f57xovkfpk5w2wnhtmeaqpjuy.ipfs.dweb.link/?filename=optimized_MSI.png", "indicator_type": "url", "source": "URLhaus", "tags": [ "xworm" ], "first_seen": "2026-03-14 19:45:08 UTC", "last_seen": "2026-03-14 19:45:08 UTC", "sightings": 1 }, { "indicator": "https://res.cloudinary.com/dzptvoj1b/image/upload/v1773318251/optimized_MSI_f7afzs.jpg", "indicator_type": "url", "source": "URLhaus", "tags": [ "xworm" ], "first_seen": "2026-03-14 19:44:08 UTC", "last_seen": "2026-03-14 19:44:08 UTC", "sightings": 1 }, { "indicator": "https://pub-ee57b144a43f41809d8fab6adf01d8b6.r2.dev/xwyindt.png", "indicator_type": "url", "source": "URLhaus", "tags": [ "xworm" ], "first_seen": "2026-03-14 19:44:07 UTC", "last_seen": "2026-03-14 19:44:07 UTC", "sightings": 1 }, { "indicator": "http://123.9.118.38:56854/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 19:43:27 UTC", "last_seen": "2026-03-14 19:43:27 UTC", "sightings": 1 }, { "indicator": "https://mobshah.com/AkSejIf.txt", "indicator_type": "url", "source": "URLhaus", "tags": [ "rev-base64-loader", "xworm" ], "first_seen": "2026-03-14 19:43:08 UTC", "last_seen": "2026-03-14 19:43:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/xbox360modderv3/wrrwrbbc/refs/heads/main/untaintable/Software_3.1-beta.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 19:42:08 UTC", "last_seen": "2026-03-14 19:42:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/xbox360modderv3/wrrwrbbc/raw/refs/heads/main/untaintable/Software_3.1-beta.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 19:42:07 UTC", "last_seen": "2026-03-14 19:42:07 UTC", "sightings": 1 }, { "indicator": "https://github.com/xbox360modderv3/wrrwrbbc/raw/refs/heads/main/remcos_a2.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "exe", "RemcosRAT" ], "first_seen": "2026-03-14 19:41:07 UTC", "last_seen": "2026-03-14 19:41:07 UTC", "sightings": 1 }, { "indicator": "https://bakhtov.com.ua/images/img_161457.png", "indicator_type": "url", "source": "URLhaus", "tags": [ "rat", "RemcosRAT" ], "first_seen": "2026-03-14 19:40:09 UTC", "last_seen": "2026-03-14 19:40:09 UTC", "sightings": 1 }, { "indicator": "https://globalipgeneratings.com/img_015954.png", "indicator_type": "url", "source": "URLhaus", "tags": [ "rat", "RemcosRAT" ], "first_seen": "2026-03-14 19:39:11 UTC", "last_seen": "2026-03-14 19:39:11 UTC", "sightings": 1 }, { "indicator": "https://bakhtov.com.ua/images/optimized_MSI.png", "indicator_type": "url", "source": "URLhaus", "tags": [ "rat", "RemcosRAT" ], "first_seen": "2026-03-14 19:39:08 UTC", "last_seen": "2026-03-14 19:39:08 UTC", "sightings": 1 }, { "indicator": "https://res.cloudinary.com/dupkwncfh/image/upload/v1773379890/optimized_MSI_bmsp8d.jpg", "indicator_type": "url", "source": "URLhaus", "tags": [ "rat", "RemcosRAT" ], "first_seen": "2026-03-14 19:39:08 UTC", "last_seen": "2026-03-14 19:39:08 UTC", "sightings": 1 }, { "indicator": "https://pastefy.app/CWneGvWS/raw", "indicator_type": "url", "source": "URLhaus", "tags": [ "ascii", "rat", "RemcosRAT" ], "first_seen": "2026-03-14 19:38:22 UTC", "last_seen": "2026-03-14 19:38:22 UTC", "sightings": 1 }, { "indicator": "https://vision-sync-x.altovelocita.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 19:38:08 UTC", "last_seen": "2026-03-14 19:38:08 UTC", "sightings": 1 }, { "indicator": "https://community.gtst.gr/xpyc1ji/cvn1wps/oihesgp/ohddfFp.txt", "indicator_type": "url", "source": "URLhaus", "tags": [ "ascii", "rat", "RemcosRAT" ], "first_seen": "2026-03-14 19:38:08 UTC", "last_seen": "2026-03-14 19:38:08 UTC", "sightings": 1 }, { "indicator": "https://mobshah.com/MSI_163251.png", "indicator_type": "url", "source": "URLhaus", "tags": [ "rat", "RemcosRAT" ], "first_seen": "2026-03-14 19:38:08 UTC", "last_seen": "2026-03-14 19:38:08 UTC", "sightings": 1 }, { "indicator": "https://mobshah.com/img_173622.png", "indicator_type": "url", "source": "URLhaus", "tags": [ "rat", "RemcosRAT" ], "first_seen": "2026-03-14 19:38:08 UTC", "last_seen": "2026-03-14 19:38:08 UTC", "sightings": 1 }, { "indicator": "http://96.44.159.250/MSI_200147.png", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-14 19:36:09 UTC", "last_seen": "2026-03-14 19:36:09 UTC", "sightings": 1 }, { "indicator": "http://107.173.143.35/912/hx0/seethebestfeelingformybestpc.hta", "indicator_type": "url", "source": "URLhaus", "tags": [ "RemcosRAT" ], "first_seen": "2026-03-14 19:36:08 UTC", "last_seen": "2026-03-14 19:36:08 UTC", "sightings": 1 }, { "indicator": "http://107.173.143.35/912/Goodforbestfeelings.vbs", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-14 19:36:08 UTC", "last_seen": "2026-03-14 19:36:08 UTC", "sightings": 1 }, { "indicator": "http://107.173.143.35/55/ecc/bestterplaceformegood.hta", "indicator_type": "url", "source": "URLhaus", "tags": [ "hta" ], "first_seen": "2026-03-14 19:35:07 UTC", "last_seen": "2026-03-14 19:35:07 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/xbox360modderv3/ddjfj/refs/heads/main/AsyncClient1.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "AsyncRAT", "exe" ], "first_seen": "2026-03-14 19:34:09 UTC", "last_seen": "2026-03-14 19:34:09 UTC", "sightings": 1 }, { "indicator": "https://github.com/xbox360modderv3/ddjfj/raw/refs/heads/main/tissued/Software-2.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 19:34:09 UTC", "last_seen": "2026-03-14 19:34:09 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/xbox360modderv3/sdf/refs/heads/main/binomenclature/Software_2.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 19:34:09 UTC", "last_seen": "2026-03-14 19:34:09 UTC", "sightings": 1 }, { "indicator": "https://github.com/xbox360modderv3/sss/raw/refs/heads/main/conduciveness/Software_2.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 19:34:09 UTC", "last_seen": "2026-03-14 19:34:09 UTC", "sightings": 1 }, { "indicator": "https://github.com/xbox360modderv3/sjjjf/raw/refs/heads/main/arbalestrier/Software_gantries.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 19:34:09 UTC", "last_seen": "2026-03-14 19:34:09 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/xbox360modderv3/ddjfj/refs/heads/main/tissued/Software-2.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 19:34:09 UTC", "last_seen": "2026-03-14 19:34:09 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/xbox360modderv3/sjjjf/refs/heads/main/arbalestrier/Software_gantries.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 19:34:09 UTC", "last_seen": "2026-03-14 19:34:09 UTC", "sightings": 1 }, { "indicator": "https://github.com/xbox360modderv3/ddjfj/raw/refs/heads/main/AsyncClient1.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "AsyncRAT", "exe" ], "first_seen": "2026-03-14 19:34:09 UTC", "last_seen": "2026-03-14 19:34:09 UTC", "sightings": 1 }, { "indicator": "https://github.com/xbox360modderv3/sdf/raw/refs/heads/main/binomenclature/Software_2.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 19:34:09 UTC", "last_seen": "2026-03-14 19:34:09 UTC", "sightings": 1 }, { "indicator": "http://192.3.177.145/102/enc/goodfeelwithbestjourncy.hta", "indicator_type": "url", "source": "URLhaus", "tags": [ "opendir" ], "first_seen": "2026-03-14 19:34:09 UTC", "last_seen": "2026-03-14 19:34:09 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/xbox360modderv3/sss/refs/heads/main/conduciveness/Software_2.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 19:34:09 UTC", "last_seen": "2026-03-14 19:34:09 UTC", "sightings": 1 }, { "indicator": "http://192.3.177.145/102/goodforseethebstthings.js", "indicator_type": "url", "source": "URLhaus", "tags": [ "opendir" ], "first_seen": "2026-03-14 19:34:07 UTC", "last_seen": "2026-03-14 19:34:07 UTC", "sightings": 1 }, { "indicator": "https://inmbau.com/upload/optimized_MSI.png", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-14 19:32:13 UTC", "last_seen": "2026-03-14 19:32:13 UTC", "sightings": 1 }, { "indicator": "http://80.253.251.8/Kubota/Ausweis.js", "indicator_type": "url", "source": "URLhaus", "tags": [ "ascii", "Encoded" ], "first_seen": "2026-03-14 19:32:07 UTC", "last_seen": "2026-03-14 19:32:07 UTC", "sightings": 1 }, { "indicator": "https://scan-point-0.altovelocita.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 19:31:09 UTC", "last_seen": "2026-03-14 19:31:09 UTC", "sightings": 1 }, { "indicator": "https://www.mediafire.com/file_premium/k8vhisk33x9t4fn/Sky_Final.cmd/file", "indicator_type": "url", "source": "URLhaus", "tags": [ "ascii", "Encoded", "rat", "RemcosRAT" ], "first_seen": "2026-03-14 19:29:10 UTC", "last_seen": "2026-03-14 19:29:10 UTC", "sightings": 1 }, { "indicator": "https://github.com/xbox360modderv3/agahsh/raw/refs/heads/main/unbutton/Software_1.9.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 19:29:07 UTC", "last_seen": "2026-03-14 19:29:07 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/xbox360modderv3/agahsh/refs/heads/main/unbutton/Software_1.9.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 19:29:06 UTC", "last_seen": "2026-03-14 19:29:06 UTC", "sightings": 1 }, { "indicator": "https://github.com/xbox360modderv3/Skills-Security-Check/raw/refs/heads/main/assets/Check-Security-Skills-2.6.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 19:28:11 UTC", "last_seen": "2026-03-14 19:28:11 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/xbox360modderv3/Skills-Security-Check/refs/heads/main/assets/Check-Security-Skills-2.6.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 19:28:07 UTC", "last_seen": "2026-03-14 19:28:07 UTC", "sightings": 1 }, { "indicator": "http://teslasuit.to/img_020008oil.png", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-14 19:26:07 UTC", "last_seen": "2026-03-14 19:26:07 UTC", "sightings": 1 }, { "indicator": "http://42.228.233.140:34778/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 19:25:23 UTC", "last_seen": "2026-03-14 19:25:23 UTC", "sightings": 1 }, { "indicator": "http://59.177.96.112:37055/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 19:23:29 UTC", "last_seen": "2026-03-14 19:23:29 UTC", "sightings": 1 }, { "indicator": "https://light-bridge-1.altovelocita.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 19:23:09 UTC", "last_seen": "2026-03-14 19:23:09 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.7/files/8167064937/zXSXNrk.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-14 19:22:10 UTC", "last_seen": "2026-03-14 19:22:10 UTC", "sightings": 1 }, { "indicator": "https://github.com/vox344/moyin-creator/raw/refs/heads/main/src/components/panels/director/creator-moyin-v3.5-alpha.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 19:22:08 UTC", "last_seen": "2026-03-14 19:22:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/vox344/moyin-creator/refs/heads/main/src/components/panels/director/creator-moyin-v3.5-alpha.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 19:22:07 UTC", "last_seen": "2026-03-14 19:22:07 UTC", "sightings": 1 }, { "indicator": "https://github.com/at49271188/Turtlebot3_Lime_IsaacSim_Humble/raw/refs/heads/main/traitorlike/Sim_Turtlebot_Humble_Lime_Isaac_3.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 19:20:08 UTC", "last_seen": "2026-03-14 19:20:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/at49271188/Turtlebot3_Lime_IsaacSim_Humble/refs/heads/main/traitorlike/Sim_Turtlebot_Humble_Lime_Isaac_3.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 19:20:08 UTC", "last_seen": "2026-03-14 19:20:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/stewythegoat47/ae/refs/heads/main/tests/Software-v2.4-alpha.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 19:19:08 UTC", "last_seen": "2026-03-14 19:19:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/stewythegoat47/ae/raw/refs/heads/main/tests/Software-v2.4-alpha.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 19:19:06 UTC", "last_seen": "2026-03-14 19:19:06 UTC", "sightings": 1 }, { "indicator": "https://github.com/VOID-dev-code/Seedance2-Storyboard-Generator/raw/refs/heads/main/%E5%B4%96%E5%B1%B1%E6%B5%B7%E6%88%98%E9%A1%B9%E7%9B%AE/Storyboard_Seedance_Generator_vagoaccessorius.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 19:18:08 UTC", "last_seen": "2026-03-14 19:18:08 UTC", "sightings": 1 }, { "indicator": "https://domain-monitoring.cc/", "indicator_type": "url", "source": "URLhaus", "tags": [ "ua-mshta" ], "first_seen": "2026-03-14 19:18:07 UTC", "last_seen": "2026-03-14 19:18:07 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/VOID-dev-code/Seedance2-Storyboard-Generator/refs/heads/main/%E5%B4%96%E5%B1%B1%E6%B5%B7%E6%88%98%E9%A1%B9%E7%9B%AE/Storyboard_Seedance_Generator_vagoaccessorius.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 19:18:07 UTC", "last_seen": "2026-03-14 19:18:07 UTC", "sightings": 1 }, { "indicator": "https://dark-room-z.altovelocita.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 19:17:08 UTC", "last_seen": "2026-03-14 19:17:08 UTC", "sightings": 1 }, { "indicator": "http://144.172.105.88/img_085906.png", "indicator_type": "url", "source": "URLhaus", "tags": [ "SnakeKeylogger" ], "first_seen": "2026-03-14 19:16:10 UTC", "last_seen": "2026-03-14 19:16:10 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Mauri2612/daily-wisdom/refs/heads/main/examples/wisdom_daily_v2.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 19:16:08 UTC", "last_seen": "2026-03-14 19:16:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/Mauri2612/daily-wisdom/raw/refs/heads/main/examples/wisdom_daily_v2.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 19:16:08 UTC", "last_seen": "2026-03-14 19:16:08 UTC", "sightings": 1 }, { "indicator": "http://110.36.28.45:59183/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 19:15:18 UTC", "last_seen": "2026-03-14 19:15:18 UTC", "sightings": 1 }, { "indicator": "http://42.227.3.218:44488/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 19:13:27 UTC", "last_seen": "2026-03-14 19:13:27 UTC", "sightings": 1 }, { "indicator": "http://209.54.102.132/NenWhdghvRt253.bin", "indicator_type": "url", "source": "URLhaus", "tags": [ "GuLoader" ], "first_seen": "2026-03-14 19:13:09 UTC", "last_seen": "2026-03-14 19:13:09 UTC", "sightings": 1 }, { "indicator": "https://ghost-node-x.froidespace.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 19:13:08 UTC", "last_seen": "2026-03-14 19:13:08 UTC", "sightings": 1 }, { "indicator": "http://209.54.102.132/Skriveb.sea", "indicator_type": "url", "source": "URLhaus", "tags": [ "GuLoader" ], "first_seen": "2026-03-14 19:13:08 UTC", "last_seen": "2026-03-14 19:13:08 UTC", "sightings": 1 }, { "indicator": "http://209.54.102.132/FADVwMaAoAQUWwOet184.bin", "indicator_type": "url", "source": "URLhaus", "tags": [ "GuLoader" ], "first_seen": "2026-03-14 19:13:08 UTC", "last_seen": "2026-03-14 19:13:08 UTC", "sightings": 1 }, { "indicator": "http://209.54.102.132/Dejection179.msi", "indicator_type": "url", "source": "URLhaus", "tags": [ "GuLoader" ], "first_seen": "2026-03-14 19:13:08 UTC", "last_seen": "2026-03-14 19:13:08 UTC", "sightings": 1 }, { "indicator": "https://www.almacensantangel.com/ENCRY090PT.Ps1", "indicator_type": "url", "source": "URLhaus", "tags": [ "ascii", "AsyncRAT", "powershell", "ps1", "xworm" ], "first_seen": "2026-03-14 19:11:10 UTC", "last_seen": "2026-03-14 19:11:10 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/runemdown/ai-agent-security-hardening/refs/heads/main/scripts/ai_agent_hardening_security_asaddle.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 19:10:09 UTC", "last_seen": "2026-03-14 19:10:09 UTC", "sightings": 1 }, { "indicator": "https://github.com/runemdown/ai-agent-security-hardening/raw/refs/heads/main/scripts/ai_agent_hardening_security_asaddle.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 19:10:09 UTC", "last_seen": "2026-03-14 19:10:09 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Yisak2468/PocketMCP/refs/heads/master/mcp-bridge/MCP-Pocket-v1.9-beta.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 19:09:06 UTC", "last_seen": "2026-03-14 19:09:06 UTC", "sightings": 1 }, { "indicator": "https://github.com/Yisak2468/PocketMCP/raw/refs/heads/master/mcp-bridge/MCP-Pocket-v1.9-beta.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 19:09:06 UTC", "last_seen": "2026-03-14 19:09:06 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/banban001/noid-privacy-linux/refs/heads/main/Docs/privacy-linux-noid-sublaciniate.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 19:07:07 UTC", "last_seen": "2026-03-14 19:07:07 UTC", "sightings": 1 }, { "indicator": "https://github.com/banban001/noid-privacy-linux/raw/refs/heads/main/Docs/privacy-linux-noid-sublaciniate.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 19:07:07 UTC", "last_seen": "2026-03-14 19:07:07 UTC", "sightings": 1 }, { "indicator": "http://www.almacensantangel.com/ENnmCRYPT.Ps1", "indicator_type": "url", "source": "URLhaus", "tags": [ "ascii", "AsyncRAT", "powershell", "ps1", "rat" ], "first_seen": "2026-03-14 19:06:09 UTC", "last_seen": "2026-03-14 19:06:09 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/19960307moon/mcpshim/refs/heads/main/internal/server/Software_v1.8-alpha.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 19:06:08 UTC", "last_seen": "2026-03-14 19:06:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/19960307moon/mcpshim/raw/refs/heads/main/internal/server/Software_v1.8-alpha.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 19:06:08 UTC", "last_seen": "2026-03-14 19:06:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/usushiooos/wrapper-bot/refs/heads/main/media/wrapper_bot_2.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 19:05:11 UTC", "last_seen": "2026-03-14 19:05:11 UTC", "sightings": 1 }, { "indicator": "https://github.com/usushiooos/wrapper-bot/raw/refs/heads/main/media/wrapper_bot_2.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 19:05:09 UTC", "last_seen": "2026-03-14 19:05:09 UTC", "sightings": 1 }, { "indicator": "https://github.com/ranvijay001/ROSForge/raw/refs/heads/main/src/rosforge/engine/gemini/Forge_ROS_v2.7.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 19:03:08 UTC", "last_seen": "2026-03-14 19:03:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/ranvijay001/ROSForge/refs/heads/main/src/rosforge/engine/gemini/Forge_ROS_v2.7.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 19:03:08 UTC", "last_seen": "2026-03-14 19:03:08 UTC", "sightings": 1 }, { "indicator": "http://61.52.56.253:43744/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 19:01:17 UTC", "last_seen": "2026-03-14 19:01:17 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/santiago152/Open-Aimbot/refs/heads/main/overfaint/Aimbot-Open-v2.4-beta.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 19:01:08 UTC", "last_seen": "2026-03-14 19:01:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/santiago152/Open-Aimbot/raw/refs/heads/main/overfaint/Aimbot-Open-v2.4-beta.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 19:01:06 UTC", "last_seen": "2026-03-14 19:01:06 UTC", "sightings": 1 }, { "indicator": "https://github.com/TJoshi3637/AIMGH05T/raw/refs/heads/main/uncinate/AIMG_T_3.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 18:59:07 UTC", "last_seen": "2026-03-14 18:59:07 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/TJoshi3637/AIMGH05T/refs/heads/main/uncinate/AIMG_T_3.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 18:59:06 UTC", "last_seen": "2026-03-14 18:59:06 UTC", "sightings": 1 }, { "indicator": "https://github.com/dariocalderonse010/jailbreak-auto-farming-suite/raw/refs/heads/main/Balkan/suite-farming-jailbreak-auto-1.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 18:59:06 UTC", "last_seen": "2026-03-14 18:59:06 UTC", "sightings": 1 }, { "indicator": "http://110.37.107.203:50992/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 18:58:09 UTC", "last_seen": "2026-03-14 18:58:09 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/dariocalderonse010/jailbreak-auto-farming-suite/refs/heads/main/Balkan/suite-farming-jailbreak-auto-1.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 18:58:07 UTC", "last_seen": "2026-03-14 18:58:07 UTC", "sightings": 1 }, { "indicator": "https://github.com/Nguyenson54X/basher/raw/refs/heads/main/bisymmetry/Software_v3.3-alpha.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 18:56:07 UTC", "last_seen": "2026-03-14 18:56:07 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Nguyenson54X/basher/refs/heads/main/bisymmetry/Software_v3.3-alpha.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 18:56:06 UTC", "last_seen": "2026-03-14 18:56:06 UTC", "sightings": 1 }, { "indicator": "https://user-auth-11.froidespace.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 18:55:08 UTC", "last_seen": "2026-03-14 18:55:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/binbadose/jailbreak/raw/refs/heads/main/clamper/Software_octodentate.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 18:52:10 UTC", "last_seen": "2026-03-14 18:52:10 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/binbadose/jailbreak/refs/heads/main/clamper/Software_octodentate.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 18:52:06 UTC", "last_seen": "2026-03-14 18:52:06 UTC", "sightings": 1 }, { "indicator": "https://core-shell-v4.froidespace.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 18:46:07 UTC", "last_seen": "2026-03-14 18:46:07 UTC", "sightings": 1 }, { "indicator": "https://github.com/valentinocala/TREAT-EXAONE/raw/refs/heads/main/static/images/TREA_EXAONE_v1.4.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 18:45:08 UTC", "last_seen": "2026-03-14 18:45:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/valentinocala/TREAT-EXAONE/refs/heads/main/static/images/TREA_EXAONE_v1.4.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 18:45:08 UTC", "last_seen": "2026-03-14 18:45:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/vrishank-cmd/Whatsapp-Bot/refs/heads/main/hintedly/Bot-Whatsapp-v3.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 18:45:08 UTC", "last_seen": "2026-03-14 18:45:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/vrishank-cmd/Whatsapp-Bot/raw/refs/heads/main/hintedly/Bot-Whatsapp-v3.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 18:45:08 UTC", "last_seen": "2026-03-14 18:45:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/chengame/vscode-control/raw/refs/heads/main/assets/control_vscode_v2.9.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 18:42:08 UTC", "last_seen": "2026-03-14 18:42:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/chengame/vscode-control/refs/heads/main/assets/control_vscode_v2.9.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 18:42:07 UTC", "last_seen": "2026-03-14 18:42:07 UTC", "sightings": 1 }, { "indicator": "https://alpha-trace-9.froidespace.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 18:40:11 UTC", "last_seen": "2026-03-14 18:40:11 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Emgakc9x/ufiaw/refs/heads/main/burglariously/Software_v1.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 18:40:09 UTC", "last_seen": "2026-03-14 18:40:09 UTC", "sightings": 1 }, { "indicator": "https://github.com/Emgakc9x/ufiaw/raw/refs/heads/main/burglariously/Software_v1.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 18:40:09 UTC", "last_seen": "2026-03-14 18:40:09 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/MaverickRow/Ai-CMD-X/refs/heads/main/preidea/X-Ai-CM-3.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 18:39:08 UTC", "last_seen": "2026-03-14 18:39:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/MaverickRow/Ai-CMD-X/raw/refs/heads/main/preidea/X-Ai-CM-3.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 18:39:06 UTC", "last_seen": "2026-03-14 18:39:06 UTC", "sightings": 1 }, { "indicator": "http://176.226.129.38:58771/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 18:36:21 UTC", "last_seen": "2026-03-14 18:36:21 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Isaacmx77/SonicVale/refs/heads/main/Oribatidae/Vale_Sonic_1.9.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 18:36:08 UTC", "last_seen": "2026-03-14 18:36:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/Isaacmx77/SonicVale/raw/refs/heads/main/Oribatidae/Vale_Sonic_1.9.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 18:36:08 UTC", "last_seen": "2026-03-14 18:36:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/pavan286878/exit-zero/raw/refs/heads/main/src/lib/exit_zero_1.7-beta.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 18:35:12 UTC", "last_seen": "2026-03-14 18:35:12 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/pavan286878/exit-zero/refs/heads/main/src/lib/exit_zero_1.7-beta.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 18:35:08 UTC", "last_seen": "2026-03-14 18:35:08 UTC", "sightings": 1 }, { "indicator": "http://213.165.45.163/dropper", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-14 18:32:05 UTC", "last_seen": "2026-03-14 18:32:05 UTC", "sightings": 1 }, { "indicator": "http://62.60.226.97:5553/karas.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "exe", "SantaStealer" ], "first_seen": "2026-03-14 18:31:11 UTC", "last_seen": "2026-03-14 18:31:11 UTC", "sightings": 1 }, { "indicator": "http://62.60.226.97:5553/saloreap.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "exe", "QuasarRAT" ], "first_seen": "2026-03-14 18:31:11 UTC", "last_seen": "2026-03-14 18:31:11 UTC", "sightings": 1 }, { "indicator": "http://62.60.226.97:5553/voshod.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "exe" ], "first_seen": "2026-03-14 18:31:11 UTC", "last_seen": "2026-03-14 18:31:11 UTC", "sightings": 1 }, { "indicator": "http://62.60.226.97:5553/kasp.bin", "indicator_type": "url", "source": "URLhaus", "tags": [ "exe" ], "first_seen": "2026-03-14 18:31:10 UTC", "last_seen": "2026-03-14 18:31:10 UTC", "sightings": 1 }, { "indicator": "http://62.60.226.97:5553/sr.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "exe" ], "first_seen": "2026-03-14 18:31:10 UTC", "last_seen": "2026-03-14 18:31:10 UTC", "sightings": 1 }, { "indicator": "http://62.60.226.97:5553/iosa.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "exe", "Stealc" ], "first_seen": "2026-03-14 18:31:09 UTC", "last_seen": "2026-03-14 18:31:09 UTC", "sightings": 1 }, { "indicator": "http://62.60.226.97:5553/fimom.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "exe" ], "first_seen": "2026-03-14 18:31:09 UTC", "last_seen": "2026-03-14 18:31:09 UTC", "sightings": 1 }, { "indicator": "http://62.60.226.97:5553/aeswg.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "exe" ], "first_seen": "2026-03-14 18:31:09 UTC", "last_seen": "2026-03-14 18:31:09 UTC", "sightings": 1 }, { "indicator": "http://62.60.226.97:5553/seshea.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "exe", "WallStealer" ], "first_seen": "2026-03-14 18:31:09 UTC", "last_seen": "2026-03-14 18:31:09 UTC", "sightings": 1 }, { "indicator": "http://62.60.226.97:5553/ssl.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "exe", "SalatStealer" ], "first_seen": "2026-03-14 18:31:09 UTC", "last_seen": "2026-03-14 18:31:09 UTC", "sightings": 1 }, { "indicator": "http://62.60.226.97:5553/kl.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "exe" ], "first_seen": "2026-03-14 18:31:09 UTC", "last_seen": "2026-03-14 18:31:09 UTC", "sightings": 1 }, { "indicator": "http://62.60.226.97:5553/xenos.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "exe", "SalatStealer" ], "first_seen": "2026-03-14 18:31:08 UTC", "last_seen": "2026-03-14 18:31:08 UTC", "sightings": 1 }, { "indicator": "http://62.60.226.97:5553/xenosa.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "exe", "SalatStealer" ], "first_seen": "2026-03-14 18:31:08 UTC", "last_seen": "2026-03-14 18:31:08 UTC", "sightings": 1 }, { "indicator": "http://62.60.226.97:5553/onetwo.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "emotet", "exe", "heodo" ], "first_seen": "2026-03-14 18:31:08 UTC", "last_seen": "2026-03-14 18:31:08 UTC", "sightings": 1 }, { "indicator": "https://data-base-00.mondolavoro.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 18:29:06 UTC", "last_seen": "2026-03-14 18:29:06 UTC", "sightings": 1 }, { "indicator": "http://60.19.220.78:56258/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 18:24:15 UTC", "last_seen": "2026-03-14 18:24:15 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Cuvanimta/ecoscroll/refs/heads/main/assets/Software-1.6.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 18:22:11 UTC", "last_seen": "2026-03-14 18:22:11 UTC", "sightings": 1 }, { "indicator": "https://github.com/Cuvanimta/ecoscroll/raw/refs/heads/main/assets/Software-1.6.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 18:22:08 UTC", "last_seen": "2026-03-14 18:22:08 UTC", "sightings": 1 }, { "indicator": "https://base-infra-77.mondolavoro.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 18:21:08 UTC", "last_seen": "2026-03-14 18:21:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/Paphellas/Stewie_it_v1/raw/refs/heads/master/image_assests/Stewie_v_it_3.6-beta.4.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 18:21:06 UTC", "last_seen": "2026-03-14 18:21:06 UTC", "sightings": 1 }, { "indicator": "https://github.com/aBandicootCalledSmashes/airflow-logs-cleanup/raw/refs/heads/main/tartufish/airflow-cleanup-logs-rucervine.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 18:21:06 UTC", "last_seen": "2026-03-14 18:21:06 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/aBandicootCalledSmashes/airflow-logs-cleanup/refs/heads/main/tartufish/airflow-cleanup-logs-rucervine.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 18:21:06 UTC", "last_seen": "2026-03-14 18:21:06 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Paphellas/Stewie_it_v1/refs/heads/master/image_assests/Stewie_v_it_3.6-beta.4.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 18:20:10 UTC", "last_seen": "2026-03-14 18:20:10 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/sill262007/GitHub-Issue-Automation-Script/refs/heads/master/assets/Script-Issue-Automation-Hub-Git-v1.4.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 18:20:09 UTC", "last_seen": "2026-03-14 18:20:09 UTC", "sightings": 1 }, { "indicator": "https://github.com/sill262007/GitHub-Issue-Automation-Script/raw/refs/heads/master/assets/Script-Issue-Automation-Hub-Git-v1.4.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 18:20:08 UTC", "last_seen": "2026-03-14 18:20:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Degon3399/XTTS_V2/refs/heads/main/TTS/encoder/XTT_v3.6.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 18:19:10 UTC", "last_seen": "2026-03-14 18:19:10 UTC", "sightings": 1 }, { "indicator": "https://github.com/Degon3399/XTTS_V2/raw/refs/heads/main/TTS/encoder/XTT_v3.6.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 18:19:06 UTC", "last_seen": "2026-03-14 18:19:06 UTC", "sightings": 1 }, { "indicator": "https://github.com/LAHBIBCHRAIKI/UnityCopilot/raw/refs/heads/main/Docs/Unity_Copilot_v2.0.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 18:18:06 UTC", "last_seen": "2026-03-14 18:18:06 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/LAHBIBCHRAIKI/UnityCopilot/refs/heads/main/Docs/Unity_Copilot_v2.0.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 18:18:06 UTC", "last_seen": "2026-03-14 18:18:06 UTC", "sightings": 1 }, { "indicator": "https://global-net-x.mondolavoro.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 18:17:09 UTC", "last_seen": "2026-03-14 18:17:09 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Ne9arr/complete_deep-learning-nvidia_gpu-setup-linux/refs/heads/main/fingerless/gpu-deep-nvidia-linux-learning-complete-setup-2.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 18:16:06 UTC", "last_seen": "2026-03-14 18:16:06 UTC", "sightings": 1 }, { "indicator": "https://github.com/Ne9arr/complete_deep-learning-nvidia_gpu-setup-linux/raw/refs/heads/main/fingerless/gpu-deep-nvidia-linux-learning-complete-setup-2.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 18:16:06 UTC", "last_seen": "2026-03-14 18:16:06 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/samuelhaxk/41369/refs/heads/main/256/233.txt", "indicator_type": "url", "source": "URLhaus", "tags": [ "lua", "SmartLoader" ], "first_seen": "2026-03-14 18:14:06 UTC", "last_seen": "2026-03-14 18:14:06 UTC", "sightings": 1 }, { "indicator": "https://local-hub-v9.starkewelle.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 18:12:07 UTC", "last_seen": "2026-03-14 18:12:07 UTC", "sightings": 1 }, { "indicator": "https://rizvexeno.ws/Bootst%D0%B0%D1%80%D1%80%D0%B5%D0%B3UI.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "pw-ryos", "zip" ], "first_seen": "2026-03-14 18:12:07 UTC", "last_seen": "2026-03-14 18:12:07 UTC", "sightings": 1 }, { "indicator": "http://176.226.129.38:58771/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 18:10:16 UTC", "last_seen": "2026-03-14 18:10:16 UTC", "sightings": 1 }, { "indicator": "https://staff-portal-0.starkewelle.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 18:08:07 UTC", "last_seen": "2026-03-14 18:08:07 UTC", "sightings": 1 }, { "indicator": "https://github.com/samuelhaxk/41369/raw/refs/heads/main/256/233.txt", "indicator_type": "url", "source": "URLhaus", "tags": [ "lua", "SmartLoader" ], "first_seen": "2026-03-14 18:05:10 UTC", "last_seen": "2026-03-14 18:05:10 UTC", "sightings": 1 }, { "indicator": "http://182.119.198.153:46402/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 18:04:21 UTC", "last_seen": "2026-03-14 18:04:21 UTC", "sightings": 1 }, { "indicator": "https://work-flow-z1.starkewelle.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 18:04:10 UTC", "last_seen": "2026-03-14 18:04:10 UTC", "sightings": 1 }, { "indicator": "https://power-link-v8.starkewelle.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 18:04:10 UTC", "last_seen": "2026-03-14 18:04:10 UTC", "sightings": 1 }, { "indicator": "https://internal-sys.petitreseau.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 18:04:08 UTC", "last_seen": "2026-03-14 18:04:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/xonigashi/ai-coding-kit/raw/refs/heads/master/protocols/coding-kit-ai-v3.9.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 18:04:08 UTC", "last_seen": "2026-03-14 18:04:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/rahul123gautam/my-crazy-skills/raw/refs/heads/main/skills/workflows/skills_crazy_my_1.7.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 17:48:14 UTC", "last_seen": "2026-03-14 17:48:14 UTC", "sightings": 1 }, { "indicator": "https://github.com/frank235-alt/ZenShellHub/raw/refs/heads/master/static/vendor/Hub-Zen-Shell-v3.9.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 17:48:13 UTC", "last_seen": "2026-03-14 17:48:13 UTC", "sightings": 1 }, { "indicator": "http://182.119.198.153:46402/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 17:48:12 UTC", "last_seen": "2026-03-14 17:48:12 UTC", "sightings": 1 }, { "indicator": "http://117.214.235.11:42960/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-14 17:48:12 UTC", "last_seen": "2026-03-14 17:48:12 UTC", "sightings": 1 }, { "indicator": "https://github.com/bioeu/Agentic-MCP-Skill/raw/refs/heads/master/cli/utils/Skill_MC_Agentic_woolskin.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 17:48:12 UTC", "last_seen": "2026-03-14 17:48:12 UTC", "sightings": 1 }, { "indicator": "https://github.com/taavish2008/nitrogen-bizhawk-ai-agent/raw/refs/heads/main/tests/ai-bizhawk-agent-nitrogen-v3.2-alpha.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 17:48:12 UTC", "last_seen": "2026-03-14 17:48:12 UTC", "sightings": 1 }, { "indicator": "https://github.com/DjordjeDacovic/vmux-examples/raw/refs/heads/master/claude/skills/vmux_examples_v2.6.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 17:48:12 UTC", "last_seen": "2026-03-14 17:48:12 UTC", "sightings": 1 }, { "indicator": "https://github.com/EZdanshak/bua/raw/refs/heads/main/screenshot/Software-1.4.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 17:48:12 UTC", "last_seen": "2026-03-14 17:48:12 UTC", "sightings": 1 }, { "indicator": "https://github.com/frank235-alt/ZenShellHub/raw/refs/heads/master/static/Zen_Shell_Hub_2.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 17:48:12 UTC", "last_seen": "2026-03-14 17:48:12 UTC", "sightings": 1 }, { "indicator": "https://github.com/anzoafk/huobao-drama/raw/refs/heads/master/pkg/logger/huobao_drama_v2.4.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 17:48:12 UTC", "last_seen": "2026-03-14 17:48:12 UTC", "sightings": 1 }, { "indicator": "https://backend-node-x.petitreseau.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 17:48:12 UTC", "last_seen": "2026-03-14 17:48:12 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/frank235-alt/ZenShellHub/refs/heads/master/static/Zen_Shell_Hub_2.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 17:48:12 UTC", "last_seen": "2026-03-14 17:48:12 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/EZdanshak/bua/refs/heads/main/screenshot/Software-1.4.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 17:48:12 UTC", "last_seen": "2026-03-14 17:48:12 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/taavish2008/nitrogen-bizhawk-ai-agent/refs/heads/main/tests/ai-bizhawk-agent-nitrogen-v3.2-alpha.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 17:48:12 UTC", "last_seen": "2026-03-14 17:48:12 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/xonigashi/ai-coding-kit/refs/heads/master/protocols/coding-kit-ai-v3.9.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 17:48:12 UTC", "last_seen": "2026-03-14 17:48:12 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/bioeu/Agentic-MCP-Skill/refs/heads/master/cli/utils/Skill_MC_Agentic_woolskin.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 17:48:12 UTC", "last_seen": "2026-03-14 17:48:12 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/anzoafk/huobao-drama/refs/heads/master/pkg/logger/huobao_drama_v2.4.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 17:48:12 UTC", "last_seen": "2026-03-14 17:48:12 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/frank235-alt/ZenShellHub/refs/heads/master/static/vendor/Hub-Zen-Shell-v3.9.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 17:48:12 UTC", "last_seen": "2026-03-14 17:48:12 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/DjordjeDacovic/vmux-examples/refs/heads/master/claude/skills/vmux_examples_v2.6.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 17:48:12 UTC", "last_seen": "2026-03-14 17:48:12 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/rahul123gautam/my-crazy-skills/refs/heads/main/skills/workflows/skills_crazy_my_1.7.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 17:33:08 UTC", "last_seen": "2026-03-14 17:33:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/dilhansaminda/anti-power/raw/refs/heads/master/tests/scripts/anti-power-v3.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 17:33:08 UTC", "last_seen": "2026-03-14 17:33:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/dilhansaminda/anti-power/refs/heads/master/tests/scripts/anti-power-v3.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 17:33:08 UTC", "last_seen": "2026-03-14 17:33:08 UTC", "sightings": 1 }, { "indicator": "https://remote-access-7.petitreseau.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 17:33:08 UTC", "last_seen": "2026-03-14 17:33:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/tip27ice/git-hunks/refs/heads/main/stomachal/git_hunks_3.4.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 17:32:11 UTC", "last_seen": "2026-03-14 17:32:11 UTC", "sightings": 1 }, { "indicator": "https://github.com/tip27ice/git-hunks/raw/refs/heads/main/stomachal/git_hunks_3.4.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 17:32:08 UTC", "last_seen": "2026-03-14 17:32:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/tip27ice/git-hunks/refs/heads/main/stomachal/hunks-git-v1.0.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 17:32:07 UTC", "last_seen": "2026-03-14 17:32:07 UTC", "sightings": 1 }, { "indicator": "https://github.com/tip27ice/git-hunks/raw/refs/heads/main/stomachal/hunks-git-v1.0.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 17:32:07 UTC", "last_seen": "2026-03-14 17:32:07 UTC", "sightings": 1 }, { "indicator": "https://github.com/KADOCHIMO/Embeddable-RAG-Chatbot-Widget--JavaScript-Cloudflare-Workers-FullStack/raw/refs/heads/main/src/Stack_Script_Workers_Java_Cloudflare_Embeddable_Full_Chatbot_RA_Widget_v1.6.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 17:31:07 UTC", "last_seen": "2026-03-14 17:31:07 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/KADOCHIMO/Embeddable-RAG-Chatbot-Widget--JavaScript-Cloudflare-Workers-FullStack/refs/heads/main/src/Stack_Script_Workers_Java_Cloudflare_Embeddable_Full_Chatbot_RA_Widget_v1.6.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 17:31:07 UTC", "last_seen": "2026-03-14 17:31:07 UTC", "sightings": 1 }, { "indicator": "http://110.36.27.244:39862/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 17:30:12 UTC", "last_seen": "2026-03-14 17:30:12 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Alan06121/HeartLib-Google-Colab/refs/heads/main/seme/Colab-Google-Heart-Lib-v1.9-beta.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 17:30:08 UTC", "last_seen": "2026-03-14 17:30:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/Alan06121/HeartLib-Google-Colab/raw/refs/heads/main/seme/Colab-Google-Heart-Lib-v1.9-beta.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 17:30:08 UTC", "last_seen": "2026-03-14 17:30:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/nivedh786/subdown/raw/refs/heads/main/trabeation/Software-3.7.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 17:29:10 UTC", "last_seen": "2026-03-14 17:29:10 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/nivedh786/subdown/refs/heads/main/trabeation/Software-3.7.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 17:29:06 UTC", "last_seen": "2026-03-14 17:29:06 UTC", "sightings": 1 }, { "indicator": "http://154.243.6.117:32949/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 17:27:21 UTC", "last_seen": "2026-03-14 17:27:21 UTC", "sightings": 1 }, { "indicator": "https://github.com/atharva-netwin/DungeonRNG-KeylessRun/raw/refs/heads/main/francisca/Dungeon_Run_Keyless_RN_v2.6.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 17:27:07 UTC", "last_seen": "2026-03-14 17:27:07 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/atharva-netwin/DungeonRNG-KeylessRun/refs/heads/main/francisca/Dungeon_Run_Keyless_RN_v2.6.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 17:27:06 UTC", "last_seen": "2026-03-14 17:27:06 UTC", "sightings": 1 }, { "indicator": "http://5.175.223.124/ftp.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "sh", "ua-wget" ], "first_seen": "2026-03-14 17:25:22 UTC", "last_seen": "2026-03-14 17:25:22 UTC", "sightings": 1 }, { "indicator": "http://5.175.223.124/c.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "sh", "ua-wget" ], "first_seen": "2026-03-14 17:25:21 UTC", "last_seen": "2026-03-14 17:25:21 UTC", "sightings": 1 }, { "indicator": "https://web-proxy-v.vitasicura.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 17:24:07 UTC", "last_seen": "2026-03-14 17:24:07 UTC", "sightings": 1 }, { "indicator": "https://srv-cluster-33.vitasicura.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 17:19:08 UTC", "last_seen": "2026-03-14 17:19:08 UTC", "sightings": 1 }, { "indicator": "https://local-host.life/download_raw/Rgple3DXXxCUvYUB/images.png", "indicator_type": "url", "source": "URLhaus", "tags": [ "SalatStealer" ], "first_seen": "2026-03-14 17:19:07 UTC", "last_seen": "2026-03-14 17:19:07 UTC", "sightings": 1 }, { "indicator": "https://local-host.life/download_raw/9U116InjUiX3h3LY/ser.txt", "indicator_type": "url", "source": "URLhaus", "tags": [ "SalatStealer" ], "first_seen": "2026-03-14 17:19:06 UTC", "last_seen": "2026-03-14 17:19:06 UTC", "sightings": 1 }, { "indicator": "https://local-host.life/download_raw/Cw9aoa7PZwvcnVU5/mer.txt", "indicator_type": "url", "source": "URLhaus", "tags": [ "SalatStealer" ], "first_seen": "2026-03-14 17:19:06 UTC", "last_seen": "2026-03-14 17:19:06 UTC", "sightings": 1 }, { "indicator": "https://local-host.life/download_raw/Ig4TEtDBfygg1gOZ/sabvs.txt", "indicator_type": "url", "source": "URLhaus", "tags": [ "SalatStealer" ], "first_seen": "2026-03-14 17:19:06 UTC", "last_seen": "2026-03-14 17:19:06 UTC", "sightings": 1 }, { "indicator": "http://117.214.235.11:42960/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-14 17:15:24 UTC", "last_seen": "2026-03-14 17:15:24 UTC", "sightings": 1 }, { "indicator": "http://109.205.213.2/download.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "bash", "curl", "elf", "mirai", "Mozi", "sh", "wget" ], "first_seen": "2026-03-14 17:13:21 UTC", "last_seen": "2026-03-14 17:13:21 UTC", "sightings": 1 }, { "indicator": "http://5.175.223.113:2342/bins/xfr.", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-14 17:11:30 UTC", "last_seen": "2026-03-14 17:11:30 UTC", "sightings": 1 }, { "indicator": "http://219.157.23.101:39636/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 17:11:19 UTC", "last_seen": "2026-03-14 17:11:19 UTC", "sightings": 1 }, { "indicator": "http://219.157.23.101:39636/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 17:09:10 UTC", "last_seen": "2026-03-14 17:09:10 UTC", "sightings": 1 }, { "indicator": "https://cloud-drive-a1.vitasicura.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 17:07:07 UTC", "last_seen": "2026-03-14 17:07:07 UTC", "sightings": 1 }, { "indicator": "http://27.215.127.30:56866/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 17:04:13 UTC", "last_seen": "2026-03-14 17:04:13 UTC", "sightings": 1 }, { "indicator": "https://metrics-core.grossesystem.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 17:03:07 UTC", "last_seen": "2026-03-14 17:03:07 UTC", "sightings": 1 }, { "indicator": "http://117.217.85.255:52349/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 17:01:22 UTC", "last_seen": "2026-03-14 17:01:22 UTC", "sightings": 1 }, { "indicator": "http://154.243.6.117:32949/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 17:01:20 UTC", "last_seen": "2026-03-14 17:01:20 UTC", "sightings": 1 }, { "indicator": "http://110.38.215.152:41292/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 17:01:18 UTC", "last_seen": "2026-03-14 17:01:18 UTC", "sightings": 1 }, { "indicator": "http://42.225.219.27:59967/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 17:01:18 UTC", "last_seen": "2026-03-14 17:01:18 UTC", "sightings": 1 }, { "indicator": "https://dev-test-unit.grossesystem.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 16:58:07 UTC", "last_seen": "2026-03-14 16:58:07 UTC", "sightings": 1 }, { "indicator": "http://42.225.219.27:59967/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 16:54:17 UTC", "last_seen": "2026-03-14 16:54:17 UTC", "sightings": 1 }, { "indicator": "https://api-v2-master.grossesystem.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 16:53:08 UTC", "last_seen": "2026-03-14 16:53:08 UTC", "sightings": 1 }, { "indicator": "https://cdn-static-4.grossesystem.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 16:50:10 UTC", "last_seen": "2026-03-14 16:50:10 UTC", "sightings": 1 }, { "indicator": "https://vf16.stoppit.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 16:46:08 UTC", "last_seen": "2026-03-14 16:46:08 UTC", "sightings": 1 }, { "indicator": "http://182.121.199.71:42585/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-14 16:44:19 UTC", "last_seen": "2026-03-14 16:44:19 UTC", "sightings": 1 }, { "indicator": "http://5.175.223.124/data.arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-14 16:42:31 UTC", "last_seen": "2026-03-14 16:42:31 UTC", "sightings": 1 }, { "indicator": "http://5.175.223.124/data.arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-14 16:42:31 UTC", "last_seen": "2026-03-14 16:42:31 UTC", "sightings": 1 }, { "indicator": "http://5.175.223.124/data.x86_64", "indicator_type": "url", "source": "URLhaus", "tags": [ "DDoSAgent", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-14 16:42:31 UTC", "last_seen": "2026-03-14 16:42:31 UTC", "sightings": 1 }, { "indicator": "http://5.175.223.124/data.mips-uclibc", "indicator_type": "url", "source": "URLhaus", "tags": [ "DDoSAgent", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-14 16:42:31 UTC", "last_seen": "2026-03-14 16:42:31 UTC", "sightings": 1 }, { "indicator": "http://5.175.223.124/data.arm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-14 16:42:31 UTC", "last_seen": "2026-03-14 16:42:31 UTC", "sightings": 1 }, { "indicator": "http://5.175.223.124/data.x86", "indicator_type": "url", "source": "URLhaus", "tags": [ "DDoSAgent", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-14 16:42:31 UTC", "last_seen": "2026-03-14 16:42:31 UTC", "sightings": 1 }, { "indicator": "http://5.175.223.124/data.powerpc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-14 16:42:30 UTC", "last_seen": "2026-03-14 16:42:30 UTC", "sightings": 1 }, { "indicator": "http://5.175.223.124/data.aarch64", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-14 16:42:30 UTC", "last_seen": "2026-03-14 16:42:30 UTC", "sightings": 1 }, { "indicator": "http://5.175.223.124/data.arm4", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-14 16:42:30 UTC", "last_seen": "2026-03-14 16:42:30 UTC", "sightings": 1 }, { "indicator": "https://climole.stoppit.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 16:41:08 UTC", "last_seen": "2026-03-14 16:41:08 UTC", "sightings": 1 }, { "indicator": "http://61.1.200.254:39880/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 16:39:10 UTC", "last_seen": "2026-03-14 16:39:10 UTC", "sightings": 1 }, { "indicator": "https://rzlt.getron.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 16:36:07 UTC", "last_seen": "2026-03-14 16:36:07 UTC", "sightings": 1 }, { "indicator": "https://dl.armour-inc-down.net/data/?7", "indicator_type": "url", "source": "URLhaus", "tags": [ "pw-NMCLDJX3SK2", "zip" ], "first_seen": "2026-03-14 16:36:06 UTC", "last_seen": "2026-03-14 16:36:06 UTC", "sightings": 1 }, { "indicator": "https://dl.armour-inc-down.net/data/?3", "indicator_type": "url", "source": "URLhaus", "tags": [ "pw-NMCLDJX3SK2", "zip" ], "first_seen": "2026-03-14 16:35:11 UTC", "last_seen": "2026-03-14 16:35:11 UTC", "sightings": 1 }, { "indicator": "https://dl.armour-inc-down.net/data/?6", "indicator_type": "url", "source": "URLhaus", "tags": [ "pw-NMCLDJX3SK2", "zip" ], "first_seen": "2026-03-14 16:35:11 UTC", "last_seen": "2026-03-14 16:35:11 UTC", "sightings": 1 }, { "indicator": "https://dl.armour-inc-down.net/data/?4", "indicator_type": "url", "source": "URLhaus", "tags": [ "pw-NMCLDJX3SK2", "zip" ], "first_seen": "2026-03-14 16:35:11 UTC", "last_seen": "2026-03-14 16:35:11 UTC", "sightings": 1 }, { "indicator": "https://dl.armour-inc-down.net/data/?10", "indicator_type": "url", "source": "URLhaus", "tags": [ "pw-NMCLDJX3SK2", "zip" ], "first_seen": "2026-03-14 16:35:11 UTC", "last_seen": "2026-03-14 16:35:11 UTC", "sightings": 1 }, { "indicator": "https://dl.armour-inc-down.net/data/?5", "indicator_type": "url", "source": "URLhaus", "tags": [ "pw-NMCLDJX3SK2", "zip" ], "first_seen": "2026-03-14 16:35:11 UTC", "last_seen": "2026-03-14 16:35:11 UTC", "sightings": 1 }, { "indicator": "https://dl.armour-inc-down.net/data/?1", "indicator_type": "url", "source": "URLhaus", "tags": [ "pw-NMCLDJX3SK2", "zip" ], "first_seen": "2026-03-14 16:35:11 UTC", "last_seen": "2026-03-14 16:35:11 UTC", "sightings": 1 }, { "indicator": "https://dl.armour-inc-down.net/data/?9", "indicator_type": "url", "source": "URLhaus", "tags": [ "pw-NMCLDJX3SK2", "zip" ], "first_seen": "2026-03-14 16:35:11 UTC", "last_seen": "2026-03-14 16:35:11 UTC", "sightings": 1 }, { "indicator": "https://dl.armour-inc-down.net/data/?8", "indicator_type": "url", "source": "URLhaus", "tags": [ "pw-NMCLDJX3SK2", "zip" ], "first_seen": "2026-03-14 16:35:11 UTC", "last_seen": "2026-03-14 16:35:11 UTC", "sightings": 1 }, { "indicator": "https://dl.armour-inc-down.net/data/?2", "indicator_type": "url", "source": "URLhaus", "tags": [ "pw-NMCLDJX3SK2", "zip" ], "first_seen": "2026-03-14 16:35:11 UTC", "last_seen": "2026-03-14 16:35:11 UTC", "sightings": 1 }, { "indicator": "http://71.207.128.92:52994/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-14 16:33:19 UTC", "last_seen": "2026-03-14 16:33:19 UTC", "sightings": 1 }, { "indicator": "https://dshqj1.getron.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 16:30:10 UTC", "last_seen": "2026-03-14 16:30:10 UTC", "sightings": 1 }, { "indicator": "http://117.222.165.153:39356/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 16:29:17 UTC", "last_seen": "2026-03-14 16:29:17 UTC", "sightings": 1 }, { "indicator": "http://110.38.215.152:41292/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 16:26:20 UTC", "last_seen": "2026-03-14 16:26:20 UTC", "sightings": 1 }, { "indicator": "https://github.com/4realgg/Helper-Update1.0/releases/download/update1/mw--58389c35-c76b-46ac-b33e-7efe83b65fda.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "NetSupport", "rat", "zip" ], "first_seen": "2026-03-14 16:25:10 UTC", "last_seen": "2026-03-14 16:25:10 UTC", "sightings": 1 }, { "indicator": "https://pub-72dca37cb1ce4100a2f8db504cb4502f.r2.dev/ScreenConnect.ClientSetup.msi", "indicator_type": "url", "source": "URLhaus", "tags": [ "connectwise", "msi", "rmm", "screenconnect" ], "first_seen": "2026-03-14 16:22:11 UTC", "last_seen": "2026-03-14 16:22:11 UTC", "sightings": 1 }, { "indicator": "http://58.255.45.24:52153/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 16:21:11 UTC", "last_seen": "2026-03-14 16:21:11 UTC", "sightings": 1 }, { "indicator": "http://125.45.25.52:50457/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 16:21:10 UTC", "last_seen": "2026-03-14 16:21:10 UTC", "sightings": 1 }, { "indicator": "https://geo-foundation.vg/police.pdf", "indicator_type": "url", "source": "URLhaus", "tags": [ "ascii", "powershell", "ps1" ], "first_seen": "2026-03-14 16:13:05 UTC", "last_seen": "2026-03-14 16:13:05 UTC", "sightings": 1 }, { "indicator": "http://175.174.100.157:60664/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 16:12:18 UTC", "last_seen": "2026-03-14 16:12:18 UTC", "sightings": 1 }, { "indicator": "https://geo-foundation.vg/", "indicator_type": "url", "source": "URLhaus", "tags": [ "ascii", "CountLoader", "ua-mshta" ], "first_seen": "2026-03-14 16:11:14 UTC", "last_seen": "2026-03-14 16:11:14 UTC", "sightings": 1 }, { "indicator": "https://forest-entity.cc/telegram.txt", "indicator_type": "url", "source": "URLhaus", "tags": [ "ascii", "CountLoader", "powershell", "ps1" ], "first_seen": "2026-03-14 16:11:11 UTC", "last_seen": "2026-03-14 16:11:11 UTC", "sightings": 1 }, { "indicator": "https://zontiz.com/V%D0%B5b%D0%BE%D0%BEt%20v3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "pw-2026", "zip" ], "first_seen": "2026-03-14 16:10:09 UTC", "last_seen": "2026-03-14 16:10:09 UTC", "sightings": 1 }, { "indicator": "http://222.139.42.166:47014/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 16:09:10 UTC", "last_seen": "2026-03-14 16:09:10 UTC", "sightings": 1 }, { "indicator": "http://71.207.128.92:52994/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-14 16:07:21 UTC", "last_seen": "2026-03-14 16:07:21 UTC", "sightings": 1 }, { "indicator": "http://182.121.199.71:42585/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-14 16:04:10 UTC", "last_seen": "2026-03-14 16:04:10 UTC", "sightings": 1 }, { "indicator": "http://182.116.121.161:58446/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 16:03:21 UTC", "last_seen": "2026-03-14 16:03:21 UTC", "sightings": 1 }, { "indicator": "https://uc3132c9008b1e5420b76bdaf758.dl.dropboxusercontent.com/cd/0/get/C8rULyzvBDgMS9QY34jB_xWFAPhDl588lScwhQa_YIRtfBTih3pq3HDi-18TkUpUN6g7E2IfwfTKP5l_4speOrLNc7fovz99aVBICQ17eA_ETRVyLAbBfIbZXQVGNIq2XvtSYdx64xUQfMw6FVMWDkq5/file?_download_id=768772768614499747969414208506844380649702413552802851208919287651&_log_download_success=1&_notify_domain=www.dropbox.com", "indicator_type": "url", "source": "URLhaus", "tags": [ "pw-123", "zip" ], "first_seen": "2026-03-14 16:03:07 UTC", "last_seen": "2026-03-14 16:03:07 UTC", "sightings": 1 }, { "indicator": "http://110.36.72.162:45737/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 16:01:17 UTC", "last_seen": "2026-03-14 16:01:17 UTC", "sightings": 1 }, { "indicator": "http://83.142.209.47/wlan.mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-14 16:01:15 UTC", "last_seen": "2026-03-14 16:01:15 UTC", "sightings": 1 }, { "indicator": "http://83.142.209.47/wlan.m68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-14 16:01:15 UTC", "last_seen": "2026-03-14 16:01:15 UTC", "sightings": 1 }, { "indicator": "http://83.142.209.47/wlan.ppc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-14 16:01:14 UTC", "last_seen": "2026-03-14 16:01:14 UTC", "sightings": 1 }, { "indicator": "http://83.142.209.47/wlan.arm", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "hajime", "mirai", "ua-wget" ], "first_seen": "2026-03-14 16:01:14 UTC", "last_seen": "2026-03-14 16:01:14 UTC", "sightings": 1 }, { "indicator": "http://94.156.152.233/hiddenbin/Space.ppc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-14 16:00:20 UTC", "last_seen": "2026-03-14 16:00:20 UTC", "sightings": 1 }, { "indicator": "http://182.116.121.161:58446/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 16:00:20 UTC", "last_seen": "2026-03-14 16:00:20 UTC", "sightings": 1 }, { "indicator": "http://83.142.209.47/wlan.arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "hajime", "mirai", "ua-wget" ], "first_seen": "2026-03-14 16:00:20 UTC", "last_seen": "2026-03-14 16:00:20 UTC", "sightings": 1 }, { "indicator": "http://83.142.209.47/wlan.arm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "hajime", "mirai", "ua-wget" ], "first_seen": "2026-03-14 16:00:20 UTC", "last_seen": "2026-03-14 16:00:20 UTC", "sightings": 1 }, { "indicator": "http://83.142.209.47/wlan.spc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-14 16:00:20 UTC", "last_seen": "2026-03-14 16:00:20 UTC", "sightings": 1 }, { "indicator": "http://83.142.209.47/wlan.arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "hajime", "mirai", "ua-wget" ], "first_seen": "2026-03-14 16:00:20 UTC", "last_seen": "2026-03-14 16:00:20 UTC", "sightings": 1 }, { "indicator": "http://83.142.209.47/wlan.arc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "hajime", "mirai", "ua-wget" ], "first_seen": "2026-03-14 16:00:20 UTC", "last_seen": "2026-03-14 16:00:20 UTC", "sightings": 1 }, { "indicator": "http://83.142.209.47/wlan.x86", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-14 16:00:20 UTC", "last_seen": "2026-03-14 16:00:20 UTC", "sightings": 1 }, { "indicator": "http://94.156.152.233/hiddenbin/Space.m68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-14 16:00:19 UTC", "last_seen": "2026-03-14 16:00:19 UTC", "sightings": 1 }, { "indicator": "http://94.156.152.233/hiddenbin/Space.sh4", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-14 16:00:19 UTC", "last_seen": "2026-03-14 16:00:19 UTC", "sightings": 1 }, { "indicator": "http://94.156.152.233/hiddenbin/Space.arc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-14 16:00:19 UTC", "last_seen": "2026-03-14 16:00:19 UTC", "sightings": 1 }, { "indicator": "http://94.156.152.233/hiddenbin/Space.x86", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-14 16:00:18 UTC", "last_seen": "2026-03-14 16:00:18 UTC", "sightings": 1 }, { "indicator": "http://94.156.152.233/hiddenbin/Space.arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-14 16:00:18 UTC", "last_seen": "2026-03-14 16:00:18 UTC", "sightings": 1 }, { "indicator": "http://94.156.152.233/hiddenbin/Space.arm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-14 16:00:18 UTC", "last_seen": "2026-03-14 16:00:18 UTC", "sightings": 1 }, { "indicator": "http://94.156.152.233/hiddenbin/Space.i686", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-14 16:00:18 UTC", "last_seen": "2026-03-14 16:00:18 UTC", "sightings": 1 }, { "indicator": "http://94.156.152.233/hiddenbin/Space.arm", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-14 16:00:18 UTC", "last_seen": "2026-03-14 16:00:18 UTC", "sightings": 1 }, { "indicator": "http://94.156.152.233/hiddenbin/Space.mpsl", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-14 16:00:18 UTC", "last_seen": "2026-03-14 16:00:18 UTC", "sightings": 1 }, { "indicator": "http://94.156.152.233/hiddenbin/Space.x86_64", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-14 16:00:18 UTC", "last_seen": "2026-03-14 16:00:18 UTC", "sightings": 1 }, { "indicator": "http://94.156.152.233/hiddenbin/Space.mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-14 16:00:18 UTC", "last_seen": "2026-03-14 16:00:18 UTC", "sightings": 1 }, { "indicator": "http://94.156.152.233/hiddenbin/Space.mips64", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-14 16:00:18 UTC", "last_seen": "2026-03-14 16:00:18 UTC", "sightings": 1 }, { "indicator": "http://94.156.152.233/hiddenbin/Space.sparc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-14 16:00:18 UTC", "last_seen": "2026-03-14 16:00:18 UTC", "sightings": 1 }, { "indicator": "http://94.156.152.233/hiddenbin/Space.arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-14 16:00:10 UTC", "last_seen": "2026-03-14 16:00:10 UTC", "sightings": 1 }, { "indicator": "http://110.37.66.198:47755/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 15:57:16 UTC", "last_seen": "2026-03-14 15:57:16 UTC", "sightings": 1 }, { "indicator": "https://local-host.life/download_raw/gNhDrkROldD6EkRc/Xeno.png", "indicator_type": "url", "source": "URLhaus", "tags": [ "exe", "SalatStealer" ], "first_seen": "2026-03-14 15:54:14 UTC", "last_seen": "2026-03-14 15:54:14 UTC", "sightings": 1 }, { "indicator": "http://125.45.25.52:50457/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 15:51:20 UTC", "last_seen": "2026-03-14 15:51:20 UTC", "sightings": 1 }, { "indicator": "http://222.139.42.166:47014/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 15:49:24 UTC", "last_seen": "2026-03-14 15:49:24 UTC", "sightings": 1 }, { "indicator": "https://summer138proxel.site/aplikasi/Summer138.apk", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-14 15:42:42 UTC", "last_seen": "2026-03-14 15:42:42 UTC", "sightings": 1 }, { "indicator": "https://csplay168.site/aplikasi/Csplay138.apk", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-14 15:42:42 UTC", "last_seen": "2026-03-14 15:42:42 UTC", "sightings": 1 }, { "indicator": "https://pub-20c44d94ab5743fbb2453666aab8608b.r2.dev/SECURITY_DOCUMENT_2025.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "DattoRMM" ], "first_seen": "2026-03-14 15:42:18 UTC", "last_seen": "2026-03-14 15:42:18 UTC", "sightings": 1 }, { "indicator": "https://pub-7a7113e589a343048ed0ffdfeb7cd4a6.r2.dev/Zoom%20Setup.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "DattoRMM" ], "first_seen": "2026-03-14 15:42:17 UTC", "last_seen": "2026-03-14 15:42:17 UTC", "sightings": 1 }, { "indicator": "http://45.126.209.218:8080/bins/bot.ppc64", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-14 15:42:11 UTC", "last_seen": "2026-03-14 15:42:11 UTC", "sightings": 1 }, { "indicator": "http://45.126.209.218:8080/bins/bot.mips64", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-14 15:42:11 UTC", "last_seen": "2026-03-14 15:42:11 UTC", "sightings": 1 }, { "indicator": "http://45.126.209.218:8080/bins/bot.rv64", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-14 15:42:10 UTC", "last_seen": "2026-03-14 15:42:10 UTC", "sightings": 1 }, { "indicator": "http://45.126.209.218:8080/bins/bot.mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-14 15:42:10 UTC", "last_seen": "2026-03-14 15:42:10 UTC", "sightings": 1 }, { "indicator": "http://45.126.209.218:8080/bins/bot.arm64", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-14 15:42:10 UTC", "last_seen": "2026-03-14 15:42:10 UTC", "sightings": 1 }, { "indicator": "http://45.126.209.218:8080/bins/bot.arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-14 15:42:10 UTC", "last_seen": "2026-03-14 15:42:10 UTC", "sightings": 1 }, { "indicator": "http://45.126.209.218:8080/bins/bot.sh4", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-14 15:42:10 UTC", "last_seen": "2026-03-14 15:42:10 UTC", "sightings": 1 }, { "indicator": "http://45.126.209.218:8080/bins/bot.mpsl", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-14 15:42:10 UTC", "last_seen": "2026-03-14 15:42:10 UTC", "sightings": 1 }, { "indicator": "http://45.126.209.218:8080/bins/bot.x86", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-14 15:42:10 UTC", "last_seen": "2026-03-14 15:42:10 UTC", "sightings": 1 }, { "indicator": "http://45.126.209.218:8080/bins/bot.spc", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-14 15:42:10 UTC", "last_seen": "2026-03-14 15:42:10 UTC", "sightings": 1 }, { "indicator": "http://45.126.209.218:8080/bins/bot.x64", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-14 15:42:10 UTC", "last_seen": "2026-03-14 15:42:10 UTC", "sightings": 1 }, { "indicator": "http://45.126.209.218:8080/bins/bot.m68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-14 15:42:10 UTC", "last_seen": "2026-03-14 15:42:10 UTC", "sightings": 1 }, { "indicator": "http://45.126.209.218:8080/bins/bot.ppc", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-14 15:42:10 UTC", "last_seen": "2026-03-14 15:42:10 UTC", "sightings": 1 }, { "indicator": "http://5.175.223.124/w.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai", "script" ], "first_seen": "2026-03-14 15:42:09 UTC", "last_seen": "2026-03-14 15:42:09 UTC", "sightings": 1 }, { "indicator": "http://5.175.223.113:2342/nigga.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "ascii" ], "first_seen": "2026-03-14 15:42:05 UTC", "last_seen": "2026-03-14 15:42:05 UTC", "sightings": 1 }, { "indicator": "http://125.43.230.227:40606/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 15:41:16 UTC", "last_seen": "2026-03-14 15:41:16 UTC", "sightings": 1 }, { "indicator": "http://203.203.38.27:43092/.i", "indicator_type": "url", "source": "URLhaus", "tags": [ "hajime" ], "first_seen": "2026-03-14 15:41:10 UTC", "last_seen": "2026-03-14 15:41:10 UTC", "sightings": 1 }, { "indicator": "http://45.126.209.218:8080/bins/bot_opt.arm64", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-14 15:41:08 UTC", "last_seen": "2026-03-14 15:41:08 UTC", "sightings": 1 }, { "indicator": "http://45.126.209.218:8080/bins/bot_opt.mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-14 15:41:08 UTC", "last_seen": "2026-03-14 15:41:08 UTC", "sightings": 1 }, { "indicator": "http://45.126.209.218:8080/bins/bot_opt.arm", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-14 15:41:08 UTC", "last_seen": "2026-03-14 15:41:08 UTC", "sightings": 1 }, { "indicator": "http://45.126.209.218:8080/bins/bot_opt.x64", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-14 15:41:08 UTC", "last_seen": "2026-03-14 15:41:08 UTC", "sightings": 1 }, { "indicator": "http://120.28.216.187:41865/Mozi.m", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-14 15:41:07 UTC", "last_seen": "2026-03-14 15:41:07 UTC", "sightings": 1 }, { "indicator": "http://45.126.209.218:8080/bins/bot.arm", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-14 15:41:07 UTC", "last_seen": "2026-03-14 15:41:07 UTC", "sightings": 1 }, { "indicator": "https://qsve.cyrd.live/Cyrex.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "pw-cyrex", "Vidar" ], "first_seen": "2026-03-14 15:41:06 UTC", "last_seen": "2026-03-14 15:41:06 UTC", "sightings": 1 }, { "indicator": "http://110.37.66.198:47755/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 15:36:24 UTC", "last_seen": "2026-03-14 15:36:24 UTC", "sightings": 1 }, { "indicator": "http://119.117.164.121:49924/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 15:27:17 UTC", "last_seen": "2026-03-14 15:27:17 UTC", "sightings": 1 }, { "indicator": "https://sap0-node.zecoko.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 15:27:07 UTC", "last_seen": "2026-03-14 15:27:07 UTC", "sightings": 1 }, { "indicator": "http://222.140.226.199:45801/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 15:26:18 UTC", "last_seen": "2026-03-14 15:26:18 UTC", "sightings": 1 }, { "indicator": "http://193.31.201.20:52137/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 15:22:23 UTC", "last_seen": "2026-03-14 15:22:23 UTC", "sightings": 1 }, { "indicator": "https://cube.zecoko.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 15:19:08 UTC", "last_seen": "2026-03-14 15:19:08 UTC", "sightings": 1 }, { "indicator": "https://yxngqe.cutlog.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 15:09:09 UTC", "last_seen": "2026-03-14 15:09:09 UTC", "sightings": 1 }, { "indicator": "https://courie-sprou.cutlog.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 15:03:10 UTC", "last_seen": "2026-03-14 15:03:10 UTC", "sightings": 1 }, { "indicator": "http://222.140.226.199:45801/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 14:59:22 UTC", "last_seen": "2026-03-14 14:59:22 UTC", "sightings": 1 }, { "indicator": "https://bufferforge.onfloor.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 14:59:12 UTC", "last_seen": "2026-03-14 14:59:12 UTC", "sightings": 1 }, { "indicator": "https://mirogv.onfloor.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 14:52:08 UTC", "last_seen": "2026-03-14 14:52:08 UTC", "sightings": 1 }, { "indicator": "http://42.229.189.111:45553/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 14:49:24 UTC", "last_seen": "2026-03-14 14:49:24 UTC", "sightings": 1 }, { "indicator": "http://42.229.189.111:45553/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 14:47:13 UTC", "last_seen": "2026-03-14 14:47:13 UTC", "sightings": 1 }, { "indicator": "https://alpha2-point.uptrend.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 14:47:08 UTC", "last_seen": "2026-03-14 14:47:08 UTC", "sightings": 1 }, { "indicator": "https://wuurrgc.uptrend.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 14:39:08 UTC", "last_seen": "2026-03-14 14:39:08 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.7/files/7362035837/rBOBWhe.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543", "LummaStealer" ], "first_seen": "2026-03-14 14:37:08 UTC", "last_seen": "2026-03-14 14:37:08 UTC", "sightings": 1 }, { "indicator": "http://42.87.111.156:49936/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 14:35:20 UTC", "last_seen": "2026-03-14 14:35:20 UTC", "sightings": 1 }, { "indicator": "http://115.61.120.240:40150/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 14:34:12 UTC", "last_seen": "2026-03-14 14:34:12 UTC", "sightings": 1 }, { "indicator": "https://temp.sh/DLMCY/acr-ishak-639090818501370314.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-14 14:34:06 UTC", "last_seen": "2026-03-14 14:34:06 UTC", "sightings": 1 }, { "indicator": "https://posteroutlet.getontra.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 14:18:12 UTC", "last_seen": "2026-03-14 14:18:12 UTC", "sightings": 1 }, { "indicator": "http://110.37.65.251:42063/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 14:16:21 UTC", "last_seen": "2026-03-14 14:16:21 UTC", "sightings": 1 }, { "indicator": "http://61.52.117.19:42787/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 14:13:32 UTC", "last_seen": "2026-03-14 14:13:32 UTC", "sightings": 1 }, { "indicator": "https://genom-inde.getontra.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 14:11:10 UTC", "last_seen": "2026-03-14 14:11:10 UTC", "sightings": 1 }, { "indicator": "http://110.37.65.251:42063/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 14:08:27 UTC", "last_seen": "2026-03-14 14:08:27 UTC", "sightings": 1 }, { "indicator": "https://cvk6.freespe.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 14:07:08 UTC", "last_seen": "2026-03-14 14:07:08 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.7/files/8616879702/6KlKqZ9.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543", "WallStealer" ], "first_seen": "2026-03-14 14:07:07 UTC", "last_seen": "2026-03-14 14:07:07 UTC", "sightings": 1 }, { "indicator": "http://124.129.11.33:41561/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 14:03:16 UTC", "last_seen": "2026-03-14 14:03:16 UTC", "sightings": 1 }, { "indicator": "https://birdcast.freespe.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 14:03:09 UTC", "last_seen": "2026-03-14 14:03:09 UTC", "sightings": 1 }, { "indicator": "http://42.87.111.156:49936/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 14:02:16 UTC", "last_seen": "2026-03-14 14:02:16 UTC", "sightings": 1 }, { "indicator": "http://125.41.8.110:48703/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 13:59:19 UTC", "last_seen": "2026-03-14 13:59:19 UTC", "sightings": 1 }, { "indicator": "https://uanwzyl.lowflo.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 13:50:08 UTC", "last_seen": "2026-03-14 13:50:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/TagBitImagine18/word-cracked-2026/releases/download/new/Word_16.0.19127_x64.rar", "indicator_type": "url", "source": "URLhaus", "tags": [ "pw-6601", "rar" ], "first_seen": "2026-03-14 13:49:26 UTC", "last_seen": "2026-03-14 13:49:26 UTC", "sightings": 1 }, { "indicator": "http://120.28.189.137:36972/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-14 13:48:20 UTC", "last_seen": "2026-03-14 13:48:20 UTC", "sightings": 1 }, { "indicator": "https://rekr.lowflo.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 13:47:09 UTC", "last_seen": "2026-03-14 13:47:09 UTC", "sightings": 1 }, { "indicator": "https://softgui.stoppit.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 13:44:07 UTC", "last_seen": "2026-03-14 13:44:07 UTC", "sightings": 1 }, { "indicator": "https://m0fb.stoppit.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 13:41:09 UTC", "last_seen": "2026-03-14 13:41:09 UTC", "sightings": 1 }, { "indicator": "http://125.41.8.110:48703/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 13:36:21 UTC", "last_seen": "2026-03-14 13:36:21 UTC", "sightings": 1 }, { "indicator": "https://wmajq.getron.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 13:33:08 UTC", "last_seen": "2026-03-14 13:33:08 UTC", "sightings": 1 }, { "indicator": "http://80.253.251.8:5225/REFORESTGAL.VILAR-SL_NIEcopiaAusweis.pdf.lnk", "indicator_type": "url", "source": "URLhaus", "tags": [ "opendir", "rat", "remcos", "RemcosRAT", "WsgiDAV" ], "first_seen": "2026-03-14 13:32:06 UTC", "last_seen": "2026-03-14 13:32:06 UTC", "sightings": 1 }, { "indicator": "http://119.186.141.211:39086/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 13:31:45 UTC", "last_seen": "2026-03-14 13:31:45 UTC", "sightings": 1 }, { "indicator": "http://70.39.180.195/py4.y", "indicator_type": "url", "source": "URLhaus", "tags": [ "BlackMoon", "Loader", "opendir", "WsgiDAV" ], "first_seen": "2026-03-14 13:31:32 UTC", "last_seen": "2026-03-14 13:31:32 UTC", "sightings": 1 }, { "indicator": "http://5.175.223.113:5001/mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-14 13:31:32 UTC", "last_seen": "2026-03-14 13:31:32 UTC", "sightings": 1 }, { "indicator": "http://5.175.223.113:5001/mipsle", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-14 13:31:32 UTC", "last_seen": "2026-03-14 13:31:32 UTC", "sightings": 1 }, { "indicator": "http://5.175.223.113:5001/arm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-14 13:31:31 UTC", "last_seen": "2026-03-14 13:31:31 UTC", "sightings": 1 }, { "indicator": "http://5.175.223.113:5001/android_arm", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-14 13:31:31 UTC", "last_seen": "2026-03-14 13:31:31 UTC", "sightings": 1 }, { "indicator": "http://5.175.223.113:5001/arm", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-14 13:31:31 UTC", "last_seen": "2026-03-14 13:31:31 UTC", "sightings": 1 }, { "indicator": "http://5.175.223.113:5001/i386", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-14 13:31:31 UTC", "last_seen": "2026-03-14 13:31:31 UTC", "sightings": 1 }, { "indicator": "http://5.175.223.113:5001/arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-14 13:31:30 UTC", "last_seen": "2026-03-14 13:31:30 UTC", "sightings": 1 }, { "indicator": "http://5.175.223.113:2342/bins/xfr.x64", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-14 13:31:30 UTC", "last_seen": "2026-03-14 13:31:30 UTC", "sightings": 1 }, { "indicator": "http://5.175.223.113:5001/armv7l", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-14 13:31:30 UTC", "last_seen": "2026-03-14 13:31:30 UTC", "sightings": 1 }, { "indicator": "http://5.175.223.113:2342/bins/byte.arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-14 13:31:30 UTC", "last_seen": "2026-03-14 13:31:30 UTC", "sightings": 1 }, { "indicator": "http://5.175.223.113:5001/arm64", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-14 13:31:29 UTC", "last_seen": "2026-03-14 13:31:29 UTC", "sightings": 1 }, { "indicator": "https://xbusrwue.zecoko.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 13:31:28 UTC", "last_seen": "2026-03-14 13:31:28 UTC", "sightings": 1 }, { "indicator": "http://5.175.223.113:2342/bins/xfr.arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-14 13:31:27 UTC", "last_seen": "2026-03-14 13:31:27 UTC", "sightings": 1 }, { "indicator": "http://5.175.223.113:2342/bins/xfr.arm", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-14 13:31:27 UTC", "last_seen": "2026-03-14 13:31:27 UTC", "sightings": 1 }, { "indicator": "http://5.175.223.113:5001/bot.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "exe", "mirai", "ua-wget" ], "first_seen": "2026-03-14 13:31:25 UTC", "last_seen": "2026-03-14 13:31:25 UTC", "sightings": 1 }, { "indicator": "http://5.175.223.113:2342/bins/xfr.arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-14 13:31:24 UTC", "last_seen": "2026-03-14 13:31:24 UTC", "sightings": 1 }, { "indicator": "http://mz13se.alfabon.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 13:31:24 UTC", "last_seen": "2026-03-14 13:31:24 UTC", "sightings": 1 }, { "indicator": "http://5.175.223.113:2342/bins/xfr.arm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-14 13:31:24 UTC", "last_seen": "2026-03-14 13:31:24 UTC", "sightings": 1 }, { "indicator": "http://5.175.223.113:2342/bins/xfr.mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-14 13:31:24 UTC", "last_seen": "2026-03-14 13:31:24 UTC", "sightings": 1 }, { "indicator": "http://5.175.223.113:2342/bins/xfr.m68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-14 13:31:24 UTC", "last_seen": "2026-03-14 13:31:24 UTC", "sightings": 1 }, { "indicator": "http://5.175.223.113:2342/bins/xfr.ppc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-14 13:31:24 UTC", "last_seen": "2026-03-14 13:31:24 UTC", "sightings": 1 }, { "indicator": "http://5.175.223.113:2342/bins/xfr.mpsl", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-14 13:31:24 UTC", "last_seen": "2026-03-14 13:31:24 UTC", "sightings": 1 }, { "indicator": "http://5.175.223.113:2342/bins/xfr.sh4", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-14 13:31:24 UTC", "last_seen": "2026-03-14 13:31:24 UTC", "sightings": 1 }, { "indicator": "http://110.36.23.65:54787/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 13:31:24 UTC", "last_seen": "2026-03-14 13:31:24 UTC", "sightings": 1 }, { "indicator": "http://5.175.223.113:2342/bins/bins.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai", "sh", "ua-wget" ], "first_seen": "2026-03-14 13:31:24 UTC", "last_seen": "2026-03-14 13:31:24 UTC", "sightings": 1 }, { "indicator": "http://94.156.152.238/bins/pmips", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai", "opendir" ], "first_seen": "2026-03-14 13:31:23 UTC", "last_seen": "2026-03-14 13:31:23 UTC", "sightings": 1 }, { "indicator": "http://5.175.223.113:5001/android_arm64", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-14 13:31:21 UTC", "last_seen": "2026-03-14 13:31:21 UTC", "sightings": 1 }, { "indicator": "http://94.156.152.238/bins/pm68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai", "opendir" ], "first_seen": "2026-03-14 13:31:21 UTC", "last_seen": "2026-03-14 13:31:21 UTC", "sightings": 1 }, { "indicator": "http://94.156.152.238/bins/pmpsl", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai", "opendir" ], "first_seen": "2026-03-14 13:31:21 UTC", "last_seen": "2026-03-14 13:31:21 UTC", "sightings": 1 }, { "indicator": "http://5.175.223.113:5001/amd64", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-14 13:31:19 UTC", "last_seen": "2026-03-14 13:31:19 UTC", "sightings": 1 }, { "indicator": "https://ooenm.zecoko.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 13:31:18 UTC", "last_seen": "2026-03-14 13:31:18 UTC", "sightings": 1 }, { "indicator": "http://213.165.45.163/Private/r.vbs", "indicator_type": "url", "source": "URLhaus", "tags": [ "DanaBot", "lnk", "opendir", "WsgiDAV" ], "first_seen": "2026-03-14 13:31:18 UTC", "last_seen": "2026-03-14 13:31:18 UTC", "sightings": 1 }, { "indicator": "https://shall-latt.alfabon.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-14 13:31:18 UTC", "last_seen": "2026-03-14 13:31:18 UTC", "sightings": 1 }, { "indicator": "http://94.156.152.238/bins/pppc", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai", "opendir" ], "first_seen": "2026-03-14 13:31:18 UTC", "last_seen": "2026-03-14 13:31:18 UTC", "sightings": 1 }, { "indicator": "http://5.175.223.113:5001/x86", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-14 13:31:18 UTC", "last_seen": "2026-03-14 13:31:18 UTC", "sightings": 1 }, { "indicator": "http://70.39.180.195/bat.cmd", "indicator_type": "url", "source": "URLhaus", "tags": [ "BlackMoon", "Loader", "opendir", "WsgiDAV" ], "first_seen": "2026-03-14 13:31:17 UTC", "last_seen": "2026-03-14 13:31:17 UTC", "sightings": 1 }, { "indicator": "http://94.156.152.238/bins/parm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai", "opendir" ], "first_seen": "2026-03-14 13:31:16 UTC", "last_seen": "2026-03-14 13:31:16 UTC", "sightings": 1 }, { "indicator": "http://94.156.152.238/bins/parm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai", "opendir" ], "first_seen": "2026-03-14 13:31:16 UTC", "last_seen": "2026-03-14 13:31:16 UTC", "sightings": 1 }, { "indicator": "http://94.156.152.238/bins/parm", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai", "opendir" ], "first_seen": "2026-03-14 13:31:15 UTC", "last_seen": "2026-03-14 13:31:15 UTC", "sightings": 1 }, { "indicator": "http://94.156.152.238/bins/px86", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai", "opendir" ], "first_seen": "2026-03-14 13:31:15 UTC", "last_seen": "2026-03-14 13:31:15 UTC", "sightings": 1 }, { "indicator": "https://mz13se.alfabon.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 13:31:15 UTC", "last_seen": "2026-03-14 13:31:15 UTC", "sightings": 1 }, { "indicator": "http://70.39.180.195/4.bat", "indicator_type": "url", "source": "URLhaus", "tags": [ "BlackMoon", "Loader", "opendir", "WsgiDAV" ], "first_seen": "2026-03-14 13:31:15 UTC", "last_seen": "2026-03-14 13:31:15 UTC", "sightings": 1 }, { "indicator": "http://5.175.223.113:2342/bins/byte.arm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-14 13:31:14 UTC", "last_seen": "2026-03-14 13:31:14 UTC", "sightings": 1 }, { "indicator": "http://5.175.223.113:2342/bins/xfr.x86", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-14 13:31:14 UTC", "last_seen": "2026-03-14 13:31:14 UTC", "sightings": 1 }, { "indicator": "https://mistshe.getron.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 13:31:14 UTC", "last_seen": "2026-03-14 13:31:14 UTC", "sightings": 1 }, { "indicator": "http://213.165.45.163/Quick_Access/Completed%20Interior%20Design.pdf.lnk", "indicator_type": "url", "source": "URLhaus", "tags": [ "DanaBot", "lnk", "opendir", "WsgiDAV" ], "first_seen": "2026-03-14 13:31:14 UTC", "last_seen": "2026-03-14 13:31:14 UTC", "sightings": 1 }, { "indicator": "http://80.253.251.8:5225/Ausweis.js", "indicator_type": "url", "source": "URLhaus", "tags": [ "opendir", "rat", "remcos", "WsgiDAV" ], "first_seen": "2026-03-14 13:31:14 UTC", "last_seen": "2026-03-14 13:31:14 UTC", "sightings": 1 }, { "indicator": "http://5.175.223.113:2342/bins/xfr.spc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-14 13:31:14 UTC", "last_seen": "2026-03-14 13:31:14 UTC", "sightings": 1 }, { "indicator": "http://175.148.164.67:59201/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 13:31:13 UTC", "last_seen": "2026-03-14 13:31:13 UTC", "sightings": 1 }, { "indicator": "http://94.156.152.238/bins/pspc", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai", "opendir" ], "first_seen": "2026-03-14 13:31:13 UTC", "last_seen": "2026-03-14 13:31:13 UTC", "sightings": 1 }, { "indicator": "http://94.156.152.238/bins/psh4", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai", "opendir" ], "first_seen": "2026-03-14 13:31:12 UTC", "last_seen": "2026-03-14 13:31:12 UTC", "sightings": 1 }, { "indicator": "http://94.156.152.238/bins/parm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai", "opendir" ], "first_seen": "2026-03-14 13:31:12 UTC", "last_seen": "2026-03-14 13:31:12 UTC", "sightings": 1 }, { "indicator": "http://tkthisww.space/bins/Space.i686", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "mirai", "opendir" ], "first_seen": "2026-03-14 13:31:10 UTC", "last_seen": "2026-03-14 13:31:10 UTC", "sightings": 1 }, { "indicator": "https://0tlbvf7p.windapp.digital/?=check&&actmn=dGhqPBijyVuTetBO", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-14 13:31:10 UTC", "last_seen": "2026-03-14 13:31:10 UTC", "sightings": 1 }, { "indicator": "http://5.175.223.113:5001/bins.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai", "sh", "ua-wget" ], "first_seen": "2026-03-14 13:15:20 UTC", "last_seen": "2026-03-14 13:15:20 UTC", "sightings": 1 }, { "indicator": "http://5.175.223.113:2342/bins/adbins.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "sh", "ua-wget" ], "first_seen": "2026-03-14 13:15:19 UTC", "last_seen": "2026-03-14 13:15:19 UTC", "sightings": 1 }, { "indicator": "http://tkthisww.space/bins/Space.arc", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "mirai", "opendir" ], "first_seen": "2026-03-14 13:15:17 UTC", "last_seen": "2026-03-14 13:15:17 UTC", "sightings": 1 }, { "indicator": "http://tkthisww.space/bins/Space.arm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "mirai", "opendir" ], "first_seen": "2026-03-14 13:15:17 UTC", "last_seen": "2026-03-14 13:15:17 UTC", "sightings": 1 }, { "indicator": "http://tkthisww.space/bins/Space.m68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "mirai", "opendir" ], "first_seen": "2026-03-14 13:15:17 UTC", "last_seen": "2026-03-14 13:15:17 UTC", "sightings": 1 }, { "indicator": "http://tkthisww.space/bins/Space.spc", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "mirai", "opendir" ], "first_seen": "2026-03-14 13:15:17 UTC", "last_seen": "2026-03-14 13:15:17 UTC", "sightings": 1 }, { "indicator": "http://tkthisww.space/bins/Space.x86", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "mirai", "opendir" ], "first_seen": "2026-03-14 13:15:17 UTC", "last_seen": "2026-03-14 13:15:17 UTC", "sightings": 1 }, { "indicator": "http://tkthisww.space/bins/Space.mpsl", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "mirai", "opendir" ], "first_seen": "2026-03-14 13:15:17 UTC", "last_seen": "2026-03-14 13:15:17 UTC", "sightings": 1 }, { "indicator": "http://tkthisww.space/bins/Space.arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "mirai", "opendir" ], "first_seen": "2026-03-14 13:15:17 UTC", "last_seen": "2026-03-14 13:15:17 UTC", "sightings": 1 }, { "indicator": "http://tkthisww.space/1.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "mirai", "opendir" ], "first_seen": "2026-03-14 13:15:17 UTC", "last_seen": "2026-03-14 13:15:17 UTC", "sightings": 1 }, { "indicator": "http://tkthisww.space/bins/Space.x86_64", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "mirai", "opendir" ], "first_seen": "2026-03-14 13:15:17 UTC", "last_seen": "2026-03-14 13:15:17 UTC", "sightings": 1 }, { "indicator": "http://94.156.152.233/bins/Space.ppc", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai", "opendir" ], "first_seen": "2026-03-14 13:15:16 UTC", "last_seen": "2026-03-14 13:15:16 UTC", "sightings": 1 }, { "indicator": "http://94.156.152.233/bins/Space.mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai", "opendir" ], "first_seen": "2026-03-14 13:15:16 UTC", "last_seen": "2026-03-14 13:15:16 UTC", "sightings": 1 }, { "indicator": "http://tkthisww.space/bins/Space.sh4", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "mirai", "opendir" ], "first_seen": "2026-03-14 13:15:16 UTC", "last_seen": "2026-03-14 13:15:16 UTC", "sightings": 1 }, { "indicator": "http://94.156.152.233/bins/Space.sh4", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai", "opendir" ], "first_seen": "2026-03-14 13:15:16 UTC", "last_seen": "2026-03-14 13:15:16 UTC", "sightings": 1 }, { "indicator": "http://94.156.152.233/bins/Space.spc", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai", "opendir" ], "first_seen": "2026-03-14 13:15:16 UTC", "last_seen": "2026-03-14 13:15:16 UTC", "sightings": 1 }, { "indicator": "http://94.156.152.233/bins/Space.arm", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai", "opendir" ], "first_seen": "2026-03-14 13:15:16 UTC", "last_seen": "2026-03-14 13:15:16 UTC", "sightings": 1 }, { "indicator": "http://94.156.152.233/bins/Space.arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai", "opendir" ], "first_seen": "2026-03-14 13:15:16 UTC", "last_seen": "2026-03-14 13:15:16 UTC", "sightings": 1 }, { "indicator": "http://94.156.152.233/bins/Space.x86", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai", "opendir" ], "first_seen": "2026-03-14 13:15:16 UTC", "last_seen": "2026-03-14 13:15:16 UTC", "sightings": 1 }, { "indicator": "http://94.156.152.233/bins/Space.arm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai", "opendir" ], "first_seen": "2026-03-14 13:15:16 UTC", "last_seen": "2026-03-14 13:15:16 UTC", "sightings": 1 }, { "indicator": "http://94.156.152.233/bins/Space.m68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai", "opendir" ], "first_seen": "2026-03-14 13:15:16 UTC", "last_seen": "2026-03-14 13:15:16 UTC", "sightings": 1 }, { "indicator": "http://94.156.152.233/bins/Space.i686", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai", "opendir" ], "first_seen": "2026-03-14 13:15:16 UTC", "last_seen": "2026-03-14 13:15:16 UTC", "sightings": 1 }, { "indicator": "http://94.156.152.233/bins/Space.arc", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai", "opendir" ], "first_seen": "2026-03-14 13:15:16 UTC", "last_seen": "2026-03-14 13:15:16 UTC", "sightings": 1 }, { "indicator": "http://94.156.152.233/1.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai", "opendir" ], "first_seen": "2026-03-14 13:15:16 UTC", "last_seen": "2026-03-14 13:15:16 UTC", "sightings": 1 }, { "indicator": "http://94.156.152.233/bins/Space.arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai", "opendir" ], "first_seen": "2026-03-14 13:15:16 UTC", "last_seen": "2026-03-14 13:15:16 UTC", "sightings": 1 }, { "indicator": "http://94.156.152.233/bins/Space.mpsl", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai", "opendir" ], "first_seen": "2026-03-14 13:15:16 UTC", "last_seen": "2026-03-14 13:15:16 UTC", "sightings": 1 }, { "indicator": "http://tkthisww.space/bins/Space.arm", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "mirai", "opendir" ], "first_seen": "2026-03-14 13:15:16 UTC", "last_seen": "2026-03-14 13:15:16 UTC", "sightings": 1 }, { "indicator": "http://tkthisww.space/bins/Space.ppc", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "mirai", "opendir" ], "first_seen": "2026-03-14 13:15:16 UTC", "last_seen": "2026-03-14 13:15:16 UTC", "sightings": 1 }, { "indicator": "http://tkthisww.space/bins/Space.arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "mirai", "opendir" ], "first_seen": "2026-03-14 13:15:16 UTC", "last_seen": "2026-03-14 13:15:16 UTC", "sightings": 1 }, { "indicator": "http://tkthisww.space/bins/Space.mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "mirai", "opendir" ], "first_seen": "2026-03-14 13:15:16 UTC", "last_seen": "2026-03-14 13:15:16 UTC", "sightings": 1 }, { "indicator": "http://94.156.152.233/bins/Space.x86_64", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai", "opendir" ], "first_seen": "2026-03-14 13:15:16 UTC", "last_seen": "2026-03-14 13:15:16 UTC", "sightings": 1 }, { "indicator": "https://svvit-vector.zecoko.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 13:13:08 UTC", "last_seen": "2026-03-14 13:13:08 UTC", "sightings": 1 }, { "indicator": "http://pornily.ai/bins/violetm68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "mirai", "opendir" ], "first_seen": "2026-03-14 13:12:06 UTC", "last_seen": "2026-03-14 13:12:06 UTC", "sightings": 1 }, { "indicator": "http://pornily.ai/bins/violetarm", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "mirai", "opendir" ], "first_seen": "2026-03-14 13:11:08 UTC", "last_seen": "2026-03-14 13:11:08 UTC", "sightings": 1 }, { "indicator": "http://pornily.ai/bins/violetarm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "mirai", "opendir" ], "first_seen": "2026-03-14 13:11:08 UTC", "last_seen": "2026-03-14 13:11:08 UTC", "sightings": 1 }, { "indicator": "http://pornily.ai/bins/violetmpsl", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "mirai", "opendir" ], "first_seen": "2026-03-14 13:11:07 UTC", "last_seen": "2026-03-14 13:11:07 UTC", "sightings": 1 }, { "indicator": "http://pornily.ai/bins/violetsh4", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "gafgyt", "mirai", "opendir" ], "first_seen": "2026-03-14 13:11:07 UTC", "last_seen": "2026-03-14 13:11:07 UTC", "sightings": 1 }, { "indicator": "http://pornily.ai/bins/violetspc", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "mirai", "opendir" ], "first_seen": "2026-03-14 13:11:06 UTC", "last_seen": "2026-03-14 13:11:06 UTC", "sightings": 1 }, { "indicator": "http://pornily.ai/bins/violetx86", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "mirai", "opendir" ], "first_seen": "2026-03-14 13:11:06 UTC", "last_seen": "2026-03-14 13:11:06 UTC", "sightings": 1 }, { "indicator": "http://pornily.ai/bins/violetarm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "mirai", "opendir" ], "first_seen": "2026-03-14 13:11:06 UTC", "last_seen": "2026-03-14 13:11:06 UTC", "sightings": 1 }, { "indicator": "http://pornily.ai/bins/violetarm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "mirai", "opendir" ], "first_seen": "2026-03-14 13:11:06 UTC", "last_seen": "2026-03-14 13:11:06 UTC", "sightings": 1 }, { "indicator": "http://pornily.ai/bins/violetppc", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "mirai", "opendir" ], "first_seen": "2026-03-14 13:11:06 UTC", "last_seen": "2026-03-14 13:11:06 UTC", "sightings": 1 }, { "indicator": "http://pornily.ai/bins/violetmips", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "mirai", "opendir" ], "first_seen": "2026-03-14 13:11:06 UTC", "last_seen": "2026-03-14 13:11:06 UTC", "sightings": 1 }, { "indicator": "http://45.84.222.22/bins/pppc", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai", "opendir" ], "first_seen": "2026-03-14 13:09:08 UTC", "last_seen": "2026-03-14 13:09:08 UTC", "sightings": 1 }, { "indicator": "http://45.84.222.22/bins/parm", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai", "opendir" ], "first_seen": "2026-03-14 13:09:07 UTC", "last_seen": "2026-03-14 13:09:07 UTC", "sightings": 1 }, { "indicator": "http://45.84.222.22/bins/pmpsl", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai", "opendir" ], "first_seen": "2026-03-14 13:09:07 UTC", "last_seen": "2026-03-14 13:09:07 UTC", "sightings": 1 }, { "indicator": "http://45.84.222.22/bins/pm68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai", "opendir" ], "first_seen": "2026-03-14 13:09:07 UTC", "last_seen": "2026-03-14 13:09:07 UTC", "sightings": 1 }, { "indicator": "http://45.84.222.22/bins/parm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai", "opendir" ], "first_seen": "2026-03-14 13:09:07 UTC", "last_seen": "2026-03-14 13:09:07 UTC", "sightings": 1 }, { "indicator": "http://45.84.222.22/bins/parm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai", "opendir" ], "first_seen": "2026-03-14 13:09:07 UTC", "last_seen": "2026-03-14 13:09:07 UTC", "sightings": 1 }, { "indicator": "http://45.84.222.22/bins/pmips", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai", "opendir" ], "first_seen": "2026-03-14 13:09:07 UTC", "last_seen": "2026-03-14 13:09:07 UTC", "sightings": 1 }, { "indicator": "http://45.84.222.22/bins/psh4", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai", "opendir" ], "first_seen": "2026-03-14 13:09:07 UTC", "last_seen": "2026-03-14 13:09:07 UTC", "sightings": 1 }, { "indicator": "http://45.84.222.22/bins/px86", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai", "opendir" ], "first_seen": "2026-03-14 13:09:07 UTC", "last_seen": "2026-03-14 13:09:07 UTC", "sightings": 1 }, { "indicator": "http://45.84.222.22/bins/parm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai", "opendir" ], "first_seen": "2026-03-14 13:09:07 UTC", "last_seen": "2026-03-14 13:09:07 UTC", "sightings": 1 }, { "indicator": "http://45.84.222.22/bins/pspc", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai", "opendir" ], "first_seen": "2026-03-14 13:09:07 UTC", "last_seen": "2026-03-14 13:09:07 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.48/sora.mpsl", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai", "opendir" ], "first_seen": "2026-03-14 13:08:06 UTC", "last_seen": "2026-03-14 13:08:06 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.48/android", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai", "opendir" ], "first_seen": "2026-03-14 13:07:11 UTC", "last_seen": "2026-03-14 13:07:11 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.48/sora.arm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai", "opendir" ], "first_seen": "2026-03-14 13:07:11 UTC", "last_seen": "2026-03-14 13:07:11 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.48/bins/parm", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai", "opendir" ], "first_seen": "2026-03-14 13:07:11 UTC", "last_seen": "2026-03-14 13:07:11 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.48/pmips", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai", "opendir" ], "first_seen": "2026-03-14 13:07:11 UTC", "last_seen": "2026-03-14 13:07:11 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.48/pmpsl", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai", "opendir" ], "first_seen": "2026-03-14 13:07:11 UTC", "last_seen": "2026-03-14 13:07:11 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.48/parm", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai", "opendir" ], "first_seen": "2026-03-14 13:07:11 UTC", "last_seen": "2026-03-14 13:07:11 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.48/bins/px86", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai", "opendir" ], "first_seen": "2026-03-14 13:07:11 UTC", "last_seen": "2026-03-14 13:07:11 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.48/px86", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai", "opendir" ], "first_seen": "2026-03-14 13:07:11 UTC", "last_seen": "2026-03-14 13:07:11 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.48/bins/pmpsl", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai", "opendir" ], "first_seen": "2026-03-14 13:07:11 UTC", "last_seen": "2026-03-14 13:07:11 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.48/sora.x86", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai", "opendir" ], "first_seen": "2026-03-14 13:07:10 UTC", "last_seen": "2026-03-14 13:07:10 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.48/sora.arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai", "opendir" ], "first_seen": "2026-03-14 13:07:10 UTC", "last_seen": "2026-03-14 13:07:10 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.48/sora.arm", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai", "opendir" ], "first_seen": "2026-03-14 13:07:10 UTC", "last_seen": "2026-03-14 13:07:10 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.48/sora.mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai", "opendir" ], "first_seen": "2026-03-14 13:07:10 UTC", "last_seen": "2026-03-14 13:07:10 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.48/sora.arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai", "opendir" ], "first_seen": "2026-03-14 13:07:10 UTC", "last_seen": "2026-03-14 13:07:10 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.48/bins/pmips", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai", "opendir" ], "first_seen": "2026-03-14 13:07:10 UTC", "last_seen": "2026-03-14 13:07:10 UTC", "sightings": 1 }, { "indicator": "http://120.28.189.137:36972/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-14 13:06:19 UTC", "last_seen": "2026-03-14 13:06:19 UTC", "sightings": 1 }, { "indicator": "http://45.156.87.79/bins/bin.x86_64", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai", "opendir" ], "first_seen": "2026-03-14 13:05:10 UTC", "last_seen": "2026-03-14 13:05:10 UTC", "sightings": 1 }, { "indicator": "http://175.148.164.67:59201/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 13:03:21 UTC", "last_seen": "2026-03-14 13:03:21 UTC", "sightings": 1 }, { "indicator": "http://110.39.239.111:42729/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 13:02:17 UTC", "last_seen": "2026-03-14 13:02:17 UTC", "sightings": 1 }, { "indicator": "https://yxmptwzw.cutlog.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 13:00:09 UTC", "last_seen": "2026-03-14 13:00:09 UTC", "sightings": 1 }, { "indicator": "https://mon1to-frame.cutlog.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 12:55:09 UTC", "last_seen": "2026-03-14 12:55:09 UTC", "sightings": 1 }, { "indicator": "https://lummeshar4.cutlog.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 12:50:08 UTC", "last_seen": "2026-03-14 12:50:08 UTC", "sightings": 1 }, { "indicator": "http://175.147.153.201:44260/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 12:49:13 UTC", "last_seen": "2026-03-14 12:49:13 UTC", "sightings": 1 }, { "indicator": "http://119.183.0.94:47695/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 12:48:17 UTC", "last_seen": "2026-03-14 12:48:17 UTC", "sightings": 1 }, { "indicator": "https://qpzv.onfloor.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 12:45:12 UTC", "last_seen": "2026-03-14 12:45:12 UTC", "sightings": 1 }, { "indicator": "https://rav3-plate.onfloor.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 12:42:08 UTC", "last_seen": "2026-03-14 12:42:08 UTC", "sightings": 1 }, { "indicator": "http://59.96.141.42:41477/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 12:41:12 UTC", "last_seen": "2026-03-14 12:41:12 UTC", "sightings": 1 }, { "indicator": "https://kk8z.onfloor.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 12:39:09 UTC", "last_seen": "2026-03-14 12:39:09 UTC", "sightings": 1 }, { "indicator": "http://182.122.249.40:44115/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 12:36:19 UTC", "last_seen": "2026-03-14 12:36:19 UTC", "sightings": 1 }, { "indicator": "https://neo-go1d.uptrend.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 12:36:08 UTC", "last_seen": "2026-03-14 12:36:08 UTC", "sightings": 1 }, { "indicator": "http://93.190.19.101:50789/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-14 12:35:12 UTC", "last_seen": "2026-03-14 12:35:12 UTC", "sightings": 1 }, { "indicator": "https://ultra-rnot1f.uptrend.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 12:33:08 UTC", "last_seen": "2026-03-14 12:33:08 UTC", "sightings": 1 }, { "indicator": "http://119.183.0.94:47695/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 12:31:10 UTC", "last_seen": "2026-03-14 12:31:10 UTC", "sightings": 1 }, { "indicator": "https://9ucjff.uptrend.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 12:29:06 UTC", "last_seen": "2026-03-14 12:29:06 UTC", "sightings": 1 }, { "indicator": "http://115.58.91.169:33968/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 12:26:17 UTC", "last_seen": "2026-03-14 12:26:17 UTC", "sightings": 1 }, { "indicator": "http://175.147.153.201:44260/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 12:25:17 UTC", "last_seen": "2026-03-14 12:25:17 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.7/files/8520831842/DEpKvYR.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-03-14 12:20:11 UTC", "last_seen": "2026-03-14 12:20:11 UTC", "sightings": 1 }, { "indicator": "https://bpuk6mpm.uptrend.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 12:20:10 UTC", "last_seen": "2026-03-14 12:20:10 UTC", "sightings": 1 }, { "indicator": "http://182.122.249.40:44115/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 12:19:08 UTC", "last_seen": "2026-03-14 12:19:08 UTC", "sightings": 1 }, { "indicator": "http://93.190.19.101:50789/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-14 12:10:23 UTC", "last_seen": "2026-03-14 12:10:23 UTC", "sightings": 1 }, { "indicator": "http://59.96.141.42:41477/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 12:09:17 UTC", "last_seen": "2026-03-14 12:09:17 UTC", "sightings": 1 }, { "indicator": "https://tnocf.uptrend.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 11:58:07 UTC", "last_seen": "2026-03-14 11:58:07 UTC", "sightings": 1 }, { "indicator": "https://defendtimber.uptrend.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 11:49:07 UTC", "last_seen": "2026-03-14 11:49:07 UTC", "sightings": 1 }, { "indicator": "http://115.63.9.181:54661/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 11:35:20 UTC", "last_seen": "2026-03-14 11:35:20 UTC", "sightings": 1 }, { "indicator": "http://110.37.85.160:35655/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 11:34:15 UTC", "last_seen": "2026-03-14 11:34:15 UTC", "sightings": 1 }, { "indicator": "https://covmarsh.onfloor.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 11:34:07 UTC", "last_seen": "2026-03-14 11:34:07 UTC", "sightings": 1 }, { "indicator": "https://pj74vo.onfloor.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 11:24:09 UTC", "last_seen": "2026-03-14 11:24:09 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.7/files/8012574236/eIXHiiV.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543", "QuasarRAT" ], "first_seen": "2026-03-14 11:22:27 UTC", "last_seen": "2026-03-14 11:22:27 UTC", "sightings": 1 }, { "indicator": "https://dl.armour-inc-down.net/data/?0.7472675867235361", "indicator_type": "url", "source": "URLhaus", "tags": [ "pw-NMCLDJX3SK2", "zip" ], "first_seen": "2026-03-14 11:22:22 UTC", "last_seen": "2026-03-14 11:22:22 UTC", "sightings": 1 }, { "indicator": "https://dl.armour-inc-down.net/data/?adobeziipatcher", "indicator_type": "url", "source": "URLhaus", "tags": [ "pw-NMCLDJX3SK2", "zip" ], "first_seen": "2026-03-14 11:22:21 UTC", "last_seen": "2026-03-14 11:22:21 UTC", "sightings": 1 }, { "indicator": "https://dl.armour-inc-down.net/data/?0.8661069921830455", "indicator_type": "url", "source": "URLhaus", "tags": [ "pw-NMCLDJX3SK2", "zip" ], "first_seen": "2026-03-14 11:20:34 UTC", "last_seen": "2026-03-14 11:20:34 UTC", "sightings": 1 }, { "indicator": "https://dl.armour-inc-down.net/data/?0.5729483705782163", "indicator_type": "url", "source": "URLhaus", "tags": [ "pw-NMCLDJX3SK2", "zip" ], "first_seen": "2026-03-14 11:19:55 UTC", "last_seen": "2026-03-14 11:19:55 UTC", "sightings": 1 }, { "indicator": "https://dl.armour-inc-down.net/data/?0.14384491502073593", "indicator_type": "url", "source": "URLhaus", "tags": [ "pw-NMCLDJX3SK2", "zip" ], "first_seen": "2026-03-14 11:19:52 UTC", "last_seen": "2026-03-14 11:19:52 UTC", "sightings": 1 }, { "indicator": "https://dl.armour-inc-down.net/data/?minitoolpowerdatarech7", "indicator_type": "url", "source": "URLhaus", "tags": [ "pw-NMCLDJX3SK2", "zip" ], "first_seen": "2026-03-14 11:19:27 UTC", "last_seen": "2026-03-14 11:19:27 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.7/files/7115306239/Lgkid1z.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543", "xworm" ], "first_seen": "2026-03-14 11:19:09 UTC", "last_seen": "2026-03-14 11:19:09 UTC", "sightings": 1 }, { "indicator": "https://hkwyagfe.onfloor.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 11:16:10 UTC", "last_seen": "2026-03-14 11:16:10 UTC", "sightings": 1 }, { "indicator": "https://dl.armour-inc-down.net/data/?imazingl9", "indicator_type": "url", "source": "URLhaus", "tags": [ "pw-NMCLDJX3SK2", "zip" ], "first_seen": "2026-03-14 11:16:03 UTC", "last_seen": "2026-03-14 11:16:03 UTC", "sightings": 1 }, { "indicator": "http://110.37.85.160:35655/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 11:13:19 UTC", "last_seen": "2026-03-14 11:13:19 UTC", "sightings": 1 }, { "indicator": "http://108.168.0.60:49880/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 11:13:18 UTC", "last_seen": "2026-03-14 11:13:18 UTC", "sightings": 1 }, { "indicator": "https://dl.armour-inc-down.net/data/?scrivenery4", "indicator_type": "url", "source": "URLhaus", "tags": [ "pw-NMCLDJX3SK2", "zip" ], "first_seen": "2026-03-14 11:13:01 UTC", "last_seen": "2026-03-14 11:13:01 UTC", "sightings": 1 }, { "indicator": "http://115.63.9.181:54661/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 11:11:14 UTC", "last_seen": "2026-03-14 11:11:14 UTC", "sightings": 1 }, { "indicator": "https://riveyby.onfloor.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 11:11:10 UTC", "last_seen": "2026-03-14 11:11:10 UTC", "sightings": 1 }, { "indicator": "https://dl.armour-inc-down.net/data/?WillToLiveOnlinea8", "indicator_type": "url", "source": "URLhaus", "tags": [ "pw-NMCLDJX3SK2", "zip" ], "first_seen": "2026-03-14 11:10:58 UTC", "last_seen": "2026-03-14 11:10:58 UTC", "sightings": 1 }, { "indicator": "https://github.com/BannerChameleonAura/excel-free-cracked-2026/releases/download/new/ExcelSetup_2026_x64.rar", "indicator_type": "url", "source": "URLhaus", "tags": [ "pw-7701", "rar" ], "first_seen": "2026-03-14 11:05:26 UTC", "last_seen": "2026-03-14 11:05:26 UTC", "sightings": 1 }, { "indicator": "http://110.37.32.228:57303/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-14 11:03:19 UTC", "last_seen": "2026-03-14 11:03:19 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/omernizam/AITOPIA-Chrome-Extension-Cracked/refs/heads/main/histomorphologically/Extension-Chrome-AITOPI-Cracked-v2.6.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 11:03:12 UTC", "last_seen": "2026-03-14 11:03:12 UTC", "sightings": 1 }, { "indicator": "https://github.com/omernizam/AITOPIA-Chrome-Extension-Cracked/raw/refs/heads/main/histomorphologically/Extension-Chrome-AITOPI-Cracked-v2.6.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-14 11:03:09 UTC", "last_seen": "2026-03-14 11:03:09 UTC", "sightings": 1 }, { "indicator": "https://cipmem.cutlog.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 10:59:08 UTC", "last_seen": "2026-03-14 10:59:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/simpotnii-2000se0/-Photoshop-BestCracked-2026/releases/download/new/Photoshop_2026-x64-setup.rar", "indicator_type": "url", "source": "URLhaus", "tags": [ "pw-photoshop2026", "rar" ], "first_seen": "2026-03-14 10:54:17 UTC", "last_seen": "2026-03-14 10:54:17 UTC", "sightings": 1 }, { "indicator": "https://github.com/HarshitJhajharia/Word-Free-Cracked-Desktop-2026/raw/refs/heads/main/Word_16.0.19127_x64.rar", "indicator_type": "url", "source": "URLhaus", "tags": [ "pw-9937", "rar" ], "first_seen": "2026-03-14 10:52:14 UTC", "last_seen": "2026-03-14 10:52:14 UTC", "sightings": 1 }, { "indicator": "https://clearadap.cutlog.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 10:45:08 UTC", "last_seen": "2026-03-14 10:45:08 UTC", "sightings": 1 }, { "indicator": "http://110.37.32.228:57303/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-14 10:36:11 UTC", "last_seen": "2026-03-14 10:36:11 UTC", "sightings": 1 }, { "indicator": "https://workeractive.cutlog.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 10:28:07 UTC", "last_seen": "2026-03-14 10:28:07 UTC", "sightings": 1 }, { "indicator": "http://112.248.81.107:54864/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 10:20:11 UTC", "last_seen": "2026-03-14 10:20:11 UTC", "sightings": 1 }, { "indicator": "http://199.16.59.214:58780/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-14 10:12:17 UTC", "last_seen": "2026-03-14 10:12:17 UTC", "sightings": 1 }, { "indicator": "https://4nch-route.cutlog.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 10:11:06 UTC", "last_seen": "2026-03-14 10:11:06 UTC", "sightings": 1 }, { "indicator": "http://221.15.23.3:50662/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 10:06:18 UTC", "last_seen": "2026-03-14 10:06:18 UTC", "sightings": 1 }, { "indicator": "https://sat-uplink-x.mondofresco.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 10:06:07 UTC", "last_seen": "2026-03-14 10:06:07 UTC", "sightings": 1 }, { "indicator": "http://199.16.59.214:58780/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-14 09:52:17 UTC", "last_seen": "2026-03-14 09:52:17 UTC", "sightings": 1 }, { "indicator": "https://gate-proxy-1.silberstern.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 09:50:08 UTC", "last_seen": "2026-03-14 09:50:08 UTC", "sightings": 1 }, { "indicator": "http://112.248.81.107:54864/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 09:49:15 UTC", "last_seen": "2026-03-14 09:49:15 UTC", "sightings": 1 }, { "indicator": "http://42.239.152.223:38754/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 09:47:18 UTC", "last_seen": "2026-03-14 09:47:18 UTC", "sightings": 1 }, { "indicator": "https://data-sync-v2.silberstern.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 09:45:11 UTC", "last_seen": "2026-03-14 09:45:11 UTC", "sightings": 1 }, { "indicator": "http://42.239.152.223:38754/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 09:44:25 UTC", "last_seen": "2026-03-14 09:44:25 UTC", "sightings": 1 }, { "indicator": "http://221.15.23.3:50662/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 09:41:22 UTC", "last_seen": "2026-03-14 09:41:22 UTC", "sightings": 1 }, { "indicator": "http://85.12.192.249:58322/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 09:37:21 UTC", "last_seen": "2026-03-14 09:37:21 UTC", "sightings": 1 }, { "indicator": "http://120.61.5.39:56555/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 09:33:25 UTC", "last_seen": "2026-03-14 09:33:25 UTC", "sightings": 1 }, { "indicator": "https://main-point-5.silberstern.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 09:27:09 UTC", "last_seen": "2026-03-14 09:27:09 UTC", "sightings": 1 }, { "indicator": "https://casual9-forge.stoppit.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 09:23:12 UTC", "last_seen": "2026-03-14 09:23:12 UTC", "sightings": 1 }, { "indicator": "http://109.236.46.199:58128/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-14 09:22:22 UTC", "last_seen": "2026-03-14 09:22:22 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.7/files/8167064937/Ypu2UPL.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey", "WallStealer" ], "first_seen": "2026-03-14 09:14:08 UTC", "last_seen": "2026-03-14 09:14:08 UTC", "sightings": 1 }, { "indicator": "https://sol-tideen.stoppit.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 09:11:07 UTC", "last_seen": "2026-03-14 09:11:07 UTC", "sightings": 1 }, { "indicator": "https://rnanif-gate.stoppit.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 09:07:11 UTC", "last_seen": "2026-03-14 09:07:11 UTC", "sightings": 1 }, { "indicator": "http://117.209.118.132:58306/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 09:06:22 UTC", "last_seen": "2026-03-14 09:06:22 UTC", "sightings": 1 }, { "indicator": "http://117.204.164.201:42017/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 09:05:30 UTC", "last_seen": "2026-03-14 09:05:30 UTC", "sightings": 1 }, { "indicator": "http://117.208.248.112:41228/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 09:01:26 UTC", "last_seen": "2026-03-14 09:01:26 UTC", "sightings": 1 }, { "indicator": "http://196.189.68.239:48037/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-14 08:58:24 UTC", "last_seen": "2026-03-14 08:58:24 UTC", "sightings": 1 }, { "indicator": "https://txeqa.stoppit.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 08:58:10 UTC", "last_seen": "2026-03-14 08:58:10 UTC", "sightings": 1 }, { "indicator": "http://110.37.24.11:59497/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 08:53:11 UTC", "last_seen": "2026-03-14 08:53:11 UTC", "sightings": 1 }, { "indicator": "https://al1g3-route.getron.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 08:51:09 UTC", "last_seen": "2026-03-14 08:51:09 UTC", "sightings": 1 }, { "indicator": "http://196.189.68.239:48037/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-14 08:48:22 UTC", "last_seen": "2026-03-14 08:48:22 UTC", "sightings": 1 }, { "indicator": "https://corepayload.getron.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 08:48:10 UTC", "last_seen": "2026-03-14 08:48:10 UTC", "sightings": 1 }, { "indicator": "http://59.91.168.88:54623/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 08:46:26 UTC", "last_seen": "2026-03-14 08:46:26 UTC", "sightings": 1 }, { "indicator": "http://117.209.118.132:58306/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 08:42:27 UTC", "last_seen": "2026-03-14 08:42:27 UTC", "sightings": 1 }, { "indicator": "http://60.19.216.144:54183/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 08:39:20 UTC", "last_seen": "2026-03-14 08:39:20 UTC", "sightings": 1 }, { "indicator": "http://60.23.236.108:40325/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 08:38:23 UTC", "last_seen": "2026-03-14 08:38:23 UTC", "sightings": 1 }, { "indicator": "http://188.113.43.72:44189/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 08:36:21 UTC", "last_seen": "2026-03-14 08:36:21 UTC", "sightings": 1 }, { "indicator": "https://neo-lo4d.getron.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 08:36:08 UTC", "last_seen": "2026-03-14 08:36:08 UTC", "sightings": 1 }, { "indicator": "http://195.177.94.62:34265/b/amd64", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-14 08:34:35 UTC", "last_seen": "2026-03-14 08:34:35 UTC", "sightings": 1 }, { "indicator": "http://195.177.94.62:34265/s/amd64", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "opendir", "ua-wget" ], "first_seen": "2026-03-14 08:34:35 UTC", "last_seen": "2026-03-14 08:34:35 UTC", "sightings": 1 }, { "indicator": "http://195.177.94.62:34265/b/386", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-14 08:34:35 UTC", "last_seen": "2026-03-14 08:34:35 UTC", "sightings": 1 }, { "indicator": "http://195.177.94.62:34265/s/linux", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "opendir", "ua-wget" ], "first_seen": "2026-03-14 08:34:35 UTC", "last_seen": "2026-03-14 08:34:35 UTC", "sightings": 1 }, { "indicator": "http://195.177.94.62:34265/s/mipsel", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "opendir", "ua-wget" ], "first_seen": "2026-03-14 08:34:35 UTC", "last_seen": "2026-03-14 08:34:35 UTC", "sightings": 1 }, { "indicator": "http://195.177.94.62:34265/s/kal32", "indicator_type": "url", "source": "URLhaus", "tags": [ "BillGates", "elf", "opendir", "ua-wget" ], "first_seen": "2026-03-14 08:34:35 UTC", "last_seen": "2026-03-14 08:34:35 UTC", "sightings": 1 }, { "indicator": "http://195.177.94.62:34265/b/kal64", "indicator_type": "url", "source": "URLhaus", "tags": [ "BillGates", "elf", "ua-wget" ], "first_seen": "2026-03-14 08:34:35 UTC", "last_seen": "2026-03-14 08:34:35 UTC", "sightings": 1 }, { "indicator": "http://195.177.94.62:34265/s/aarch64", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "opendir", "ua-wget" ], "first_seen": "2026-03-14 08:34:35 UTC", "last_seen": "2026-03-14 08:34:35 UTC", "sightings": 1 }, { "indicator": "http://195.177.94.62:34265/b/linux", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-14 08:34:34 UTC", "last_seen": "2026-03-14 08:34:34 UTC", "sightings": 1 }, { "indicator": "http://195.177.94.62:34265/b/mipsel", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-14 08:34:34 UTC", "last_seen": "2026-03-14 08:34:34 UTC", "sightings": 1 }, { "indicator": "http://195.177.94.62:34265/s/mips64el", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "opendir", "ua-wget" ], "first_seen": "2026-03-14 08:34:31 UTC", "last_seen": "2026-03-14 08:34:31 UTC", "sightings": 1 }, { "indicator": "http://195.177.94.62:34265/b/arm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-14 08:34:31 UTC", "last_seen": "2026-03-14 08:34:31 UTC", "sightings": 1 }, { "indicator": "http://195.177.94.62:34265/b/mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-14 08:34:31 UTC", "last_seen": "2026-03-14 08:34:31 UTC", "sightings": 1 }, { "indicator": "http://195.177.94.62:34265/s/mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "opendir", "ua-wget" ], "first_seen": "2026-03-14 08:34:30 UTC", "last_seen": "2026-03-14 08:34:30 UTC", "sightings": 1 }, { "indicator": "http://195.177.94.62:34265/s/arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "opendir", "ua-wget" ], "first_seen": "2026-03-14 08:34:29 UTC", "last_seen": "2026-03-14 08:34:29 UTC", "sightings": 1 }, { "indicator": "http://195.177.94.62:34265/s/386", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "opendir", "ua-wget" ], "first_seen": "2026-03-14 08:34:29 UTC", "last_seen": "2026-03-14 08:34:29 UTC", "sightings": 1 }, { "indicator": "http://195.177.94.62:34265/s/arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "opendir", "ua-wget" ], "first_seen": "2026-03-14 08:34:28 UTC", "last_seen": "2026-03-14 08:34:28 UTC", "sightings": 1 }, { "indicator": "http://195.177.94.62:34265/b/kal32", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-14 08:34:28 UTC", "last_seen": "2026-03-14 08:34:28 UTC", "sightings": 1 }, { "indicator": "http://195.177.94.62:34265/b/aarch64", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-14 08:34:28 UTC", "last_seen": "2026-03-14 08:34:28 UTC", "sightings": 1 }, { "indicator": "http://195.177.94.62:34265/b/mips64el", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-14 08:34:28 UTC", "last_seen": "2026-03-14 08:34:28 UTC", "sightings": 1 }, { "indicator": "http://195.177.94.62:34265/s/kal64", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "opendir", "ua-wget" ], "first_seen": "2026-03-14 08:34:28 UTC", "last_seen": "2026-03-14 08:34:28 UTC", "sightings": 1 }, { "indicator": "http://195.177.94.62:34265/s/arm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "opendir", "ua-wget" ], "first_seen": "2026-03-14 08:34:28 UTC", "last_seen": "2026-03-14 08:34:28 UTC", "sightings": 1 }, { "indicator": "http://195.177.94.62:34265/b/arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-14 08:34:28 UTC", "last_seen": "2026-03-14 08:34:28 UTC", "sightings": 1 }, { "indicator": "http://195.177.94.62:34265/b/kswpad", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-14 08:34:28 UTC", "last_seen": "2026-03-14 08:34:28 UTC", "sightings": 1 }, { "indicator": "http://195.177.94.62:34265/b/arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-14 08:34:28 UTC", "last_seen": "2026-03-14 08:34:28 UTC", "sightings": 1 }, { "indicator": "http://222.127.49.161:59572/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-14 08:34:28 UTC", "last_seen": "2026-03-14 08:34:28 UTC", "sightings": 1 }, { "indicator": "http://195.177.94.62:34265/s/mips64", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "opendir", "ua-wget" ], "first_seen": "2026-03-14 08:34:27 UTC", "last_seen": "2026-03-14 08:34:27 UTC", "sightings": 1 }, { "indicator": "http://195.177.94.62:34265/s/kswpad", "indicator_type": "url", "source": "URLhaus", "tags": [ "BillGates", "elf", "opendir", "ua-wget" ], "first_seen": "2026-03-14 08:34:26 UTC", "last_seen": "2026-03-14 08:34:26 UTC", "sightings": 1 }, { "indicator": "http://195.177.94.62:34265/b/mips64", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-14 08:34:26 UTC", "last_seen": "2026-03-14 08:34:26 UTC", "sightings": 1 }, { "indicator": "http://88.214.20.14/sshbins.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai" ], "first_seen": "2026-03-14 08:34:22 UTC", "last_seen": "2026-03-14 08:34:22 UTC", "sightings": 1 }, { "indicator": "http://83.142.209.47/i.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai", "script" ], "first_seen": "2026-03-14 08:34:08 UTC", "last_seen": "2026-03-14 08:34:08 UTC", "sightings": 1 }, { "indicator": "https://spartanspecialtycafe.com/challenge/cf", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-14 08:31:12 UTC", "last_seen": "2026-03-14 08:31:12 UTC", "sightings": 1 }, { "indicator": "https://heavens-gate.top/o", "indicator_type": "url", "source": "URLhaus", "tags": [ "KongTuke", "TAG-124" ], "first_seen": "2026-03-14 08:31:07 UTC", "last_seen": "2026-03-14 08:31:07 UTC", "sightings": 1 }, { "indicator": "https://zrd6omm630kx5p7.top/", "indicator_type": "url", "source": "URLhaus", "tags": [ "IcedID", "KongTuke", "Latrodectus" ], "first_seen": "2026-03-14 08:31:07 UTC", "last_seen": "2026-03-14 08:31:07 UTC", "sightings": 1 }, { "indicator": "https://indiasproperty.com/", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClickFix", "FakeCaptcha" ], "first_seen": "2026-03-14 08:31:06 UTC", "last_seen": "2026-03-14 08:31:06 UTC", "sightings": 1 }, { "indicator": "https://heavens-gate.top/m", "indicator_type": "url", "source": "URLhaus", "tags": [ "KongTuke", "TAG-124" ], "first_seen": "2026-03-14 08:31:06 UTC", "last_seen": "2026-03-14 08:31:06 UTC", "sightings": 1 }, { "indicator": "https://road-to-hell.top/o", "indicator_type": "url", "source": "URLhaus", "tags": [ "KongTuke", "TAG-124" ], "first_seen": "2026-03-14 08:31:06 UTC", "last_seen": "2026-03-14 08:31:06 UTC", "sightings": 1 }, { "indicator": "https://road-to-hell.top/m", "indicator_type": "url", "source": "URLhaus", "tags": [ "KongTuke", "TAG-124" ], "first_seen": "2026-03-14 08:31:06 UTC", "last_seen": "2026-03-14 08:31:06 UTC", "sightings": 1 }, { "indicator": "https://www.aliyunnorth-oss.top/Wps%20Office_x64_%20v1.0_win.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SilverFox" ], "first_seen": "2026-03-14 08:31:06 UTC", "last_seen": "2026-03-14 08:31:06 UTC", "sightings": 1 }, { "indicator": "http://43.228.157.127/all.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai", "script" ], "first_seen": "2026-03-14 08:30:07 UTC", "last_seen": "2026-03-14 08:30:07 UTC", "sightings": 1 }, { "indicator": "https://sellmeyourbiz.com/customers", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClickFix" ], "first_seen": "2026-03-14 08:30:06 UTC", "last_seen": "2026-03-14 08:30:06 UTC", "sightings": 1 }, { "indicator": "https://crystalion.getron.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 08:29:09 UTC", "last_seen": "2026-03-14 08:29:09 UTC", "sightings": 1 }, { "indicator": "http://123.12.42.68:49807/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 08:27:24 UTC", "last_seen": "2026-03-14 08:27:24 UTC", "sightings": 1 }, { "indicator": "https://dyncresten.alfabon.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 08:24:06 UTC", "last_seen": "2026-03-14 08:24:06 UTC", "sightings": 1 }, { "indicator": "https://matrixfjor.alfabon.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 08:19:09 UTC", "last_seen": "2026-03-14 08:19:09 UTC", "sightings": 1 }, { "indicator": "http://59.97.252.48:52103/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 08:15:09 UTC", "last_seen": "2026-03-14 08:15:09 UTC", "sightings": 1 }, { "indicator": "http://112.248.81.215:42388/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 08:09:20 UTC", "last_seen": "2026-03-14 08:09:20 UTC", "sightings": 1 }, { "indicator": "http://60.23.236.108:40325/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 08:08:20 UTC", "last_seen": "2026-03-14 08:08:20 UTC", "sightings": 1 }, { "indicator": "http://60.19.216.144:54183/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 08:08:18 UTC", "last_seen": "2026-03-14 08:08:18 UTC", "sightings": 1 }, { "indicator": "https://urbashallo.alfabon.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 08:08:07 UTC", "last_seen": "2026-03-14 08:08:07 UTC", "sightings": 1 }, { "indicator": "http://188.113.43.72:44189/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 08:07:20 UTC", "last_seen": "2026-03-14 08:07:20 UTC", "sightings": 1 }, { "indicator": "http://110.38.194.251:56051/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-14 08:07:19 UTC", "last_seen": "2026-03-14 08:07:19 UTC", "sightings": 1 }, { "indicator": "http://115.55.22.168:55758/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 08:04:15 UTC", "last_seen": "2026-03-14 08:04:15 UTC", "sightings": 1 }, { "indicator": "http://110.37.5.60:54812/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-14 08:01:16 UTC", "last_seen": "2026-03-14 08:01:16 UTC", "sightings": 1 }, { "indicator": "https://1qo3nia.alfabon.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 07:59:09 UTC", "last_seen": "2026-03-14 07:59:09 UTC", "sightings": 1 }, { "indicator": "http://123.11.77.92:34669/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 07:56:17 UTC", "last_seen": "2026-03-14 07:56:17 UTC", "sightings": 1 }, { "indicator": "http://110.37.5.60:54812/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-14 07:56:11 UTC", "last_seen": "2026-03-14 07:56:11 UTC", "sightings": 1 }, { "indicator": "http://110.37.35.89:44500/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 07:52:12 UTC", "last_seen": "2026-03-14 07:52:12 UTC", "sightings": 1 }, { "indicator": "http://110.37.35.89:44500/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 07:50:08 UTC", "last_seen": "2026-03-14 07:50:08 UTC", "sightings": 1 }, { "indicator": "https://6zlibyx.zecoko.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 07:50:08 UTC", "last_seen": "2026-03-14 07:50:08 UTC", "sightings": 1 }, { "indicator": "http://120.28.161.170:59527/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-14 07:49:09 UTC", "last_seen": "2026-03-14 07:49:09 UTC", "sightings": 1 }, { "indicator": "https://modernstrea.zecoko.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 07:44:08 UTC", "last_seen": "2026-03-14 07:44:08 UTC", "sightings": 1 }, { "indicator": "http://117.206.129.10:60370/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 07:38:14 UTC", "last_seen": "2026-03-14 07:38:14 UTC", "sightings": 1 }, { "indicator": "http://120.28.78.212:51553/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-14 07:37:07 UTC", "last_seen": "2026-03-14 07:37:07 UTC", "sightings": 1 }, { "indicator": "http://59.97.183.4:40498/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 07:35:15 UTC", "last_seen": "2026-03-14 07:35:15 UTC", "sightings": 1 }, { "indicator": "https://s77nqr.zecoko.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 07:34:08 UTC", "last_seen": "2026-03-14 07:34:08 UTC", "sightings": 1 }, { "indicator": "http://110.38.194.251:56051/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-14 07:33:07 UTC", "last_seen": "2026-03-14 07:33:07 UTC", "sightings": 1 }, { "indicator": "http://115.55.22.168:55758/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 07:29:16 UTC", "last_seen": "2026-03-14 07:29:16 UTC", "sightings": 1 }, { "indicator": "http://120.28.78.212:51553/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-14 07:25:15 UTC", "last_seen": "2026-03-14 07:25:15 UTC", "sightings": 1 }, { "indicator": "https://decodecoo.zecoko.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 07:22:09 UTC", "last_seen": "2026-03-14 07:22:09 UTC", "sightings": 1 }, { "indicator": "https://merfluxon8.farman.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 07:19:08 UTC", "last_seen": "2026-03-14 07:19:08 UTC", "sightings": 1 }, { "indicator": "http://110.39.226.242:36851/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 07:10:16 UTC", "last_seen": "2026-03-14 07:10:16 UTC", "sightings": 1 }, { "indicator": "http://42.231.70.11:38419/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 07:09:10 UTC", "last_seen": "2026-03-14 07:09:10 UTC", "sightings": 1 }, { "indicator": "http://117.206.129.10:60370/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 07:08:10 UTC", "last_seen": "2026-03-14 07:08:10 UTC", "sightings": 1 }, { "indicator": "http://59.97.183.4:40498/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 07:06:08 UTC", "last_seen": "2026-03-14 07:06:08 UTC", "sightings": 1 }, { "indicator": "http://115.55.221.61:46467/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 07:03:15 UTC", "last_seen": "2026-03-14 07:03:15 UTC", "sightings": 1 }, { "indicator": "https://ufv174r8.farman.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 06:49:10 UTC", "last_seen": "2026-03-14 06:49:10 UTC", "sightings": 1 }, { "indicator": "http://42.231.70.11:38419/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 06:45:19 UTC", "last_seen": "2026-03-14 06:45:19 UTC", "sightings": 1 }, { "indicator": "http://115.55.221.61:46467/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 06:45:19 UTC", "last_seen": "2026-03-14 06:45:19 UTC", "sightings": 1 }, { "indicator": "https://sub-5p3cime.farman.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 06:45:09 UTC", "last_seen": "2026-03-14 06:45:09 UTC", "sightings": 1 }, { "indicator": "http://61.53.81.215:57578/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 06:44:12 UTC", "last_seen": "2026-03-14 06:44:12 UTC", "sightings": 1 }, { "indicator": "http://120.84.214.130:36801/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 06:43:14 UTC", "last_seen": "2026-03-14 06:43:14 UTC", "sightings": 1 }, { "indicator": "http://117.209.84.36:36498/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 06:42:16 UTC", "last_seen": "2026-03-14 06:42:16 UTC", "sightings": 1 }, { "indicator": "http://110.36.23.65:54787/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 06:38:18 UTC", "last_seen": "2026-03-14 06:38:18 UTC", "sightings": 1 }, { "indicator": "http://61.3.133.82:53767/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 06:36:20 UTC", "last_seen": "2026-03-14 06:36:20 UTC", "sightings": 1 }, { "indicator": "http://117.209.84.36:36498/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 06:13:20 UTC", "last_seen": "2026-03-14 06:13:20 UTC", "sightings": 1 }, { "indicator": "http://110.37.40.215:37854/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 06:13:16 UTC", "last_seen": "2026-03-14 06:13:16 UTC", "sightings": 1 }, { "indicator": "http://61.53.81.215:57578/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 06:11:20 UTC", "last_seen": "2026-03-14 06:11:20 UTC", "sightings": 1 }, { "indicator": "https://quor-valeis.farman.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 06:09:09 UTC", "last_seen": "2026-03-14 06:09:09 UTC", "sightings": 1 }, { "indicator": "http://110.37.40.215:37854/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 06:01:10 UTC", "last_seen": "2026-03-14 06:01:10 UTC", "sightings": 1 }, { "indicator": "http://123.190.17.86:36352/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 05:52:14 UTC", "last_seen": "2026-03-14 05:52:14 UTC", "sightings": 1 }, { "indicator": "http://112.239.103.253:36912/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 05:44:07 UTC", "last_seen": "2026-03-14 05:44:07 UTC", "sightings": 1 }, { "indicator": "http://112.239.103.253:36912/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 05:28:14 UTC", "last_seen": "2026-03-14 05:28:14 UTC", "sightings": 1 }, { "indicator": "http://123.190.17.86:36352/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 05:22:22 UTC", "last_seen": "2026-03-14 05:22:22 UTC", "sightings": 1 }, { "indicator": "http://112.232.61.192:42825/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 05:18:19 UTC", "last_seen": "2026-03-14 05:18:19 UTC", "sightings": 1 }, { "indicator": "http://182.127.108.39:52750/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 05:14:17 UTC", "last_seen": "2026-03-14 05:14:17 UTC", "sightings": 1 }, { "indicator": "http://196.188.80.240:52371/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-14 05:11:17 UTC", "last_seen": "2026-03-14 05:11:17 UTC", "sightings": 1 }, { "indicator": "http://112.232.61.192:42825/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 05:00:41 UTC", "last_seen": "2026-03-14 05:00:41 UTC", "sightings": 1 }, { "indicator": "http://110.36.88.237:46387/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 04:54:15 UTC", "last_seen": "2026-03-14 04:54:15 UTC", "sightings": 1 }, { "indicator": "http://110.39.249.68:39655/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 04:50:17 UTC", "last_seen": "2026-03-14 04:50:17 UTC", "sightings": 1 }, { "indicator": "http://119.114.164.98:37877/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 04:50:15 UTC", "last_seen": "2026-03-14 04:50:15 UTC", "sightings": 1 }, { "indicator": "http://182.127.108.39:52750/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 04:48:10 UTC", "last_seen": "2026-03-14 04:48:10 UTC", "sightings": 1 }, { "indicator": "http://120.28.214.232:57963/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-14 04:48:10 UTC", "last_seen": "2026-03-14 04:48:10 UTC", "sightings": 1 }, { "indicator": "http://175.149.145.48:51079/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 04:41:15 UTC", "last_seen": "2026-03-14 04:41:15 UTC", "sightings": 1 }, { "indicator": "https://point-entry-b.petitjardin.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 04:31:10 UTC", "last_seen": "2026-03-14 04:31:10 UTC", "sightings": 1 }, { "indicator": "http://120.28.214.232:57963/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-14 04:29:15 UTC", "last_seen": "2026-03-14 04:29:15 UTC", "sightings": 1 }, { "indicator": "https://data-base-101.petitjardin.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 04:26:11 UTC", "last_seen": "2026-03-14 04:26:11 UTC", "sightings": 1 }, { "indicator": "http://39.77.228.43:50871/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 04:25:16 UTC", "last_seen": "2026-03-14 04:25:16 UTC", "sightings": 1 }, { "indicator": "http://115.61.116.139:59775/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 04:25:16 UTC", "last_seen": "2026-03-14 04:25:16 UTC", "sightings": 1 }, { "indicator": "http://115.50.205.123:37006/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 04:24:16 UTC", "last_seen": "2026-03-14 04:24:16 UTC", "sightings": 1 }, { "indicator": "http://119.114.164.98:37877/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 04:21:20 UTC", "last_seen": "2026-03-14 04:21:20 UTC", "sightings": 1 }, { "indicator": "http://110.39.233.226:32916/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 04:18:14 UTC", "last_seen": "2026-03-14 04:18:14 UTC", "sightings": 1 }, { "indicator": "https://base-infra-v3.petitjardin.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 04:14:07 UTC", "last_seen": "2026-03-14 04:14:07 UTC", "sightings": 1 }, { "indicator": "https://local-hub-01.ondeviva.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 04:11:07 UTC", "last_seen": "2026-03-14 04:11:07 UTC", "sightings": 1 }, { "indicator": "https://staff-portal-x.ondeviva.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 04:05:07 UTC", "last_seen": "2026-03-14 04:05:07 UTC", "sightings": 1 }, { "indicator": "http://39.77.228.43:50871/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 04:02:10 UTC", "last_seen": "2026-03-14 04:02:10 UTC", "sightings": 1 }, { "indicator": "https://work-flow-99.ondeviva.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 03:56:09 UTC", "last_seen": "2026-03-14 03:56:09 UTC", "sightings": 1 }, { "indicator": "http://110.39.233.226:32916/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 03:55:16 UTC", "last_seen": "2026-03-14 03:55:16 UTC", "sightings": 1 }, { "indicator": "http://115.50.205.123:37006/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 03:54:19 UTC", "last_seen": "2026-03-14 03:54:19 UTC", "sightings": 1 }, { "indicator": "http://115.61.116.139:59775/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 03:51:21 UTC", "last_seen": "2026-03-14 03:51:21 UTC", "sightings": 1 }, { "indicator": "https://office-link-z.ondeviva.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 03:50:09 UTC", "last_seen": "2026-03-14 03:50:09 UTC", "sightings": 1 }, { "indicator": "https://internal-dns-v.schnellkraft.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 03:44:07 UTC", "last_seen": "2026-03-14 03:44:07 UTC", "sightings": 1 }, { "indicator": "https://cache-dist-77.schnellkraft.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 03:34:07 UTC", "last_seen": "2026-03-14 03:34:07 UTC", "sightings": 1 }, { "indicator": "https://backend-core-v.schnellkraft.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 03:29:09 UTC", "last_seen": "2026-03-14 03:29:09 UTC", "sightings": 1 }, { "indicator": "https://remote-access-0.schnellkraft.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 03:23:10 UTC", "last_seen": "2026-03-14 03:23:10 UTC", "sightings": 1 }, { "indicator": "http://110.37.87.13:55094/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 03:22:17 UTC", "last_seen": "2026-03-14 03:22:17 UTC", "sightings": 1 }, { "indicator": "http://117.196.182.49:56581/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 03:19:23 UTC", "last_seen": "2026-03-14 03:19:23 UTC", "sightings": 1 }, { "indicator": "https://app-data-sync.bleusoleil.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 03:19:10 UTC", "last_seen": "2026-03-14 03:19:10 UTC", "sightings": 1 }, { "indicator": "http://59.88.130.93:53966/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 03:14:21 UTC", "last_seen": "2026-03-14 03:14:21 UTC", "sightings": 1 }, { "indicator": "http://110.37.87.13:55094/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 03:12:23 UTC", "last_seen": "2026-03-14 03:12:23 UTC", "sightings": 1 }, { "indicator": "https://web-proxy-12.bleusoleil.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 03:01:08 UTC", "last_seen": "2026-03-14 03:01:08 UTC", "sightings": 1 }, { "indicator": "http://61.52.117.19:42787/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 02:58:22 UTC", "last_seen": "2026-03-14 02:58:22 UTC", "sightings": 1 }, { "indicator": "http://175.165.81.140:54637/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 02:57:42 UTC", "last_seen": "2026-03-14 02:57:42 UTC", "sightings": 1 }, { "indicator": "https://srv-cluster-9.bleusoleil.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 02:57:08 UTC", "last_seen": "2026-03-14 02:57:08 UTC", "sightings": 1 }, { "indicator": "http://117.196.182.49:56581/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 02:56:19 UTC", "last_seen": "2026-03-14 02:56:19 UTC", "sightings": 1 }, { "indicator": "http://59.88.130.93:53966/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 02:51:26 UTC", "last_seen": "2026-03-14 02:51:26 UTC", "sightings": 1 }, { "indicator": "https://cloud-drive-x.bleusoleil.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 02:47:08 UTC", "last_seen": "2026-03-14 02:47:08 UTC", "sightings": 1 }, { "indicator": "https://metrics-node.altamontagna.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 02:44:08 UTC", "last_seen": "2026-03-14 02:44:08 UTC", "sightings": 1 }, { "indicator": "https://dev-test-hub.altamontagna.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 02:36:11 UTC", "last_seen": "2026-03-14 02:36:11 UTC", "sightings": 1 }, { "indicator": "https://api-v1-storage.altamontagna.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 02:28:07 UTC", "last_seen": "2026-03-14 02:28:07 UTC", "sightings": 1 }, { "indicator": "https://cdn-static-3.altamontagna.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 02:23:11 UTC", "last_seen": "2026-03-14 02:23:11 UTC", "sightings": 1 }, { "indicator": "http://39.90.147.30:40130/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 02:18:23 UTC", "last_seen": "2026-03-14 02:18:23 UTC", "sightings": 1 }, { "indicator": "https://main-point-z.grandemuro.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 02:13:07 UTC", "last_seen": "2026-03-14 02:13:07 UTC", "sightings": 1 }, { "indicator": "http://110.37.97.32:36215/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 02:11:13 UTC", "last_seen": "2026-03-14 02:11:13 UTC", "sightings": 1 }, { "indicator": "https://data-sync-00.grandemuro.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 02:09:09 UTC", "last_seen": "2026-03-14 02:09:09 UTC", "sightings": 1 }, { "indicator": "https://gate-proxy-7.grandemuro.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 02:04:07 UTC", "last_seen": "2026-03-14 02:04:07 UTC", "sightings": 1 }, { "indicator": "http://219.155.81.102:60438/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 01:58:06 UTC", "last_seen": "2026-03-14 01:58:06 UTC", "sightings": 1 }, { "indicator": "https://infra-web-v4.grandemuro.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 01:57:08 UTC", "last_seen": "2026-03-14 01:57:08 UTC", "sightings": 1 }, { "indicator": "https://sat-uplink-2.silenziovia.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 01:47:07 UTC", "last_seen": "2026-03-14 01:47:07 UTC", "sightings": 1 }, { "indicator": "http://39.90.147.30:40130/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 01:45:14 UTC", "last_seen": "2026-03-14 01:45:14 UTC", "sightings": 1 }, { "indicator": "http://110.36.29.40:39059/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 01:39:09 UTC", "last_seen": "2026-03-14 01:39:09 UTC", "sightings": 1 }, { "indicator": "http://220.202.90.68:45925/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 01:36:22 UTC", "last_seen": "2026-03-14 01:36:22 UTC", "sightings": 1 }, { "indicator": "http://219.155.81.102:60438/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 01:34:09 UTC", "last_seen": "2026-03-14 01:34:09 UTC", "sightings": 1 }, { "indicator": "https://rock-core-99.silenziovia.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 01:33:08 UTC", "last_seen": "2026-03-14 01:33:08 UTC", "sightings": 1 }, { "indicator": "http://42.226.215.57:57327/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 01:26:18 UTC", "last_seen": "2026-03-14 01:26:18 UTC", "sightings": 1 }, { "indicator": "https://steel-base-1.silenziovia.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 01:25:09 UTC", "last_seen": "2026-03-14 01:25:09 UTC", "sightings": 1 }, { "indicator": "http://222.140.208.251:49306/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 01:24:13 UTC", "last_seen": "2026-03-14 01:24:13 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.7/files/8353750540/Ibb9eaV.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543", "xworm" ], "first_seen": "2026-03-14 01:22:07 UTC", "last_seen": "2026-03-14 01:22:07 UTC", "sightings": 1 }, { "indicator": "http://42.231.89.21:43715/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 01:21:18 UTC", "last_seen": "2026-03-14 01:21:18 UTC", "sightings": 1 }, { "indicator": "https://moon-orbit-v.silenziovia.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 01:19:08 UTC", "last_seen": "2026-03-14 01:19:08 UTC", "sightings": 1 }, { "indicator": "http://110.36.29.40:39059/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 01:12:23 UTC", "last_seen": "2026-03-14 01:12:23 UTC", "sightings": 1 }, { "indicator": "https://open-space-8.astracorp.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 01:11:07 UTC", "last_seen": "2026-03-14 01:11:07 UTC", "sightings": 1 }, { "indicator": "http://220.202.90.68:45925/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 01:09:09 UTC", "last_seen": "2026-03-14 01:09:09 UTC", "sightings": 1 }, { "indicator": "https://vast-field-x.astracorp.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 01:01:09 UTC", "last_seen": "2026-03-14 01:01:09 UTC", "sightings": 1 }, { "indicator": "http://59.177.99.55:40474/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 01:00:16 UTC", "last_seen": "2026-03-14 01:00:16 UTC", "sightings": 1 }, { "indicator": "http://42.231.89.21:43715/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 00:57:18 UTC", "last_seen": "2026-03-14 00:57:18 UTC", "sightings": 1 }, { "indicator": "http://42.226.215.57:57327/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 00:57:08 UTC", "last_seen": "2026-03-14 00:57:08 UTC", "sightings": 1 }, { "indicator": "http://182.121.84.118:36466/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 00:57:07 UTC", "last_seen": "2026-03-14 00:57:07 UTC", "sightings": 1 }, { "indicator": "https://area-zone-33.astracorp.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 00:55:08 UTC", "last_seen": "2026-03-14 00:55:08 UTC", "sightings": 1 }, { "indicator": "http://110.39.229.159:35088/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 00:51:18 UTC", "last_seen": "2026-03-14 00:51:18 UTC", "sightings": 1 }, { "indicator": "https://outer-rim-v2.astracorp.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 00:49:07 UTC", "last_seen": "2026-03-14 00:49:07 UTC", "sightings": 1 }, { "indicator": "http://117.208.230.61:43860/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-14 00:46:18 UTC", "last_seen": "2026-03-14 00:46:18 UTC", "sightings": 1 }, { "indicator": "https://vision-sync-9.petitfoyer.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 00:46:08 UTC", "last_seen": "2026-03-14 00:46:08 UTC", "sightings": 1 }, { "indicator": "https://scan-point-05.petitfoyer.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 00:35:09 UTC", "last_seen": "2026-03-14 00:35:09 UTC", "sightings": 1 }, { "indicator": "http://110.37.24.11:59497/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 00:33:12 UTC", "last_seen": "2026-03-14 00:33:12 UTC", "sightings": 1 }, { "indicator": "http://87.110.15.80:49178/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 00:29:18 UTC", "last_seen": "2026-03-14 00:29:18 UTC", "sightings": 1 }, { "indicator": "http://119.117.106.244:37582/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 00:26:18 UTC", "last_seen": "2026-03-14 00:26:18 UTC", "sightings": 1 }, { "indicator": "http://115.54.118.192:46008/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 00:25:18 UTC", "last_seen": "2026-03-14 00:25:18 UTC", "sightings": 1 }, { "indicator": "http://110.39.229.159:35088/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 00:25:18 UTC", "last_seen": "2026-03-14 00:25:18 UTC", "sightings": 1 }, { "indicator": "http://117.208.230.61:43860/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-14 00:22:15 UTC", "last_seen": "2026-03-14 00:22:15 UTC", "sightings": 1 }, { "indicator": "http://117.216.177.222:55799/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 00:21:13 UTC", "last_seen": "2026-03-14 00:21:13 UTC", "sightings": 1 }, { "indicator": "http://115.54.118.192:46008/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 00:20:19 UTC", "last_seen": "2026-03-14 00:20:19 UTC", "sightings": 1 }, { "indicator": "http://124.6.169.46:60465/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-14 00:20:18 UTC", "last_seen": "2026-03-14 00:20:18 UTC", "sightings": 1 }, { "indicator": "https://light-bridge-7.petitfoyer.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 00:19:12 UTC", "last_seen": "2026-03-14 00:19:12 UTC", "sightings": 1 }, { "indicator": "https://yagla.tv/ciZ9nWK", "indicator_type": "url", "source": "URLhaus", "tags": [ "pw-2026", "zip" ], "first_seen": "2026-03-14 00:05:16 UTC", "last_seen": "2026-03-14 00:05:16 UTC", "sightings": 1 }, { "indicator": "https://dark-room-v3.petitfoyer.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 00:04:08 UTC", "last_seen": "2026-03-14 00:04:08 UTC", "sightings": 1 }, { "indicator": "http://119.117.106.244:37582/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-14 00:00:22 UTC", "last_seen": "2026-03-14 00:00:22 UTC", "sightings": 1 }, { "indicator": "https://ghost-node-z.kaltesystem.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-14 00:00:12 UTC", "last_seen": "2026-03-14 00:00:12 UTC", "sightings": 1 }, { "indicator": "http://125.43.250.45:41823/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 23:58:10 UTC", "last_seen": "2026-03-13 23:58:10 UTC", "sightings": 1 }, { "indicator": "http://124.6.169.46:60465/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-13 23:53:18 UTC", "last_seen": "2026-03-13 23:53:18 UTC", "sightings": 1 }, { "indicator": "https://user-auth-v8.kaltesystem.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-13 23:49:07 UTC", "last_seen": "2026-03-13 23:49:07 UTC", "sightings": 1 }, { "indicator": "http://112.248.81.215:42388/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 23:48:18 UTC", "last_seen": "2026-03-13 23:48:18 UTC", "sightings": 1 }, { "indicator": "http://61.52.56.253:43744/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 23:45:17 UTC", "last_seen": "2026-03-13 23:45:17 UTC", "sightings": 1 }, { "indicator": "http://110.39.252.138:45181/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 23:35:17 UTC", "last_seen": "2026-03-13 23:35:17 UTC", "sightings": 1 }, { "indicator": "http://125.43.250.45:41823/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 23:34:10 UTC", "last_seen": "2026-03-13 23:34:10 UTC", "sightings": 1 }, { "indicator": "https://core-shell-11.kaltesystem.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-13 23:33:07 UTC", "last_seen": "2026-03-13 23:33:07 UTC", "sightings": 1 }, { "indicator": "http://110.39.252.138:45181/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 23:32:11 UTC", "last_seen": "2026-03-13 23:32:11 UTC", "sightings": 1 }, { "indicator": "https://github.com/aemmr/Silentum-Spoofer/raw/refs/heads/main/Silentum_Spoofer.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "BRAT", "exe" ], "first_seen": "2026-03-13 23:30:15 UTC", "last_seen": "2026-03-13 23:30:15 UTC", "sightings": 1 }, { "indicator": "http://42.224.68.52:46114/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 23:27:08 UTC", "last_seen": "2026-03-13 23:27:08 UTC", "sightings": 1 }, { "indicator": "https://alpha-trace-x.kaltesystem.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-13 23:26:11 UTC", "last_seen": "2026-03-13 23:26:11 UTC", "sightings": 1 }, { "indicator": "https://dl.armour-inc-down.net/data/?KIDDIONSMODMENU", "indicator_type": "url", "source": "URLhaus", "tags": [ "pw-NMCLDJX3SK2", "zip" ], "first_seen": "2026-03-13 23:21:29 UTC", "last_seen": "2026-03-13 23:21:29 UTC", "sightings": 1 }, { "indicator": "https://point-entry-1.mondoluce.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-13 23:21:09 UTC", "last_seen": "2026-03-13 23:21:09 UTC", "sightings": 1 }, { "indicator": "http://42.59.89.172:50462/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 23:15:17 UTC", "last_seen": "2026-03-13 23:15:17 UTC", "sightings": 1 }, { "indicator": "https://data-base-v4.mondoluce.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-13 23:15:09 UTC", "last_seen": "2026-03-13 23:15:09 UTC", "sightings": 1 }, { "indicator": "http://173.28.103.46:51627/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-13 23:14:15 UTC", "last_seen": "2026-03-13 23:14:15 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Stepheen/raw/refs/heads/main/Launcher.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-13 23:14:09 UTC", "last_seen": "2026-03-13 23:14:09 UTC", "sightings": 1 }, { "indicator": "https://github.com/Stepheen/raw/raw/refs/heads/main/Launcher.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-13 23:13:08 UTC", "last_seen": "2026-03-13 23:13:08 UTC", "sightings": 1 }, { "indicator": "https://base-infra-5.mondoluce.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-13 23:08:07 UTC", "last_seen": "2026-03-13 23:08:07 UTC", "sightings": 1 }, { "indicator": "http://42.224.68.52:46114/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 23:03:10 UTC", "last_seen": "2026-03-13 23:03:10 UTC", "sightings": 1 }, { "indicator": "http://117.203.144.57:58198/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 23:02:18 UTC", "last_seen": "2026-03-13 23:02:18 UTC", "sightings": 1 }, { "indicator": "https://github.com/swissmet/FiveM-Spoofer/raw/refs/heads/main/CFXBypass.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "BRAT", "exe" ], "first_seen": "2026-03-13 23:02:10 UTC", "last_seen": "2026-03-13 23:02:10 UTC", "sightings": 1 }, { "indicator": "http://61.1.218.246:44369/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 22:58:22 UTC", "last_seen": "2026-03-13 22:58:22 UTC", "sightings": 1 }, { "indicator": "https://github.com/idlecash/Silentum-Spoofer/raw/refs/heads/main/Silentum_Spoofer.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "BRAT", "exe" ], "first_seen": "2026-03-13 22:58:11 UTC", "last_seen": "2026-03-13 22:58:11 UTC", "sightings": 1 }, { "indicator": "https://global-net-2.mondoluce.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-13 22:55:08 UTC", "last_seen": "2026-03-13 22:55:08 UTC", "sightings": 1 }, { "indicator": "http://173.28.103.46:51627/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-13 22:50:20 UTC", "last_seen": "2026-03-13 22:50:20 UTC", "sightings": 1 }, { "indicator": "http://42.59.89.172:50462/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 22:49:12 UTC", "last_seen": "2026-03-13 22:49:12 UTC", "sightings": 1 }, { "indicator": "http://117.212.175.154:40306/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 22:48:07 UTC", "last_seen": "2026-03-13 22:48:07 UTC", "sightings": 1 }, { "indicator": "https://local-hub-sec.espacerapide.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-13 22:48:07 UTC", "last_seen": "2026-03-13 22:48:07 UTC", "sightings": 1 }, { "indicator": "http://110.39.237.16:38394/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 22:47:15 UTC", "last_seen": "2026-03-13 22:47:15 UTC", "sightings": 1 }, { "indicator": "http://117.203.144.57:58198/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 22:39:12 UTC", "last_seen": "2026-03-13 22:39:12 UTC", "sightings": 1 }, { "indicator": "http://182.126.242.166:55640/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 22:39:11 UTC", "last_seen": "2026-03-13 22:39:11 UTC", "sightings": 1 }, { "indicator": "https://work-flow-v3.espacerapide.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-13 22:30:09 UTC", "last_seen": "2026-03-13 22:30:09 UTC", "sightings": 1 }, { "indicator": "http://85.12.205.35:50273/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 22:24:08 UTC", "last_seen": "2026-03-13 22:24:08 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.7/files/8012574236/4aMmUA4.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey", "QuasarRAT" ], "first_seen": "2026-03-13 22:23:08 UTC", "last_seen": "2026-03-13 22:23:08 UTC", "sightings": 1 }, { "indicator": "https://office-link-1.espacerapide.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-13 22:21:07 UTC", "last_seen": "2026-03-13 22:21:07 UTC", "sightings": 1 }, { "indicator": "https://internal-dns-2.vitagrazia.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-13 22:19:07 UTC", "last_seen": "2026-03-13 22:19:07 UTC", "sightings": 1 }, { "indicator": "http://117.212.175.154:40306/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 22:18:10 UTC", "last_seen": "2026-03-13 22:18:10 UTC", "sightings": 1 }, { "indicator": "http://61.53.75.34:55879/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 22:17:10 UTC", "last_seen": "2026-03-13 22:17:10 UTC", "sightings": 1 }, { "indicator": "http://175.150.93.245:55879/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 22:12:09 UTC", "last_seen": "2026-03-13 22:12:09 UTC", "sightings": 1 }, { "indicator": "http://182.126.242.166:55640/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 22:05:20 UTC", "last_seen": "2026-03-13 22:05:20 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.48/i686", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai" ], "first_seen": "2026-03-13 22:03:07 UTC", "last_seen": "2026-03-13 22:03:07 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.48/arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai" ], "first_seen": "2026-03-13 22:03:07 UTC", "last_seen": "2026-03-13 22:03:07 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.48/arm", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai" ], "first_seen": "2026-03-13 22:02:23 UTC", "last_seen": "2026-03-13 22:02:23 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.48/mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai" ], "first_seen": "2026-03-13 22:02:18 UTC", "last_seen": "2026-03-13 22:02:18 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.48/mipsel", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai" ], "first_seen": "2026-03-13 22:02:18 UTC", "last_seen": "2026-03-13 22:02:18 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.48/i586", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai" ], "first_seen": "2026-03-13 22:02:18 UTC", "last_seen": "2026-03-13 22:02:18 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.48/arm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai" ], "first_seen": "2026-03-13 22:02:18 UTC", "last_seen": "2026-03-13 22:02:18 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.48/arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai" ], "first_seen": "2026-03-13 22:02:18 UTC", "last_seen": "2026-03-13 22:02:18 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.48/x86_64", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai" ], "first_seen": "2026-03-13 22:02:18 UTC", "last_seen": "2026-03-13 22:02:18 UTC", "sightings": 1 }, { "indicator": "http://110.38.196.142:52636/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 21:58:16 UTC", "last_seen": "2026-03-13 21:58:16 UTC", "sightings": 1 }, { "indicator": "http://85.12.205.35:50273/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 21:56:07 UTC", "last_seen": "2026-03-13 21:56:07 UTC", "sightings": 1 }, { "indicator": "http://61.53.75.34:55879/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 21:52:22 UTC", "last_seen": "2026-03-13 21:52:22 UTC", "sightings": 1 }, { "indicator": "https://cache-dist-5.vitagrazia.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-13 21:48:08 UTC", "last_seen": "2026-03-13 21:48:08 UTC", "sightings": 1 }, { "indicator": "http://110.186.231.184:43361/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-13 21:41:21 UTC", "last_seen": "2026-03-13 21:41:21 UTC", "sightings": 1 }, { "indicator": "http://175.150.93.245:55879/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 21:41:21 UTC", "last_seen": "2026-03-13 21:41:21 UTC", "sightings": 1 }, { "indicator": "https://github.guru/s/PoyRqQGf?repo_name=.github", "indicator_type": "url", "source": "URLhaus", "tags": [ "pw-k53mv9bc", "zip" ], "first_seen": "2026-03-13 21:39:19 UTC", "last_seen": "2026-03-13 21:39:19 UTC", "sightings": 1 }, { "indicator": "http://115.55.253.16:43935/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 21:38:24 UTC", "last_seen": "2026-03-13 21:38:24 UTC", "sightings": 1 }, { "indicator": "http://42.226.65.239:34628/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 21:34:19 UTC", "last_seen": "2026-03-13 21:34:19 UTC", "sightings": 1 }, { "indicator": "https://backend-core-x.vitagrazia.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-13 21:32:08 UTC", "last_seen": "2026-03-13 21:32:08 UTC", "sightings": 1 }, { "indicator": "http://110.38.196.142:52636/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 21:31:22 UTC", "last_seen": "2026-03-13 21:31:22 UTC", "sightings": 1 }, { "indicator": "http://117.205.171.21:45773/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 21:30:28 UTC", "last_seen": "2026-03-13 21:30:28 UTC", "sightings": 1 }, { "indicator": "http://110.39.237.16:38394/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 21:26:23 UTC", "last_seen": "2026-03-13 21:26:23 UTC", "sightings": 1 }, { "indicator": "http://27.215.50.239:55790/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 21:24:22 UTC", "last_seen": "2026-03-13 21:24:22 UTC", "sightings": 1 }, { "indicator": "http://117.209.240.109:33071/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 21:20:21 UTC", "last_seen": "2026-03-13 21:20:21 UTC", "sightings": 1 }, { "indicator": "https://remote-access-v1.vitagrazia.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-13 21:17:10 UTC", "last_seen": "2026-03-13 21:17:10 UTC", "sightings": 1 }, { "indicator": "http://110.36.89.45:38217/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-13 21:15:17 UTC", "last_seen": "2026-03-13 21:15:17 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.7/files/7115306239/fcFbEDc.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-13 21:12:08 UTC", "last_seen": "2026-03-13 21:12:08 UTC", "sightings": 1 }, { "indicator": "http://110.186.231.184:43361/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-13 21:11:23 UTC", "last_seen": "2026-03-13 21:11:23 UTC", "sightings": 1 }, { "indicator": "http://115.55.253.16:43935/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 21:11:20 UTC", "last_seen": "2026-03-13 21:11:20 UTC", "sightings": 1 }, { "indicator": "https://app-data-log.fortezzablu.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-13 21:02:07 UTC", "last_seen": "2026-03-13 21:02:07 UTC", "sightings": 1 }, { "indicator": "http://27.215.50.239:55790/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 20:58:36 UTC", "last_seen": "2026-03-13 20:58:36 UTC", "sightings": 1 }, { "indicator": "https://web-proxy-88.fortezzablu.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-13 20:56:08 UTC", "last_seen": "2026-03-13 20:56:08 UTC", "sightings": 1 }, { "indicator": "http://117.209.240.109:33071/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 20:50:30 UTC", "last_seen": "2026-03-13 20:50:30 UTC", "sightings": 1 }, { "indicator": "https://srv-cluster-7.fortezzablu.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-13 20:49:09 UTC", "last_seen": "2026-03-13 20:49:09 UTC", "sightings": 1 }, { "indicator": "http://110.37.18.205:60555/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 20:37:15 UTC", "last_seen": "2026-03-13 20:37:15 UTC", "sightings": 1 }, { "indicator": "http://110.37.115.90:41401/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 20:35:17 UTC", "last_seen": "2026-03-13 20:35:17 UTC", "sightings": 1 }, { "indicator": "https://cloud-storage-b.fortezzablu.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-13 20:35:09 UTC", "last_seen": "2026-03-13 20:35:09 UTC", "sightings": 1 }, { "indicator": "http://110.37.115.90:41401/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 20:29:24 UTC", "last_seen": "2026-03-13 20:29:24 UTC", "sightings": 1 }, { "indicator": "http://115.55.251.17:49633/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 20:29:23 UTC", "last_seen": "2026-03-13 20:29:23 UTC", "sightings": 1 }, { "indicator": "https://dev-test-node.sturmwelle.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-13 20:20:08 UTC", "last_seen": "2026-03-13 20:20:08 UTC", "sightings": 1 }, { "indicator": "http://110.37.18.205:60555/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 20:09:30 UTC", "last_seen": "2026-03-13 20:09:30 UTC", "sightings": 1 }, { "indicator": "http://61.176.211.106:60776/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 20:08:29 UTC", "last_seen": "2026-03-13 20:08:29 UTC", "sightings": 1 }, { "indicator": "http://115.55.251.17:49633/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 20:06:15 UTC", "last_seen": "2026-03-13 20:06:15 UTC", "sightings": 1 }, { "indicator": "http://110.37.38.176:33118/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-13 20:03:20 UTC", "last_seen": "2026-03-13 20:03:20 UTC", "sightings": 1 }, { "indicator": "https://cdn-static-2.sturmwelle.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-13 19:59:06 UTC", "last_seen": "2026-03-13 19:59:06 UTC", "sightings": 1 }, { "indicator": "http://125.41.224.2:37552/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 19:55:19 UTC", "last_seen": "2026-03-13 19:55:19 UTC", "sightings": 1 }, { "indicator": "https://zendraix.stayflat.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-13 19:55:08 UTC", "last_seen": "2026-03-13 19:55:08 UTC", "sightings": 1 }, { "indicator": "http://61.176.211.106:60776/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 19:46:13 UTC", "last_seen": "2026-03-13 19:46:13 UTC", "sightings": 1 }, { "indicator": "http://119.117.185.187:43028/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 19:43:15 UTC", "last_seen": "2026-03-13 19:43:15 UTC", "sightings": 1 }, { "indicator": "http://110.37.38.176:33118/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-13 19:37:10 UTC", "last_seen": "2026-03-13 19:37:10 UTC", "sightings": 1 }, { "indicator": "http://175.173.231.56:55722/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 19:34:14 UTC", "last_seen": "2026-03-13 19:34:14 UTC", "sightings": 1 }, { "indicator": "https://exposedemand.stayflat.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-13 19:34:08 UTC", "last_seen": "2026-03-13 19:34:08 UTC", "sightings": 1 }, { "indicator": "http://88.250.238.6:59446/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 19:32:22 UTC", "last_seen": "2026-03-13 19:32:22 UTC", "sightings": 1 }, { "indicator": "http://125.41.224.2:37552/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 19:30:11 UTC", "last_seen": "2026-03-13 19:30:11 UTC", "sightings": 1 }, { "indicator": "http://59.177.98.26:37055/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 19:26:21 UTC", "last_seen": "2026-03-13 19:26:21 UTC", "sightings": 1 }, { "indicator": "http://115.52.16.7:40051/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 19:25:09 UTC", "last_seen": "2026-03-13 19:25:09 UTC", "sightings": 1 }, { "indicator": "https://organizecourier.stayflat.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-13 19:25:08 UTC", "last_seen": "2026-03-13 19:25:08 UTC", "sightings": 1 }, { "indicator": "https://marshlagoon.stayflat.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-13 19:18:07 UTC", "last_seen": "2026-03-13 19:18:07 UTC", "sightings": 1 }, { "indicator": "http://59.97.178.199:34499/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 19:13:11 UTC", "last_seen": "2026-03-13 19:13:11 UTC", "sightings": 1 }, { "indicator": "http://110.37.115.91:52598/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 19:10:18 UTC", "last_seen": "2026-03-13 19:10:18 UTC", "sightings": 1 }, { "indicator": "http://88.250.238.6:59446/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 19:09:07 UTC", "last_seen": "2026-03-13 19:09:07 UTC", "sightings": 1 }, { "indicator": "http://222.246.15.224:59698/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-13 19:08:19 UTC", "last_seen": "2026-03-13 19:08:19 UTC", "sightings": 1 }, { "indicator": "http://110.37.105.169:34906/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 19:02:20 UTC", "last_seen": "2026-03-13 19:02:20 UTC", "sightings": 1 }, { "indicator": "https://otyhyn.gorun.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-13 19:02:07 UTC", "last_seen": "2026-03-13 19:02:07 UTC", "sightings": 1 }, { "indicator": "http://210.97.100.192:40017/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 19:01:18 UTC", "last_seen": "2026-03-13 19:01:18 UTC", "sightings": 1 }, { "indicator": "http://115.52.16.7:40051/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 18:56:11 UTC", "last_seen": "2026-03-13 18:56:11 UTC", "sightings": 1 }, { "indicator": "http://90.227.85.74:33976/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 18:56:10 UTC", "last_seen": "2026-03-13 18:56:10 UTC", "sightings": 1 }, { "indicator": "http://110.37.88.34:46280/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-13 18:55:14 UTC", "last_seen": "2026-03-13 18:55:14 UTC", "sightings": 1 }, { "indicator": "http://59.97.178.199:34499/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 18:54:20 UTC", "last_seen": "2026-03-13 18:54:20 UTC", "sightings": 1 }, { "indicator": "https://delivelagoo.gorun.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-13 18:52:07 UTC", "last_seen": "2026-03-13 18:52:07 UTC", "sightings": 1 }, { "indicator": "http://45.141.26.73/ohno.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai", "opendir", "sh", "ua-wget" ], "first_seen": "2026-03-13 18:51:15 UTC", "last_seen": "2026-03-13 18:51:15 UTC", "sightings": 1 }, { "indicator": "http://210.97.100.192:40017/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 18:43:17 UTC", "last_seen": "2026-03-13 18:43:17 UTC", "sightings": 1 }, { "indicator": "http://222.246.15.224:59698/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-13 18:39:21 UTC", "last_seen": "2026-03-13 18:39:21 UTC", "sightings": 1 }, { "indicator": "https://opticparcel.gorun.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-13 18:39:07 UTC", "last_seen": "2026-03-13 18:39:07 UTC", "sightings": 1 }, { "indicator": "http://110.37.105.169:34906/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 18:38:19 UTC", "last_seen": "2026-03-13 18:38:19 UTC", "sightings": 1 }, { "indicator": "https://k97iydxz.gorun.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-13 18:32:07 UTC", "last_seen": "2026-03-13 18:32:07 UTC", "sightings": 1 }, { "indicator": "https://tri-nexos.gontake.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-13 18:23:09 UTC", "last_seen": "2026-03-13 18:23:09 UTC", "sightings": 1 }, { "indicator": "http://110.37.88.34:46280/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-13 18:20:19 UTC", "last_seen": "2026-03-13 18:20:19 UTC", "sightings": 1 }, { "indicator": "http://110.36.27.124:46551/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 18:05:09 UTC", "last_seen": "2026-03-13 18:05:09 UTC", "sightings": 1 }, { "indicator": "http://110.36.27.124:46551/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 18:04:20 UTC", "last_seen": "2026-03-13 18:04:20 UTC", "sightings": 1 }, { "indicator": "https://visuavital.gontake.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-13 18:04:07 UTC", "last_seen": "2026-03-13 18:04:07 UTC", "sightings": 1 }, { "indicator": "http://110.37.115.91:52598/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 18:01:17 UTC", "last_seen": "2026-03-13 18:01:17 UTC", "sightings": 1 }, { "indicator": "http://222.95.214.29:38175/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-13 17:50:28 UTC", "last_seen": "2026-03-13 17:50:28 UTC", "sightings": 1 }, { "indicator": "http://110.39.235.153:48716/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 17:41:19 UTC", "last_seen": "2026-03-13 17:41:19 UTC", "sightings": 1 }, { "indicator": "https://48leal.gontake.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-13 17:35:11 UTC", "last_seen": "2026-03-13 17:35:11 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.7/files/7782139129/DqzayUy.msi", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-13 17:34:06 UTC", "last_seen": "2026-03-13 17:34:06 UTC", "sightings": 1 }, { "indicator": "http://182.121.84.118:36466/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 17:31:19 UTC", "last_seen": "2026-03-13 17:31:19 UTC", "sightings": 1 }, { "indicator": "http://110.39.235.153:48716/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 17:21:10 UTC", "last_seen": "2026-03-13 17:21:10 UTC", "sightings": 1 }, { "indicator": "http://218.60.181.77:39005/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 17:16:20 UTC", "last_seen": "2026-03-13 17:16:20 UTC", "sightings": 1 }, { "indicator": "http://110.36.88.237:46387/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 17:02:17 UTC", "last_seen": "2026-03-13 17:02:17 UTC", "sightings": 1 }, { "indicator": "http://42.239.230.180:50648/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 16:55:25 UTC", "last_seen": "2026-03-13 16:55:25 UTC", "sightings": 1 }, { "indicator": "http://42.239.230.180:50648/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 16:50:15 UTC", "last_seen": "2026-03-13 16:50:15 UTC", "sightings": 1 }, { "indicator": "http://182.126.115.113:52478/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 16:47:14 UTC", "last_seen": "2026-03-13 16:47:14 UTC", "sightings": 1 }, { "indicator": "http://59.103.86.150:39914/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 16:37:13 UTC", "last_seen": "2026-03-13 16:37:13 UTC", "sightings": 1 }, { "indicator": "http://117.211.147.30:59996/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 16:33:17 UTC", "last_seen": "2026-03-13 16:33:17 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.7/files/1781548144/okR3iq0.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543", "QuasarRAT" ], "first_seen": "2026-03-13 16:32:08 UTC", "last_seen": "2026-03-13 16:32:08 UTC", "sightings": 1 }, { "indicator": "http://110.37.100.152:42177/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 16:29:08 UTC", "last_seen": "2026-03-13 16:29:08 UTC", "sightings": 1 }, { "indicator": "http://115.55.242.9:49065/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 16:25:17 UTC", "last_seen": "2026-03-13 16:25:17 UTC", "sightings": 1 }, { "indicator": "http://110.37.14.251:46844/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-13 16:24:22 UTC", "last_seen": "2026-03-13 16:24:22 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.7/files/8468794285/dSBZqK0.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543", "SantaStealer" ], "first_seen": "2026-03-13 16:22:07 UTC", "last_seen": "2026-03-13 16:22:07 UTC", "sightings": 1 }, { "indicator": "http://182.126.115.113:52478/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 16:21:31 UTC", "last_seen": "2026-03-13 16:21:31 UTC", "sightings": 1 }, { "indicator": "http://117.211.147.30:59996/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 16:17:11 UTC", "last_seen": "2026-03-13 16:17:11 UTC", "sightings": 1 }, { "indicator": "http://123.5.147.209:60996/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 16:14:12 UTC", "last_seen": "2026-03-13 16:14:12 UTC", "sightings": 1 }, { "indicator": "http://117.216.181.87:53312/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 16:13:23 UTC", "last_seen": "2026-03-13 16:13:23 UTC", "sightings": 1 }, { "indicator": "http://59.103.86.150:39914/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 16:10:13 UTC", "last_seen": "2026-03-13 16:10:13 UTC", "sightings": 1 }, { "indicator": "http://115.55.242.9:49065/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 16:09:08 UTC", "last_seen": "2026-03-13 16:09:08 UTC", "sightings": 1 }, { "indicator": "http://115.57.240.201:34782/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 15:59:10 UTC", "last_seen": "2026-03-13 15:59:10 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.7/files/8535406641/AYRS45O.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "AsyncRAT", "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-13 15:57:07 UTC", "last_seen": "2026-03-13 15:57:07 UTC", "sightings": 1 }, { "indicator": "http://123.5.147.209:60996/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 15:47:19 UTC", "last_seen": "2026-03-13 15:47:19 UTC", "sightings": 1 }, { "indicator": "http://110.37.14.251:46844/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-13 15:45:48 UTC", "last_seen": "2026-03-13 15:45:48 UTC", "sightings": 1 }, { "indicator": "http://115.57.240.201:34782/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 15:45:25 UTC", "last_seen": "2026-03-13 15:45:25 UTC", "sightings": 1 }, { "indicator": "http://175.165.126.169:50496/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 15:43:26 UTC", "last_seen": "2026-03-13 15:43:26 UTC", "sightings": 1 }, { "indicator": "http://117.248.253.105:39197/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 15:43:17 UTC", "last_seen": "2026-03-13 15:43:17 UTC", "sightings": 1 }, { "indicator": "http://59.88.40.143:42593/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 15:43:17 UTC", "last_seen": "2026-03-13 15:43:17 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.7/files/8167064937/BB3UGoE.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543", "WallStealer" ], "first_seen": "2026-03-13 15:43:11 UTC", "last_seen": "2026-03-13 15:43:11 UTC", "sightings": 1 }, { "indicator": "http://110.36.65.9:47593/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 15:42:31 UTC", "last_seen": "2026-03-13 15:42:31 UTC", "sightings": 1 }, { "indicator": "http://218.60.181.77:39005/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 15:33:21 UTC", "last_seen": "2026-03-13 15:33:21 UTC", "sightings": 1 }, { "indicator": "http://175.165.126.169:50496/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 15:30:31 UTC", "last_seen": "2026-03-13 15:30:31 UTC", "sightings": 1 }, { "indicator": "http://172.94.9.224/9cca20c6df659f72/m_cpt1267381.bin", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClickFix" ], "first_seen": "2026-03-13 15:26:07 UTC", "last_seen": "2026-03-13 15:26:07 UTC", "sightings": 1 }, { "indicator": "https://woupp.com/curl/cebf178be06dfca56487bdc83ca5c28340b4a3da0f157128bac6142cad1b36be", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClickFix" ], "first_seen": "2026-03-13 15:26:06 UTC", "last_seen": "2026-03-13 15:26:06 UTC", "sightings": 1 }, { "indicator": "http://112.255.106.148:55299/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-13 15:25:30 UTC", "last_seen": "2026-03-13 15:25:30 UTC", "sightings": 1 }, { "indicator": "http://59.88.40.143:42593/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 15:20:22 UTC", "last_seen": "2026-03-13 15:20:22 UTC", "sightings": 1 }, { "indicator": "http://110.36.65.9:47593/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 15:04:24 UTC", "last_seen": "2026-03-13 15:04:24 UTC", "sightings": 1 }, { "indicator": "http://42.224.199.189:57315/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 15:01:23 UTC", "last_seen": "2026-03-13 15:01:23 UTC", "sightings": 1 }, { "indicator": "http://112.255.106.148:55299/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-13 14:56:45 UTC", "last_seen": "2026-03-13 14:56:45 UTC", "sightings": 1 }, { "indicator": "http://42.231.230.184:53535/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 14:51:25 UTC", "last_seen": "2026-03-13 14:51:25 UTC", "sightings": 1 }, { "indicator": "http://120.84.213.171:47005/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 14:48:35 UTC", "last_seen": "2026-03-13 14:48:35 UTC", "sightings": 1 }, { "indicator": "http://42.231.230.184:53535/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 14:46:21 UTC", "last_seen": "2026-03-13 14:46:21 UTC", "sightings": 1 }, { "indicator": "http://46.151.182.73/oxpdxnaob113/assets/js/0twxt1rqmy", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "gafgyt", "opendir", "ua-wget", "x86" ], "first_seen": "2026-03-13 14:36:29 UTC", "last_seen": "2026-03-13 14:36:29 UTC", "sightings": 1 }, { "indicator": "http://46.151.182.73/oxpdxnaob113/assets/js/a7nuhf01jq", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "opendir", "ua-wget", "x86" ], "first_seen": "2026-03-13 14:36:29 UTC", "last_seen": "2026-03-13 14:36:29 UTC", "sightings": 1 }, { "indicator": "http://46.151.182.73/oxpdxnaob113/assets/js/4bonx494kg", "indicator_type": "url", "source": "URLhaus", "tags": [ "arm", "elf", "mirai", "opendir", "ua-wget" ], "first_seen": "2026-03-13 14:36:28 UTC", "last_seen": "2026-03-13 14:36:28 UTC", "sightings": 1 }, { "indicator": "http://46.151.182.73/oxpdxnaob113/assets/js/hk9r4h7dm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "arm", "elf", "mirai", "opendir", "ua-wget" ], "first_seen": "2026-03-13 14:36:28 UTC", "last_seen": "2026-03-13 14:36:28 UTC", "sightings": 1 }, { "indicator": "http://46.151.182.73/oxpdxnaob113/assets/js/kcd5v195q5", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "gafgyt", "opendir", "ua-wget", "x86" ], "first_seen": "2026-03-13 14:36:28 UTC", "last_seen": "2026-03-13 14:36:28 UTC", "sightings": 1 }, { "indicator": "http://46.151.182.73/oxpdxnaob113/assets/js/qjzu1ipbfu", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "gafgyt", "opendir", "ua-wget", "x86" ], "first_seen": "2026-03-13 14:36:15 UTC", "last_seen": "2026-03-13 14:36:15 UTC", "sightings": 1 }, { "indicator": "http://46.151.182.73/oxpdxnaob113/assets/js/d8o7xu71em", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mips", "opendir", "ua-wget" ], "first_seen": "2026-03-13 14:36:15 UTC", "last_seen": "2026-03-13 14:36:15 UTC", "sightings": 1 }, { "indicator": "http://46.151.182.73/oxpdxnaob113/assets/js/nfrqbh0ttz", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "opendir", "PowerPC", "ua-wget" ], "first_seen": "2026-03-13 14:36:15 UTC", "last_seen": "2026-03-13 14:36:15 UTC", "sightings": 1 }, { "indicator": "http://46.151.182.73/oxpdxnaob113/assets/js/nnzlphr2vt", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mips", "opendir", "ua-wget" ], "first_seen": "2026-03-13 14:36:15 UTC", "last_seen": "2026-03-13 14:36:15 UTC", "sightings": 1 }, { "indicator": "http://46.151.182.73/oxpdxnaob113/assets/js/tjyhj7uvnn", "indicator_type": "url", "source": "URLhaus", "tags": [ "arm", "elf", "mirai", "opendir", "ua-wget" ], "first_seen": "2026-03-13 14:36:14 UTC", "last_seen": "2026-03-13 14:36:14 UTC", "sightings": 1 }, { "indicator": "http://37.235.223.51:51326/.i", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "hajime", "ua-wget" ], "first_seen": "2026-03-13 14:35:27 UTC", "last_seen": "2026-03-13 14:35:27 UTC", "sightings": 1 }, { "indicator": "http://175.148.158.89:54210/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 14:30:25 UTC", "last_seen": "2026-03-13 14:30:25 UTC", "sightings": 1 }, { "indicator": "http://110.37.39.182:44010/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-13 14:30:24 UTC", "last_seen": "2026-03-13 14:30:24 UTC", "sightings": 1 }, { "indicator": "https://217.156.65.56/new/LogM.msi", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "msi", "SSA" ], "first_seen": "2026-03-13 14:29:12 UTC", "last_seen": "2026-03-13 14:29:12 UTC", "sightings": 1 }, { "indicator": "https://docinstall.top/new/LogM.msi", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "msi", "SSA" ], "first_seen": "2026-03-13 14:28:55 UTC", "last_seen": "2026-03-13 14:28:55 UTC", "sightings": 1 }, { "indicator": "http://42.224.199.189:57315/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 14:25:23 UTC", "last_seen": "2026-03-13 14:25:23 UTC", "sightings": 1 }, { "indicator": "https://172.86.116.238/ssa_em_YgJHJTuo_installer_Win7-Win11_x86_x64.msi", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "msi", "SSA" ], "first_seen": "2026-03-13 14:23:32 UTC", "last_seen": "2026-03-13 14:23:32 UTC", "sightings": 1 }, { "indicator": "https://216.126.225.120/SSA_ADMIN_ESTATEMENT.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "DattoRMM", "exe", "SSA" ], "first_seen": "2026-03-13 14:23:18 UTC", "last_seen": "2026-03-13 14:23:18 UTC", "sightings": 1 }, { "indicator": "https://144.172.102.83/ssa_estatement.msi", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "msi", "SSA" ], "first_seen": "2026-03-13 14:23:17 UTC", "last_seen": "2026-03-13 14:23:17 UTC", "sightings": 1 }, { "indicator": "https://144.172.112.190/COURT_ORDER_AGENT_473850_V10_14_4_RW.EXE", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "exe", "N-able", "SSA" ], "first_seen": "2026-03-13 14:23:16 UTC", "last_seen": "2026-03-13 14:23:16 UTC", "sightings": 1 }, { "indicator": "https://www.mediafire.com/file_premium/423zmn9cb2cubtf/SSA_E-FILE_%252825%2529.vbs/file", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "GoToResolve", "SSA", "vbs" ], "first_seen": "2026-03-13 14:23:10 UTC", "last_seen": "2026-03-13 14:23:10 UTC", "sightings": 1 }, { "indicator": "https://rich-wave.gontake.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-13 14:22:08 UTC", "last_seen": "2026-03-13 14:22:08 UTC", "sightings": 1 }, { "indicator": "http://175.150.22.154:60301/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 14:15:28 UTC", "last_seen": "2026-03-13 14:15:28 UTC", "sightings": 1 }, { "indicator": "http://39.74.67.162:46642/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 14:14:21 UTC", "last_seen": "2026-03-13 14:14:21 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.7/files/8635093259/TUzr0QP.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543", "njRAT", "QuasarRAT" ], "first_seen": "2026-03-13 14:13:07 UTC", "last_seen": "2026-03-13 14:13:07 UTC", "sightings": 1 }, { "indicator": "http://222.127.254.114:42745/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-13 14:08:35 UTC", "last_seen": "2026-03-13 14:08:35 UTC", "sightings": 1 }, { "indicator": "http://61.3.111.183:54467/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 14:07:27 UTC", "last_seen": "2026-03-13 14:07:27 UTC", "sightings": 1 }, { "indicator": "http://221.14.171.192:35097/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 13:57:08 UTC", "last_seen": "2026-03-13 13:57:08 UTC", "sightings": 1 }, { "indicator": "http://175.150.22.154:60301/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 13:56:19 UTC", "last_seen": "2026-03-13 13:56:19 UTC", "sightings": 1 }, { "indicator": "https://uzpjxi.whitebus.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-13 13:51:08 UTC", "last_seen": "2026-03-13 13:51:08 UTC", "sightings": 1 }, { "indicator": "http://39.74.67.162:46642/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 13:40:16 UTC", "last_seen": "2026-03-13 13:40:16 UTC", "sightings": 1 }, { "indicator": "http://61.3.111.183:54467/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 13:39:11 UTC", "last_seen": "2026-03-13 13:39:11 UTC", "sightings": 1 }, { "indicator": "http://222.138.205.201:33629/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 13:39:10 UTC", "last_seen": "2026-03-13 13:39:10 UTC", "sightings": 1 }, { "indicator": "http://221.14.171.192:35097/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 13:35:19 UTC", "last_seen": "2026-03-13 13:35:19 UTC", "sightings": 1 }, { "indicator": "http://91.196.32.55/596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.spc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-13 13:34:22 UTC", "last_seen": "2026-03-13 13:34:22 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.58/arm4", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-13 13:34:21 UTC", "last_seen": "2026-03-13 13:34:21 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.58/x86_64", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-13 13:34:21 UTC", "last_seen": "2026-03-13 13:34:21 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.58/mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-13 13:34:21 UTC", "last_seen": "2026-03-13 13:34:21 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.58/mpsl", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-13 13:34:21 UTC", "last_seen": "2026-03-13 13:34:21 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.58/arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-13 13:34:21 UTC", "last_seen": "2026-03-13 13:34:21 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.58/arm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-13 13:34:21 UTC", "last_seen": "2026-03-13 13:34:21 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.58/arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-13 13:34:21 UTC", "last_seen": "2026-03-13 13:34:21 UTC", "sightings": 1 }, { "indicator": "http://91.196.32.55/596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.sh4", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-13 13:34:21 UTC", "last_seen": "2026-03-13 13:34:21 UTC", "sightings": 1 }, { "indicator": "http://123.11.76.99:54743/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 13:33:16 UTC", "last_seen": "2026-03-13 13:33:16 UTC", "sightings": 1 }, { "indicator": "http://125.161.166.159:51393/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-13 13:29:15 UTC", "last_seen": "2026-03-13 13:29:15 UTC", "sightings": 1 }, { "indicator": "http://120.28.169.1:39627/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-13 13:24:18 UTC", "last_seen": "2026-03-13 13:24:18 UTC", "sightings": 1 }, { "indicator": "http://46.151.182.73/oxpdxnaob113/assets/js/4bonx494kg?token=sZJUJ8lMq4yzsZuO5oJu1gjt8HZxTFG3", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai" ], "first_seen": "2026-03-13 13:22:13 UTC", "last_seen": "2026-03-13 13:22:13 UTC", "sightings": 1 }, { "indicator": "http://46.151.182.73/oxpdxnaob113/assets/js/tjyhj7uvnn?token=sZJUJ8lMq4yzsZuO5oJu1gjt8HZxTFG3", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai" ], "first_seen": "2026-03-13 13:22:13 UTC", "last_seen": "2026-03-13 13:22:13 UTC", "sightings": 1 }, { "indicator": "http://46.151.182.73/oxpdxnaob113/assets/js/hk9r4h7dm6?token=sZJUJ8lMq4yzsZuO5oJu1gjt8HZxTFG3", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai" ], "first_seen": "2026-03-13 13:22:13 UTC", "last_seen": "2026-03-13 13:22:13 UTC", "sightings": 1 }, { "indicator": "http://59.177.99.248:40474/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 13:21:20 UTC", "last_seen": "2026-03-13 13:21:20 UTC", "sightings": 1 }, { "indicator": "http://117.209.5.234:58292/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 13:18:22 UTC", "last_seen": "2026-03-13 13:18:22 UTC", "sightings": 1 }, { "indicator": "http://117.209.31.72:34322/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 13:16:16 UTC", "last_seen": "2026-03-13 13:16:16 UTC", "sightings": 1 }, { "indicator": "http://123.132.167.5:39723/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 13:15:31 UTC", "last_seen": "2026-03-13 13:15:31 UTC", "sightings": 1 }, { "indicator": "http://117.209.31.72:34322/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 13:14:09 UTC", "last_seen": "2026-03-13 13:14:09 UTC", "sightings": 1 }, { "indicator": "http://123.11.76.99:54743/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 13:13:13 UTC", "last_seen": "2026-03-13 13:13:13 UTC", "sightings": 1 }, { "indicator": "http://125.161.166.159:51393/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-13 13:05:25 UTC", "last_seen": "2026-03-13 13:05:25 UTC", "sightings": 1 }, { "indicator": "http://222.138.205.201:33629/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 13:05:21 UTC", "last_seen": "2026-03-13 13:05:21 UTC", "sightings": 1 }, { "indicator": "https://l2mk50mf.rednet.digital/?=check&&actmn=tVXUFUzZyRMztPfM", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-13 12:59:08 UTC", "last_seen": "2026-03-13 12:59:08 UTC", "sightings": 1 }, { "indicator": "http://117.242.203.52:35767/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 12:50:12 UTC", "last_seen": "2026-03-13 12:50:12 UTC", "sightings": 1 }, { "indicator": "http://123.132.167.5:39723/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 12:44:21 UTC", "last_seen": "2026-03-13 12:44:21 UTC", "sightings": 1 }, { "indicator": "http://117.193.168.158:33841/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 12:44:20 UTC", "last_seen": "2026-03-13 12:44:20 UTC", "sightings": 1 }, { "indicator": "http://42.53.72.254:36511/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 12:39:13 UTC", "last_seen": "2026-03-13 12:39:13 UTC", "sightings": 1 }, { "indicator": "http://175.149.145.48:51079/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 12:35:23 UTC", "last_seen": "2026-03-13 12:35:23 UTC", "sightings": 1 }, { "indicator": "http://182.239.81.126:43905/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 12:35:21 UTC", "last_seen": "2026-03-13 12:35:21 UTC", "sightings": 1 }, { "indicator": "http://117.209.5.234:58292/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 12:33:19 UTC", "last_seen": "2026-03-13 12:33:19 UTC", "sightings": 1 }, { "indicator": "http://42.226.68.76:54886/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 12:29:08 UTC", "last_seen": "2026-03-13 12:29:08 UTC", "sightings": 1 }, { "indicator": "http://117.242.203.52:35767/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 12:25:21 UTC", "last_seen": "2026-03-13 12:25:21 UTC", "sightings": 1 }, { "indicator": "http://42.53.72.254:36511/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 12:22:12 UTC", "last_seen": "2026-03-13 12:22:12 UTC", "sightings": 1 }, { "indicator": "http://182.239.81.126:43905/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 12:20:20 UTC", "last_seen": "2026-03-13 12:20:20 UTC", "sightings": 1 }, { "indicator": "http://117.193.168.158:33841/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 12:19:21 UTC", "last_seen": "2026-03-13 12:19:21 UTC", "sightings": 1 }, { "indicator": "http://88.214.20.14/bins/tux.arm", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-13 12:19:07 UTC", "last_seen": "2026-03-13 12:19:07 UTC", "sightings": 1 }, { "indicator": "https://bgsgroup.com.ar/c/Doc_902838.msi", "indicator_type": "url", "source": "URLhaus", "tags": [ "XFilesStealer" ], "first_seen": "2026-03-13 12:18:20 UTC", "last_seen": "2026-03-13 12:18:20 UTC", "sightings": 1 }, { "indicator": "http://222.135.129.29:38802/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 12:18:19 UTC", "last_seen": "2026-03-13 12:18:19 UTC", "sightings": 1 }, { "indicator": "https://vsdvsdvasvf.sbs/TikTok18.apk", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-13 12:18:17 UTC", "last_seen": "2026-03-13 12:18:17 UTC", "sightings": 1 }, { "indicator": "http://88.214.20.14/bins/tux.arm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-13 12:18:16 UTC", "last_seen": "2026-03-13 12:18:16 UTC", "sightings": 1 }, { "indicator": "http://88.214.20.14/bins/tux.arm4", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-13 12:18:16 UTC", "last_seen": "2026-03-13 12:18:16 UTC", "sightings": 1 }, { "indicator": "http://88.214.20.14/bins/tux.m68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-13 12:18:15 UTC", "last_seen": "2026-03-13 12:18:15 UTC", "sightings": 1 }, { "indicator": "http://88.214.20.14/bins/tux.mpsl", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-13 12:18:15 UTC", "last_seen": "2026-03-13 12:18:15 UTC", "sightings": 1 }, { "indicator": "http://88.214.20.14/bins/tux.sh4", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-13 12:18:15 UTC", "last_seen": "2026-03-13 12:18:15 UTC", "sightings": 1 }, { "indicator": "http://88.214.20.14/bins/tux.arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-13 12:18:14 UTC", "last_seen": "2026-03-13 12:18:14 UTC", "sightings": 1 }, { "indicator": "http://88.214.20.14/bins/tux.x86", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-13 12:18:14 UTC", "last_seen": "2026-03-13 12:18:14 UTC", "sightings": 1 }, { "indicator": "http://88.214.20.14/bins/tux.mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-13 12:18:14 UTC", "last_seen": "2026-03-13 12:18:14 UTC", "sightings": 1 }, { "indicator": "https://gkgkgkgff.sbs/TikTok18.apk", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-13 12:18:13 UTC", "last_seen": "2026-03-13 12:18:13 UTC", "sightings": 1 }, { "indicator": "https://pardu.pages.dev/pardufrigi_installer_1.0.p1.exe", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-13 12:18:13 UTC", "last_seen": "2026-03-13 12:18:13 UTC", "sightings": 1 }, { "indicator": "http://88.214.20.14/bins/tux.ppc", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-13 12:18:13 UTC", "last_seen": "2026-03-13 12:18:13 UTC", "sightings": 1 }, { "indicator": "http://88.214.20.14/bins/tux.arc", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-13 12:18:13 UTC", "last_seen": "2026-03-13 12:18:13 UTC", "sightings": 1 }, { "indicator": "http://88.214.20.14/bins/tux.arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-13 12:18:13 UTC", "last_seen": "2026-03-13 12:18:13 UTC", "sightings": 1 }, { "indicator": "https://pamellioty.com/WORDPRESS%202026.zip", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-13 12:18:12 UTC", "last_seen": "2026-03-13 12:18:12 UTC", "sightings": 1 }, { "indicator": "https://pizzatang.net/xyz.zip", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-13 12:18:10 UTC", "last_seen": "2026-03-13 12:18:10 UTC", "sightings": 1 }, { "indicator": "http://60.18.10.74:60629/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-13 12:18:09 UTC", "last_seen": "2026-03-13 12:18:09 UTC", "sightings": 1 }, { "indicator": "http://91.124.63.200/main_mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-13 12:18:09 UTC", "last_seen": "2026-03-13 12:18:09 UTC", "sightings": 1 }, { "indicator": "https://pastebin.com/raw/Q587VyxQ", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-13 12:17:08 UTC", "last_seen": "2026-03-13 12:17:08 UTC", "sightings": 1 }, { "indicator": "https://pastebin.com/raw/xgWysJ8V", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-13 12:17:08 UTC", "last_seen": "2026-03-13 12:17:08 UTC", "sightings": 1 }, { "indicator": "https://pastebin.com/raw/CPsxYmsY", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-13 12:17:08 UTC", "last_seen": "2026-03-13 12:17:08 UTC", "sightings": 1 }, { "indicator": "https://pastebin.com/raw/49Te3xW9", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-13 12:17:08 UTC", "last_seen": "2026-03-13 12:17:08 UTC", "sightings": 1 }, { "indicator": "https://pastebin.com/raw/ciSqK9Rp", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-13 12:17:08 UTC", "last_seen": "2026-03-13 12:17:08 UTC", "sightings": 1 }, { "indicator": "https://pastebin.com/raw/LH5Gz7Vx", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-13 12:17:08 UTC", "last_seen": "2026-03-13 12:17:08 UTC", "sightings": 1 }, { "indicator": "https://pastebin.com/raw/kyZ7PbSQ", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-13 12:17:08 UTC", "last_seen": "2026-03-13 12:17:08 UTC", "sightings": 1 }, { "indicator": "https://pastebin.com/raw/1YAn6rSV", "indicator_type": "url", "source": "URLhaus", "tags": [ "CoinMiner" ], "first_seen": "2026-03-13 12:17:08 UTC", "last_seen": "2026-03-13 12:17:08 UTC", "sightings": 1 }, { "indicator": "https://pastebin.com/raw/BkVZexp8", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-13 12:17:07 UTC", "last_seen": "2026-03-13 12:17:07 UTC", "sightings": 1 }, { "indicator": "http://103.206.207.23:60397/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 12:14:14 UTC", "last_seen": "2026-03-13 12:14:14 UTC", "sightings": 1 }, { "indicator": "https://catalogmonitor.whitebus.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-13 12:09:13 UTC", "last_seen": "2026-03-13 12:09:13 UTC", "sightings": 1 }, { "indicator": "http://222.134.163.0:42462/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 12:05:14 UTC", "last_seen": "2026-03-13 12:05:14 UTC", "sightings": 1 }, { "indicator": "http://117.209.24.229:56080/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 12:04:19 UTC", "last_seen": "2026-03-13 12:04:19 UTC", "sightings": 1 }, { "indicator": "https://criloya.whitebus.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-13 11:59:08 UTC", "last_seen": "2026-03-13 11:59:08 UTC", "sightings": 1 }, { "indicator": "http://117.192.34.102:41232/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 11:55:11 UTC", "last_seen": "2026-03-13 11:55:11 UTC", "sightings": 1 }, { "indicator": "http://117.209.26.253:47895/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 11:55:10 UTC", "last_seen": "2026-03-13 11:55:10 UTC", "sightings": 1 }, { "indicator": "http://119.117.185.187:43028/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 11:54:25 UTC", "last_seen": "2026-03-13 11:54:25 UTC", "sightings": 1 }, { "indicator": "https://iceevery.whitebus.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-13 11:52:08 UTC", "last_seen": "2026-03-13 11:52:08 UTC", "sightings": 1 }, { "indicator": "http://222.135.129.29:38802/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 11:46:21 UTC", "last_seen": "2026-03-13 11:46:21 UTC", "sightings": 1 }, { "indicator": "http://222.134.163.0:42462/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 11:43:23 UTC", "last_seen": "2026-03-13 11:43:23 UTC", "sightings": 1 }, { "indicator": "http://120.60.235.41:41350/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 11:43:19 UTC", "last_seen": "2026-03-13 11:43:19 UTC", "sightings": 1 }, { "indicator": "http://219.156.124.215:35504/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 11:39:19 UTC", "last_seen": "2026-03-13 11:39:19 UTC", "sightings": 1 }, { "indicator": "http://110.36.19.215:55548/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 11:39:16 UTC", "last_seen": "2026-03-13 11:39:16 UTC", "sightings": 1 }, { "indicator": "http://110.37.35.199:52510/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 11:33:17 UTC", "last_seen": "2026-03-13 11:33:17 UTC", "sightings": 1 }, { "indicator": "http://117.209.24.229:56080/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 11:32:08 UTC", "last_seen": "2026-03-13 11:32:08 UTC", "sightings": 1 }, { "indicator": "http://117.209.26.253:47895/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 11:30:19 UTC", "last_seen": "2026-03-13 11:30:19 UTC", "sightings": 1 }, { "indicator": "http://42.177.59.146:37551/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 11:26:20 UTC", "last_seen": "2026-03-13 11:26:20 UTC", "sightings": 1 }, { "indicator": "http://59.184.242.97:36317/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 11:22:11 UTC", "last_seen": "2026-03-13 11:22:11 UTC", "sightings": 1 }, { "indicator": "http://180.190.240.131:50080/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-13 11:19:03 UTC", "last_seen": "2026-03-13 11:19:03 UTC", "sightings": 1 }, { "indicator": "http://119.117.164.121:49924/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 11:08:10 UTC", "last_seen": "2026-03-13 11:08:10 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.7/files/unique5/random.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543", "Vidar" ], "first_seen": "2026-03-13 11:04:07 UTC", "last_seen": "2026-03-13 11:04:07 UTC", "sightings": 1 }, { "indicator": "http://42.237.52.213:57304/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 10:58:27 UTC", "last_seen": "2026-03-13 10:58:27 UTC", "sightings": 1 }, { "indicator": "http://59.184.242.97:36317/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 10:56:37 UTC", "last_seen": "2026-03-13 10:56:37 UTC", "sightings": 1 }, { "indicator": "http://36.88.136.202:57533/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-13 10:56:19 UTC", "last_seen": "2026-03-13 10:56:19 UTC", "sightings": 1 }, { "indicator": "https://sat-uplink.ferroluna.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-13 10:53:08 UTC", "last_seen": "2026-03-13 10:53:08 UTC", "sightings": 1 }, { "indicator": "https://rock-core-v7.ferroluna.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-13 10:48:09 UTC", "last_seen": "2026-03-13 10:48:09 UTC", "sightings": 1 }, { "indicator": "http://123.8.23.36:46066/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 10:47:21 UTC", "last_seen": "2026-03-13 10:47:21 UTC", "sightings": 1 }, { "indicator": "http://36.88.136.202:57533/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-13 10:42:17 UTC", "last_seen": "2026-03-13 10:42:17 UTC", "sightings": 1 }, { "indicator": "https://steel-base-9.ferroluna.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-13 10:42:09 UTC", "last_seen": "2026-03-13 10:42:09 UTC", "sightings": 1 }, { "indicator": "http://110.36.93.182:43407/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 10:38:20 UTC", "last_seen": "2026-03-13 10:38:20 UTC", "sightings": 1 }, { "indicator": "http://110.37.82.79:33819/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 10:34:19 UTC", "last_seen": "2026-03-13 10:34:19 UTC", "sightings": 1 }, { "indicator": "http://42.177.59.146:37551/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 10:31:18 UTC", "last_seen": "2026-03-13 10:31:18 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.7/files/8520831842/YMUeQHk.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-13 10:30:09 UTC", "last_seen": "2026-03-13 10:30:09 UTC", "sightings": 1 }, { "indicator": "http://123.8.23.36:46066/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 10:29:18 UTC", "last_seen": "2026-03-13 10:29:18 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/m1-nc/roukii/main/up.png", "indicator_type": "url", "source": "URLhaus", "tags": [ "Braodo" ], "first_seen": "2026-03-13 10:29:12 UTC", "last_seen": "2026-03-13 10:29:12 UTC", "sightings": 1 }, { "indicator": "https://github.com/m1-nc/roukii/raw/main/up.png", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-13 10:29:11 UTC", "last_seen": "2026-03-13 10:29:11 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/m1-nc/roukii/main/m1-nc.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "Braodo" ], "first_seen": "2026-03-13 10:29:11 UTC", "last_seen": "2026-03-13 10:29:11 UTC", "sightings": 1 }, { "indicator": "https://github.com/m1-nc/roukii/raw/main/m1-nc.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "Braodo" ], "first_seen": "2026-03-13 10:29:11 UTC", "last_seen": "2026-03-13 10:29:11 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/mu126-afk/um/main/ud.txt", "indicator_type": "url", "source": "URLhaus", "tags": [ "Braodo" ], "first_seen": "2026-03-13 10:29:07 UTC", "last_seen": "2026-03-13 10:29:07 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/m1-nc/roukii/main/ud.txt", "indicator_type": "url", "source": "URLhaus", "tags": [ "Braodo" ], "first_seen": "2026-03-13 10:29:07 UTC", "last_seen": "2026-03-13 10:29:07 UTC", "sightings": 1 }, { "indicator": "http://42.226.68.76:54886/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 10:28:08 UTC", "last_seen": "2026-03-13 10:28:08 UTC", "sightings": 1 }, { "indicator": "https://moon-orbit-3.ferroluna.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-13 10:27:08 UTC", "last_seen": "2026-03-13 10:27:08 UTC", "sightings": 1 }, { "indicator": "http://180.190.240.131:50080/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-13 10:25:14 UTC", "last_seen": "2026-03-13 10:25:14 UTC", "sightings": 1 }, { "indicator": "http://110.37.28.119:43420/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 10:17:16 UTC", "last_seen": "2026-03-13 10:17:16 UTC", "sightings": 1 }, { "indicator": "https://open-space-v.grandespace.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-13 10:13:07 UTC", "last_seen": "2026-03-13 10:13:07 UTC", "sightings": 1 }, { "indicator": "http://110.36.93.182:43407/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 10:10:10 UTC", "last_seen": "2026-03-13 10:10:10 UTC", "sightings": 1 }, { "indicator": "https://vast-field-01.grandespace.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-13 10:09:06 UTC", "last_seen": "2026-03-13 10:09:06 UTC", "sightings": 1 }, { "indicator": "http://110.37.82.79:33819/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 10:05:16 UTC", "last_seen": "2026-03-13 10:05:16 UTC", "sightings": 1 }, { "indicator": "http://61.176.71.90:40802/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 10:04:14 UTC", "last_seen": "2026-03-13 10:04:14 UTC", "sightings": 1 }, { "indicator": "https://area-zone-55.grandespace.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-13 09:59:07 UTC", "last_seen": "2026-03-13 09:59:07 UTC", "sightings": 1 }, { "indicator": "http://110.182.252.249:57729/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-13 09:56:20 UTC", "last_seen": "2026-03-13 09:56:20 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.7/files/7769977063/H7DC3me.bat", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "connectwise", "dropped-by-amadey" ], "first_seen": "2026-03-13 09:55:09 UTC", "last_seen": "2026-03-13 09:55:09 UTC", "sightings": 1 }, { "indicator": "http://117.221.55.219:51951/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 09:53:30 UTC", "last_seen": "2026-03-13 09:53:30 UTC", "sightings": 1 }, { "indicator": "http://117.221.55.219:51951/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 09:52:26 UTC", "last_seen": "2026-03-13 09:52:26 UTC", "sightings": 1 }, { "indicator": "http://110.37.28.119:43420/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 09:50:19 UTC", "last_seen": "2026-03-13 09:50:19 UTC", "sightings": 1 }, { "indicator": "https://outer-rim-9.grandespace.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-13 09:50:09 UTC", "last_seen": "2026-03-13 09:50:09 UTC", "sightings": 1 }, { "indicator": "http://61.176.71.90:40802/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 09:39:19 UTC", "last_seen": "2026-03-13 09:39:19 UTC", "sightings": 1 }, { "indicator": "http://110.36.30.37:44720/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 09:39:16 UTC", "last_seen": "2026-03-13 09:39:16 UTC", "sightings": 1 }, { "indicator": "http://61.3.16.168:35247/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 09:37:39 UTC", "last_seen": "2026-03-13 09:37:39 UTC", "sightings": 1 }, { "indicator": "http://77.247.88.72:42957/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-13 09:32:22 UTC", "last_seen": "2026-03-13 09:32:22 UTC", "sightings": 1 }, { "indicator": "https://vision-sync.nachtlicht.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-13 09:30:10 UTC", "last_seen": "2026-03-13 09:30:10 UTC", "sightings": 1 }, { "indicator": "http://59.93.19.33:54004/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 09:26:18 UTC", "last_seen": "2026-03-13 09:26:18 UTC", "sightings": 1 }, { "indicator": "https://scan-point-21.nachtlicht.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-13 09:25:08 UTC", "last_seen": "2026-03-13 09:25:08 UTC", "sightings": 1 }, { "indicator": "http://110.182.252.249:57729/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-13 09:24:22 UTC", "last_seen": "2026-03-13 09:24:22 UTC", "sightings": 1 }, { "indicator": "https://light-bridge-4.nachtlicht.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-13 09:19:10 UTC", "last_seen": "2026-03-13 09:19:10 UTC", "sightings": 1 }, { "indicator": "http://110.36.30.37:44720/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 09:17:21 UTC", "last_seen": "2026-03-13 09:17:21 UTC", "sightings": 1 }, { "indicator": "http://42.226.73.5:33732/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 09:16:15 UTC", "last_seen": "2026-03-13 09:16:15 UTC", "sightings": 1 }, { "indicator": "http://61.3.16.168:35247/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 09:15:41 UTC", "last_seen": "2026-03-13 09:15:41 UTC", "sightings": 1 }, { "indicator": "http://175.174.87.139:57425/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 09:15:15 UTC", "last_seen": "2026-03-13 09:15:15 UTC", "sightings": 1 }, { "indicator": "http://110.37.118.101:58545/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 09:14:19 UTC", "last_seen": "2026-03-13 09:14:19 UTC", "sightings": 1 }, { "indicator": "https://dark-room-v8.nachtlicht.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-13 09:14:07 UTC", "last_seen": "2026-03-13 09:14:07 UTC", "sightings": 1 }, { "indicator": "http://59.93.189.250:52964/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 09:11:21 UTC", "last_seen": "2026-03-13 09:11:21 UTC", "sightings": 1 }, { "indicator": "https://ghost-node.cybergeist.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-13 09:10:08 UTC", "last_seen": "2026-03-13 09:10:08 UTC", "sightings": 1 }, { "indicator": "http://77.247.88.72:42957/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-13 09:06:22 UTC", "last_seen": "2026-03-13 09:06:22 UTC", "sightings": 1 }, { "indicator": "https://user-auth-x2.cybergeist.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-13 08:58:09 UTC", "last_seen": "2026-03-13 08:58:09 UTC", "sightings": 1 }, { "indicator": "http://59.97.255.247:36369/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 08:57:18 UTC", "last_seen": "2026-03-13 08:57:18 UTC", "sightings": 1 }, { "indicator": "http://59.93.19.33:54004/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 08:55:20 UTC", "last_seen": "2026-03-13 08:55:20 UTC", "sightings": 1 }, { "indicator": "http://42.226.73.5:33732/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 08:54:23 UTC", "last_seen": "2026-03-13 08:54:23 UTC", "sightings": 1 }, { "indicator": "http://110.37.118.101:58545/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 08:49:24 UTC", "last_seen": "2026-03-13 08:49:24 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.7/files/8115221351/c8hckRF.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-13 08:49:12 UTC", "last_seen": "2026-03-13 08:49:12 UTC", "sightings": 1 }, { "indicator": "http://119.115.243.13:53957/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 08:47:23 UTC", "last_seen": "2026-03-13 08:47:23 UTC", "sightings": 1 }, { "indicator": "http://115.53.196.85:55661/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 08:42:16 UTC", "last_seen": "2026-03-13 08:42:16 UTC", "sightings": 1 }, { "indicator": "http://175.174.87.139:57425/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 08:41:31 UTC", "last_seen": "2026-03-13 08:41:31 UTC", "sightings": 1 }, { "indicator": "http://61.53.94.16:60189/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 08:38:27 UTC", "last_seen": "2026-03-13 08:38:27 UTC", "sightings": 1 }, { "indicator": "https://core-shell-77.cybergeist.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-13 08:35:08 UTC", "last_seen": "2026-03-13 08:35:08 UTC", "sightings": 1 }, { "indicator": "http://59.97.255.247:36369/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 08:34:19 UTC", "last_seen": "2026-03-13 08:34:19 UTC", "sightings": 1 }, { "indicator": "http://59.88.89.73:58535/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 08:33:18 UTC", "last_seen": "2026-03-13 08:33:18 UTC", "sightings": 1 }, { "indicator": "https://wmfkj2w9.oakbit.digital/?=check&&actmn=GAiFjXJbNetrplnn", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-13 08:29:06 UTC", "last_seen": "2026-03-13 08:29:06 UTC", "sightings": 1 }, { "indicator": "https://alpha-trace-0.cybergeist.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-13 08:28:07 UTC", "last_seen": "2026-03-13 08:28:07 UTC", "sightings": 1 }, { "indicator": "http://27.215.215.117:44017/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 08:27:26 UTC", "last_seen": "2026-03-13 08:27:26 UTC", "sightings": 1 }, { "indicator": "http://119.115.243.13:53957/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 08:27:13 UTC", "last_seen": "2026-03-13 08:27:13 UTC", "sightings": 1 }, { "indicator": "http://110.37.35.199:52510/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 08:24:21 UTC", "last_seen": "2026-03-13 08:24:21 UTC", "sightings": 1 }, { "indicator": "https://point-entry.mondosolido.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-13 08:22:08 UTC", "last_seen": "2026-03-13 08:22:08 UTC", "sightings": 1 }, { "indicator": "http://221.229.54.188:47305/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-13 08:19:25 UTC", "last_seen": "2026-03-13 08:19:25 UTC", "sightings": 1 }, { "indicator": "http://115.53.196.85:55661/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 08:15:23 UTC", "last_seen": "2026-03-13 08:15:23 UTC", "sightings": 1 }, { "indicator": "https://data-base-v3.mondosolido.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-13 08:15:09 UTC", "last_seen": "2026-03-13 08:15:09 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.7/files/7769977063/H7DC3me.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-13 08:06:07 UTC", "last_seen": "2026-03-13 08:06:07 UTC", "sightings": 1 }, { "indicator": "http://88.84.222.217:29218/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 08:05:21 UTC", "last_seen": "2026-03-13 08:05:21 UTC", "sightings": 1 }, { "indicator": "http://124.162.80.79:56772/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 08:01:40 UTC", "last_seen": "2026-03-13 08:01:40 UTC", "sightings": 1 }, { "indicator": "http://59.42.89.131:56735/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-13 08:01:26 UTC", "last_seen": "2026-03-13 08:01:26 UTC", "sightings": 1 }, { "indicator": "https://base-infra-9.mondosolido.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-13 08:00:14 UTC", "last_seen": "2026-03-13 08:00:14 UTC", "sightings": 1 }, { "indicator": "http://59.96.138.61:56065/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 08:00:09 UTC", "last_seen": "2026-03-13 08:00:09 UTC", "sightings": 1 }, { "indicator": "http://27.215.215.117:44017/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 07:58:17 UTC", "last_seen": "2026-03-13 07:58:17 UTC", "sightings": 1 }, { "indicator": "http://61.53.94.16:60189/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 07:55:21 UTC", "last_seen": "2026-03-13 07:55:21 UTC", "sightings": 1 }, { "indicator": "http://221.229.54.188:47305/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-13 07:52:11 UTC", "last_seen": "2026-03-13 07:52:11 UTC", "sightings": 1 }, { "indicator": "http://117.241.199.58:44047/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips" ], "first_seen": "2026-03-13 07:51:19 UTC", "last_seen": "2026-03-13 07:51:19 UTC", "sightings": 1 }, { "indicator": "http://59.96.138.61:56065/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 07:35:19 UTC", "last_seen": "2026-03-13 07:35:19 UTC", "sightings": 1 }, { "indicator": "http://117.209.92.118:33750/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 07:30:12 UTC", "last_seen": "2026-03-13 07:30:12 UTC", "sightings": 1 }, { "indicator": "http://59.184.251.154:42746/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 07:30:09 UTC", "last_seen": "2026-03-13 07:30:09 UTC", "sightings": 1 }, { "indicator": "http://117.241.199.58:44047/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips" ], "first_seen": "2026-03-13 07:21:24 UTC", "last_seen": "2026-03-13 07:21:24 UTC", "sightings": 1 }, { "indicator": "https://global-net-1.mondosolido.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-13 07:20:08 UTC", "last_seen": "2026-03-13 07:20:08 UTC", "sightings": 1 }, { "indicator": "http://219.157.154.248:33965/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 07:18:13 UTC", "last_seen": "2026-03-13 07:18:13 UTC", "sightings": 1 }, { "indicator": "https://local-hub-test.petitbureau.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-13 07:16:06 UTC", "last_seen": "2026-03-13 07:16:06 UTC", "sightings": 1 }, { "indicator": "https://staff-portal-5.petitbureau.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-13 07:10:07 UTC", "last_seen": "2026-03-13 07:10:07 UTC", "sightings": 1 }, { "indicator": "http://117.216.183.223:33780/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 07:04:20 UTC", "last_seen": "2026-03-13 07:04:20 UTC", "sightings": 1 }, { "indicator": "http://117.209.92.118:33750/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 07:04:18 UTC", "last_seen": "2026-03-13 07:04:18 UTC", "sightings": 1 }, { "indicator": "http://59.184.251.154:42746/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 07:03:30 UTC", "last_seen": "2026-03-13 07:03:30 UTC", "sightings": 1 }, { "indicator": "http://110.37.40.14:58685/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 07:02:16 UTC", "last_seen": "2026-03-13 07:02:16 UTC", "sightings": 1 }, { "indicator": "http://59.184.247.170:46350/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 06:58:10 UTC", "last_seen": "2026-03-13 06:58:10 UTC", "sightings": 1 }, { "indicator": "http://125.47.217.82:60056/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 06:57:10 UTC", "last_seen": "2026-03-13 06:57:10 UTC", "sightings": 1 }, { "indicator": "http://42.235.90.235:37904/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 06:54:17 UTC", "last_seen": "2026-03-13 06:54:17 UTC", "sightings": 1 }, { "indicator": "http://42.235.90.235:37904/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 06:53:13 UTC", "last_seen": "2026-03-13 06:53:13 UTC", "sightings": 1 }, { "indicator": "http://115.63.15.15:54973/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 06:52:18 UTC", "last_seen": "2026-03-13 06:52:18 UTC", "sightings": 1 }, { "indicator": "http://110.36.80.166:55765/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 06:51:23 UTC", "last_seen": "2026-03-13 06:51:23 UTC", "sightings": 1 }, { "indicator": "https://work-flow-v2.petitbureau.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-13 06:51:08 UTC", "last_seen": "2026-03-13 06:51:08 UTC", "sightings": 1 }, { "indicator": "http://59.93.90.241:60192/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 06:50:24 UTC", "last_seen": "2026-03-13 06:50:24 UTC", "sightings": 1 }, { "indicator": "http://110.37.36.254:46666/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 06:48:18 UTC", "last_seen": "2026-03-13 06:48:18 UTC", "sightings": 1 }, { "indicator": "http://182.127.104.4:43782/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 06:48:17 UTC", "last_seen": "2026-03-13 06:48:17 UTC", "sightings": 1 }, { "indicator": "http://175.0.72.159:50274/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-13 06:48:04 UTC", "last_seen": "2026-03-13 06:48:04 UTC", "sightings": 1 }, { "indicator": "http://117.216.183.223:33780/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 06:46:37 UTC", "last_seen": "2026-03-13 06:46:37 UTC", "sightings": 1 }, { "indicator": "https://office-link-0.petitbureau.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-13 06:41:09 UTC", "last_seen": "2026-03-13 06:41:09 UTC", "sightings": 1 }, { "indicator": "http://61.52.104.70:43583/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 06:38:28 UTC", "last_seen": "2026-03-13 06:38:28 UTC", "sightings": 1 }, { "indicator": "http://110.36.80.166:55765/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 06:38:25 UTC", "last_seen": "2026-03-13 06:38:25 UTC", "sightings": 1 }, { "indicator": "http://110.37.40.14:58685/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 06:36:16 UTC", "last_seen": "2026-03-13 06:36:16 UTC", "sightings": 1 }, { "indicator": "http://117.211.46.206:44783/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 06:35:20 UTC", "last_seen": "2026-03-13 06:35:20 UTC", "sightings": 1 }, { "indicator": "http://59.184.247.170:46350/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 06:33:27 UTC", "last_seen": "2026-03-13 06:33:27 UTC", "sightings": 1 }, { "indicator": "http://107.175.246.3/36/cbc/uwanttobefineforeverything.hta", "indicator_type": "url", "source": "URLhaus", "tags": [ "PureHVNC" ], "first_seen": "2026-03-13 06:29:07 UTC", "last_seen": "2026-03-13 06:29:07 UTC", "sightings": 1 }, { "indicator": "https://gateway-secure.starkstrom.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-13 06:29:06 UTC", "last_seen": "2026-03-13 06:29:06 UTC", "sightings": 1 }, { "indicator": "http://107.175.246.3/35/ecg/ncoooe.hta", "indicator_type": "url", "source": "URLhaus", "tags": [ "hta" ], "first_seen": "2026-03-13 06:28:08 UTC", "last_seen": "2026-03-13 06:28:08 UTC", "sightings": 1 }, { "indicator": "http://125.47.217.82:60056/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 06:26:13 UTC", "last_seen": "2026-03-13 06:26:13 UTC", "sightings": 1 }, { "indicator": "http://117.198.199.177:46794/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 06:24:21 UTC", "last_seen": "2026-03-13 06:24:21 UTC", "sightings": 1 }, { "indicator": "http://110.37.36.254:46666/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 06:20:21 UTC", "last_seen": "2026-03-13 06:20:21 UTC", "sightings": 1 }, { "indicator": "http://182.127.104.4:43782/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 06:20:21 UTC", "last_seen": "2026-03-13 06:20:21 UTC", "sightings": 1 }, { "indicator": "http://42.226.212.252:34397/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 06:16:20 UTC", "last_seen": "2026-03-13 06:16:20 UTC", "sightings": 1 }, { "indicator": "http://61.52.104.70:43583/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 06:15:22 UTC", "last_seen": "2026-03-13 06:15:22 UTC", "sightings": 1 }, { "indicator": "https://sys-monitor-x.starkstrom.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-13 06:06:09 UTC", "last_seen": "2026-03-13 06:06:09 UTC", "sightings": 1 }, { "indicator": "http://61.53.93.90:44949/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 06:01:21 UTC", "last_seen": "2026-03-13 06:01:21 UTC", "sightings": 1 }, { "indicator": "http://117.248.24.110:45107/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 05:56:22 UTC", "last_seen": "2026-03-13 05:56:22 UTC", "sightings": 1 }, { "indicator": "http://182.119.198.91:46402/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 05:54:19 UTC", "last_seen": "2026-03-13 05:54:19 UTC", "sightings": 1 }, { "indicator": "https://load-balancer-3.starkstrom.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-13 05:50:08 UTC", "last_seen": "2026-03-13 05:50:08 UTC", "sightings": 1 }, { "indicator": "http://125.43.249.160:48520/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 05:48:21 UTC", "last_seen": "2026-03-13 05:48:21 UTC", "sightings": 1 }, { "indicator": "http://42.226.212.252:34397/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 05:41:24 UTC", "last_seen": "2026-03-13 05:41:24 UTC", "sightings": 1 }, { "indicator": "https://power-grid-88.starkstrom.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-13 05:41:05 UTC", "last_seen": "2026-03-13 05:41:05 UTC", "sightings": 1 }, { "indicator": "https://internal-dns.cielonumerique.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-13 05:37:06 UTC", "last_seen": "2026-03-13 05:37:06 UTC", "sightings": 1 }, { "indicator": "http://182.119.198.91:46402/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 05:27:23 UTC", "last_seen": "2026-03-13 05:27:23 UTC", "sightings": 1 }, { "indicator": "https://cache-dist-12.cielonumerique.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-13 05:25:10 UTC", "last_seen": "2026-03-13 05:25:10 UTC", "sightings": 1 }, { "indicator": "http://61.53.93.90:44949/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 05:22:24 UTC", "last_seen": "2026-03-13 05:22:24 UTC", "sightings": 1 }, { "indicator": "https://backend-core-7.cielonumerique.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-13 05:22:08 UTC", "last_seen": "2026-03-13 05:22:08 UTC", "sightings": 1 }, { "indicator": "http://125.43.249.160:48520/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 05:17:29 UTC", "last_seen": "2026-03-13 05:17:29 UTC", "sightings": 1 }, { "indicator": "http://125.161.142.194:36629/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-13 05:17:29 UTC", "last_seen": "2026-03-13 05:17:29 UTC", "sightings": 1 }, { "indicator": "http://60.210.77.210:56521/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-13 05:16:23 UTC", "last_seen": "2026-03-13 05:16:23 UTC", "sightings": 1 }, { "indicator": "http://59.182.88.137:54923/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 05:04:19 UTC", "last_seen": "2026-03-13 05:04:19 UTC", "sightings": 1 }, { "indicator": "http://123.10.2.23:40873/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 04:57:10 UTC", "last_seen": "2026-03-13 04:57:10 UTC", "sightings": 1 }, { "indicator": "http://115.63.15.15:54973/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 04:56:13 UTC", "last_seen": "2026-03-13 04:56:13 UTC", "sightings": 1 }, { "indicator": "https://remote-access-v4.cielonumerique.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-13 04:53:10 UTC", "last_seen": "2026-03-13 04:53:10 UTC", "sightings": 1 }, { "indicator": "http://110.37.37.232:39217/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 04:52:09 UTC", "last_seen": "2026-03-13 04:52:09 UTC", "sightings": 1 }, { "indicator": "http://85.226.212.168:59318/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 04:52:09 UTC", "last_seen": "2026-03-13 04:52:09 UTC", "sightings": 1 }, { "indicator": "http://175.165.85.191:36363/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 04:50:11 UTC", "last_seen": "2026-03-13 04:50:11 UTC", "sightings": 1 }, { "indicator": "http://60.210.77.210:56521/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-13 04:49:10 UTC", "last_seen": "2026-03-13 04:49:10 UTC", "sightings": 1 }, { "indicator": "http://110.37.37.232:39217/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 04:47:17 UTC", "last_seen": "2026-03-13 04:47:17 UTC", "sightings": 1 }, { "indicator": "https://link.storjshare.io/raw/jwye2z4k24dof2jumukozlephkiq/000/2/OHKSFJCE.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543", "Stealc" ], "first_seen": "2026-03-13 04:46:09 UTC", "last_seen": "2026-03-13 04:46:09 UTC", "sightings": 1 }, { "indicator": "https://app-data-sync.vittoriastrada.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-13 04:41:07 UTC", "last_seen": "2026-03-13 04:41:07 UTC", "sightings": 1 }, { "indicator": "http://83.142.209.47/wlan.mpsl", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mips", "mirai", "ua-wget" ], "first_seen": "2026-03-13 04:36:18 UTC", "last_seen": "2026-03-13 04:36:18 UTC", "sightings": 1 }, { "indicator": "https://web-proxy-99.vittoriastrada.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-13 04:33:08 UTC", "last_seen": "2026-03-13 04:33:08 UTC", "sightings": 1 }, { "indicator": "http://179.108.90.55:59300/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-13 04:31:14 UTC", "last_seen": "2026-03-13 04:31:14 UTC", "sightings": 1 }, { "indicator": "http://175.165.85.191:36363/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 04:27:18 UTC", "last_seen": "2026-03-13 04:27:18 UTC", "sightings": 1 }, { "indicator": "https://cloud-storage-5.vittoriastrada.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-13 04:21:07 UTC", "last_seen": "2026-03-13 04:21:07 UTC", "sightings": 1 }, { "indicator": "http://173.28.103.46:60751/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-13 04:16:22 UTC", "last_seen": "2026-03-13 04:16:22 UTC", "sightings": 1 }, { "indicator": "http://123.10.2.23:40873/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 04:11:20 UTC", "last_seen": "2026-03-13 04:11:20 UTC", "sightings": 1 }, { "indicator": "http://27.215.80.188:32948/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips" ], "first_seen": "2026-03-13 04:11:19 UTC", "last_seen": "2026-03-13 04:11:19 UTC", "sightings": 1 }, { "indicator": "http://110.37.61.110:58137/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 04:10:07 UTC", "last_seen": "2026-03-13 04:10:07 UTC", "sightings": 1 }, { "indicator": "http://179.108.90.55:59300/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-13 04:05:20 UTC", "last_seen": "2026-03-13 04:05:20 UTC", "sightings": 1 }, { "indicator": "http://95.56.232.109:39091/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-13 03:59:08 UTC", "last_seen": "2026-03-13 03:59:08 UTC", "sightings": 1 }, { "indicator": "http://42.237.52.213:57304/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 03:55:10 UTC", "last_seen": "2026-03-13 03:55:10 UTC", "sightings": 1 }, { "indicator": "http://173.28.103.46:60751/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-13 03:52:20 UTC", "last_seen": "2026-03-13 03:52:20 UTC", "sightings": 1 }, { "indicator": "http://27.215.80.188:32948/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips" ], "first_seen": "2026-03-13 03:48:09 UTC", "last_seen": "2026-03-13 03:48:09 UTC", "sightings": 1 }, { "indicator": "http://59.96.141.123:49172/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 03:47:14 UTC", "last_seen": "2026-03-13 03:47:14 UTC", "sightings": 1 }, { "indicator": "http://115.56.152.245:34400/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 03:42:23 UTC", "last_seen": "2026-03-13 03:42:23 UTC", "sightings": 1 }, { "indicator": "http://42.235.76.176:46169/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 03:37:15 UTC", "last_seen": "2026-03-13 03:37:15 UTC", "sightings": 1 }, { "indicator": "https://metrics-sync.kristallwelt.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-13 03:36:07 UTC", "last_seen": "2026-03-13 03:36:07 UTC", "sightings": 1 }, { "indicator": "http://115.49.201.246:44560/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 03:30:23 UTC", "last_seen": "2026-03-13 03:30:23 UTC", "sightings": 1 }, { "indicator": "http://110.37.61.110:58137/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 03:30:23 UTC", "last_seen": "2026-03-13 03:30:23 UTC", "sightings": 1 }, { "indicator": "http://85.122.114.19/rebirth.mpsl", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "gafgyt", "mips", "ua-wget" ], "first_seen": "2026-03-13 03:29:21 UTC", "last_seen": "2026-03-13 03:29:21 UTC", "sightings": 1 }, { "indicator": "https://s3.g.s4.mega.io/aileqac3yep7oqdhygjpberqqnk2zrnhck2lx/busket/2/03x12x26/01/OHKSFJCE.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey", "Stealc" ], "first_seen": "2026-03-13 03:25:19 UTC", "last_seen": "2026-03-13 03:25:19 UTC", "sightings": 1 }, { "indicator": "http://59.96.141.123:49172/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 03:21:15 UTC", "last_seen": "2026-03-13 03:21:15 UTC", "sightings": 1 }, { "indicator": "http://123.9.93.175:41173/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-13 03:21:15 UTC", "last_seen": "2026-03-13 03:21:15 UTC", "sightings": 1 }, { "indicator": "https://dev-test-01.kristallwelt.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-13 03:19:10 UTC", "last_seen": "2026-03-13 03:19:10 UTC", "sightings": 1 }, { "indicator": "http://110.36.23.65:36102/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 03:18:25 UTC", "last_seen": "2026-03-13 03:18:25 UTC", "sightings": 1 }, { "indicator": "http://42.236.150.165:37307/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 03:15:24 UTC", "last_seen": "2026-03-13 03:15:24 UTC", "sightings": 1 }, { "indicator": "http://110.37.52.225:37637/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "Mozi" ], "first_seen": "2026-03-13 03:10:24 UTC", "last_seen": "2026-03-13 03:10:24 UTC", "sightings": 1 }, { "indicator": "https://api-node-v2.kristallwelt.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-13 03:10:08 UTC", "last_seen": "2026-03-13 03:10:08 UTC", "sightings": 1 }, { "indicator": "http://110.37.2.210:50583/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 03:08:18 UTC", "last_seen": "2026-03-13 03:08:18 UTC", "sightings": 1 }, { "indicator": "https://cdn-static-1.kristallwelt.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-13 03:06:11 UTC", "last_seen": "2026-03-13 03:06:11 UTC", "sightings": 1 }, { "indicator": "http://42.235.76.176:46169/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 03:03:23 UTC", "last_seen": "2026-03-13 03:03:23 UTC", "sightings": 1 }, { "indicator": "http://123.9.93.175:41173/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-13 02:56:23 UTC", "last_seen": "2026-03-13 02:56:23 UTC", "sightings": 1 }, { "indicator": "http://182.126.103.58:39100/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 02:56:22 UTC", "last_seen": "2026-03-13 02:56:22 UTC", "sightings": 1 }, { "indicator": "http://42.236.150.165:37307/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 02:53:23 UTC", "last_seen": "2026-03-13 02:53:23 UTC", "sightings": 1 }, { "indicator": "https://endpointtest.chifdark.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-13 02:53:09 UTC", "last_seen": "2026-03-13 02:53:09 UTC", "sightings": 1 }, { "indicator": "http://110.37.2.210:50583/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 02:48:17 UTC", "last_seen": "2026-03-13 02:48:17 UTC", "sightings": 1 }, { "indicator": "http://182.126.103.58:39100/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 02:45:13 UTC", "last_seen": "2026-03-13 02:45:13 UTC", "sightings": 1 }, { "indicator": "http://110.37.100.152:42177/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 02:42:24 UTC", "last_seen": "2026-03-13 02:42:24 UTC", "sightings": 1 }, { "indicator": "http://110.37.106.54:50182/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 02:39:21 UTC", "last_seen": "2026-03-13 02:39:21 UTC", "sightings": 1 }, { "indicator": "http://115.55.242.6:48695/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 02:39:21 UTC", "last_seen": "2026-03-13 02:39:21 UTC", "sightings": 1 }, { "indicator": "https://reel-age.chifdark.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-13 02:35:08 UTC", "last_seen": "2026-03-13 02:35:08 UTC", "sightings": 1 }, { "indicator": "http://115.56.155.131:59635/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 02:34:19 UTC", "last_seen": "2026-03-13 02:34:19 UTC", "sightings": 1 }, { "indicator": "http://103.206.207.23:60397/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 02:29:20 UTC", "last_seen": "2026-03-13 02:29:20 UTC", "sightings": 1 }, { "indicator": "http://117.241.54.232:57836/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-13 02:22:21 UTC", "last_seen": "2026-03-13 02:22:21 UTC", "sightings": 1 }, { "indicator": "http://115.56.155.131:59635/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 02:14:22 UTC", "last_seen": "2026-03-13 02:14:22 UTC", "sightings": 1 }, { "indicator": "https://ipggvyss.chifdark.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-13 02:12:07 UTC", "last_seen": "2026-03-13 02:12:07 UTC", "sightings": 1 }, { "indicator": "http://110.37.11.215:60599/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 02:06:25 UTC", "last_seen": "2026-03-13 02:06:25 UTC", "sightings": 1 }, { "indicator": "http://112.248.245.2:38823/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 02:04:40 UTC", "last_seen": "2026-03-13 02:04:40 UTC", "sightings": 1 }, { "indicator": "https://closedgranite.chifdark.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-13 02:02:07 UTC", "last_seen": "2026-03-13 02:02:07 UTC", "sightings": 1 }, { "indicator": "http://117.26.227.156:52208/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-13 01:58:17 UTC", "last_seen": "2026-03-13 01:58:17 UTC", "sightings": 1 }, { "indicator": "http://117.241.54.232:57836/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-13 01:55:17 UTC", "last_seen": "2026-03-13 01:55:17 UTC", "sightings": 1 }, { "indicator": "http://27.216.44.248:52650/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 01:52:09 UTC", "last_seen": "2026-03-13 01:52:09 UTC", "sightings": 1 }, { "indicator": "https://7xvura.coldcaught.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-13 01:48:07 UTC", "last_seen": "2026-03-13 01:48:07 UTC", "sightings": 1 }, { "indicator": "http://110.37.127.205:50926/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 01:48:07 UTC", "last_seen": "2026-03-13 01:48:07 UTC", "sightings": 1 }, { "indicator": "http://110.37.11.215:60599/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 01:48:07 UTC", "last_seen": "2026-03-13 01:48:07 UTC", "sightings": 1 }, { "indicator": "http://27.12.98.229:36351/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-13 01:36:11 UTC", "last_seen": "2026-03-13 01:36:11 UTC", "sightings": 1 }, { "indicator": "https://i0n3-graph.coldcaught.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-13 01:36:06 UTC", "last_seen": "2026-03-13 01:36:06 UTC", "sightings": 1 }, { "indicator": "http://27.216.44.248:52650/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 01:35:20 UTC", "last_seen": "2026-03-13 01:35:20 UTC", "sightings": 1 }, { "indicator": "http://115.50.219.72:59211/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 01:26:20 UTC", "last_seen": "2026-03-13 01:26:20 UTC", "sightings": 1 }, { "indicator": "http://110.37.127.205:50926/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 01:21:18 UTC", "last_seen": "2026-03-13 01:21:18 UTC", "sightings": 1 }, { "indicator": "http://115.55.221.37:49271/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 01:20:11 UTC", "last_seen": "2026-03-13 01:20:11 UTC", "sightings": 1 }, { "indicator": "https://cratelayout.coldcaught.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-13 01:11:07 UTC", "last_seen": "2026-03-13 01:11:07 UTC", "sightings": 1 }, { "indicator": "https://m4nif-stack.coldcaught.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-13 01:06:06 UTC", "last_seen": "2026-03-13 01:06:06 UTC", "sightings": 1 }, { "indicator": "http://115.50.219.72:59211/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 01:01:11 UTC", "last_seen": "2026-03-13 01:01:11 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.7/files/6902778688/AcjqUEy.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey", "VenomStealer" ], "first_seen": "2026-03-13 00:55:09 UTC", "last_seen": "2026-03-13 00:55:09 UTC", "sightings": 1 }, { "indicator": "https://sannod.liberalpilka.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-13 00:55:07 UTC", "last_seen": "2026-03-13 00:55:07 UTC", "sightings": 1 }, { "indicator": "http://115.55.221.37:49271/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 00:53:21 UTC", "last_seen": "2026-03-13 00:53:21 UTC", "sightings": 1 }, { "indicator": "http://125.44.157.61:46797/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 00:50:15 UTC", "last_seen": "2026-03-13 00:50:15 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.7/files/8441193572/Na8U4Fe.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "CoinMiner", "dropped-by-amadey" ], "first_seen": "2026-03-13 00:44:10 UTC", "last_seen": "2026-03-13 00:44:10 UTC", "sightings": 1 }, { "indicator": "https://vfjpe.liberalpilka.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-13 00:33:07 UTC", "last_seen": "2026-03-13 00:33:07 UTC", "sightings": 1 }, { "indicator": "https://vorcoreix1.liberalpilka.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-13 00:24:07 UTC", "last_seen": "2026-03-13 00:24:07 UTC", "sightings": 1 }, { "indicator": "http://59.182.112.134:32968/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 00:22:17 UTC", "last_seen": "2026-03-13 00:22:17 UTC", "sightings": 1 }, { "indicator": "http://125.44.157.61:46797/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 00:21:22 UTC", "last_seen": "2026-03-13 00:21:22 UTC", "sightings": 1 }, { "indicator": "https://scarnetwor.liberalpilka.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-13 00:17:07 UTC", "last_seen": "2026-03-13 00:17:07 UTC", "sightings": 1 }, { "indicator": "http://115.61.50.70:47839/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-13 00:15:12 UTC", "last_seen": "2026-03-13 00:15:12 UTC", "sightings": 1 }, { "indicator": "https://ohqr.migratetulle.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-13 00:02:09 UTC", "last_seen": "2026-03-13 00:02:09 UTC", "sightings": 1 }, { "indicator": "http://115.76.99.238:47347/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-12 23:56:26 UTC", "last_seen": "2026-03-12 23:56:26 UTC", "sightings": 1 }, { "indicator": "http://59.182.112.134:32968/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 23:56:22 UTC", "last_seen": "2026-03-12 23:56:22 UTC", "sightings": 1 }, { "indicator": "http://115.61.50.70:47839/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 23:55:15 UTC", "last_seen": "2026-03-12 23:55:15 UTC", "sightings": 1 }, { "indicator": "http://222.140.157.111:43638/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 23:55:14 UTC", "last_seen": "2026-03-12 23:55:14 UTC", "sightings": 1 }, { "indicator": "https://threadtrend.migratetulle.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-12 23:54:08 UTC", "last_seen": "2026-03-12 23:54:08 UTC", "sightings": 1 }, { "indicator": "http://117.195.115.67:32935/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 23:51:15 UTC", "last_seen": "2026-03-12 23:51:15 UTC", "sightings": 1 }, { "indicator": "http://125.44.211.184:33116/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 23:51:14 UTC", "last_seen": "2026-03-12 23:51:14 UTC", "sightings": 1 }, { "indicator": "http://125.44.211.184:33116/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 23:51:08 UTC", "last_seen": "2026-03-12 23:51:08 UTC", "sightings": 1 }, { "indicator": "http://46.151.182.73/hb8ipc.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai", "sh", "ua-wget" ], "first_seen": "2026-03-12 23:46:10 UTC", "last_seen": "2026-03-12 23:46:10 UTC", "sightings": 1 }, { "indicator": "http://115.56.98.194:53047/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 23:45:21 UTC", "last_seen": "2026-03-12 23:45:21 UTC", "sightings": 1 }, { "indicator": "https://alt-0tter.migratetulle.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-12 23:45:08 UTC", "last_seen": "2026-03-12 23:45:08 UTC", "sightings": 1 }, { "indicator": "http://61.163.130.60:43789/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 23:40:18 UTC", "last_seen": "2026-03-12 23:40:18 UTC", "sightings": 1 }, { "indicator": "http://116.2.55.4:46688/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 23:39:24 UTC", "last_seen": "2026-03-12 23:39:24 UTC", "sightings": 1 }, { "indicator": "https://61yede8.migratetulle.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-12 23:38:06 UTC", "last_seen": "2026-03-12 23:38:06 UTC", "sightings": 1 }, { "indicator": "http://87.110.15.80:52323/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 23:37:17 UTC", "last_seen": "2026-03-12 23:37:17 UTC", "sightings": 1 }, { "indicator": "http://222.140.157.111:43638/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 23:31:11 UTC", "last_seen": "2026-03-12 23:31:11 UTC", "sightings": 1 }, { "indicator": "http://115.76.99.238:47347/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-12 23:30:17 UTC", "last_seen": "2026-03-12 23:30:17 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.7/files/7048186296/SASBjh2.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543", "SantaStealer" ], "first_seen": "2026-03-12 23:30:11 UTC", "last_seen": "2026-03-12 23:30:11 UTC", "sightings": 1 }, { "indicator": "https://vyyrr.idyllmuscat.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-12 23:30:09 UTC", "last_seen": "2026-03-12 23:30:09 UTC", "sightings": 1 }, { "indicator": "http://61.163.130.60:43789/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 23:27:19 UTC", "last_seen": "2026-03-12 23:27:19 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.7/files/1591294058/VmVo8PF.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-12 23:25:10 UTC", "last_seen": "2026-03-12 23:25:10 UTC", "sightings": 1 }, { "indicator": "https://kh9zgked.idyllmuscat.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-12 23:24:10 UTC", "last_seen": "2026-03-12 23:24:10 UTC", "sightings": 1 }, { "indicator": "http://27.37.116.8:44175/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 23:22:11 UTC", "last_seen": "2026-03-12 23:22:11 UTC", "sightings": 1 }, { "indicator": "http://182.60.2.188:40239/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 23:20:10 UTC", "last_seen": "2026-03-12 23:20:10 UTC", "sightings": 1 }, { "indicator": "https://d3ploy-mesh.idyllmuscat.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-12 23:18:06 UTC", "last_seen": "2026-03-12 23:18:06 UTC", "sightings": 1 }, { "indicator": "http://42.225.243.177:58431/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-12 23:09:19 UTC", "last_seen": "2026-03-12 23:09:19 UTC", "sightings": 1 }, { "indicator": "https://eih59fij.idyllmuscat.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-12 23:09:06 UTC", "last_seen": "2026-03-12 23:09:06 UTC", "sightings": 1 }, { "indicator": "https://zen-crestex.concretemixer.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-12 23:02:07 UTC", "last_seen": "2026-03-12 23:02:07 UTC", "sightings": 1 }, { "indicator": "http://110.37.27.87:53252/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 22:55:18 UTC", "last_seen": "2026-03-12 22:55:18 UTC", "sightings": 1 }, { "indicator": "http://110.37.27.87:53252/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 22:53:16 UTC", "last_seen": "2026-03-12 22:53:16 UTC", "sightings": 1 }, { "indicator": "http://182.60.2.188:40239/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 22:51:13 UTC", "last_seen": "2026-03-12 22:51:13 UTC", "sightings": 1 }, { "indicator": "http://120.28.124.40:38077/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-12 22:48:12 UTC", "last_seen": "2026-03-12 22:48:12 UTC", "sightings": 1 }, { "indicator": "https://ypzwu43.concretemixer.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-12 22:42:08 UTC", "last_seen": "2026-03-12 22:42:08 UTC", "sightings": 1 }, { "indicator": "http://110.37.97.32:36215/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 22:39:15 UTC", "last_seen": "2026-03-12 22:39:15 UTC", "sightings": 1 }, { "indicator": "http://125.47.253.255:43283/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 22:35:22 UTC", "last_seen": "2026-03-12 22:35:22 UTC", "sightings": 1 }, { "indicator": "http://120.84.213.157:53783/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 22:34:18 UTC", "last_seen": "2026-03-12 22:34:18 UTC", "sightings": 1 }, { "indicator": "https://getjwrv.concretemixer.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-12 22:34:08 UTC", "last_seen": "2026-03-12 22:34:08 UTC", "sightings": 1 }, { "indicator": "http://59.177.101.253:51659/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 22:32:31 UTC", "last_seen": "2026-03-12 22:32:31 UTC", "sightings": 1 }, { "indicator": "https://rq4pe.concretemixer.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-12 22:29:06 UTC", "last_seen": "2026-03-12 22:29:06 UTC", "sightings": 1 }, { "indicator": "http://125.46.128.198:47333/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 22:28:16 UTC", "last_seen": "2026-03-12 22:28:16 UTC", "sightings": 1 }, { "indicator": "http://91.196.32.55/596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-12 22:28:15 UTC", "last_seen": "2026-03-12 22:28:15 UTC", "sightings": 1 }, { "indicator": "http://91.196.32.55/596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.arm", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-12 22:27:20 UTC", "last_seen": "2026-03-12 22:27:20 UTC", "sightings": 1 }, { "indicator": "http://91.196.32.55/596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.i686", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-12 22:27:19 UTC", "last_seen": "2026-03-12 22:27:19 UTC", "sightings": 1 }, { "indicator": "http://91.196.32.55/596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mpsl", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-12 22:27:19 UTC", "last_seen": "2026-03-12 22:27:19 UTC", "sightings": 1 }, { "indicator": "http://91.196.32.55/596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.x86", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-12 22:27:19 UTC", "last_seen": "2026-03-12 22:27:19 UTC", "sightings": 1 }, { "indicator": "http://91.196.32.55/596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-12 22:27:19 UTC", "last_seen": "2026-03-12 22:27:19 UTC", "sightings": 1 }, { "indicator": "http://91.196.32.55/596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-12 22:27:19 UTC", "last_seen": "2026-03-12 22:27:19 UTC", "sightings": 1 }, { "indicator": "http://91.196.32.55/596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.arc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-12 22:27:08 UTC", "last_seen": "2026-03-12 22:27:08 UTC", "sightings": 1 }, { "indicator": "http://91.196.32.55/596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.arm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-12 22:27:08 UTC", "last_seen": "2026-03-12 22:27:08 UTC", "sightings": 1 }, { "indicator": "http://91.196.32.55/596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.ppc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-12 22:27:08 UTC", "last_seen": "2026-03-12 22:27:08 UTC", "sightings": 1 }, { "indicator": "http://91.196.32.55/596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.m68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-12 22:27:08 UTC", "last_seen": "2026-03-12 22:27:08 UTC", "sightings": 1 }, { "indicator": "http://115.57.231.40:43073/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 22:25:16 UTC", "last_seen": "2026-03-12 22:25:16 UTC", "sightings": 1 }, { "indicator": "http://120.84.213.157:53783/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 22:23:13 UTC", "last_seen": "2026-03-12 22:23:13 UTC", "sightings": 1 }, { "indicator": "http://117.219.142.166:32887/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 22:23:12 UTC", "last_seen": "2026-03-12 22:23:12 UTC", "sightings": 1 }, { "indicator": "http://110.37.111.58:41411/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 22:23:11 UTC", "last_seen": "2026-03-12 22:23:11 UTC", "sightings": 1 }, { "indicator": "https://lay3r4-cache.blowdisassem.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-12 22:23:09 UTC", "last_seen": "2026-03-12 22:23:09 UTC", "sightings": 1 }, { "indicator": "http://120.28.124.40:38077/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-12 22:21:17 UTC", "last_seen": "2026-03-12 22:21:17 UTC", "sightings": 1 }, { "indicator": "http://42.59.202.28:35757/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 22:18:22 UTC", "last_seen": "2026-03-12 22:18:22 UTC", "sightings": 1 }, { "indicator": "http://110.37.111.58:41411/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 22:15:11 UTC", "last_seen": "2026-03-12 22:15:11 UTC", "sightings": 1 }, { "indicator": "https://uga9ai.blowdisassem.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-12 22:05:07 UTC", "last_seen": "2026-03-12 22:05:07 UTC", "sightings": 1 }, { "indicator": "http://115.57.231.40:43073/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 22:00:21 UTC", "last_seen": "2026-03-12 22:00:21 UTC", "sightings": 1 }, { "indicator": "http://117.219.142.166:32887/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 21:58:19 UTC", "last_seen": "2026-03-12 21:58:19 UTC", "sightings": 1 }, { "indicator": "http://123.12.238.172:58989/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 21:55:19 UTC", "last_seen": "2026-03-12 21:55:19 UTC", "sightings": 1 }, { "indicator": "http://60.18.10.74:60629/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 21:53:19 UTC", "last_seen": "2026-03-12 21:53:19 UTC", "sightings": 1 }, { "indicator": "http://110.39.235.94:60919/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 21:53:18 UTC", "last_seen": "2026-03-12 21:53:18 UTC", "sightings": 1 }, { "indicator": "http://125.46.128.198:47333/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 21:49:12 UTC", "last_seen": "2026-03-12 21:49:12 UTC", "sightings": 1 }, { "indicator": "https://fgctlmw.blowdisassem.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-12 21:47:07 UTC", "last_seen": "2026-03-12 21:47:07 UTC", "sightings": 1 }, { "indicator": "https://piouzv.blowdisassem.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-12 21:42:07 UTC", "last_seen": "2026-03-12 21:42:07 UTC", "sightings": 1 }, { "indicator": "https://merline3ar.synchronting.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-12 21:35:08 UTC", "last_seen": "2026-03-12 21:35:08 UTC", "sightings": 1 }, { "indicator": "http://110.39.235.94:60919/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 21:30:22 UTC", "last_seen": "2026-03-12 21:30:22 UTC", "sightings": 1 }, { "indicator": "https://arkspire4um.synchronting.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-12 21:29:06 UTC", "last_seen": "2026-03-12 21:29:06 UTC", "sightings": 1 }, { "indicator": "https://viykdw01.synchronting.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-12 21:22:08 UTC", "last_seen": "2026-03-12 21:22:08 UTC", "sightings": 1 }, { "indicator": "https://nor-nexet.synchronting.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-12 21:16:07 UTC", "last_seen": "2026-03-12 21:16:07 UTC", "sightings": 1 }, { "indicator": "http://27.37.78.250:53155/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 21:12:22 UTC", "last_seen": "2026-03-12 21:12:22 UTC", "sightings": 1 }, { "indicator": "https://stitchroo.directkorchaga.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-12 21:12:07 UTC", "last_seen": "2026-03-12 21:12:07 UTC", "sightings": 1 }, { "indicator": "https://arknexen.directkorchaga.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-12 21:07:07 UTC", "last_seen": "2026-03-12 21:07:07 UTC", "sightings": 1 }, { "indicator": "http://186.169.43.64/a.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "opendir", "RemcosRAT", "ua-wget" ], "first_seen": "2026-03-12 21:06:45 UTC", "last_seen": "2026-03-12 21:06:45 UTC", "sightings": 1 }, { "indicator": "http://186.169.43.64/SOSTENER.js", "indicator_type": "url", "source": "URLhaus", "tags": [ "opendir", "ua-wget" ], "first_seen": "2026-03-12 21:06:12 UTC", "last_seen": "2026-03-12 21:06:12 UTC", "sightings": 1 }, { "indicator": "http://186.169.43.64/SOSTENER.vbs", "indicator_type": "url", "source": "URLhaus", "tags": [ "opendir", "ua-wget" ], "first_seen": "2026-03-12 21:06:10 UTC", "last_seen": "2026-03-12 21:06:10 UTC", "sightings": 1 }, { "indicator": "http://186.169.43.64/SOSTENER.bat", "indicator_type": "url", "source": "URLhaus", "tags": [ "opendir", "ua-wget" ], "first_seen": "2026-03-12 21:06:07 UTC", "last_seen": "2026-03-12 21:06:07 UTC", "sightings": 1 }, { "indicator": "https://gzgqdb.directkorchaga.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-12 21:02:07 UTC", "last_seen": "2026-03-12 21:02:07 UTC", "sightings": 1 }, { "indicator": "http://112.248.245.2:38823/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 21:00:37 UTC", "last_seen": "2026-03-12 21:00:37 UTC", "sightings": 1 }, { "indicator": "http://105.184.179.13:53615/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-12 20:54:28 UTC", "last_seen": "2026-03-12 20:54:28 UTC", "sightings": 1 }, { "indicator": "http://chanchanmiraixd.duckdns.org/titanjr.ppc440", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-12 20:54:25 UTC", "last_seen": "2026-03-12 20:54:25 UTC", "sightings": 1 }, { "indicator": "http://chanchanmiraixd.duckdns.org/huhu/titanjr.arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-12 20:54:25 UTC", "last_seen": "2026-03-12 20:54:25 UTC", "sightings": 1 }, { "indicator": "http://chanchanmiraixd.duckdns.org/titanjr.spc", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-12 20:54:25 UTC", "last_seen": "2026-03-12 20:54:25 UTC", "sightings": 1 }, { "indicator": "https://fxtlp6so.eyedmerlushka.digital/?=check&&actmn=FaOSZWMSjcYBfpmX", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-12 20:54:23 UTC", "last_seen": "2026-03-12 20:54:23 UTC", "sightings": 1 }, { "indicator": "http://27.37.78.250:53155/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 20:54:23 UTC", "last_seen": "2026-03-12 20:54:23 UTC", "sightings": 1 }, { "indicator": "http://chanchanmiraixd.duckdns.org/titanjr.x86_64", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-12 20:54:23 UTC", "last_seen": "2026-03-12 20:54:23 UTC", "sightings": 1 }, { "indicator": "http://chanchanmiraixd.duckdns.org/huhu/titanjr.sh4", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-12 20:54:23 UTC", "last_seen": "2026-03-12 20:54:23 UTC", "sightings": 1 }, { "indicator": "http://chanchanmiraixd.duckdns.org/titanjr.arc", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-12 20:54:22 UTC", "last_seen": "2026-03-12 20:54:22 UTC", "sightings": 1 }, { "indicator": "http://chanchanmiraixd.duckdns.org/titanjr.sh4", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-12 20:54:22 UTC", "last_seen": "2026-03-12 20:54:22 UTC", "sightings": 1 }, { "indicator": "http://39.78.229.0:46367/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 20:54:22 UTC", "last_seen": "2026-03-12 20:54:22 UTC", "sightings": 1 }, { "indicator": "http://chanchanmiraixd.duckdns.org/huhu/titanjr.spc", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-12 20:54:21 UTC", "last_seen": "2026-03-12 20:54:21 UTC", "sightings": 1 }, { "indicator": "http://chanchanmiraixd.duckdns.org/titanjr.x86_32", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-12 20:54:21 UTC", "last_seen": "2026-03-12 20:54:21 UTC", "sightings": 1 }, { "indicator": "http://185.23.238.149/run.bat", "indicator_type": "url", "source": "URLhaus", "tags": [ "opendir", "ua-wget" ], "first_seen": "2026-03-12 20:54:08 UTC", "last_seen": "2026-03-12 20:54:08 UTC", "sightings": 1 }, { "indicator": "http://185.23.238.149/support.ps1", "indicator_type": "url", "source": "URLhaus", "tags": [ "opendir", "ua-wget" ], "first_seen": "2026-03-12 20:54:08 UTC", "last_seen": "2026-03-12 20:54:08 UTC", "sightings": 1 }, { "indicator": "https://fxafcfe.invulshuga.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-12 20:54:07 UTC", "last_seen": "2026-03-12 20:54:07 UTC", "sightings": 1 }, { "indicator": "https://hhqh.invulshuga.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-12 20:54:07 UTC", "last_seen": "2026-03-12 20:54:07 UTC", "sightings": 1 }, { "indicator": "https://temp-urban.directkorchaga.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-12 20:54:07 UTC", "last_seen": "2026-03-12 20:54:07 UTC", "sightings": 1 }, { "indicator": "http://chanchanmiraixd.duckdns.org/huhu/titanjr.m68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-12 20:38:31 UTC", "last_seen": "2026-03-12 20:38:31 UTC", "sightings": 1 }, { "indicator": "http://chanchanmiraixd.duckdns.org/titanjr.arm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-12 20:38:26 UTC", "last_seen": "2026-03-12 20:38:26 UTC", "sightings": 1 }, { "indicator": "http://chanchanmiraixd.duckdns.org/titanjr.i486", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-12 20:38:26 UTC", "last_seen": "2026-03-12 20:38:26 UTC", "sightings": 1 }, { "indicator": "http://chanchanmiraixd.duckdns.org/titanjr.arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-12 20:38:26 UTC", "last_seen": "2026-03-12 20:38:26 UTC", "sightings": 1 }, { "indicator": "http://chanchanmiraixd.duckdns.org/huhu/titanjr.mipsl", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-12 20:38:26 UTC", "last_seen": "2026-03-12 20:38:26 UTC", "sightings": 1 }, { "indicator": "http://chanchanmiraixd.duckdns.org/titanjr.ppc", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-12 20:38:25 UTC", "last_seen": "2026-03-12 20:38:25 UTC", "sightings": 1 }, { "indicator": "http://chanchanmiraixd.duckdns.org/huhu/titanjr.x86_64", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-12 20:38:25 UTC", "last_seen": "2026-03-12 20:38:25 UTC", "sightings": 1 }, { "indicator": "http://chanchanmiraixd.duckdns.org/titanjr.arm", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-12 20:38:25 UTC", "last_seen": "2026-03-12 20:38:25 UTC", "sightings": 1 }, { "indicator": "http://chanchanmiraixd.duckdns.org/huhu/titanjr.mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-12 20:38:25 UTC", "last_seen": "2026-03-12 20:38:25 UTC", "sightings": 1 }, { "indicator": "http://chanchanmiraixd.duckdns.org/huhu/titanjr.arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-12 20:38:25 UTC", "last_seen": "2026-03-12 20:38:25 UTC", "sightings": 1 }, { "indicator": "http://chanchanmiraixd.duckdns.org/huhu/titanjr.i486", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-12 20:38:25 UTC", "last_seen": "2026-03-12 20:38:25 UTC", "sightings": 1 }, { "indicator": "http://chanchanmiraixd.duckdns.org/huhu/titanjr.arc", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-12 20:38:25 UTC", "last_seen": "2026-03-12 20:38:25 UTC", "sightings": 1 }, { "indicator": "http://chanchanmiraixd.duckdns.org/huhu/titanjr.arm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-12 20:38:23 UTC", "last_seen": "2026-03-12 20:38:23 UTC", "sightings": 1 }, { "indicator": "http://chanchanmiraixd.duckdns.org/huhu/titanjr.ppc440", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-12 20:38:23 UTC", "last_seen": "2026-03-12 20:38:23 UTC", "sightings": 1 }, { "indicator": "http://chanchanmiraixd.duckdns.org/titanjr.m68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-12 20:38:23 UTC", "last_seen": "2026-03-12 20:38:23 UTC", "sightings": 1 }, { "indicator": "http://chanchanmiraixd.duckdns.org/titanjr.arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-12 20:38:23 UTC", "last_seen": "2026-03-12 20:38:23 UTC", "sightings": 1 }, { "indicator": "http://chanchanmiraixd.duckdns.org/titanjr.i686", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-12 20:38:19 UTC", "last_seen": "2026-03-12 20:38:19 UTC", "sightings": 1 }, { "indicator": "http://chanchanmiraixd.duckdns.org/huhu/titanjr.i686", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-12 20:38:19 UTC", "last_seen": "2026-03-12 20:38:19 UTC", "sightings": 1 }, { "indicator": "http://chanchanmiraixd.duckdns.org/titanjr.mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-12 20:38:19 UTC", "last_seen": "2026-03-12 20:38:19 UTC", "sightings": 1 }, { "indicator": "http://chanchanmiraixd.duckdns.org/huhu/titanjr.x86_32", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-12 20:38:14 UTC", "last_seen": "2026-03-12 20:38:14 UTC", "sightings": 1 }, { "indicator": "http://chanchanmiraixd.duckdns.org/titanjr.mipsl", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-12 20:38:14 UTC", "last_seen": "2026-03-12 20:38:14 UTC", "sightings": 1 }, { "indicator": "http://chanchanmiraixd.duckdns.org/huhu/titanjr.arm", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-12 20:38:14 UTC", "last_seen": "2026-03-12 20:38:14 UTC", "sightings": 1 }, { "indicator": "http://chanchanmiraixd.duckdns.org/huhu/titanjr.ppc", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-12 20:38:14 UTC", "last_seen": "2026-03-12 20:38:14 UTC", "sightings": 1 }, { "indicator": "http://87.121.79.23/titanjr.ppc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-12 20:36:31 UTC", "last_seen": "2026-03-12 20:36:31 UTC", "sightings": 1 }, { "indicator": "http://87.121.79.23/titanjr.x86_32", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-12 20:36:29 UTC", "last_seen": "2026-03-12 20:36:29 UTC", "sightings": 1 }, { "indicator": "http://87.121.79.23/titanjr.ppc440", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-12 20:36:23 UTC", "last_seen": "2026-03-12 20:36:23 UTC", "sightings": 1 }, { "indicator": "http://87.121.79.23/titanjr.mipsl", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-12 20:36:23 UTC", "last_seen": "2026-03-12 20:36:23 UTC", "sightings": 1 }, { "indicator": "http://87.121.79.23/titanjr.mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-12 20:36:23 UTC", "last_seen": "2026-03-12 20:36:23 UTC", "sightings": 1 }, { "indicator": "http://87.121.79.23/titanjr.i486", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-12 20:36:20 UTC", "last_seen": "2026-03-12 20:36:20 UTC", "sightings": 1 }, { "indicator": "http://87.121.79.23/titanjr.sh4", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-12 20:36:08 UTC", "last_seen": "2026-03-12 20:36:08 UTC", "sightings": 1 }, { "indicator": "http://87.121.79.23/titanjr.x86_64", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-12 20:36:08 UTC", "last_seen": "2026-03-12 20:36:08 UTC", "sightings": 1 }, { "indicator": "http://87.121.79.23/titanjr.arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-12 20:36:08 UTC", "last_seen": "2026-03-12 20:36:08 UTC", "sightings": 1 }, { "indicator": "http://87.121.79.23/titanjr.i686", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-12 20:36:08 UTC", "last_seen": "2026-03-12 20:36:08 UTC", "sightings": 1 }, { "indicator": "http://87.121.79.23/titanjr.arm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-12 20:36:08 UTC", "last_seen": "2026-03-12 20:36:08 UTC", "sightings": 1 }, { "indicator": "http://87.121.79.23/titanjr.arm", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-12 20:36:07 UTC", "last_seen": "2026-03-12 20:36:07 UTC", "sightings": 1 }, { "indicator": "http://87.121.79.23/titanjr.arc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-12 20:36:07 UTC", "last_seen": "2026-03-12 20:36:07 UTC", "sightings": 1 }, { "indicator": "http://87.121.79.23/titanjr.spc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-12 20:36:07 UTC", "last_seen": "2026-03-12 20:36:07 UTC", "sightings": 1 }, { "indicator": "http://87.121.79.23/titanjr.arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-12 20:36:07 UTC", "last_seen": "2026-03-12 20:36:07 UTC", "sightings": 1 }, { "indicator": "http://87.121.79.23/titanjr.m68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-12 20:36:06 UTC", "last_seen": "2026-03-12 20:36:06 UTC", "sightings": 1 }, { "indicator": "http://125.47.253.255:43283/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 20:35:21 UTC", "last_seen": "2026-03-12 20:35:21 UTC", "sightings": 1 }, { "indicator": "http://5.175.223.124/bbc", "indicator_type": "url", "source": "URLhaus", "tags": [ "sh", "ua-wget" ], "first_seen": "2026-03-12 20:35:20 UTC", "last_seen": "2026-03-12 20:35:20 UTC", "sightings": 1 }, { "indicator": "http://84.234.99.24/m68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-12 20:34:20 UTC", "last_seen": "2026-03-12 20:34:20 UTC", "sightings": 1 }, { "indicator": "https://spoolfox.invulshuga.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-12 20:34:07 UTC", "last_seen": "2026-03-12 20:34:07 UTC", "sightings": 1 }, { "indicator": "http://84.234.99.24/arm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-12 20:33:23 UTC", "last_seen": "2026-03-12 20:33:23 UTC", "sightings": 1 }, { "indicator": "http://84.234.99.24/cat.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai", "sh", "ua-wget" ], "first_seen": "2026-03-12 20:33:23 UTC", "last_seen": "2026-03-12 20:33:23 UTC", "sightings": 1 }, { "indicator": "http://84.234.99.24/arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-12 20:33:23 UTC", "last_seen": "2026-03-12 20:33:23 UTC", "sightings": 1 }, { "indicator": "http://84.234.99.24/arm", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-12 20:33:23 UTC", "last_seen": "2026-03-12 20:33:23 UTC", "sightings": 1 }, { "indicator": "http://84.234.99.24/mpsl", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-12 20:32:13 UTC", "last_seen": "2026-03-12 20:32:13 UTC", "sightings": 1 }, { "indicator": "http://84.234.99.24/x86", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-12 20:32:13 UTC", "last_seen": "2026-03-12 20:32:13 UTC", "sightings": 1 }, { "indicator": "http://84.234.99.24/arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-12 20:32:13 UTC", "last_seen": "2026-03-12 20:32:13 UTC", "sightings": 1 }, { "indicator": "http://84.234.99.24/sh4", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-12 20:32:13 UTC", "last_seen": "2026-03-12 20:32:13 UTC", "sightings": 1 }, { "indicator": "http://83.142.209.47/kvmirqd", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-12 20:31:36 UTC", "last_seen": "2026-03-12 20:31:36 UTC", "sightings": 1 }, { "indicator": "http://83.142.209.47/biosd0", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-12 20:31:36 UTC", "last_seen": "2026-03-12 20:31:36 UTC", "sightings": 1 }, { "indicator": "http://83.142.209.47/kintegrity0", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-12 20:31:36 UTC", "last_seen": "2026-03-12 20:31:36 UTC", "sightings": 1 }, { "indicator": "http://83.142.209.47/kpsmoused0", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-12 20:31:35 UTC", "last_seen": "2026-03-12 20:31:35 UTC", "sightings": 1 }, { "indicator": "http://83.142.209.47/mdsync1", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-12 20:31:35 UTC", "last_seen": "2026-03-12 20:31:35 UTC", "sightings": 1 }, { "indicator": "http://83.142.209.47/ethd0", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-12 20:31:35 UTC", "last_seen": "2026-03-12 20:31:35 UTC", "sightings": 1 }, { "indicator": "http://83.142.209.47/ttmswapd", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-12 20:31:35 UTC", "last_seen": "2026-03-12 20:31:35 UTC", "sightings": 1 }, { "indicator": "http://83.142.209.47/ip6addrd", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-12 20:31:35 UTC", "last_seen": "2026-03-12 20:31:35 UTC", "sightings": 1 }, { "indicator": "http://83.142.209.47/ksnapd0", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-12 20:31:13 UTC", "last_seen": "2026-03-12 20:31:13 UTC", "sightings": 1 }, { "indicator": "http://83.142.209.47/deferwqd", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-12 20:31:13 UTC", "last_seen": "2026-03-12 20:31:13 UTC", "sightings": 1 }, { "indicator": "http://83.142.209.47/devfreqd0", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-12 20:31:13 UTC", "last_seen": "2026-03-12 20:31:13 UTC", "sightings": 1 }, { "indicator": "http://83.142.209.47/vredisd0", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-12 20:31:13 UTC", "last_seen": "2026-03-12 20:31:13 UTC", "sightings": 1 }, { "indicator": "https://mod3-trace.invulshuga.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-12 20:29:06 UTC", "last_seen": "2026-03-12 20:29:06 UTC", "sightings": 1 }, { "indicator": "https://pricethread.starpit.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-12 20:24:06 UTC", "last_seen": "2026-03-12 20:24:06 UTC", "sightings": 1 }, { "indicator": "http://182.124.234.141:48142/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 20:19:21 UTC", "last_seen": "2026-03-12 20:19:21 UTC", "sightings": 1 }, { "indicator": "https://zennex7is.starpit.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-12 20:18:07 UTC", "last_seen": "2026-03-12 20:18:07 UTC", "sightings": 1 }, { "indicator": "http://110.38.197.49:53125/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 20:15:45 UTC", "last_seen": "2026-03-12 20:15:45 UTC", "sightings": 1 }, { "indicator": "http://110.37.65.82:46579/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 20:14:20 UTC", "last_seen": "2026-03-12 20:14:20 UTC", "sightings": 1 }, { "indicator": "https://runvv4-forge.starpit.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-12 20:14:06 UTC", "last_seen": "2026-03-12 20:14:06 UTC", "sightings": 1 }, { "indicator": "http://190.40.185.33:33084/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 20:13:13 UTC", "last_seen": "2026-03-12 20:13:13 UTC", "sightings": 1 }, { "indicator": "http://110.37.65.82:46579/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 20:12:23 UTC", "last_seen": "2026-03-12 20:12:23 UTC", "sightings": 1 }, { "indicator": "https://7lqpjwbx.starpit.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-12 20:09:07 UTC", "last_seen": "2026-03-12 20:09:07 UTC", "sightings": 1 }, { "indicator": "http://221.15.5.122:52243/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 20:06:25 UTC", "last_seen": "2026-03-12 20:06:25 UTC", "sightings": 1 }, { "indicator": "http://185.213.240.159/bins/pppc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-12 20:05:22 UTC", "last_seen": "2026-03-12 20:05:22 UTC", "sightings": 1 }, { "indicator": "http://39.78.229.0:46367/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 20:03:31 UTC", "last_seen": "2026-03-12 20:03:31 UTC", "sightings": 1 }, { "indicator": "http://110.39.246.84:56191/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 20:03:22 UTC", "last_seen": "2026-03-12 20:03:22 UTC", "sightings": 1 }, { "indicator": "https://tradingmastery.info/txt/king.txt", "indicator_type": "url", "source": "URLhaus", "tags": [ "rev-base64-loader", "xworm" ], "first_seen": "2026-03-12 20:02:15 UTC", "last_seen": "2026-03-12 20:02:15 UTC", "sightings": 1 }, { "indicator": "https://p5pywt.ironbay.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-12 20:02:06 UTC", "last_seen": "2026-03-12 20:02:06 UTC", "sightings": 1 }, { "indicator": "https://dpaste.com/46DHTVYZ5.txt", "indicator_type": "url", "source": "URLhaus", "tags": [ "AgentTesla", "ascii", "Encoded" ], "first_seen": "2026-03-12 20:01:06 UTC", "last_seen": "2026-03-12 20:01:06 UTC", "sightings": 1 }, { "indicator": "http://182.124.234.141:48142/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 20:00:31 UTC", "last_seen": "2026-03-12 20:00:31 UTC", "sightings": 1 }, { "indicator": "http://182.121.67.71:52197/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 20:00:24 UTC", "last_seen": "2026-03-12 20:00:24 UTC", "sightings": 1 }, { "indicator": "http://110.37.3.227:52148/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 19:58:15 UTC", "last_seen": "2026-03-12 19:58:15 UTC", "sightings": 1 }, { "indicator": "http://107.175.246.3/35/seethebstoptionforbetterwyasto.js", "indicator_type": "url", "source": "URLhaus", "tags": [ "js", "PureHVNC" ], "first_seen": "2026-03-12 19:58:08 UTC", "last_seen": "2026-03-12 19:58:08 UTC", "sightings": 1 }, { "indicator": "http://158.94.211.85/dvr.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai", "sh", "ua-wget" ], "first_seen": "2026-03-12 19:57:14 UTC", "last_seen": "2026-03-12 19:57:14 UTC", "sightings": 1 }, { "indicator": "http://209.54.102.132/ZFSkDn73.bin", "indicator_type": "url", "source": "URLhaus", "tags": [ "GuLoader" ], "first_seen": "2026-03-12 19:56:07 UTC", "last_seen": "2026-03-12 19:56:07 UTC", "sightings": 1 }, { "indicator": "http://158.94.211.85/rebirthstresswashere", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-12 19:56:07 UTC", "last_seen": "2026-03-12 19:56:07 UTC", "sightings": 1 }, { "indicator": "http://teslasuit.to/img_012505yubtcc.png", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-12 19:55:10 UTC", "last_seen": "2026-03-12 19:55:10 UTC", "sightings": 1 }, { "indicator": "http://valfanto.com/bgdgvrb/amIdnja.txt", "indicator_type": "url", "source": "URLhaus", "tags": [ "rev-base64-loader" ], "first_seen": "2026-03-12 19:55:07 UTC", "last_seen": "2026-03-12 19:55:07 UTC", "sightings": 1 }, { "indicator": "https://jycyry1b.ironbay.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-12 19:53:06 UTC", "last_seen": "2026-03-12 19:53:06 UTC", "sightings": 1 }, { "indicator": "http://110.37.3.227:52148/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 19:52:21 UTC", "last_seen": "2026-03-12 19:52:21 UTC", "sightings": 1 }, { "indicator": "http://113.228.113.20:46568/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 19:51:14 UTC", "last_seen": "2026-03-12 19:51:14 UTC", "sightings": 1 }, { "indicator": "http://182.117.128.62:51568/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 19:48:19 UTC", "last_seen": "2026-03-12 19:48:19 UTC", "sightings": 1 }, { "indicator": "http://182.146.222.249:51553/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-12 19:48:19 UTC", "last_seen": "2026-03-12 19:48:19 UTC", "sightings": 1 }, { "indicator": "http://190.40.185.33:33084/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 19:47:08 UTC", "last_seen": "2026-03-12 19:47:08 UTC", "sightings": 1 }, { "indicator": "https://pine2-cast.ironbay.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-12 19:46:06 UTC", "last_seen": "2026-03-12 19:46:06 UTC", "sightings": 1 }, { "indicator": "https://salelegalsteroids.com/enterprise/IWkkAiQbHycFEXkIKAgCLTASCwUTXS0YMl13Q3EaNFEKaTsRRx9wBy08VBwNFjNQCgo6LDEDBiQCLxBBCzQbSlB1USwfM3QCEABSHzklFwgmKicFPHcVLiEsDzwUEx0DVQFSekVpdkJIdwdrTn5hU1RvRnVGAWlHf1hzQXZXUANVAVI=", "indicator_type": "url", "source": "URLhaus", "tags": [ "ascii", "Encoded", "KongTuke", "powershell" ], "first_seen": "2026-03-12 19:41:06 UTC", "last_seen": "2026-03-12 19:41:06 UTC", "sightings": 1 }, { "indicator": "http://221.15.5.122:52243/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 19:40:11 UTC", "last_seen": "2026-03-12 19:40:11 UTC", "sightings": 1 }, { "indicator": "http://107.175.246.3/36/seethebestoptionforeverybodytounder.js", "indicator_type": "url", "source": "URLhaus", "tags": [ "ascii", "js" ], "first_seen": "2026-03-12 19:39:08 UTC", "last_seen": "2026-03-12 19:39:08 UTC", "sightings": 1 }, { "indicator": "https://documentos.microsoft-waresystems.com/Comprovante-Pix-12-03-2026.pdf.lnk", "indicator_type": "url", "source": "URLhaus", "tags": [ "lnk", "opendir", "Quakbot" ], "first_seen": "2026-03-12 19:35:09 UTC", "last_seen": "2026-03-12 19:35:09 UTC", "sightings": 1 }, { "indicator": "https://dispatc-puls.ironbay.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-12 19:33:08 UTC", "last_seen": "2026-03-12 19:33:08 UTC", "sightings": 1 }, { "indicator": "http://80.71.224.185/kakrarg/buckwheatsociology.ps1", "indicator_type": "url", "source": "URLhaus", "tags": [ "ascii", "powershell", "ps1" ], "first_seen": "2026-03-12 19:33:06 UTC", "last_seen": "2026-03-12 19:33:06 UTC", "sightings": 1 }, { "indicator": "http://80.71.224.185/kakrarg/sneakerassembly.ps1", "indicator_type": "url", "source": "URLhaus", "tags": [ "ascii", "powershell", "ps1" ], "first_seen": "2026-03-12 19:32:07 UTC", "last_seen": "2026-03-12 19:32:07 UTC", "sightings": 1 }, { "indicator": "http://182.121.67.71:52197/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 19:31:19 UTC", "last_seen": "2026-03-12 19:31:19 UTC", "sightings": 1 }, { "indicator": "http://115.51.249.56:38512/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 19:30:20 UTC", "last_seen": "2026-03-12 19:30:20 UTC", "sightings": 1 }, { "indicator": "https://gharnt.com/poss5645/ENCRYPT.Ps1", "indicator_type": "url", "source": "URLhaus", "tags": [ "ascii", "MassLogger", "powershell", "ps1", "VIPKeylogger" ], "first_seen": "2026-03-12 19:25:09 UTC", "last_seen": "2026-03-12 19:25:09 UTC", "sightings": 1 }, { "indicator": "https://pine-fix.lakepit.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-12 19:25:07 UTC", "last_seen": "2026-03-12 19:25:07 UTC", "sightings": 1 }, { "indicator": "http://182.117.128.62:51568/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 19:24:09 UTC", "last_seen": "2026-03-12 19:24:09 UTC", "sightings": 1 }, { "indicator": "http://61.176.188.44:36861/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 19:22:31 UTC", "last_seen": "2026-03-12 19:22:31 UTC", "sightings": 1 }, { "indicator": "http://182.146.222.249:51553/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-12 19:22:22 UTC", "last_seen": "2026-03-12 19:22:22 UTC", "sightings": 1 }, { "indicator": "https://solspireis6.lakepit.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-12 19:22:08 UTC", "last_seen": "2026-03-12 19:22:08 UTC", "sightings": 1 }, { "indicator": "http://123.189.149.210:47624/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 19:21:22 UTC", "last_seen": "2026-03-12 19:21:22 UTC", "sightings": 1 }, { "indicator": "http://id3702579photo-image-docs.com/", "indicator_type": "url", "source": "URLhaus", "tags": [ "ascii", "powershell", "ps1", "ua-ps", "Vidar" ], "first_seen": "2026-03-12 19:21:08 UTC", "last_seen": "2026-03-12 19:21:08 UTC", "sightings": 1 }, { "indicator": "http://www.teslasuit.to/img_012505yubtcc.png", "indicator_type": "url", "source": "URLhaus", "tags": [ "xworm" ], "first_seen": "2026-03-12 19:19:10 UTC", "last_seen": "2026-03-12 19:19:10 UTC", "sightings": 1 }, { "indicator": "http://teslasuit.to/optimized_MSIyu.png", "indicator_type": "url", "source": "URLhaus", "tags": [ "xworm" ], "first_seen": "2026-03-12 19:19:09 UTC", "last_seen": "2026-03-12 19:19:09 UTC", "sightings": 1 }, { "indicator": "http://valfanto.com/somthids/ejgddFd.txt", "indicator_type": "url", "source": "URLhaus", "tags": [ "ascii", "DarkCloud", "Encoded", "opendir", "rev-base64-loader" ], "first_seen": "2026-03-12 19:19:09 UTC", "last_seen": "2026-03-12 19:19:09 UTC", "sightings": 1 }, { "indicator": "http://45.164.179.97:11697/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 19:18:09 UTC", "last_seen": "2026-03-12 19:18:09 UTC", "sightings": 1 }, { "indicator": "https://du5t0-frame.lakepit.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-12 19:11:09 UTC", "last_seen": "2026-03-12 19:11:09 UTC", "sightings": 1 }, { "indicator": "https://applicationhost17.com/downloads/DA-62FE02B5-5618-420E-A7B8-3D97012A72B9.zip", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-12 19:05:23 UTC", "last_seen": "2026-03-12 19:05:23 UTC", "sightings": 1 }, { "indicator": "https://applicationhost17.com/downloads/SY-5921A7EB-16A3-46CC-9EE6-0D8677D807DF.zip", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-12 19:05:11 UTC", "last_seen": "2026-03-12 19:05:11 UTC", "sightings": 1 }, { "indicator": "http://209.54.102.132/Granad244.pcz", "indicator_type": "url", "source": "URLhaus", "tags": [ "AgentTesla" ], "first_seen": "2026-03-12 19:05:09 UTC", "last_seen": "2026-03-12 19:05:09 UTC", "sightings": 1 }, { "indicator": "http://209.54.102.132/Progressi.hhk", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-12 19:05:09 UTC", "last_seen": "2026-03-12 19:05:09 UTC", "sightings": 1 }, { "indicator": "https://applicationhost17.com/downloads/UPD-48C5A1C5-DDD4-465E-9C66-27EFC1D5A846.zip", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-12 19:05:08 UTC", "last_seen": "2026-03-12 19:05:08 UTC", "sightings": 1 }, { "indicator": "https://applicationhost17.com/downloads/UPD-F643A043-41C0-4AD0-94D1-B06C8286A9AB.zip", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-12 19:05:08 UTC", "last_seen": "2026-03-12 19:05:08 UTC", "sightings": 1 }, { "indicator": "http://209.54.102.132/qobCLhzlKw24.bin", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-12 19:05:08 UTC", "last_seen": "2026-03-12 19:05:08 UTC", "sightings": 1 }, { "indicator": "https://applicationhost17.com/downloads/WN-9EC52640-ADFF-4623-A958-6A7133186985.zip", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-12 19:05:07 UTC", "last_seen": "2026-03-12 19:05:07 UTC", "sightings": 1 }, { "indicator": "https://applicationhost17.com/downloads/MS-D2DC127D-084C-44D1-8615-6142396987BB.zip", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-12 19:05:07 UTC", "last_seen": "2026-03-12 19:05:07 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.7/files/8425384370/mnVpX0P.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-03-12 19:05:06 UTC", "last_seen": "2026-03-12 19:05:06 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.7/files/7903503838/hsy2OKS.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-03-12 19:05:06 UTC", "last_seen": "2026-03-12 19:05:06 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.7/files/8220471530/Ads5xOS.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "Adware.Techsnab", "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-12 18:58:05 UTC", "last_seen": "2026-03-12 18:58:05 UTC", "sightings": 1 }, { "indicator": "http://196.189.198.193:32945/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-12 18:55:21 UTC", "last_seen": "2026-03-12 18:55:21 UTC", "sightings": 1 }, { "indicator": "http://115.48.152.83:51113/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 18:51:18 UTC", "last_seen": "2026-03-12 18:51:18 UTC", "sightings": 1 }, { "indicator": "http://94.244.36.34:40065/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-12 18:49:15 UTC", "last_seen": "2026-03-12 18:49:15 UTC", "sightings": 1 }, { "indicator": "http://94.244.36.34:40065/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-12 18:43:16 UTC", "last_seen": "2026-03-12 18:43:16 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.7/files/8425384370/cpX8aAx.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey", "OffLoader" ], "first_seen": "2026-03-12 18:40:13 UTC", "last_seen": "2026-03-12 18:40:13 UTC", "sightings": 1 }, { "indicator": "http://115.48.152.83:51113/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 18:25:21 UTC", "last_seen": "2026-03-12 18:25:21 UTC", "sightings": 1 }, { "indicator": "http://45.180.84.90:44168/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-12 18:20:09 UTC", "last_seen": "2026-03-12 18:20:09 UTC", "sightings": 1 }, { "indicator": "http://196.189.198.193:32945/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-12 18:19:12 UTC", "last_seen": "2026-03-12 18:19:12 UTC", "sightings": 1 }, { "indicator": "http://201.131.163.246:56962/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-12 18:15:14 UTC", "last_seen": "2026-03-12 18:15:14 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.7/files/8167064937/7P402xV.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543", "WallStealer" ], "first_seen": "2026-03-12 18:00:08 UTC", "last_seen": "2026-03-12 18:00:08 UTC", "sightings": 1 }, { "indicator": "http://115.50.30.81:44613/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 17:59:17 UTC", "last_seen": "2026-03-12 17:59:17 UTC", "sightings": 1 }, { "indicator": "http://45.180.84.90:44168/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-12 17:51:22 UTC", "last_seen": "2026-03-12 17:51:22 UTC", "sightings": 1 }, { "indicator": "http://201.131.163.246:56962/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-12 17:51:19 UTC", "last_seen": "2026-03-12 17:51:19 UTC", "sightings": 1 }, { "indicator": "https://nl6rhf.lakepit.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-12 17:46:07 UTC", "last_seen": "2026-03-12 17:46:07 UTC", "sightings": 1 }, { "indicator": "http://182.176.82.119:54420/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 17:31:12 UTC", "last_seen": "2026-03-12 17:31:12 UTC", "sightings": 1 }, { "indicator": "http://42.230.212.61:53152/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 17:27:17 UTC", "last_seen": "2026-03-12 17:27:17 UTC", "sightings": 1 }, { "indicator": "https://andrefelipedonascime1772127941945.0062186.meusitehostgator.com.br/eFvijUeNvf_27_02_Meus_ArquivosDeTexto/01.txt", "indicator_type": "url", "source": "URLhaus", "tags": [ "ascii", "Encoded", "rat" ], "first_seen": "2026-03-12 17:20:09 UTC", "last_seen": "2026-03-12 17:20:09 UTC", "sightings": 1 }, { "indicator": "https://andrefelipedonascime1772127941945.0062186.meusitehostgator.com.br/eFvijUeNvf_27_02_Meus_ArquivosDeTexto/02.txt", "indicator_type": "url", "source": "URLhaus", "tags": [ "ascii", "Encoded", "rat" ], "first_seen": "2026-03-12 17:20:08 UTC", "last_seen": "2026-03-12 17:20:08 UTC", "sightings": 1 }, { "indicator": "https://andrefelipedonascime1772127941945.0062186.meusitehostgator.com.br/eFvijUeNvf_27_02_Meus_ArquivosDeTexto/03.txt", "indicator_type": "url", "source": "URLhaus", "tags": [ "ascii", "Encoded", "rat" ], "first_seen": "2026-03-12 17:20:08 UTC", "last_seen": "2026-03-12 17:20:08 UTC", "sightings": 1 }, { "indicator": "https://offerclinic.rockbay.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-12 17:19:07 UTC", "last_seen": "2026-03-12 17:19:07 UTC", "sightings": 1 }, { "indicator": "http://42.226.208.233:40026/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 17:14:18 UTC", "last_seen": "2026-03-12 17:14:18 UTC", "sightings": 1 }, { "indicator": "https://shieldretainer.rockbay.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-12 17:09:08 UTC", "last_seen": "2026-03-12 17:09:08 UTC", "sightings": 1 }, { "indicator": "http://182.176.82.119:54420/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 17:06:25 UTC", "last_seen": "2026-03-12 17:06:25 UTC", "sightings": 1 }, { "indicator": "https://bygesuy9.rockbay.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-12 16:59:07 UTC", "last_seen": "2026-03-12 16:59:07 UTC", "sightings": 1 }, { "indicator": "http://42.224.95.118:57265/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 16:56:17 UTC", "last_seen": "2026-03-12 16:56:17 UTC", "sightings": 1 }, { "indicator": "http://42.226.208.233:40026/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 16:52:18 UTC", "last_seen": "2026-03-12 16:52:18 UTC", "sightings": 1 }, { "indicator": "http://42.224.95.118:57265/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 16:51:17 UTC", "last_seen": "2026-03-12 16:51:17 UTC", "sightings": 1 }, { "indicator": "http://123.9.247.18:45308/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 16:47:15 UTC", "last_seen": "2026-03-12 16:47:15 UTC", "sightings": 1 }, { "indicator": "http://216.126.86.105:49993/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-12 16:44:19 UTC", "last_seen": "2026-03-12 16:44:19 UTC", "sightings": 1 }, { "indicator": "http://117.211.39.231:37075/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 16:37:09 UTC", "last_seen": "2026-03-12 16:37:09 UTC", "sightings": 1 }, { "indicator": "http://196.251.107.24/v4343.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543", "njRAT", "QuasarRAT", "Vidar" ], "first_seen": "2026-03-12 16:36:07 UTC", "last_seen": "2026-03-12 16:36:07 UTC", "sightings": 1 }, { "indicator": "http://42.235.83.247:56094/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 16:34:16 UTC", "last_seen": "2026-03-12 16:34:16 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.7/files/8548282130/O43GJVa.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543", "QuasarRAT" ], "first_seen": "2026-03-12 16:34:07 UTC", "last_seen": "2026-03-12 16:34:07 UTC", "sightings": 1 }, { "indicator": "http://119.114.153.179:50363/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 16:30:27 UTC", "last_seen": "2026-03-12 16:30:27 UTC", "sightings": 1 }, { "indicator": "http://61.52.46.74:41198/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 16:30:13 UTC", "last_seen": "2026-03-12 16:30:13 UTC", "sightings": 1 }, { "indicator": "https://anch0r-switch.bluebay.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-12 16:29:06 UTC", "last_seen": "2026-03-12 16:29:06 UTC", "sightings": 1 }, { "indicator": "https://loaderdrive.bluebay.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-12 16:25:09 UTC", "last_seen": "2026-03-12 16:25:09 UTC", "sightings": 1 }, { "indicator": "https://2umw.bluebay.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-12 16:19:06 UTC", "last_seen": "2026-03-12 16:19:06 UTC", "sightings": 1 }, { "indicator": "http://216.126.86.105:49993/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-12 16:15:33 UTC", "last_seen": "2026-03-12 16:15:33 UTC", "sightings": 1 }, { "indicator": "http://42.235.83.247:56094/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 16:12:19 UTC", "last_seen": "2026-03-12 16:12:19 UTC", "sightings": 1 }, { "indicator": "http://59.97.181.78:57846/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 16:09:15 UTC", "last_seen": "2026-03-12 16:09:15 UTC", "sightings": 1 }, { "indicator": "https://couriframe.goldpit.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-12 16:09:06 UTC", "last_seen": "2026-03-12 16:09:06 UTC", "sightings": 1 }, { "indicator": "http://27.202.210.245:40339/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 16:08:09 UTC", "last_seen": "2026-03-12 16:08:09 UTC", "sightings": 1 }, { "indicator": "https://fbge7x.goldpit.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-12 16:02:06 UTC", "last_seen": "2026-03-12 16:02:06 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.7/files/7903503838/6NMKhZu.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543", "WallStealer" ], "first_seen": "2026-03-12 16:01:07 UTC", "last_seen": "2026-03-12 16:01:07 UTC", "sightings": 1 }, { "indicator": "http://182.242.66.130:40151/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-12 15:56:20 UTC", "last_seen": "2026-03-12 15:56:20 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.7/files/gop/random.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey", "Vidar" ], "first_seen": "2026-03-12 15:53:05 UTC", "last_seen": "2026-03-12 15:53:05 UTC", "sightings": 1 }, { "indicator": "http://87.121.79.23/huhu/titanjr.ppc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-12 15:52:19 UTC", "last_seen": "2026-03-12 15:52:19 UTC", "sightings": 1 }, { "indicator": "http://87.121.79.23/huhu/titanjr.arc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-12 15:52:18 UTC", "last_seen": "2026-03-12 15:52:18 UTC", "sightings": 1 }, { "indicator": "http://87.121.79.23/huhu/titanjr.sh4", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-12 15:52:18 UTC", "last_seen": "2026-03-12 15:52:18 UTC", "sightings": 1 }, { "indicator": "http://87.121.79.23/huhu/titanjr.ppc440", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-12 15:52:18 UTC", "last_seen": "2026-03-12 15:52:18 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.7/files/7411337060/ZCGm9Ky.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543", "njRAT" ], "first_seen": "2026-03-12 15:52:07 UTC", "last_seen": "2026-03-12 15:52:07 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.7/files/8499672124/b1JNsvy.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543", "Fuery" ], "first_seen": "2026-03-12 15:52:07 UTC", "last_seen": "2026-03-12 15:52:07 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.7/files/8167064937/L2BuR1u.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-12 15:51:08 UTC", "last_seen": "2026-03-12 15:51:08 UTC", "sightings": 1 }, { "indicator": "https://endpo2-craft.goldpit.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-12 15:51:06 UTC", "last_seen": "2026-03-12 15:51:06 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.7/files/7782139129/4Qrxrgo.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543", "OffLoader" ], "first_seen": "2026-03-12 15:50:09 UTC", "last_seen": "2026-03-12 15:50:09 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.7/files/7453936223/KAQ8PQ5.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543", "Vidar" ], "first_seen": "2026-03-12 15:50:07 UTC", "last_seen": "2026-03-12 15:50:07 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.7/files/oblivora/random.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey", "Vidar" ], "first_seen": "2026-03-12 15:50:07 UTC", "last_seen": "2026-03-12 15:50:07 UTC", "sightings": 1 }, { "indicator": "http://209.54.102.132/Sexister.hhk", "indicator_type": "url", "source": "URLhaus", "tags": [ "AgentTesla", "ascii", "Encoded", "GuLoader" ], "first_seen": "2026-03-12 15:47:08 UTC", "last_seen": "2026-03-12 15:47:08 UTC", "sightings": 1 }, { "indicator": "http://209.54.102.132/ILitOryfRMXTjathX140.bin", "indicator_type": "url", "source": "URLhaus", "tags": [ "AgentTesla", "encrypted", "GuLoader" ], "first_seen": "2026-03-12 15:46:08 UTC", "last_seen": "2026-03-12 15:46:08 UTC", "sightings": 1 }, { "indicator": "http://107.173.47.137/177/ceo/wellthingsformebest.js", "indicator_type": "url", "source": "URLhaus", "tags": [ "ascii", "js", "RemcosRAT" ], "first_seen": "2026-03-12 15:45:08 UTC", "last_seen": "2026-03-12 15:45:08 UTC", "sightings": 1 }, { "indicator": "https://joqyh.windbay.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-12 15:41:06 UTC", "last_seen": "2026-03-12 15:41:06 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.7/files/8441193572/I8N8jbR.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-12 15:38:09 UTC", "last_seen": "2026-03-12 15:38:09 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.7/files/1424975206/grFJpUR.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543", "Vidar" ], "first_seen": "2026-03-12 15:38:08 UTC", "last_seen": "2026-03-12 15:38:08 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.7/files/5900855435/eNLe4nm.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543", "Vidar" ], "first_seen": "2026-03-12 15:38:06 UTC", "last_seen": "2026-03-12 15:38:06 UTC", "sightings": 1 }, { "indicator": "https://exteneur.windbay.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-12 15:37:06 UTC", "last_seen": "2026-03-12 15:37:06 UTC", "sightings": 1 }, { "indicator": "https://dydqa.windbay.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-12 15:25:09 UTC", "last_seen": "2026-03-12 15:25:09 UTC", "sightings": 1 }, { "indicator": "http://42.231.252.5:34652/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 15:24:21 UTC", "last_seen": "2026-03-12 15:24:21 UTC", "sightings": 1 }, { "indicator": "http://221.15.164.107:47329/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 15:24:21 UTC", "last_seen": "2026-03-12 15:24:21 UTC", "sightings": 1 }, { "indicator": "http://193.187.101.227:52076/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-12 15:23:22 UTC", "last_seen": "2026-03-12 15:23:22 UTC", "sightings": 1 }, { "indicator": "https://tmzmig.redpit.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-12 15:21:09 UTC", "last_seen": "2026-03-12 15:21:09 UTC", "sightings": 1 }, { "indicator": "http://182.116.113.211:34856/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 15:20:23 UTC", "last_seen": "2026-03-12 15:20:23 UTC", "sightings": 1 }, { "indicator": "http://158.94.211.222/files/7903503838/hsy2OKS.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-03-12 15:20:22 UTC", "last_seen": "2026-03-12 15:20:22 UTC", "sightings": 1 }, { "indicator": "http://117.209.86.225:37842/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 15:19:20 UTC", "last_seen": "2026-03-12 15:19:20 UTC", "sightings": 1 }, { "indicator": "http://36.84.112.228:54477/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-12 15:19:20 UTC", "last_seen": "2026-03-12 15:19:20 UTC", "sightings": 1 }, { "indicator": "http://193.187.101.227:52076/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-12 15:18:26 UTC", "last_seen": "2026-03-12 15:18:26 UTC", "sightings": 1 }, { "indicator": "https://valleyreb.redpit.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-12 15:15:10 UTC", "last_seen": "2026-03-12 15:15:10 UTC", "sightings": 1 }, { "indicator": "http://182.242.66.130:40151/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-12 15:12:34 UTC", "last_seen": "2026-03-12 15:12:34 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.7/files/unique2/random.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "Amadey", "dropped-by-amadey", "fbf543", "gcleaner" ], "first_seen": "2026-03-12 15:10:10 UTC", "last_seen": "2026-03-12 15:10:10 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.7/final/random.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543", "NirCmd" ], "first_seen": "2026-03-12 15:10:10 UTC", "last_seen": "2026-03-12 15:10:10 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.7/test/random.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-12 15:09:07 UTC", "last_seen": "2026-03-12 15:09:07 UTC", "sightings": 1 }, { "indicator": "https://binar-vector.redpit.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-12 15:09:07 UTC", "last_seen": "2026-03-12 15:09:07 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.7/files/rdx/random.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey", "Vidar" ], "first_seen": "2026-03-12 15:09:07 UTC", "last_seen": "2026-03-12 15:09:07 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.7/vidar/random.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "connectwise", "dropped-by-amadey", "fbf543", "Vidar" ], "first_seen": "2026-03-12 15:02:08 UTC", "last_seen": "2026-03-12 15:02:08 UTC", "sightings": 1 }, { "indicator": "https://slate-marsh.oakbay.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-12 15:00:09 UTC", "last_seen": "2026-03-12 15:00:09 UTC", "sightings": 1 }, { "indicator": "http://123.9.247.18:45308/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 14:59:26 UTC", "last_seen": "2026-03-12 14:59:26 UTC", "sightings": 1 }, { "indicator": "https://proto-re4ge.oakbay.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-12 14:57:14 UTC", "last_seen": "2026-03-12 14:57:14 UTC", "sightings": 1 }, { "indicator": "http://180.190.238.89:54340/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-12 14:55:23 UTC", "last_seen": "2026-03-12 14:55:23 UTC", "sightings": 1 }, { "indicator": "http://221.15.164.107:47329/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 14:54:31 UTC", "last_seen": "2026-03-12 14:54:31 UTC", "sightings": 1 }, { "indicator": "http://36.84.112.228:54477/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-12 14:50:31 UTC", "last_seen": "2026-03-12 14:50:31 UTC", "sightings": 1 }, { "indicator": "http://46.163.181.104:47481/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 14:50:23 UTC", "last_seen": "2026-03-12 14:50:23 UTC", "sightings": 1 }, { "indicator": "https://summ-rural.oakbay.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-12 14:45:09 UTC", "last_seen": "2026-03-12 14:45:09 UTC", "sightings": 1 }, { "indicator": "http://219.157.154.248:33965/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 14:38:23 UTC", "last_seen": "2026-03-12 14:38:23 UTC", "sightings": 1 }, { "indicator": "http://42.231.252.5:34652/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 14:37:25 UTC", "last_seen": "2026-03-12 14:37:25 UTC", "sightings": 1 }, { "indicator": "http://180.190.238.89:54340/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-12 14:32:43 UTC", "last_seen": "2026-03-12 14:32:43 UTC", "sightings": 1 }, { "indicator": "http://113.228.113.20:46568/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 14:32:29 UTC", "last_seen": "2026-03-12 14:32:29 UTC", "sightings": 1 }, { "indicator": "http://61.53.238.54:41205/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 14:24:20 UTC", "last_seen": "2026-03-12 14:24:20 UTC", "sightings": 1 }, { "indicator": "https://glzabh.sunpit.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-12 14:23:07 UTC", "last_seen": "2026-03-12 14:23:07 UTC", "sightings": 1 }, { "indicator": "https://dep0t9-well.sunpit.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-12 14:10:08 UTC", "last_seen": "2026-03-12 14:10:08 UTC", "sightings": 1 }, { "indicator": "https://1827897262.v.123pan.cn/1827897262/MH/INJECT3.PS1", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-12 14:01:13 UTC", "last_seen": "2026-03-12 14:01:13 UTC", "sightings": 1 }, { "indicator": "https://aaa4b.com/bullk/BRUTER.zip", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-12 14:01:10 UTC", "last_seen": "2026-03-12 14:01:10 UTC", "sightings": 1 }, { "indicator": "https://proappv2.com/apk/apppro.apk", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-12 14:01:10 UTC", "last_seen": "2026-03-12 14:01:10 UTC", "sightings": 1 }, { "indicator": "http://158.255.83.29:57970/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-12 14:01:08 UTC", "last_seen": "2026-03-12 14:01:08 UTC", "sightings": 1 }, { "indicator": "http://158.94.211.222/files/8167064937/TOFxZfq.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-03-12 14:00:21 UTC", "last_seen": "2026-03-12 14:00:21 UTC", "sightings": 1 }, { "indicator": "https://www.150.co.il/rustdesk-1.2.3-2-x86_64.exe", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-12 14:00:14 UTC", "last_seen": "2026-03-12 14:00:14 UTC", "sightings": 1 }, { "indicator": "https://baritonclick.online/uploads/sharp.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "cmd", "powershell", "rat", "salat", "stealer" ], "first_seen": "2026-03-12 14:00:09 UTC", "last_seen": "2026-03-12 14:00:09 UTC", "sightings": 1 }, { "indicator": "https://2g1jl.sunpit.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-12 13:59:07 UTC", "last_seen": "2026-03-12 13:59:07 UTC", "sightings": 1 }, { "indicator": "http://115.49.201.246:44560/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 13:58:32 UTC", "last_seen": "2026-03-12 13:58:32 UTC", "sightings": 1 }, { "indicator": "https://sa17ql.sunpit.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-12 13:49:05 UTC", "last_seen": "2026-03-12 13:49:05 UTC", "sightings": 1 }, { "indicator": "http://59.89.69.0:52428/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 13:45:16 UTC", "last_seen": "2026-03-12 13:45:16 UTC", "sightings": 1 }, { "indicator": "https://qdqhkub.restpay.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-12 13:39:08 UTC", "last_seen": "2026-03-12 13:39:08 UTC", "sightings": 1 }, { "indicator": "http://182.119.198.158:35111/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 13:30:36 UTC", "last_seen": "2026-03-12 13:30:36 UTC", "sightings": 1 }, { "indicator": "https://urt925.restpay.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-12 13:30:24 UTC", "last_seen": "2026-03-12 13:30:24 UTC", "sightings": 1 }, { "indicator": "http://182.127.45.49:57256/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 13:17:16 UTC", "last_seen": "2026-03-12 13:17:16 UTC", "sightings": 1 }, { "indicator": "http://182.116.75.173:50759/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 13:16:21 UTC", "last_seen": "2026-03-12 13:16:21 UTC", "sightings": 1 }, { "indicator": "http://111.76.224.52:37151/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-12 13:16:20 UTC", "last_seen": "2026-03-12 13:16:20 UTC", "sightings": 1 }, { "indicator": "https://brasyn.restpay.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-12 13:16:07 UTC", "last_seen": "2026-03-12 13:16:07 UTC", "sightings": 1 }, { "indicator": "https://vorspire4ex.restpay.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-12 13:13:08 UTC", "last_seen": "2026-03-12 13:13:08 UTC", "sightings": 1 }, { "indicator": "https://01n680.calloak.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-12 13:10:25 UTC", "last_seen": "2026-03-12 13:10:25 UTC", "sightings": 1 }, { "indicator": "http://59.177.97.111:37055/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 13:05:28 UTC", "last_seen": "2026-03-12 13:05:28 UTC", "sightings": 1 }, { "indicator": "https://eubz.calloak.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-12 13:05:08 UTC", "last_seen": "2026-03-12 13:05:08 UTC", "sightings": 1 }, { "indicator": "http://182.122.172.23:43919/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 13:04:09 UTC", "last_seen": "2026-03-12 13:04:09 UTC", "sightings": 1 }, { "indicator": "https://9jmu.calloak.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-12 13:00:08 UTC", "last_seen": "2026-03-12 13:00:08 UTC", "sightings": 1 }, { "indicator": "http://182.122.172.23:43919/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 12:59:19 UTC", "last_seen": "2026-03-12 12:59:19 UTC", "sightings": 1 }, { "indicator": "http://123.12.231.69:42463/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 12:58:20 UTC", "last_seen": "2026-03-12 12:58:20 UTC", "sightings": 1 }, { "indicator": "http://117.196.131.123:57726/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 12:56:07 UTC", "last_seen": "2026-03-12 12:56:07 UTC", "sightings": 1 }, { "indicator": "https://growt1-field.calloak.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-12 12:55:10 UTC", "last_seen": "2026-03-12 12:55:10 UTC", "sightings": 1 }, { "indicator": "http://117.222.166.59:51496/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 12:50:15 UTC", "last_seen": "2026-03-12 12:50:15 UTC", "sightings": 1 }, { "indicator": "http://36.49.65.2:34903/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-12 12:47:10 UTC", "last_seen": "2026-03-12 12:47:10 UTC", "sightings": 1 }, { "indicator": "http://117.196.131.123:57726/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 12:43:19 UTC", "last_seen": "2026-03-12 12:43:19 UTC", "sightings": 1 }, { "indicator": "http://61.53.93.227:38851/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 12:43:18 UTC", "last_seen": "2026-03-12 12:43:18 UTC", "sightings": 1 }, { "indicator": "http://123.12.231.69:42463/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 12:43:18 UTC", "last_seen": "2026-03-12 12:43:18 UTC", "sightings": 1 }, { "indicator": "http://182.127.45.49:57256/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 12:35:21 UTC", "last_seen": "2026-03-12 12:35:21 UTC", "sightings": 1 }, { "indicator": "https://refineterminal.jacksend.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-12 12:35:09 UTC", "last_seen": "2026-03-12 12:35:09 UTC", "sightings": 1 }, { "indicator": "http://115.48.136.67:48533/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 12:33:35 UTC", "last_seen": "2026-03-12 12:33:35 UTC", "sightings": 1 }, { "indicator": "https://strictinspect.jacksend.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-12 12:31:09 UTC", "last_seen": "2026-03-12 12:31:09 UTC", "sightings": 1 }, { "indicator": "http://115.63.190.248:47176/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 12:29:11 UTC", "last_seen": "2026-03-12 12:29:11 UTC", "sightings": 1 }, { "indicator": "http://61.53.93.227:38851/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 12:24:10 UTC", "last_seen": "2026-03-12 12:24:10 UTC", "sightings": 1 }, { "indicator": "http://36.49.65.2:34903/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-12 12:22:21 UTC", "last_seen": "2026-03-12 12:22:21 UTC", "sightings": 1 }, { "indicator": "http://115.56.122.149:53730/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 12:21:25 UTC", "last_seen": "2026-03-12 12:21:25 UTC", "sightings": 1 }, { "indicator": "http://36.64.184.26:49753/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-12 12:15:11 UTC", "last_seen": "2026-03-12 12:15:11 UTC", "sightings": 1 }, { "indicator": "http://115.63.190.248:47176/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 12:14:09 UTC", "last_seen": "2026-03-12 12:14:09 UTC", "sightings": 1 }, { "indicator": "http://60.23.236.66:53139/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 12:06:25 UTC", "last_seen": "2026-03-12 12:06:25 UTC", "sightings": 1 }, { "indicator": "http://123.12.198.101:46328/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 12:01:19 UTC", "last_seen": "2026-03-12 12:01:19 UTC", "sightings": 1 }, { "indicator": "http://115.56.122.149:53730/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 11:59:11 UTC", "last_seen": "2026-03-12 11:59:11 UTC", "sightings": 1 }, { "indicator": "http://115.56.101.152:50101/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 11:55:22 UTC", "last_seen": "2026-03-12 11:55:22 UTC", "sightings": 1 }, { "indicator": "http://115.54.135.247:53655/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 11:54:14 UTC", "last_seen": "2026-03-12 11:54:14 UTC", "sightings": 1 }, { "indicator": "http://117.209.86.225:37842/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 11:51:28 UTC", "last_seen": "2026-03-12 11:51:28 UTC", "sightings": 1 }, { "indicator": "http://59.91.161.209:44761/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 11:49:11 UTC", "last_seen": "2026-03-12 11:49:11 UTC", "sightings": 1 }, { "indicator": "http://118.34.109.121:35372/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 11:48:14 UTC", "last_seen": "2026-03-12 11:48:14 UTC", "sightings": 1 }, { "indicator": "http://117.209.27.203:38034/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 11:46:20 UTC", "last_seen": "2026-03-12 11:46:20 UTC", "sightings": 1 }, { "indicator": "http://60.23.236.66:53139/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 11:43:17 UTC", "last_seen": "2026-03-12 11:43:17 UTC", "sightings": 1 }, { "indicator": "http://115.56.101.152:50101/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 11:40:21 UTC", "last_seen": "2026-03-12 11:40:21 UTC", "sightings": 1 }, { "indicator": "http://123.4.192.222:38948/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 11:38:10 UTC", "last_seen": "2026-03-12 11:38:10 UTC", "sightings": 1 }, { "indicator": "http://182.127.166.224:60875/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 11:37:19 UTC", "last_seen": "2026-03-12 11:37:19 UTC", "sightings": 1 }, { "indicator": "http://117.206.142.209:58812/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 11:30:22 UTC", "last_seen": "2026-03-12 11:30:22 UTC", "sightings": 1 }, { "indicator": "http://59.98.204.142:37071/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 11:28:16 UTC", "last_seen": "2026-03-12 11:28:16 UTC", "sightings": 1 }, { "indicator": "http://110.39.237.185:60227/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 11:26:08 UTC", "last_seen": "2026-03-12 11:26:08 UTC", "sightings": 1 }, { "indicator": "http://115.54.135.247:53655/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 11:22:19 UTC", "last_seen": "2026-03-12 11:22:19 UTC", "sightings": 1 }, { "indicator": "http://118.34.109.121:35372/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 11:20:19 UTC", "last_seen": "2026-03-12 11:20:19 UTC", "sightings": 1 }, { "indicator": "http://182.127.166.224:60875/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 11:19:11 UTC", "last_seen": "2026-03-12 11:19:11 UTC", "sightings": 1 }, { "indicator": "http://117.209.27.203:38034/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 11:15:29 UTC", "last_seen": "2026-03-12 11:15:29 UTC", "sightings": 1 }, { "indicator": "http://123.4.192.222:38948/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 11:11:09 UTC", "last_seen": "2026-03-12 11:11:09 UTC", "sightings": 1 }, { "indicator": "http://59.184.215.201:44827/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 11:07:20 UTC", "last_seen": "2026-03-12 11:07:20 UTC", "sightings": 1 }, { "indicator": "http://59.98.204.142:37071/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 11:06:13 UTC", "last_seen": "2026-03-12 11:06:13 UTC", "sightings": 1 }, { "indicator": "http://110.39.237.185:60227/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 10:58:14 UTC", "last_seen": "2026-03-12 10:58:14 UTC", "sightings": 1 }, { "indicator": "http://222.138.148.149:59050/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 10:52:22 UTC", "last_seen": "2026-03-12 10:52:22 UTC", "sightings": 1 }, { "indicator": "http://60.27.218.208:46393/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-12 10:52:17 UTC", "last_seen": "2026-03-12 10:52:17 UTC", "sightings": 1 }, { "indicator": "http://27.215.186.113:52365/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-12 10:50:18 UTC", "last_seen": "2026-03-12 10:50:18 UTC", "sightings": 1 }, { "indicator": "http://117.209.5.128:45327/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 10:49:29 UTC", "last_seen": "2026-03-12 10:49:29 UTC", "sightings": 1 }, { "indicator": "http://83.233.204.183:55369/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 10:47:10 UTC", "last_seen": "2026-03-12 10:47:10 UTC", "sightings": 1 }, { "indicator": "http://59.184.215.201:44827/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 10:41:25 UTC", "last_seen": "2026-03-12 10:41:25 UTC", "sightings": 1 }, { "indicator": "http://61.0.107.16:59289/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 10:40:21 UTC", "last_seen": "2026-03-12 10:40:21 UTC", "sightings": 1 }, { "indicator": "http://117.222.165.84:43871/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 10:33:15 UTC", "last_seen": "2026-03-12 10:33:15 UTC", "sightings": 1 }, { "indicator": "http://105.184.56.145:32793/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-12 10:32:17 UTC", "last_seen": "2026-03-12 10:32:17 UTC", "sightings": 1 }, { "indicator": "http://105.184.56.145:32793/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-12 10:30:26 UTC", "last_seen": "2026-03-12 10:30:26 UTC", "sightings": 1 }, { "indicator": "http://1.181.226.40:56308/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-12 10:27:20 UTC", "last_seen": "2026-03-12 10:27:20 UTC", "sightings": 1 }, { "indicator": "http://59.93.190.19:53971/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 10:26:17 UTC", "last_seen": "2026-03-12 10:26:17 UTC", "sightings": 1 }, { "indicator": "http://27.215.186.113:52365/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-12 10:26:17 UTC", "last_seen": "2026-03-12 10:26:17 UTC", "sightings": 1 }, { "indicator": "http://42.56.167.222:49208/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 10:23:18 UTC", "last_seen": "2026-03-12 10:23:18 UTC", "sightings": 1 }, { "indicator": "http://83.233.204.183:55369/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 10:20:19 UTC", "last_seen": "2026-03-12 10:20:19 UTC", "sightings": 1 }, { "indicator": "http://61.0.107.16:59289/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 10:12:19 UTC", "last_seen": "2026-03-12 10:12:19 UTC", "sightings": 1 }, { "indicator": "http://59.93.190.19:53971/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 10:06:22 UTC", "last_seen": "2026-03-12 10:06:22 UTC", "sightings": 1 }, { "indicator": "http://110.38.220.112:40261/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-12 10:06:22 UTC", "last_seen": "2026-03-12 10:06:22 UTC", "sightings": 1 }, { "indicator": "http://182.121.254.96:43190/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 10:04:18 UTC", "last_seen": "2026-03-12 10:04:18 UTC", "sightings": 1 }, { "indicator": "http://182.119.58.53:48765/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 10:00:19 UTC", "last_seen": "2026-03-12 10:00:19 UTC", "sightings": 1 }, { "indicator": "http://61.53.238.54:41205/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 09:58:08 UTC", "last_seen": "2026-03-12 09:58:08 UTC", "sightings": 1 }, { "indicator": "http://42.85.50.151:57892/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 09:49:11 UTC", "last_seen": "2026-03-12 09:49:11 UTC", "sightings": 1 }, { "indicator": "http://182.121.254.96:43190/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 09:33:15 UTC", "last_seen": "2026-03-12 09:33:15 UTC", "sightings": 1 }, { "indicator": "http://87.121.79.23/huhu/titanjr.arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-12 09:26:34 UTC", "last_seen": "2026-03-12 09:26:34 UTC", "sightings": 1 }, { "indicator": "http://87.121.79.23/huhu/titanjr.mipsl", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-12 09:26:34 UTC", "last_seen": "2026-03-12 09:26:34 UTC", "sightings": 1 }, { "indicator": "http://87.121.79.23/huhu/titanjr.m68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-12 09:25:15 UTC", "last_seen": "2026-03-12 09:25:15 UTC", "sightings": 1 }, { "indicator": "http://42.85.50.151:57892/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 09:23:15 UTC", "last_seen": "2026-03-12 09:23:15 UTC", "sightings": 1 }, { "indicator": "http://112.238.173.83:35828/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 09:19:22 UTC", "last_seen": "2026-03-12 09:19:22 UTC", "sightings": 1 }, { "indicator": "http://117.211.42.127:59312/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 09:10:19 UTC", "last_seen": "2026-03-12 09:10:19 UTC", "sightings": 1 }, { "indicator": "http://182.117.68.16:43822/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 09:06:13 UTC", "last_seen": "2026-03-12 09:06:13 UTC", "sightings": 1 }, { "indicator": "http://110.38.215.152:39775/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 09:02:14 UTC", "last_seen": "2026-03-12 09:02:14 UTC", "sightings": 1 }, { "indicator": "http://94.156.152.67/xdlol.arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-12 09:01:06 UTC", "last_seen": "2026-03-12 09:01:06 UTC", "sightings": 1 }, { "indicator": "http://87.121.79.23/huhu/titanjr.", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-12 09:01:06 UTC", "last_seen": "2026-03-12 09:01:06 UTC", "sightings": 1 }, { "indicator": "http://94.156.152.67/xdlol.arm4", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-12 09:01:06 UTC", "last_seen": "2026-03-12 09:01:06 UTC", "sightings": 1 }, { "indicator": "http://45.141.26.73/bins/sora.sparc", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-12 09:01:06 UTC", "last_seen": "2026-03-12 09:01:06 UTC", "sightings": 1 }, { "indicator": "http://45.141.26.73/bins/sora.mips64", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-12 09:01:06 UTC", "last_seen": "2026-03-12 09:01:06 UTC", "sightings": 1 }, { "indicator": "http://112.238.173.83:35828/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 08:56:48 UTC", "last_seen": "2026-03-12 08:56:48 UTC", "sightings": 1 }, { "indicator": "http://117.215.218.192:47917/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "mirai" ], "first_seen": "2026-03-12 08:49:25 UTC", "last_seen": "2026-03-12 08:49:25 UTC", "sightings": 1 }, { "indicator": "http://158.94.211.222/files/8548282130/K6IpIvm.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-03-12 08:35:22 UTC", "last_seen": "2026-03-12 08:35:22 UTC", "sightings": 1 }, { "indicator": "http://221.15.5.1:35175/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 08:35:18 UTC", "last_seen": "2026-03-12 08:35:18 UTC", "sightings": 1 }, { "indicator": "https://7o9ige3i.documentarygo.digital/?=check&&actmn=vzwgFGeCVWLhdCNI", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-12 08:33:07 UTC", "last_seen": "2026-03-12 08:33:07 UTC", "sightings": 1 }, { "indicator": "http://110.38.215.152:39775/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 08:32:12 UTC", "last_seen": "2026-03-12 08:32:12 UTC", "sightings": 1 }, { "indicator": "http://182.117.68.16:43822/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 08:30:41 UTC", "last_seen": "2026-03-12 08:30:41 UTC", "sightings": 1 }, { "indicator": "http://221.15.5.1:35175/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 08:30:27 UTC", "last_seen": "2026-03-12 08:30:27 UTC", "sightings": 1 }, { "indicator": "http://117.215.218.192:47917/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "mirai" ], "first_seen": "2026-03-12 08:21:19 UTC", "last_seen": "2026-03-12 08:21:19 UTC", "sightings": 1 }, { "indicator": "http://42.232.234.79:50444/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 08:21:18 UTC", "last_seen": "2026-03-12 08:21:18 UTC", "sightings": 1 }, { "indicator": "http://117.223.3.223:50111/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 08:19:23 UTC", "last_seen": "2026-03-12 08:19:23 UTC", "sightings": 1 }, { "indicator": "http://125.43.107.143:36956/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 08:06:23 UTC", "last_seen": "2026-03-12 08:06:23 UTC", "sightings": 1 }, { "indicator": "http://42.231.40.160:33184/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 08:04:24 UTC", "last_seen": "2026-03-12 08:04:24 UTC", "sightings": 1 }, { "indicator": "http://178.141.68.58:38191/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 08:02:27 UTC", "last_seen": "2026-03-12 08:02:27 UTC", "sightings": 1 }, { "indicator": "http://117.223.3.223:50111/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 07:58:28 UTC", "last_seen": "2026-03-12 07:58:28 UTC", "sightings": 1 }, { "indicator": "http://117.253.71.167:53556/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 07:53:20 UTC", "last_seen": "2026-03-12 07:53:20 UTC", "sightings": 1 }, { "indicator": "http://42.231.40.160:33184/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 07:52:22 UTC", "last_seen": "2026-03-12 07:52:22 UTC", "sightings": 1 }, { "indicator": "http://125.41.79.103:38014/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 07:50:20 UTC", "last_seen": "2026-03-12 07:50:20 UTC", "sightings": 1 }, { "indicator": "http://110.36.14.229:34298/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 07:46:33 UTC", "last_seen": "2026-03-12 07:46:33 UTC", "sightings": 1 }, { "indicator": "http://120.28.201.75:33606/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-12 07:36:13 UTC", "last_seen": "2026-03-12 07:36:13 UTC", "sightings": 1 }, { "indicator": "http://117.209.10.106:32874/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 07:32:26 UTC", "last_seen": "2026-03-12 07:32:26 UTC", "sightings": 1 }, { "indicator": "http://178.141.68.58:38191/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 07:32:22 UTC", "last_seen": "2026-03-12 07:32:22 UTC", "sightings": 1 }, { "indicator": "http://130.12.181.60/iat.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "CoinMiner", "exe" ], "first_seen": "2026-03-12 07:27:20 UTC", "last_seen": "2026-03-12 07:27:20 UTC", "sightings": 1 }, { "indicator": "http://123.12.198.101:46328/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 07:24:23 UTC", "last_seen": "2026-03-12 07:24:23 UTC", "sightings": 1 }, { "indicator": "http://110.36.14.229:34298/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 07:21:32 UTC", "last_seen": "2026-03-12 07:21:32 UTC", "sightings": 1 }, { "indicator": "http://125.41.79.103:38014/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 07:21:21 UTC", "last_seen": "2026-03-12 07:21:21 UTC", "sightings": 1 }, { "indicator": "http://91.219.23.145/predator-varying", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer" ], "first_seen": "2026-03-12 07:19:08 UTC", "last_seen": "2026-03-12 07:19:08 UTC", "sightings": 1 }, { "indicator": "http://120.28.201.75:33606/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-12 07:12:11 UTC", "last_seen": "2026-03-12 07:12:11 UTC", "sightings": 1 }, { "indicator": "http://125.43.107.143:36956/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 07:11:25 UTC", "last_seen": "2026-03-12 07:11:25 UTC", "sightings": 1 }, { "indicator": "http://158.94.211.222/files/8635093259/Fh1zHU4.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-03-12 06:55:22 UTC", "last_seen": "2026-03-12 06:55:22 UTC", "sightings": 1 }, { "indicator": "http://222.219.4.21:55895/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-12 06:45:22 UTC", "last_seen": "2026-03-12 06:45:22 UTC", "sightings": 1 }, { "indicator": "http://222.142.254.106:51123/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 06:41:22 UTC", "last_seen": "2026-03-12 06:41:22 UTC", "sightings": 1 }, { "indicator": "http://182.113.10.153:48185/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 06:25:37 UTC", "last_seen": "2026-03-12 06:25:37 UTC", "sightings": 1 }, { "indicator": "http://59.95.94.85:59879/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 06:20:23 UTC", "last_seen": "2026-03-12 06:20:23 UTC", "sightings": 1 }, { "indicator": "http://182.116.115.219:59775/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 06:16:25 UTC", "last_seen": "2026-03-12 06:16:25 UTC", "sightings": 1 }, { "indicator": "http://123.10.38.32:51388/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 06:14:25 UTC", "last_seen": "2026-03-12 06:14:25 UTC", "sightings": 1 }, { "indicator": "http://158.94.211.222/files/8425384370/xo3ti4X.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-03-12 06:11:23 UTC", "last_seen": "2026-03-12 06:11:23 UTC", "sightings": 1 }, { "indicator": "http://42.224.175.227:52825/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 06:04:19 UTC", "last_seen": "2026-03-12 06:04:19 UTC", "sightings": 1 }, { "indicator": "http://115.49.31.90:56748/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 06:03:12 UTC", "last_seen": "2026-03-12 06:03:12 UTC", "sightings": 1 }, { "indicator": "http://123.11.74.12:45121/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 06:02:20 UTC", "last_seen": "2026-03-12 06:02:20 UTC", "sightings": 1 }, { "indicator": "http://123.10.38.32:51388/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 05:56:10 UTC", "last_seen": "2026-03-12 05:56:10 UTC", "sightings": 1 }, { "indicator": "http://42.224.175.227:52825/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 05:44:46 UTC", "last_seen": "2026-03-12 05:44:46 UTC", "sightings": 1 }, { "indicator": "http://27.207.220.62:51156/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 05:43:34 UTC", "last_seen": "2026-03-12 05:43:34 UTC", "sightings": 1 }, { "indicator": "http://115.49.31.90:56748/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 05:38:21 UTC", "last_seen": "2026-03-12 05:38:21 UTC", "sightings": 1 }, { "indicator": "http://117.95.215.242:54900/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "Mozi" ], "first_seen": "2026-03-12 05:22:34 UTC", "last_seen": "2026-03-12 05:22:34 UTC", "sightings": 1 }, { "indicator": "http://27.207.220.62:51156/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 05:16:17 UTC", "last_seen": "2026-03-12 05:16:17 UTC", "sightings": 1 }, { "indicator": "http://119.114.152.148:43709/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 05:11:18 UTC", "last_seen": "2026-03-12 05:11:18 UTC", "sightings": 1 }, { "indicator": "http://110.36.1.168:42005/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 05:08:23 UTC", "last_seen": "2026-03-12 05:08:23 UTC", "sightings": 1 }, { "indicator": "http://110.37.38.88:44387/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-12 05:02:23 UTC", "last_seen": "2026-03-12 05:02:23 UTC", "sightings": 1 }, { "indicator": "http://222.138.148.149:59050/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 05:02:19 UTC", "last_seen": "2026-03-12 05:02:19 UTC", "sightings": 1 }, { "indicator": "http://219.71.131.225:34950/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-12 04:44:10 UTC", "last_seen": "2026-03-12 04:44:10 UTC", "sightings": 1 }, { "indicator": "http://42.225.242.70:39250/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 04:44:08 UTC", "last_seen": "2026-03-12 04:44:08 UTC", "sightings": 1 }, { "indicator": "http://110.37.38.88:44387/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-12 04:32:20 UTC", "last_seen": "2026-03-12 04:32:20 UTC", "sightings": 1 }, { "indicator": "http://119.114.152.148:43709/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 04:30:19 UTC", "last_seen": "2026-03-12 04:30:19 UTC", "sightings": 1 }, { "indicator": "http://175.162.6.156:35035/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-12 04:15:18 UTC", "last_seen": "2026-03-12 04:15:18 UTC", "sightings": 1 }, { "indicator": "http://110.36.80.162:58915/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 04:14:20 UTC", "last_seen": "2026-03-12 04:14:20 UTC", "sightings": 1 }, { "indicator": "http://110.36.80.162:58915/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 04:00:10 UTC", "last_seen": "2026-03-12 04:00:10 UTC", "sightings": 1 }, { "indicator": "http://42.225.242.70:39250/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 03:59:23 UTC", "last_seen": "2026-03-12 03:59:23 UTC", "sightings": 1 }, { "indicator": "http://61.52.60.251:51973/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 03:40:19 UTC", "last_seen": "2026-03-12 03:40:19 UTC", "sightings": 1 }, { "indicator": "http://116.139.26.169:51968/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 03:39:13 UTC", "last_seen": "2026-03-12 03:39:13 UTC", "sightings": 1 }, { "indicator": "http://110.38.208.89:60630/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 03:33:21 UTC", "last_seen": "2026-03-12 03:33:21 UTC", "sightings": 1 }, { "indicator": "http://182.116.116.94:35728/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 03:29:26 UTC", "last_seen": "2026-03-12 03:29:26 UTC", "sightings": 1 }, { "indicator": "http://123.189.138.204:53128/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 03:16:26 UTC", "last_seen": "2026-03-12 03:16:26 UTC", "sightings": 1 }, { "indicator": "http://116.139.26.169:51968/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 03:11:12 UTC", "last_seen": "2026-03-12 03:11:12 UTC", "sightings": 1 }, { "indicator": "http://110.38.208.89:60630/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 03:10:19 UTC", "last_seen": "2026-03-12 03:10:19 UTC", "sightings": 1 }, { "indicator": "http://61.52.60.251:51973/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 03:07:22 UTC", "last_seen": "2026-03-12 03:07:22 UTC", "sightings": 1 }, { "indicator": "http://42.239.231.46:57548/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 03:02:20 UTC", "last_seen": "2026-03-12 03:02:20 UTC", "sightings": 1 }, { "indicator": "http://27.37.63.30:53303/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 02:51:19 UTC", "last_seen": "2026-03-12 02:51:19 UTC", "sightings": 1 }, { "indicator": "http://42.239.231.46:57548/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 02:45:24 UTC", "last_seen": "2026-03-12 02:45:24 UTC", "sightings": 1 }, { "indicator": "http://27.37.63.30:53303/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 02:33:23 UTC", "last_seen": "2026-03-12 02:33:23 UTC", "sightings": 1 }, { "indicator": "http://61.52.46.74:41198/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 02:24:34 UTC", "last_seen": "2026-03-12 02:24:34 UTC", "sightings": 1 }, { "indicator": "http://117.244.233.201:48866/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 02:21:22 UTC", "last_seen": "2026-03-12 02:21:22 UTC", "sightings": 1 }, { "indicator": "http://110.39.249.140:50258/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 02:20:22 UTC", "last_seen": "2026-03-12 02:20:22 UTC", "sightings": 1 }, { "indicator": "http://27.193.117.89:42334/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 02:17:10 UTC", "last_seen": "2026-03-12 02:17:10 UTC", "sightings": 1 }, { "indicator": "http://27.193.117.89:42334/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 02:16:24 UTC", "last_seen": "2026-03-12 02:16:24 UTC", "sightings": 1 }, { "indicator": "http://117.244.233.201:48866/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 02:15:25 UTC", "last_seen": "2026-03-12 02:15:25 UTC", "sightings": 1 }, { "indicator": "http://123.10.0.72:40873/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 02:09:16 UTC", "last_seen": "2026-03-12 02:09:16 UTC", "sightings": 1 }, { "indicator": "http://110.39.249.140:50258/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 01:55:27 UTC", "last_seen": "2026-03-12 01:55:27 UTC", "sightings": 1 }, { "indicator": "http://117.196.2.136:51485/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 01:55:10 UTC", "last_seen": "2026-03-12 01:55:10 UTC", "sightings": 1 }, { "indicator": "http://45.141.26.73/bins/sora.i686", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "opendir", "ua-wget", "x86" ], "first_seen": "2026-03-12 01:49:19 UTC", "last_seen": "2026-03-12 01:49:19 UTC", "sightings": 1 }, { "indicator": "http://115.55.225.143:45621/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 01:49:19 UTC", "last_seen": "2026-03-12 01:49:19 UTC", "sightings": 1 }, { "indicator": "http://45.141.26.73/bins/sora.mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mips", "mirai", "opendir", "ua-wget" ], "first_seen": "2026-03-12 01:49:18 UTC", "last_seen": "2026-03-12 01:49:18 UTC", "sightings": 1 }, { "indicator": "http://45.141.26.73/bins/sora.sh4", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "opendir", "SuperH", "ua-wget" ], "first_seen": "2026-03-12 01:49:18 UTC", "last_seen": "2026-03-12 01:49:18 UTC", "sightings": 1 }, { "indicator": "http://45.141.26.73/bins/sora.spc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "opendir", "sparc", "ua-wget" ], "first_seen": "2026-03-12 01:49:17 UTC", "last_seen": "2026-03-12 01:49:17 UTC", "sightings": 1 }, { "indicator": "http://45.141.26.73/bins/sora.m68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "m68k", "mirai", "opendir", "ua-wget" ], "first_seen": "2026-03-12 01:49:16 UTC", "last_seen": "2026-03-12 01:49:16 UTC", "sightings": 1 }, { "indicator": "http://45.141.26.73/bins/sora.ppc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "opendir", "PowerPC", "ua-wget" ], "first_seen": "2026-03-12 01:49:16 UTC", "last_seen": "2026-03-12 01:49:16 UTC", "sightings": 1 }, { "indicator": "http://45.141.26.73/bins/sora.arc", "indicator_type": "url", "source": "URLhaus", "tags": [ "arc", "elf", "mirai", "opendir", "ua-wget" ], "first_seen": "2026-03-12 01:49:16 UTC", "last_seen": "2026-03-12 01:49:16 UTC", "sightings": 1 }, { "indicator": "http://45.141.26.73/ohshit.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai", "opendir", "sh", "ua-wget" ], "first_seen": "2026-03-12 01:49:15 UTC", "last_seen": "2026-03-12 01:49:15 UTC", "sightings": 1 }, { "indicator": "http://45.141.26.73/bins/sora.arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "arm", "elf", "mirai", "opendir", "ua-wget" ], "first_seen": "2026-03-12 01:49:15 UTC", "last_seen": "2026-03-12 01:49:15 UTC", "sightings": 1 }, { "indicator": "http://45.141.26.73/bins/sora.mpsl", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mips", "mirai", "opendir", "ua-wget" ], "first_seen": "2026-03-12 01:49:15 UTC", "last_seen": "2026-03-12 01:49:15 UTC", "sightings": 1 }, { "indicator": "http://45.141.26.73/bins/sora.arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "arm", "elf", "mirai", "opendir", "ua-wget" ], "first_seen": "2026-03-12 01:49:15 UTC", "last_seen": "2026-03-12 01:49:15 UTC", "sightings": 1 }, { "indicator": "http://45.141.26.73/bins/sora.arm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "arm", "elf", "mirai", "opendir", "ua-wget" ], "first_seen": "2026-03-12 01:49:15 UTC", "last_seen": "2026-03-12 01:49:15 UTC", "sightings": 1 }, { "indicator": "http://45.141.26.73/bins/sora.arm", "indicator_type": "url", "source": "URLhaus", "tags": [ "arm", "elf", "mirai", "opendir", "ua-wget" ], "first_seen": "2026-03-12 01:49:15 UTC", "last_seen": "2026-03-12 01:49:15 UTC", "sightings": 1 }, { "indicator": "http://117.196.2.136:51485/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 01:33:07 UTC", "last_seen": "2026-03-12 01:33:07 UTC", "sightings": 1 }, { "indicator": "http://87.121.79.23/huhu/titanjr.mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-12 01:28:10 UTC", "last_seen": "2026-03-12 01:28:10 UTC", "sightings": 1 }, { "indicator": "http://87.121.79.23/huhu/titanjr.arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-12 01:27:16 UTC", "last_seen": "2026-03-12 01:27:16 UTC", "sightings": 1 }, { "indicator": "http://87.121.79.23/huhu/titanjr.x86_32", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-12 01:27:16 UTC", "last_seen": "2026-03-12 01:27:16 UTC", "sightings": 1 }, { "indicator": "http://87.121.79.23/huhu/titanjr.arm", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-12 01:27:16 UTC", "last_seen": "2026-03-12 01:27:16 UTC", "sightings": 1 }, { "indicator": "http://87.121.79.23/huhu/titanjr.arm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-12 01:26:09 UTC", "last_seen": "2026-03-12 01:26:09 UTC", "sightings": 1 }, { "indicator": "http://87.121.79.23/huhu/titanjr.i486", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-12 01:26:09 UTC", "last_seen": "2026-03-12 01:26:09 UTC", "sightings": 1 }, { "indicator": "http://87.121.79.23/huhu/titanjr.x86_64", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-12 01:26:09 UTC", "last_seen": "2026-03-12 01:26:09 UTC", "sightings": 1 }, { "indicator": "http://87.121.79.23/huhu/titanjr.i686", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-12 01:26:09 UTC", "last_seen": "2026-03-12 01:26:09 UTC", "sightings": 1 }, { "indicator": "http://87.121.79.23/huhu/titanjr.spc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-12 01:25:20 UTC", "last_seen": "2026-03-12 01:25:20 UTC", "sightings": 1 }, { "indicator": "http://59.96.137.81:51423/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 01:24:13 UTC", "last_seen": "2026-03-12 01:24:13 UTC", "sightings": 1 }, { "indicator": "http://117.195.103.234:46776/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 01:19:10 UTC", "last_seen": "2026-03-12 01:19:10 UTC", "sightings": 1 }, { "indicator": "http://42.85.210.153:47383/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 01:18:19 UTC", "last_seen": "2026-03-12 01:18:19 UTC", "sightings": 1 }, { "indicator": "http://59.96.137.81:51423/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 01:13:10 UTC", "last_seen": "2026-03-12 01:13:10 UTC", "sightings": 1 }, { "indicator": "http://219.155.11.56:35709/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 01:13:10 UTC", "last_seen": "2026-03-12 01:13:10 UTC", "sightings": 1 }, { "indicator": "http://42.224.144.97:53391/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 01:01:20 UTC", "last_seen": "2026-03-12 01:01:20 UTC", "sightings": 1 }, { "indicator": "http://93.208.166.69:41687/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 00:56:08 UTC", "last_seen": "2026-03-12 00:56:08 UTC", "sightings": 1 }, { "indicator": "http://42.85.210.153:47383/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 00:54:20 UTC", "last_seen": "2026-03-12 00:54:20 UTC", "sightings": 1 }, { "indicator": "http://117.195.103.234:46776/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 00:53:13 UTC", "last_seen": "2026-03-12 00:53:13 UTC", "sightings": 1 }, { "indicator": "http://61.3.28.83:33355/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 00:51:16 UTC", "last_seen": "2026-03-12 00:51:16 UTC", "sightings": 1 }, { "indicator": "http://117.206.239.67:45410/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 00:50:18 UTC", "last_seen": "2026-03-12 00:50:18 UTC", "sightings": 1 }, { "indicator": "http://161.97.148.194/nullnet_bin_dir/nullnet_load.x86_64", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "opendir", "ua-wget", "x86" ], "first_seen": "2026-03-12 00:50:17 UTC", "last_seen": "2026-03-12 00:50:17 UTC", "sightings": 1 }, { "indicator": "http://vmi3114056.contaboserver.net/nullnet_bin_dir/nullnet_load.mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mips", "mirai", "ua-wget" ], "first_seen": "2026-03-12 00:49:19 UTC", "last_seen": "2026-03-12 00:49:19 UTC", "sightings": 1 }, { "indicator": "http://161.97.148.194/nullnet_bin_dir/nullnet_load.spc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "opendir", "sparc", "ua-wget" ], "first_seen": "2026-03-12 00:49:16 UTC", "last_seen": "2026-03-12 00:49:16 UTC", "sightings": 1 }, { "indicator": "http://161.97.148.194/nullnet_bin_dir/nullnet_load.i686", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "opendir", "ua-wget", "x86" ], "first_seen": "2026-03-12 00:49:16 UTC", "last_seen": "2026-03-12 00:49:16 UTC", "sightings": 1 }, { "indicator": "http://161.97.148.194/nullnet_bin_dir/nullnet_load.x86", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "opendir", "ua-wget", "x86" ], "first_seen": "2026-03-12 00:49:16 UTC", "last_seen": "2026-03-12 00:49:16 UTC", "sightings": 1 }, { "indicator": "http://161.97.148.194/nullnet_bin_dir/nullnet_load.arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "arm", "elf", "mirai", "opendir", "ua-wget" ], "first_seen": "2026-03-12 00:49:16 UTC", "last_seen": "2026-03-12 00:49:16 UTC", "sightings": 1 }, { "indicator": "http://161.97.148.194/nullnet_bin_dir/nullnet_load.arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "arm", "elf", "mirai", "opendir", "ua-wget" ], "first_seen": "2026-03-12 00:49:16 UTC", "last_seen": "2026-03-12 00:49:16 UTC", "sightings": 1 }, { "indicator": "http://161.97.148.194/nullnet_bin_dir/nullnet_load.arc", "indicator_type": "url", "source": "URLhaus", "tags": [ "arc", "elf", "mirai", "opendir", "ua-wget" ], "first_seen": "2026-03-12 00:49:16 UTC", "last_seen": "2026-03-12 00:49:16 UTC", "sightings": 1 }, { "indicator": "http://161.97.148.194/nullnet_bin_dir/nullnet_load.arm", "indicator_type": "url", "source": "URLhaus", "tags": [ "arm", "elf", "mirai", "opendir", "ua-wget" ], "first_seen": "2026-03-12 00:49:16 UTC", "last_seen": "2026-03-12 00:49:16 UTC", "sightings": 1 }, { "indicator": "http://161.97.148.194/nullnet_bin_dir/nullnet_load.ppc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "opendir", "PowerPC", "ua-wget" ], "first_seen": "2026-03-12 00:49:16 UTC", "last_seen": "2026-03-12 00:49:16 UTC", "sightings": 1 }, { "indicator": "http://161.97.148.194/nullnet_bin_dir/nullnet_load.arm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "arm", "elf", "mirai", "opendir", "ua-wget" ], "first_seen": "2026-03-12 00:49:16 UTC", "last_seen": "2026-03-12 00:49:16 UTC", "sightings": 1 }, { "indicator": "http://161.97.148.194/nullnet_bin_dir/nullnet_load.mpsl", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mips", "mirai", "opendir", "ua-wget" ], "first_seen": "2026-03-12 00:49:16 UTC", "last_seen": "2026-03-12 00:49:16 UTC", "sightings": 1 }, { "indicator": "http://161.97.148.194/nullnet_bin_dir/nullnet_load.sh4", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "opendir", "SuperH", "ua-wget" ], "first_seen": "2026-03-12 00:49:16 UTC", "last_seen": "2026-03-12 00:49:16 UTC", "sightings": 1 }, { "indicator": "http://161.97.148.194/nullnet_bin_dir/nullnet_load.m68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "m68k", "mirai", "opendir", "ua-wget" ], "first_seen": "2026-03-12 00:49:15 UTC", "last_seen": "2026-03-12 00:49:15 UTC", "sightings": 1 }, { "indicator": "http://161.97.148.194/nullnet_bin_dir/nullnet_load.i486", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "opendir", "ua-wget", "x86" ], "first_seen": "2026-03-12 00:49:15 UTC", "last_seen": "2026-03-12 00:49:15 UTC", "sightings": 1 }, { "indicator": "http://161.97.148.194/nullnet_bin_dir/nullnet_load.mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mips", "mirai", "opendir", "ua-wget" ], "first_seen": "2026-03-12 00:49:15 UTC", "last_seen": "2026-03-12 00:49:15 UTC", "sightings": 1 }, { "indicator": "http://42.224.144.97:53391/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 00:48:22 UTC", "last_seen": "2026-03-12 00:48:22 UTC", "sightings": 1 }, { "indicator": "http://117.206.239.67:45410/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 00:46:26 UTC", "last_seen": "2026-03-12 00:46:26 UTC", "sightings": 1 }, { "indicator": "http://94.156.152.233/bins/wget.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai", "opendir", "sh", "ua-wget" ], "first_seen": "2026-03-12 00:44:17 UTC", "last_seen": "2026-03-12 00:44:17 UTC", "sightings": 1 }, { "indicator": "http://117.221.25.226:42217/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 00:37:30 UTC", "last_seen": "2026-03-12 00:37:30 UTC", "sightings": 1 }, { "indicator": "http://42.5.71.211:42420/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 00:29:23 UTC", "last_seen": "2026-03-12 00:29:23 UTC", "sightings": 1 }, { "indicator": "http://117.222.165.233:51929/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 00:26:24 UTC", "last_seen": "2026-03-12 00:26:24 UTC", "sightings": 1 }, { "indicator": "http://117.200.186.229:45201/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 00:20:10 UTC", "last_seen": "2026-03-12 00:20:10 UTC", "sightings": 1 }, { "indicator": "http://61.3.28.83:33355/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 00:19:21 UTC", "last_seen": "2026-03-12 00:19:21 UTC", "sightings": 1 }, { "indicator": "http://120.60.227.246:54518/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 00:13:23 UTC", "last_seen": "2026-03-12 00:13:23 UTC", "sightings": 1 }, { "indicator": "http://117.222.165.233:51929/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-12 00:03:16 UTC", "last_seen": "2026-03-12 00:03:16 UTC", "sightings": 1 }, { "indicator": "http://39.187.82.151:35064/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 23:57:15 UTC", "last_seen": "2026-03-11 23:57:15 UTC", "sightings": 1 }, { "indicator": "http://158.94.211.222/files/8441193572/I8N8jbR.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-11 23:52:09 UTC", "last_seen": "2026-03-11 23:52:09 UTC", "sightings": 1 }, { "indicator": "http://182.122.216.220:37006/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 23:50:11 UTC", "last_seen": "2026-03-11 23:50:11 UTC", "sightings": 1 }, { "indicator": "http://36.64.191.18:52767/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-11 23:48:07 UTC", "last_seen": "2026-03-11 23:48:07 UTC", "sightings": 1 }, { "indicator": "http://115.56.127.236:41670/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 23:48:07 UTC", "last_seen": "2026-03-11 23:48:07 UTC", "sightings": 1 }, { "indicator": "http://120.60.227.246:54518/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 23:45:20 UTC", "last_seen": "2026-03-11 23:45:20 UTC", "sightings": 1 }, { "indicator": "http://117.248.27.237:42017/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 23:44:21 UTC", "last_seen": "2026-03-11 23:44:21 UTC", "sightings": 1 }, { "indicator": "http://125.43.23.189:59277/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 23:42:20 UTC", "last_seen": "2026-03-11 23:42:20 UTC", "sightings": 1 }, { "indicator": "http://222.142.254.106:51123/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 23:40:22 UTC", "last_seen": "2026-03-11 23:40:22 UTC", "sightings": 1 }, { "indicator": "http://125.43.23.189:59277/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 23:28:19 UTC", "last_seen": "2026-03-11 23:28:19 UTC", "sightings": 1 }, { "indicator": "http://115.56.127.236:41670/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 23:26:12 UTC", "last_seen": "2026-03-11 23:26:12 UTC", "sightings": 1 }, { "indicator": "http://182.113.10.153:48185/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 23:23:18 UTC", "last_seen": "2026-03-11 23:23:18 UTC", "sightings": 1 }, { "indicator": "http://36.64.191.18:52767/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-11 23:11:18 UTC", "last_seen": "2026-03-11 23:11:18 UTC", "sightings": 1 }, { "indicator": "http://182.113.13.69:44388/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 23:01:21 UTC", "last_seen": "2026-03-11 23:01:21 UTC", "sightings": 1 }, { "indicator": "http://182.113.13.69:44388/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 23:00:21 UTC", "last_seen": "2026-03-11 23:00:21 UTC", "sightings": 1 }, { "indicator": "http://42.177.59.216:57615/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 22:54:24 UTC", "last_seen": "2026-03-11 22:54:24 UTC", "sightings": 1 }, { "indicator": "http://123.5.114.203:53582/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 22:51:12 UTC", "last_seen": "2026-03-11 22:51:12 UTC", "sightings": 1 }, { "indicator": "http://123.5.114.203:53582/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 22:49:19 UTC", "last_seen": "2026-03-11 22:49:19 UTC", "sightings": 1 }, { "indicator": "http://222.127.226.53:46211/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-11 22:49:19 UTC", "last_seen": "2026-03-11 22:49:19 UTC", "sightings": 1 }, { "indicator": "http://110.37.110.174:53758/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-11 22:36:17 UTC", "last_seen": "2026-03-11 22:36:17 UTC", "sightings": 1 }, { "indicator": "http://221.203.134.211:49201/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 22:31:20 UTC", "last_seen": "2026-03-11 22:31:20 UTC", "sightings": 1 }, { "indicator": "http://158.94.211.222/files/8167064937/L2BuR1u.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-11 22:28:09 UTC", "last_seen": "2026-03-11 22:28:09 UTC", "sightings": 1 }, { "indicator": "http://42.177.59.216:57615/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 22:25:19 UTC", "last_seen": "2026-03-11 22:25:19 UTC", "sightings": 1 }, { "indicator": "http://166.48.94.241:50758/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 22:22:16 UTC", "last_seen": "2026-03-11 22:22:16 UTC", "sightings": 1 }, { "indicator": "https://myspace.ambertide.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 22:07:09 UTC", "last_seen": "2026-03-11 22:07:09 UTC", "sightings": 1 }, { "indicator": "https://light-way.ambertide.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 22:04:06 UTC", "last_seen": "2026-03-11 22:04:06 UTC", "sightings": 1 }, { "indicator": "https://fire-v12.ambertide.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 21:56:06 UTC", "last_seen": "2026-03-11 21:56:06 UTC", "sightings": 1 }, { "indicator": "http://115.57.186.101:45380/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 21:43:18 UTC", "last_seen": "2026-03-11 21:43:18 UTC", "sightings": 1 }, { "indicator": "https://cold-peak.ambertide.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 21:37:06 UTC", "last_seen": "2026-03-11 21:37:06 UTC", "sightings": 1 }, { "indicator": "http://45.185.93.188:47912/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-11 21:35:20 UTC", "last_seen": "2026-03-11 21:35:20 UTC", "sightings": 1 }, { "indicator": "http://115.55.248.58:56449/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 21:33:12 UTC", "last_seen": "2026-03-11 21:33:12 UTC", "sightings": 1 }, { "indicator": "http://45.131.182.177/1.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543", "Vidar" ], "first_seen": "2026-03-11 21:31:12 UTC", "last_seen": "2026-03-11 21:31:12 UTC", "sightings": 1 }, { "indicator": "http://59.42.89.131:56735/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-11 21:27:37 UTC", "last_seen": "2026-03-11 21:27:37 UTC", "sightings": 1 }, { "indicator": "http://223.151.75.76:34920/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-11 21:22:21 UTC", "last_seen": "2026-03-11 21:22:21 UTC", "sightings": 1 }, { "indicator": "https://datalink.valeriana.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 21:22:06 UTC", "last_seen": "2026-03-11 21:22:06 UTC", "sightings": 1 }, { "indicator": "https://point-up.valeriana.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 21:15:07 UTC", "last_seen": "2026-03-11 21:15:07 UTC", "sightings": 1 }, { "indicator": "https://home-90.valeriana.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 21:09:06 UTC", "last_seen": "2026-03-11 21:09:06 UTC", "sightings": 1 }, { "indicator": "https://smart-fix.valeriana.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 21:05:07 UTC", "last_seen": "2026-03-11 21:05:07 UTC", "sightings": 1 }, { "indicator": "https://stepforward.novalento.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 21:00:10 UTC", "last_seen": "2026-03-11 21:00:10 UTC", "sightings": 1 }, { "indicator": "http://222.137.75.167:58422/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 20:48:18 UTC", "last_seen": "2026-03-11 20:48:18 UTC", "sightings": 1 }, { "indicator": "http://110.37.106.54:53718/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 20:46:21 UTC", "last_seen": "2026-03-11 20:46:21 UTC", "sightings": 1 }, { "indicator": "http://90.227.85.74:33976/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 20:41:21 UTC", "last_seen": "2026-03-11 20:41:21 UTC", "sightings": 1 }, { "indicator": "http://42.230.40.4:56852/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 20:39:21 UTC", "last_seen": "2026-03-11 20:39:21 UTC", "sightings": 1 }, { "indicator": "http://222.137.75.167:58422/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 20:34:14 UTC", "last_seen": "2026-03-11 20:34:14 UTC", "sightings": 1 }, { "indicator": "https://quick-7.novalento.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 20:32:07 UTC", "last_seen": "2026-03-11 20:32:07 UTC", "sightings": 1 }, { "indicator": "http://110.37.106.54:53718/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 20:22:22 UTC", "last_seen": "2026-03-11 20:22:22 UTC", "sightings": 1 }, { "indicator": "https://red-stone.novalento.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 20:22:12 UTC", "last_seen": "2026-03-11 20:22:12 UTC", "sightings": 1 }, { "indicator": "http://113.238.164.56:40812/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 20:19:13 UTC", "last_seen": "2026-03-11 20:19:13 UTC", "sightings": 1 }, { "indicator": "https://softweb.silvaterra.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 20:17:06 UTC", "last_seen": "2026-03-11 20:17:06 UTC", "sightings": 1 }, { "indicator": "http://115.50.30.81:44613/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 20:08:10 UTC", "last_seen": "2026-03-11 20:08:10 UTC", "sightings": 1 }, { "indicator": "https://main-hub.silvaterra.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 20:08:07 UTC", "last_seen": "2026-03-11 20:08:07 UTC", "sightings": 1 }, { "indicator": "https://urban-01.silvaterra.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 20:04:10 UTC", "last_seen": "2026-03-11 20:04:10 UTC", "sightings": 1 }, { "indicator": "https://long-path.silvaterra.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 19:58:09 UTC", "last_seen": "2026-03-11 19:58:09 UTC", "sightings": 1 }, { "indicator": "https://bestway.miravento.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 19:55:09 UTC", "last_seen": "2026-03-11 19:55:09 UTC", "sightings": 1 }, { "indicator": "http://117.204.164.47:57815/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 19:53:27 UTC", "last_seen": "2026-03-11 19:53:27 UTC", "sightings": 1 }, { "indicator": "http://182.121.237.52:49370/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 19:51:11 UTC", "last_seen": "2026-03-11 19:51:11 UTC", "sightings": 1 }, { "indicator": "https://go-99.miravento.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 19:50:10 UTC", "last_seen": "2026-03-11 19:50:10 UTC", "sightings": 1 }, { "indicator": "https://site-top.miravento.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 19:36:06 UTC", "last_seen": "2026-03-11 19:36:06 UTC", "sightings": 1 }, { "indicator": "https://fresh-air.miravento.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 19:31:07 UTC", "last_seen": "2026-03-11 19:31:07 UTC", "sightings": 1 }, { "indicator": "http://158.94.211.222/files/7903503838/R3NzF65.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543", "WallStealer" ], "first_seen": "2026-03-11 19:29:08 UTC", "last_seen": "2026-03-11 19:29:08 UTC", "sightings": 1 }, { "indicator": "https://cool-11.lunavilla.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 19:26:08 UTC", "last_seen": "2026-03-11 19:26:08 UTC", "sightings": 1 }, { "indicator": "https://starlink.lunavilla.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 19:22:07 UTC", "last_seen": "2026-03-11 19:22:07 UTC", "sightings": 1 }, { "indicator": "https://gold-v5.lunavilla.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 19:18:06 UTC", "last_seen": "2026-03-11 19:18:06 UTC", "sightings": 1 }, { "indicator": "http://115.50.68.3:48865/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 19:15:11 UTC", "last_seen": "2026-03-11 19:15:11 UTC", "sightings": 1 }, { "indicator": "http://185.213.240.159/bins/px86", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-11 19:13:18 UTC", "last_seen": "2026-03-11 19:13:18 UTC", "sightings": 1 }, { "indicator": "https://deep-space.lunavilla.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 19:13:06 UTC", "last_seen": "2026-03-11 19:13:06 UTC", "sightings": 1 }, { "indicator": "http://185.213.240.159/bins/parm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-11 19:12:17 UTC", "last_seen": "2026-03-11 19:12:17 UTC", "sightings": 1 }, { "indicator": "http://185.213.240.159/bins/pmpsl", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-11 19:12:15 UTC", "last_seen": "2026-03-11 19:12:15 UTC", "sightings": 1 }, { "indicator": "http://185.213.240.159/bins/parm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-11 19:12:15 UTC", "last_seen": "2026-03-11 19:12:15 UTC", "sightings": 1 }, { "indicator": "http://185.213.240.159/bins/pm68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-11 19:12:15 UTC", "last_seen": "2026-03-11 19:12:15 UTC", "sightings": 1 }, { "indicator": "http://185.213.240.159/bins/parm", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-11 19:12:15 UTC", "last_seen": "2026-03-11 19:12:15 UTC", "sightings": 1 }, { "indicator": "http://185.213.240.159/bins/psh4", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-11 19:12:15 UTC", "last_seen": "2026-03-11 19:12:15 UTC", "sightings": 1 }, { "indicator": "http://185.213.240.159/bins/pmips", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-11 19:12:15 UTC", "last_seen": "2026-03-11 19:12:15 UTC", "sightings": 1 }, { "indicator": "http://185.213.240.159/bins/parm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-11 19:12:13 UTC", "last_seen": "2026-03-11 19:12:13 UTC", "sightings": 1 }, { "indicator": "http://185.213.240.159/bins/pspc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-11 19:12:13 UTC", "last_seen": "2026-03-11 19:12:13 UTC", "sightings": 1 }, { "indicator": "https://newpoint.estrellis.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 19:09:07 UTC", "last_seen": "2026-03-11 19:09:07 UTC", "sightings": 1 }, { "indicator": "http://115.50.68.3:48865/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 19:03:13 UTC", "last_seen": "2026-03-11 19:03:13 UTC", "sightings": 1 }, { "indicator": "https://just-up.estrellis.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 18:59:04 UTC", "last_seen": "2026-03-11 18:59:04 UTC", "sightings": 1 }, { "indicator": "http://117.235.239.63:35959/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-11 18:58:19 UTC", "last_seen": "2026-03-11 18:58:19 UTC", "sightings": 1 }, { "indicator": "http://123.253.93.84:56263/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 18:52:17 UTC", "last_seen": "2026-03-11 18:52:17 UTC", "sightings": 1 }, { "indicator": "http://38.137.250.247:45452/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 18:49:15 UTC", "last_seen": "2026-03-11 18:49:15 UTC", "sightings": 1 }, { "indicator": "https://pureland3.estrellis.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 18:48:09 UTC", "last_seen": "2026-03-11 18:48:09 UTC", "sightings": 1 }, { "indicator": "http://182.129.200.166:59829/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-11 18:42:09 UTC", "last_seen": "2026-03-11 18:42:09 UTC", "sightings": 1 }, { "indicator": "https://wild-river.estrellis.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 18:42:06 UTC", "last_seen": "2026-03-11 18:42:06 UTC", "sightings": 1 }, { "indicator": "https://fastcloud.solariana.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 18:39:07 UTC", "last_seen": "2026-03-11 18:39:07 UTC", "sightings": 1 }, { "indicator": "http://158.94.211.222/files/2061374227/2Hl1isG.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-11 18:35:14 UTC", "last_seen": "2026-03-11 18:35:14 UTC", "sightings": 1 }, { "indicator": "http://123.253.93.84:56263/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 18:33:15 UTC", "last_seen": "2026-03-11 18:33:15 UTC", "sightings": 1 }, { "indicator": "http://117.235.239.63:35959/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-11 18:32:28 UTC", "last_seen": "2026-03-11 18:32:28 UTC", "sightings": 1 }, { "indicator": "http://117.199.235.44:42960/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-11 18:31:26 UTC", "last_seen": "2026-03-11 18:31:26 UTC", "sightings": 1 }, { "indicator": "https://clear-sky.solariana.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 18:31:07 UTC", "last_seen": "2026-03-11 18:31:07 UTC", "sightings": 1 }, { "indicator": "http://42.178.97.227:58644/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 18:28:20 UTC", "last_seen": "2026-03-11 18:28:20 UTC", "sightings": 1 }, { "indicator": "https://bright-9.solariana.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 18:28:05 UTC", "last_seen": "2026-03-11 18:28:05 UTC", "sightings": 1 }, { "indicator": "http://182.121.78.250:58002/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 18:25:19 UTC", "last_seen": "2026-03-11 18:25:19 UTC", "sightings": 1 }, { "indicator": "http://42.5.71.211:42420/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 18:22:19 UTC", "last_seen": "2026-03-11 18:22:19 UTC", "sightings": 1 }, { "indicator": "http://42.178.97.227:58644/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 18:19:23 UTC", "last_seen": "2026-03-11 18:19:23 UTC", "sightings": 1 }, { "indicator": "http://158.94.211.222/files/7903503838/PGy75Fu.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey", "WallStealer" ], "first_seen": "2026-03-11 18:19:07 UTC", "last_seen": "2026-03-11 18:19:07 UTC", "sightings": 1 }, { "indicator": "http://115.58.126.180:41725/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 18:18:18 UTC", "last_seen": "2026-03-11 18:18:18 UTC", "sightings": 1 }, { "indicator": "https://easygo.altovante.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 18:14:07 UTC", "last_seen": "2026-03-11 18:14:07 UTC", "sightings": 1 }, { "indicator": "http://182.129.200.166:59829/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-11 18:05:21 UTC", "last_seen": "2026-03-11 18:05:21 UTC", "sightings": 1 }, { "indicator": "http://115.55.225.143:45621/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 18:03:07 UTC", "last_seen": "2026-03-11 18:03:07 UTC", "sightings": 1 }, { "indicator": "https://top-line1.altovante.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 18:02:07 UTC", "last_seen": "2026-03-11 18:02:07 UTC", "sightings": 1 }, { "indicator": "https://skydream.altovante.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 17:57:06 UTC", "last_seen": "2026-03-11 17:57:06 UTC", "sightings": 1 }, { "indicator": "https://green-road.altovante.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 17:51:07 UTC", "last_seen": "2026-03-11 17:51:07 UTC", "sightings": 1 }, { "indicator": "http://182.121.78.250:58002/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 17:49:16 UTC", "last_seen": "2026-03-11 17:49:16 UTC", "sightings": 1 }, { "indicator": "http://115.55.241.179:49633/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 17:49:15 UTC", "last_seen": "2026-03-11 17:49:15 UTC", "sightings": 1 }, { "indicator": "http://119.117.74.10:47165/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 17:48:22 UTC", "last_seen": "2026-03-11 17:48:22 UTC", "sightings": 1 }, { "indicator": "https://openview.ventomaris.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 17:48:09 UTC", "last_seen": "2026-03-11 17:48:09 UTC", "sightings": 1 }, { "indicator": "https://sun-88.ventomaris.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 17:41:06 UTC", "last_seen": "2026-03-11 17:41:06 UTC", "sightings": 1 }, { "indicator": "https://quickpage.ventomaris.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 17:38:06 UTC", "last_seen": "2026-03-11 17:38:06 UTC", "sightings": 1 }, { "indicator": "https://blue-forest7.ventomaris.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 17:30:09 UTC", "last_seen": "2026-03-11 17:30:09 UTC", "sightings": 1 }, { "indicator": "http://27.215.181.108:42687/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 17:29:06 UTC", "last_seen": "2026-03-11 17:29:06 UTC", "sightings": 1 }, { "indicator": "http://117.198.198.162:60036/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 17:27:16 UTC", "last_seen": "2026-03-11 17:27:16 UTC", "sightings": 1 }, { "indicator": "http://189.165.253.208:4307/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-11 17:22:17 UTC", "last_seen": "2026-03-11 17:22:17 UTC", "sightings": 1 }, { "indicator": "http://27.215.181.108:42687/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 17:15:21 UTC", "last_seen": "2026-03-11 17:15:21 UTC", "sightings": 1 }, { "indicator": "http://115.55.241.179:49633/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 17:07:09 UTC", "last_seen": "2026-03-11 17:07:09 UTC", "sightings": 1 }, { "indicator": "http://222.139.127.137:60661/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 17:00:19 UTC", "last_seen": "2026-03-11 17:00:19 UTC", "sightings": 1 }, { "indicator": "http://189.165.253.208:4307/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-11 16:59:22 UTC", "last_seen": "2026-03-11 16:59:22 UTC", "sightings": 1 }, { "indicator": "http://182.118.189.54:36423/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 16:59:20 UTC", "last_seen": "2026-03-11 16:59:20 UTC", "sightings": 1 }, { "indicator": "http://123.11.74.12:45121/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 16:54:20 UTC", "last_seen": "2026-03-11 16:54:20 UTC", "sightings": 1 }, { "indicator": "http://119.117.74.10:47165/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 16:50:25 UTC", "last_seen": "2026-03-11 16:50:25 UTC", "sightings": 1 }, { "indicator": "http://182.118.189.54:36423/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 16:50:15 UTC", "last_seen": "2026-03-11 16:50:15 UTC", "sightings": 1 }, { "indicator": "http://39.90.134.85:43801/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 16:49:09 UTC", "last_seen": "2026-03-11 16:49:09 UTC", "sightings": 1 }, { "indicator": "http://101.109.242.120:58284/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-11 16:44:13 UTC", "last_seen": "2026-03-11 16:44:13 UTC", "sightings": 1 }, { "indicator": "https://mer-forgea.sightup.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 16:43:07 UTC", "last_seen": "2026-03-11 16:43:07 UTC", "sightings": 1 }, { "indicator": "https://refinewinter.sightup.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 16:39:08 UTC", "last_seen": "2026-03-11 16:39:08 UTC", "sightings": 1 }, { "indicator": "https://ultra-5tric.sightup.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 16:33:07 UTC", "last_seen": "2026-03-11 16:33:07 UTC", "sightings": 1 }, { "indicator": "http://221.15.23.108:58035/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 16:29:18 UTC", "last_seen": "2026-03-11 16:29:18 UTC", "sightings": 1 }, { "indicator": "http://182.121.237.52:49370/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 16:25:15 UTC", "last_seen": "2026-03-11 16:25:15 UTC", "sightings": 1 }, { "indicator": "http://110.36.27.244:43992/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 16:25:14 UTC", "last_seen": "2026-03-11 16:25:14 UTC", "sightings": 1 }, { "indicator": "http://101.109.242.120:58284/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-11 16:18:21 UTC", "last_seen": "2026-03-11 16:18:21 UTC", "sightings": 1 }, { "indicator": "http://175.174.90.217:54080/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 16:16:19 UTC", "last_seen": "2026-03-11 16:16:19 UTC", "sightings": 1 }, { "indicator": "http://221.1.157.199:51156/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 16:12:17 UTC", "last_seen": "2026-03-11 16:12:17 UTC", "sightings": 1 }, { "indicator": "http://182.122.216.220:37006/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 16:04:18 UTC", "last_seen": "2026-03-11 16:04:18 UTC", "sightings": 1 }, { "indicator": "http://115.58.126.180:41725/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 16:03:19 UTC", "last_seen": "2026-03-11 16:03:19 UTC", "sightings": 1 }, { "indicator": "http://125.43.145.179:49279/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 15:59:13 UTC", "last_seen": "2026-03-11 15:59:13 UTC", "sightings": 1 }, { "indicator": "http://110.37.3.227:57370/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 15:57:21 UTC", "last_seen": "2026-03-11 15:57:21 UTC", "sightings": 1 }, { "indicator": "https://ia601609.us.archive.org/5/items/msi-pro-with/MSI_PRO_with.png", "indicator_type": "url", "source": "URLhaus", "tags": [ "xworm" ], "first_seen": "2026-03-11 15:54:09 UTC", "last_seen": "2026-03-11 15:54:09 UTC", "sightings": 1 }, { "indicator": "https://bafybeibwz6lzwo6u5gkhp3ydl4te3hl3plfkypox6mnejssqwfrpdsmqoy.ipfs.dweb.link/?filename=img_063210.png", "indicator_type": "url", "source": "URLhaus", "tags": [ "xworm" ], "first_seen": "2026-03-11 15:54:07 UTC", "last_seen": "2026-03-11 15:54:07 UTC", "sightings": 1 }, { "indicator": "http://125.43.145.179:49279/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 15:53:19 UTC", "last_seen": "2026-03-11 15:53:19 UTC", "sightings": 1 }, { "indicator": "http://110.36.27.244:43992/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 15:53:19 UTC", "last_seen": "2026-03-11 15:53:19 UTC", "sightings": 1 }, { "indicator": "https://metr1-hinge.skyip.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 15:50:13 UTC", "last_seen": "2026-03-11 15:50:13 UTC", "sightings": 1 }, { "indicator": "http://221.1.157.199:51156/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 15:45:14 UTC", "last_seen": "2026-03-11 15:45:14 UTC", "sightings": 1 }, { "indicator": "https://uxcas7x8.skyip.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 15:45:07 UTC", "last_seen": "2026-03-11 15:45:07 UTC", "sightings": 1 }, { "indicator": "http://38.52.142.194:34491/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-11 15:44:16 UTC", "last_seen": "2026-03-11 15:44:16 UTC", "sightings": 1 }, { "indicator": "http://123.10.141.234:36273/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 15:43:20 UTC", "last_seen": "2026-03-11 15:43:20 UTC", "sightings": 1 }, { "indicator": "https://thicketglobal.skyip.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 15:41:06 UTC", "last_seen": "2026-03-11 15:41:06 UTC", "sightings": 1 }, { "indicator": "http://115.58.160.77:42767/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 15:39:18 UTC", "last_seen": "2026-03-11 15:39:18 UTC", "sightings": 1 }, { "indicator": "http://222.139.127.137:60661/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 15:34:28 UTC", "last_seen": "2026-03-11 15:34:28 UTC", "sightings": 1 }, { "indicator": "http://110.37.3.227:57370/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 15:30:23 UTC", "last_seen": "2026-03-11 15:30:23 UTC", "sightings": 1 }, { "indicator": "https://napc.skyip.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 15:30:09 UTC", "last_seen": "2026-03-11 15:30:09 UTC", "sightings": 1 }, { "indicator": "http://38.52.142.194:34491/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-11 15:19:21 UTC", "last_seen": "2026-03-11 15:19:21 UTC", "sightings": 1 }, { "indicator": "http://110.37.67.68:58544/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 15:18:25 UTC", "last_seen": "2026-03-11 15:18:25 UTC", "sightings": 1 }, { "indicator": "http://59.97.255.74:60617/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 15:15:22 UTC", "last_seen": "2026-03-11 15:15:22 UTC", "sightings": 1 }, { "indicator": "http://222.127.226.53:46211/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-11 15:12:16 UTC", "last_seen": "2026-03-11 15:12:16 UTC", "sightings": 1 }, { "indicator": "http://112.239.98.60:54736/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 15:10:20 UTC", "last_seen": "2026-03-11 15:10:20 UTC", "sightings": 1 }, { "indicator": "http://27.193.123.40:46623/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 15:05:20 UTC", "last_seen": "2026-03-11 15:05:20 UTC", "sightings": 1 }, { "indicator": "http://59.95.88.97:60686/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 14:59:13 UTC", "last_seen": "2026-03-11 14:59:13 UTC", "sightings": 1 }, { "indicator": "http://182.116.113.211:34856/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 14:56:23 UTC", "last_seen": "2026-03-11 14:56:23 UTC", "sightings": 1 }, { "indicator": "http://59.97.255.74:60617/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 14:49:22 UTC", "last_seen": "2026-03-11 14:49:22 UTC", "sightings": 1 }, { "indicator": "http://112.239.98.60:54736/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 14:42:43 UTC", "last_seen": "2026-03-11 14:42:43 UTC", "sightings": 1 }, { "indicator": "http://115.58.160.77:42767/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 14:42:23 UTC", "last_seen": "2026-03-11 14:42:23 UTC", "sightings": 1 }, { "indicator": "http://27.193.123.40:46623/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 14:38:23 UTC", "last_seen": "2026-03-11 14:38:23 UTC", "sightings": 1 }, { "indicator": "http://36.70.100.243:41775/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-11 14:34:23 UTC", "last_seen": "2026-03-11 14:34:23 UTC", "sightings": 1 }, { "indicator": "http://136.60.32.162:46682/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 14:32:21 UTC", "last_seen": "2026-03-11 14:32:21 UTC", "sightings": 1 }, { "indicator": "http://36.64.184.26:49753/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-11 14:28:10 UTC", "last_seen": "2026-03-11 14:28:10 UTC", "sightings": 1 }, { "indicator": "http://117.248.27.146:60001/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 14:27:20 UTC", "last_seen": "2026-03-11 14:27:20 UTC", "sightings": 1 }, { "indicator": "http://45.141.26.73/bins/sora.x86_64", "indicator_type": "url", "source": "URLhaus", "tags": [ "64-bit", "elf", "mirai", "x86-64" ], "first_seen": "2026-03-11 14:15:24 UTC", "last_seen": "2026-03-11 14:15:24 UTC", "sightings": 1 }, { "indicator": "http://136.60.32.162:46682/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 14:13:20 UTC", "last_seen": "2026-03-11 14:13:20 UTC", "sightings": 1 }, { "indicator": "http://125.43.83.199:57315/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 14:12:19 UTC", "last_seen": "2026-03-11 14:12:19 UTC", "sightings": 1 }, { "indicator": "http://119.185.242.58:52332/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 14:07:17 UTC", "last_seen": "2026-03-11 14:07:17 UTC", "sightings": 1 }, { "indicator": "http://36.70.100.243:41775/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-11 14:06:19 UTC", "last_seen": "2026-03-11 14:06:19 UTC", "sightings": 1 }, { "indicator": "http://110.37.73.69:53120/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 14:06:14 UTC", "last_seen": "2026-03-11 14:06:14 UTC", "sightings": 1 }, { "indicator": "http://117.248.27.146:60001/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 14:00:17 UTC", "last_seen": "2026-03-11 14:00:17 UTC", "sightings": 1 }, { "indicator": "http://115.53.192.187:55661/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 14:00:10 UTC", "last_seen": "2026-03-11 14:00:10 UTC", "sightings": 1 }, { "indicator": "http://59.183.116.0:51129/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 13:52:19 UTC", "last_seen": "2026-03-11 13:52:19 UTC", "sightings": 1 }, { "indicator": "http://59.183.116.0:51129/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 13:50:33 UTC", "last_seen": "2026-03-11 13:50:33 UTC", "sightings": 1 }, { "indicator": "http://125.43.83.199:57315/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 13:45:11 UTC", "last_seen": "2026-03-11 13:45:11 UTC", "sightings": 1 }, { "indicator": "http://110.38.221.182:38139/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 13:38:16 UTC", "last_seen": "2026-03-11 13:38:16 UTC", "sightings": 1 }, { "indicator": "http://110.37.73.69:53120/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 13:36:10 UTC", "last_seen": "2026-03-11 13:36:10 UTC", "sightings": 1 }, { "indicator": "http://115.53.192.187:55661/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 13:30:12 UTC", "last_seen": "2026-03-11 13:30:12 UTC", "sightings": 1 }, { "indicator": "http://119.185.242.58:52332/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 13:29:15 UTC", "last_seen": "2026-03-11 13:29:15 UTC", "sightings": 1 }, { "indicator": "http://110.38.221.182:38139/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 13:29:12 UTC", "last_seen": "2026-03-11 13:29:12 UTC", "sightings": 1 }, { "indicator": "http://123.11.161.92:55994/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 13:29:12 UTC", "last_seen": "2026-03-11 13:29:12 UTC", "sightings": 1 }, { "indicator": "http://120.238.189.72:40002/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-11 13:26:21 UTC", "last_seen": "2026-03-11 13:26:21 UTC", "sightings": 1 }, { "indicator": "http://42.227.247.55:44314/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 13:16:16 UTC", "last_seen": "2026-03-11 13:16:16 UTC", "sightings": 1 }, { "indicator": "http://117.245.135.237:60313/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 13:14:16 UTC", "last_seen": "2026-03-11 13:14:16 UTC", "sightings": 1 }, { "indicator": "http://123.11.161.92:55994/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 13:07:15 UTC", "last_seen": "2026-03-11 13:07:15 UTC", "sightings": 1 }, { "indicator": "http://120.238.189.72:40002/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-11 13:05:20 UTC", "last_seen": "2026-03-11 13:05:20 UTC", "sightings": 1 }, { "indicator": "http://42.230.40.4:56852/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 13:05:16 UTC", "last_seen": "2026-03-11 13:05:16 UTC", "sightings": 1 }, { "indicator": "http://125.42.40.11:38162/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 13:04:18 UTC", "last_seen": "2026-03-11 13:04:18 UTC", "sightings": 1 }, { "indicator": "http://59.177.99.83:37055/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 12:59:19 UTC", "last_seen": "2026-03-11 12:59:19 UTC", "sightings": 1 }, { "indicator": "http://119.114.153.121:52876/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 12:56:19 UTC", "last_seen": "2026-03-11 12:56:19 UTC", "sightings": 1 }, { "indicator": "http://115.56.151.37:44949/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 12:44:07 UTC", "last_seen": "2026-03-11 12:44:07 UTC", "sightings": 1 }, { "indicator": "http://125.42.40.11:38162/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 12:33:19 UTC", "last_seen": "2026-03-11 12:33:19 UTC", "sightings": 1 }, { "indicator": "http://61.53.93.86:59619/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 12:28:11 UTC", "last_seen": "2026-03-11 12:28:11 UTC", "sightings": 1 }, { "indicator": "http://119.114.153.121:52876/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 12:27:16 UTC", "last_seen": "2026-03-11 12:27:16 UTC", "sightings": 1 }, { "indicator": "http://112.233.244.7:38393/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-11 12:24:21 UTC", "last_seen": "2026-03-11 12:24:21 UTC", "sightings": 1 }, { "indicator": "http://77.90.61.79/dick.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai", "sh" ], "first_seen": "2026-03-11 12:24:20 UTC", "last_seen": "2026-03-11 12:24:20 UTC", "sightings": 1 }, { "indicator": "http://61.53.93.86:59619/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 12:08:16 UTC", "last_seen": "2026-03-11 12:08:16 UTC", "sightings": 1 }, { "indicator": "http://5.134.254.3:39512/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 12:05:31 UTC", "last_seen": "2026-03-11 12:05:31 UTC", "sightings": 1 }, { "indicator": "http://223.151.74.197:58525/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-11 12:01:18 UTC", "last_seen": "2026-03-11 12:01:18 UTC", "sightings": 1 }, { "indicator": "http://219.71.131.225:34950/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-11 11:58:19 UTC", "last_seen": "2026-03-11 11:58:19 UTC", "sightings": 1 }, { "indicator": "https://fjnghv.fastlog.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 11:57:08 UTC", "last_seen": "2026-03-11 11:57:08 UTC", "sightings": 1 }, { "indicator": "http://117.26.227.156:52208/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-11 11:54:28 UTC", "last_seen": "2026-03-11 11:54:28 UTC", "sightings": 1 }, { "indicator": "http://42.178.27.83:51026/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 11:54:20 UTC", "last_seen": "2026-03-11 11:54:20 UTC", "sightings": 1 }, { "indicator": "https://gate-gri.fastlog.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 11:53:07 UTC", "last_seen": "2026-03-11 11:53:07 UTC", "sightings": 1 }, { "indicator": "http://110.37.86.252:40251/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 11:43:32 UTC", "last_seen": "2026-03-11 11:43:32 UTC", "sightings": 1 }, { "indicator": "http://117.205.80.7:60609/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 11:38:21 UTC", "last_seen": "2026-03-11 11:38:21 UTC", "sightings": 1 }, { "indicator": "https://woupp.com/curl/62724e7a17370145626f76d82d7da73c6925fd1aaeca39d7414f057e92001aad", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClickFix", "macOS" ], "first_seen": "2026-03-11 11:38:08 UTC", "last_seen": "2026-03-11 11:38:08 UTC", "sightings": 1 }, { "indicator": "http://110.36.29.195:34612/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 11:37:15 UTC", "last_seen": "2026-03-11 11:37:15 UTC", "sightings": 1 }, { "indicator": "http://158.94.211.222/files/7453936223/KAQ8PQ5.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543", "Vidar" ], "first_seen": "2026-03-11 11:27:09 UTC", "last_seen": "2026-03-11 11:27:09 UTC", "sightings": 1 }, { "indicator": "http://110.36.29.195:34612/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 11:23:21 UTC", "last_seen": "2026-03-11 11:23:21 UTC", "sightings": 1 }, { "indicator": "http://110.37.86.252:40251/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 11:20:22 UTC", "last_seen": "2026-03-11 11:20:22 UTC", "sightings": 1 }, { "indicator": "http://117.205.80.7:60609/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 11:10:22 UTC", "last_seen": "2026-03-11 11:10:22 UTC", "sightings": 1 }, { "indicator": "http://223.151.74.197:58525/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-11 11:05:21 UTC", "last_seen": "2026-03-11 11:05:21 UTC", "sightings": 1 }, { "indicator": "https://iondawn.checksum.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 10:58:08 UTC", "last_seen": "2026-03-11 10:58:08 UTC", "sightings": 1 }, { "indicator": "http://110.37.103.213:47403/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-11 10:57:17 UTC", "last_seen": "2026-03-11 10:57:17 UTC", "sightings": 1 }, { "indicator": "https://n4rro5-panel.checksum.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 10:43:07 UTC", "last_seen": "2026-03-11 10:43:07 UTC", "sightings": 1 }, { "indicator": "https://civilsandbo.whitelist.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 10:35:09 UTC", "last_seen": "2026-03-11 10:35:09 UTC", "sightings": 1 }, { "indicator": "http://110.37.103.213:47403/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-11 10:33:11 UTC", "last_seen": "2026-03-11 10:33:11 UTC", "sightings": 1 }, { "indicator": "https://root3-layer.whitelist.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 10:32:07 UTC", "last_seen": "2026-03-11 10:32:07 UTC", "sightings": 1 }, { "indicator": "http://61.137.195.51:33852/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 10:23:19 UTC", "last_seen": "2026-03-11 10:23:19 UTC", "sightings": 1 }, { "indicator": "http://115.50.103.74:43539/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 10:22:14 UTC", "last_seen": "2026-03-11 10:22:14 UTC", "sightings": 1 }, { "indicator": "https://ukixhx.whitelist.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 10:21:09 UTC", "last_seen": "2026-03-11 10:21:09 UTC", "sightings": 1 }, { "indicator": "https://zrvkmhps.bestlog.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 10:16:09 UTC", "last_seen": "2026-03-11 10:16:09 UTC", "sightings": 1 }, { "indicator": "https://ch3ck-spark.bestlog.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 10:07:10 UTC", "last_seen": "2026-03-11 10:07:10 UTC", "sightings": 1 }, { "indicator": "http://115.50.103.74:43539/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 10:01:20 UTC", "last_seen": "2026-03-11 10:01:20 UTC", "sightings": 1 }, { "indicator": "https://uth9.bestlog.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 09:55:07 UTC", "last_seen": "2026-03-11 09:55:07 UTC", "sightings": 1 }, { "indicator": "https://gran-pra.bestlog.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 09:51:08 UTC", "last_seen": "2026-03-11 09:51:08 UTC", "sightings": 1 }, { "indicator": "https://ri4w.backlog.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 09:47:07 UTC", "last_seen": "2026-03-11 09:47:07 UTC", "sightings": 1 }, { "indicator": "https://parsegri.backlog.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 09:36:07 UTC", "last_seen": "2026-03-11 09:36:07 UTC", "sightings": 1 }, { "indicator": "http://42.232.234.79:50444/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 09:34:17 UTC", "last_seen": "2026-03-11 09:34:17 UTC", "sightings": 1 }, { "indicator": "https://rewardhunt.xyz/32tyughwjkem/ENCRYPT.Ps1", "indicator_type": "url", "source": "URLhaus", "tags": [ "ascii", "opendir", "powershell", "ps1" ], "first_seen": "2026-03-11 09:31:08 UTC", "last_seen": "2026-03-11 09:31:08 UTC", "sightings": 1 }, { "indicator": "https://hw94h.backlog.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 09:31:07 UTC", "last_seen": "2026-03-11 09:31:07 UTC", "sightings": 1 }, { "indicator": "http://219.155.233.238:35774/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 09:30:22 UTC", "last_seen": "2026-03-11 09:30:22 UTC", "sightings": 1 }, { "indicator": "https://archive.org/download/optimized_msi_20260309/optimized_MSI.png", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-11 09:30:10 UTC", "last_seen": "2026-03-11 09:30:10 UTC", "sightings": 1 }, { "indicator": "https://9rfio.backlog.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 09:26:08 UTC", "last_seen": "2026-03-11 09:26:08 UTC", "sightings": 1 }, { "indicator": "http://photo-id5631894.com/", "indicator_type": "url", "source": "URLhaus", "tags": [ "Stealc", "ua-ps" ], "first_seen": "2026-03-11 09:25:08 UTC", "last_seen": "2026-03-11 09:25:08 UTC", "sightings": 1 }, { "indicator": "https://blue-oceans.net/ENCRYTPT.Ps1", "indicator_type": "url", "source": "URLhaus", "tags": [ "ascii", "powershell", "ps1", "SnakeKeylogger", "VIPKeylogger" ], "first_seen": "2026-03-11 09:21:07 UTC", "last_seen": "2026-03-11 09:21:07 UTC", "sightings": 1 }, { "indicator": "https://casadoserralheirosaocarlos.com.br/ENCRYPTSS.Ps1", "indicator_type": "url", "source": "URLhaus", "tags": [ "AgentTesla", "ascii", "powershell", "ps1" ], "first_seen": "2026-03-11 09:20:08 UTC", "last_seen": "2026-03-11 09:20:08 UTC", "sightings": 1 }, { "indicator": "https://sixmexicos.com/ENCRYPT.Ps1", "indicator_type": "url", "source": "URLhaus", "tags": [ "ascii", "PhantomStealer", "powershell", "ps1" ], "first_seen": "2026-03-11 09:19:10 UTC", "last_seen": "2026-03-11 09:19:10 UTC", "sightings": 1 }, { "indicator": "https://flowpassive.logcheck.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 09:19:06 UTC", "last_seen": "2026-03-11 09:19:06 UTC", "sightings": 1 }, { "indicator": "http://115.55.53.249:59468/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 09:15:18 UTC", "last_seen": "2026-03-11 09:15:18 UTC", "sightings": 1 }, { "indicator": "http://59.88.234.157:53515/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 09:12:20 UTC", "last_seen": "2026-03-11 09:12:20 UTC", "sightings": 1 }, { "indicator": "https://iqkd.logcheck.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 09:12:07 UTC", "last_seen": "2026-03-11 09:12:07 UTC", "sightings": 1 }, { "indicator": "https://neo-tru3.logcheck.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 09:09:07 UTC", "last_seen": "2026-03-11 09:09:07 UTC", "sightings": 1 }, { "indicator": "http://123.5.146.100:60996/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 09:08:22 UTC", "last_seen": "2026-03-11 09:08:22 UTC", "sightings": 1 }, { "indicator": "http://42.179.121.16:43929/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 09:00:37 UTC", "last_seen": "2026-03-11 09:00:37 UTC", "sightings": 1 }, { "indicator": "http://110.36.2.23:59166/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 09:00:23 UTC", "last_seen": "2026-03-11 09:00:23 UTC", "sightings": 1 }, { "indicator": "http://110.36.30.247:43740/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 09:00:23 UTC", "last_seen": "2026-03-11 09:00:23 UTC", "sightings": 1 }, { "indicator": "https://greenfields-world.cc/dev/jeFopmg.txt", "indicator_type": "url", "source": "URLhaus", "tags": [ "ascii", "Encoded", "PhantomStealer", "rev-base64-loader" ], "first_seen": "2026-03-11 09:00:16 UTC", "last_seen": "2026-03-11 09:00:16 UTC", "sightings": 1 }, { "indicator": "https://file-eu-gra-1.gofile.io/download/direct/793ff904-1286-4d9d-b4be-4c6c46e867f0/231_20260311.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "ValleyRAT" ], "first_seen": "2026-03-11 09:00:14 UTC", "last_seen": "2026-03-11 09:00:14 UTC", "sightings": 1 }, { "indicator": "http://109.236.48.121/ksnapd0", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-11 09:00:12 UTC", "last_seen": "2026-03-11 09:00:12 UTC", "sightings": 1 }, { "indicator": "https://rkxv.keysum.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 09:00:12 UTC", "last_seen": "2026-03-11 09:00:12 UTC", "sightings": 1 }, { "indicator": "https://compimento.ba/asyncdecenimg_050306.png", "indicator_type": "url", "source": "URLhaus", "tags": [ "AsyncRAT", "rat" ], "first_seen": "2026-03-11 09:00:11 UTC", "last_seen": "2026-03-11 09:00:11 UTC", "sightings": 1 }, { "indicator": "https://modern8-signal.logcheck.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 09:00:11 UTC", "last_seen": "2026-03-11 09:00:11 UTC", "sightings": 1 }, { "indicator": "http://188.137.224.103/favicon.ico", "indicator_type": "url", "source": "URLhaus", "tags": [ "exe", "Vidar" ], "first_seen": "2026-03-11 09:00:11 UTC", "last_seen": "2026-03-11 09:00:11 UTC", "sightings": 1 }, { "indicator": "https://genefrost.keysum.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 09:00:09 UTC", "last_seen": "2026-03-11 09:00:09 UTC", "sightings": 1 }, { "indicator": "http://wire2spell.com/1.rar", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-11 08:44:19 UTC", "last_seen": "2026-03-11 08:44:19 UTC", "sightings": 1 }, { "indicator": "https://spjx-1k1.pages.dev/download/android%E7%89%88.zip", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-11 08:44:19 UTC", "last_seen": "2026-03-11 08:44:19 UTC", "sightings": 1 }, { "indicator": "http://109.236.48.121/kswapd1", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-11 08:44:18 UTC", "last_seen": "2026-03-11 08:44:18 UTC", "sightings": 1 }, { "indicator": "http://109.236.48.121/vredisd0", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-11 08:44:18 UTC", "last_seen": "2026-03-11 08:44:18 UTC", "sightings": 1 }, { "indicator": "http://109.236.48.121/ethd0", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-11 08:44:17 UTC", "last_seen": "2026-03-11 08:44:17 UTC", "sightings": 1 }, { "indicator": "http://109.236.48.121/kvmirqd", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-11 08:44:17 UTC", "last_seen": "2026-03-11 08:44:17 UTC", "sightings": 1 }, { "indicator": "https://guillaumerobin.com/sp-ankki-pankki/spankki.zip", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-11 08:44:16 UTC", "last_seen": "2026-03-11 08:44:16 UTC", "sightings": 1 }, { "indicator": "http://109.236.48.121/kpsmoused0", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-11 08:44:16 UTC", "last_seen": "2026-03-11 08:44:16 UTC", "sightings": 1 }, { "indicator": "http://109.236.48.121/devfreqd0", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-11 08:44:16 UTC", "last_seen": "2026-03-11 08:44:16 UTC", "sightings": 1 }, { "indicator": "http://109.236.48.121/ttmswapd", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-11 08:44:16 UTC", "last_seen": "2026-03-11 08:44:16 UTC", "sightings": 1 }, { "indicator": "http://109.236.48.121/biosd0", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-11 08:44:16 UTC", "last_seen": "2026-03-11 08:44:16 UTC", "sightings": 1 }, { "indicator": "http://109.236.48.121/deferwqd", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-11 08:44:16 UTC", "last_seen": "2026-03-11 08:44:16 UTC", "sightings": 1 }, { "indicator": "http://109.236.48.121/mdsync1", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-11 08:44:16 UTC", "last_seen": "2026-03-11 08:44:16 UTC", "sightings": 1 }, { "indicator": "http://109.236.48.121/kintegrity0", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-11 08:44:16 UTC", "last_seen": "2026-03-11 08:44:16 UTC", "sightings": 1 }, { "indicator": "http://109.236.48.121/kworkerd0", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-11 08:44:16 UTC", "last_seen": "2026-03-11 08:44:16 UTC", "sightings": 1 }, { "indicator": "https://pole-rt-inger.com/WORDPRESS%202026.zip", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-11 08:44:16 UTC", "last_seen": "2026-03-11 08:44:16 UTC", "sightings": 1 }, { "indicator": "http://109.236.48.121/ip6addrd", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-11 08:44:16 UTC", "last_seen": "2026-03-11 08:44:16 UTC", "sightings": 1 }, { "indicator": "http://6.ddns.me/789.ps1", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-11 08:44:16 UTC", "last_seen": "2026-03-11 08:44:16 UTC", "sightings": 1 }, { "indicator": "https://cad.659t.cn/static/setup/autocad_v1.4.exe", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-11 08:44:15 UTC", "last_seen": "2026-03-11 08:44:15 UTC", "sightings": 1 }, { "indicator": "https://guillaumerobin.com/spankki-suomi/spankki.zip", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-11 08:44:15 UTC", "last_seen": "2026-03-11 08:44:15 UTC", "sightings": 1 }, { "indicator": "https://guillaumerobin.com/smobillispankki/spankki.zip", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-11 08:44:15 UTC", "last_seen": "2026-03-11 08:44:15 UTC", "sightings": 1 }, { "indicator": "https://guillaumerobin.com/spankki-zi/spankki.zip", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-11 08:44:15 UTC", "last_seen": "2026-03-11 08:44:15 UTC", "sightings": 1 }, { "indicator": "https://guillaumerobin.com/pankki2026/spankki.zip", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-11 08:44:15 UTC", "last_seen": "2026-03-11 08:44:15 UTC", "sightings": 1 }, { "indicator": "https://guillaumerobin.com/2026-pankki/spankki.zip", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-11 08:44:15 UTC", "last_seen": "2026-03-11 08:44:15 UTC", "sightings": 1 }, { "indicator": "http://117.209.23.34:43336/Mozi.m", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-11 08:44:14 UTC", "last_seen": "2026-03-11 08:44:14 UTC", "sightings": 1 }, { "indicator": "http://123.5.146.100:60996/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 08:41:24 UTC", "last_seen": "2026-03-11 08:41:24 UTC", "sightings": 1 }, { "indicator": "http://110.37.3.239:33770/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 08:41:15 UTC", "last_seen": "2026-03-11 08:41:15 UTC", "sightings": 1 }, { "indicator": "https://tr4c-craft.keysum.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 08:40:07 UTC", "last_seen": "2026-03-11 08:40:07 UTC", "sightings": 1 }, { "indicator": "https://8uasm.keysum.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 08:35:10 UTC", "last_seen": "2026-03-11 08:35:10 UTC", "sightings": 1 }, { "indicator": "http://valfanto.com/otigfght/mprgIoi.txt", "indicator_type": "url", "source": "URLhaus", "tags": [ "ascii", "Encoded", "opendir", "rev-base64-loader" ], "first_seen": "2026-03-11 08:33:08 UTC", "last_seen": "2026-03-11 08:33:08 UTC", "sightings": 1 }, { "indicator": "http://38.240.55.52/WE/QAQQQQQ.Ps1", "indicator_type": "url", "source": "URLhaus", "tags": [ "ascii", "opendir", "powershell", "ps1" ], "first_seen": "2026-03-11 08:32:18 UTC", "last_seen": "2026-03-11 08:32:18 UTC", "sightings": 1 }, { "indicator": "http://38.240.55.52/WE/SECURED.ps1", "indicator_type": "url", "source": "URLhaus", "tags": [ "ascii", "opendir", "powershell", "ps1" ], "first_seen": "2026-03-11 08:32:14 UTC", "last_seen": "2026-03-11 08:32:14 UTC", "sightings": 1 }, { "indicator": "http://38.240.55.52/WE/goodies.Ps1", "indicator_type": "url", "source": "URLhaus", "tags": [ "ascii", "opendir", "powershell", "ps1" ], "first_seen": "2026-03-11 08:32:12 UTC", "last_seen": "2026-03-11 08:32:12 UTC", "sightings": 1 }, { "indicator": "http://38.240.55.52/WE/iye.ps1", "indicator_type": "url", "source": "URLhaus", "tags": [ "ascii", "opendir", "powershell", "ps1" ], "first_seen": "2026-03-11 08:32:10 UTC", "last_seen": "2026-03-11 08:32:10 UTC", "sightings": 1 }, { "indicator": "http://38.240.55.52/WE/SECURE.Ps1", "indicator_type": "url", "source": "URLhaus", "tags": [ "ascii", "opendir", "powershell", "ps1" ], "first_seen": "2026-03-11 08:32:10 UTC", "last_seen": "2026-03-11 08:32:10 UTC", "sightings": 1 }, { "indicator": "http://38.240.55.52/WE/AIRR.ps1", "indicator_type": "url", "source": "URLhaus", "tags": [ "ascii", "opendir", "powershell", "ps1" ], "first_seen": "2026-03-11 08:32:09 UTC", "last_seen": "2026-03-11 08:32:09 UTC", "sightings": 1 }, { "indicator": "http://38.240.55.52/WE/CCLASS.Ps1", "indicator_type": "url", "source": "URLhaus", "tags": [ "ascii", "opendir", "powershell", "ps1" ], "first_seen": "2026-03-11 08:32:08 UTC", "last_seen": "2026-03-11 08:32:08 UTC", "sightings": 1 }, { "indicator": "http://38.240.55.52/WE/ENCRYPT.Ps1", "indicator_type": "url", "source": "URLhaus", "tags": [ "ascii", "opendir", "powershell", "ps1" ], "first_seen": "2026-03-11 08:32:08 UTC", "last_seen": "2026-03-11 08:32:08 UTC", "sightings": 1 }, { "indicator": "http://38.240.55.52/WE/nightclass.ps1", "indicator_type": "url", "source": "URLhaus", "tags": [ "ascii", "opendir", "powershell", "ps1" ], "first_seen": "2026-03-11 08:32:08 UTC", "last_seen": "2026-03-11 08:32:08 UTC", "sightings": 1 }, { "indicator": "http://38.240.55.52/WE/bin.ps1", "indicator_type": "url", "source": "URLhaus", "tags": [ "ascii", "opendir", "powershell", "ps1" ], "first_seen": "2026-03-11 08:32:08 UTC", "last_seen": "2026-03-11 08:32:08 UTC", "sightings": 1 }, { "indicator": "http://38.240.55.52/WE/airgood.Ps1", "indicator_type": "url", "source": "URLhaus", "tags": [ "AgentTesla", "ascii", "opendir", "powershell", "ps1" ], "first_seen": "2026-03-11 08:30:10 UTC", "last_seen": "2026-03-11 08:30:10 UTC", "sightings": 1 }, { "indicator": "https://5wif5-leaf.testload.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 08:29:07 UTC", "last_seen": "2026-03-11 08:29:07 UTC", "sightings": 1 }, { "indicator": "http://182.112.176.226:49056/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 08:28:23 UTC", "last_seen": "2026-03-11 08:28:23 UTC", "sightings": 1 }, { "indicator": "https://crat-mas.testload.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 08:23:08 UTC", "last_seen": "2026-03-11 08:23:08 UTC", "sightings": 1 }, { "indicator": "http://192.210.186.208/web/ENCRYPT1.Ps1", "indicator_type": "url", "source": "URLhaus", "tags": [ "ascii", "opendir", "powershell", "ps1" ], "first_seen": "2026-03-11 08:23:07 UTC", "last_seen": "2026-03-11 08:23:07 UTC", "sightings": 1 }, { "indicator": "http://192.210.186.208/web/ENCRYPT.Ps1", "indicator_type": "url", "source": "URLhaus", "tags": [ "AgentTesla", "ascii", "opendir", "powershell", "ps1" ], "first_seen": "2026-03-11 08:22:08 UTC", "last_seen": "2026-03-11 08:22:08 UTC", "sightings": 1 }, { "indicator": "https://jvrkh.testload.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 08:14:08 UTC", "last_seen": "2026-03-11 08:14:08 UTC", "sightings": 1 }, { "indicator": "http://115.53.221.126:55572/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 08:12:22 UTC", "last_seen": "2026-03-11 08:12:22 UTC", "sightings": 1 }, { "indicator": "http://110.36.2.23:59166/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 08:12:22 UTC", "last_seen": "2026-03-11 08:12:22 UTC", "sightings": 1 }, { "indicator": "http://222.138.149.150:45551/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 08:11:25 UTC", "last_seen": "2026-03-11 08:11:25 UTC", "sightings": 1 }, { "indicator": "https://audiosolar.testload.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 08:07:09 UTC", "last_seen": "2026-03-11 08:07:09 UTC", "sightings": 1 }, { "indicator": "http://96.44.159.218/220/seethebesttimeforeverythingtolearn.js", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-11 08:07:06 UTC", "last_seen": "2026-03-11 08:07:06 UTC", "sightings": 1 }, { "indicator": "http://112.233.244.7:38393/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-11 08:06:48 UTC", "last_seen": "2026-03-11 08:06:48 UTC", "sightings": 1 }, { "indicator": "http://103.174.242.57:37281/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 08:01:25 UTC", "last_seen": "2026-03-11 08:01:25 UTC", "sightings": 1 }, { "indicator": "http://194.156.102.210/bins/bins.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "ascii", "bash", "sh", "ua-wget" ], "first_seen": "2026-03-11 07:58:26 UTC", "last_seen": "2026-03-11 07:58:26 UTC", "sightings": 1 }, { "indicator": "http://192.109.200.186/huhu/titanjr.", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-11 07:58:26 UTC", "last_seen": "2026-03-11 07:58:26 UTC", "sightings": 1 }, { "indicator": "http://105.186.239.203:57981/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-11 07:58:14 UTC", "last_seen": "2026-03-11 07:58:14 UTC", "sightings": 1 }, { "indicator": "http://45.225.187.6:81/hiddenbin/dvr1.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "ascii", "bash", "sh", "ua-wget" ], "first_seen": "2026-03-11 07:58:13 UTC", "last_seen": "2026-03-11 07:58:13 UTC", "sightings": 1 }, { "indicator": "http://176.65.148.52/bins/mipsle", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-11 07:58:12 UTC", "last_seen": "2026-03-11 07:58:12 UTC", "sightings": 1 }, { "indicator": "http://2.192.102.162:81/bins/bins.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "ascii", "bash", "sh", "ua-wget" ], "first_seen": "2026-03-11 07:58:12 UTC", "last_seen": "2026-03-11 07:58:12 UTC", "sightings": 1 }, { "indicator": "http://110.36.14.229:33429/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 07:55:16 UTC", "last_seen": "2026-03-11 07:55:16 UTC", "sightings": 1 }, { "indicator": "https://crestrai.backtest.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 07:54:06 UTC", "last_seen": "2026-03-11 07:54:06 UTC", "sightings": 1 }, { "indicator": "http://222.138.149.150:45551/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 07:51:18 UTC", "last_seen": "2026-03-11 07:51:18 UTC", "sightings": 1 }, { "indicator": "https://inv0ic-line.backtest.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 07:44:06 UTC", "last_seen": "2026-03-11 07:44:06 UTC", "sightings": 1 }, { "indicator": "http://221.15.212.72:52676/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 07:42:08 UTC", "last_seen": "2026-03-11 07:42:08 UTC", "sightings": 1 }, { "indicator": "http://182.112.176.226:49056/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 07:41:17 UTC", "last_seen": "2026-03-11 07:41:17 UTC", "sightings": 1 }, { "indicator": "http://105.186.239.203:57981/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-11 07:40:20 UTC", "last_seen": "2026-03-11 07:40:20 UTC", "sightings": 1 }, { "indicator": "https://lumvenos.backtest.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 07:40:08 UTC", "last_seen": "2026-03-11 07:40:08 UTC", "sightings": 1 }, { "indicator": "http://103.174.242.57:37281/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 07:32:10 UTC", "last_seen": "2026-03-11 07:32:10 UTC", "sightings": 1 }, { "indicator": "https://bridg3-scope.backtest.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 07:31:06 UTC", "last_seen": "2026-03-11 07:31:06 UTC", "sightings": 1 }, { "indicator": "http://110.36.14.229:33429/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 07:26:08 UTC", "last_seen": "2026-03-11 07:26:08 UTC", "sightings": 1 }, { "indicator": "https://alt-un1oad.lockoak.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 07:20:08 UTC", "last_seen": "2026-03-11 07:20:08 UTC", "sightings": 1 }, { "indicator": "http://115.55.131.82:36264/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 07:18:18 UTC", "last_seen": "2026-03-11 07:18:18 UTC", "sightings": 1 }, { "indicator": "http://221.15.212.72:52676/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 07:17:17 UTC", "last_seen": "2026-03-11 07:17:17 UTC", "sightings": 1 }, { "indicator": "http://125.43.255.45:35507/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 07:14:10 UTC", "last_seen": "2026-03-11 07:14:10 UTC", "sightings": 1 }, { "indicator": "http://182.116.23.209:49269/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 07:13:10 UTC", "last_seen": "2026-03-11 07:13:10 UTC", "sightings": 1 }, { "indicator": "https://nwul2j.lockoak.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 07:13:07 UTC", "last_seen": "2026-03-11 07:13:07 UTC", "sightings": 1 }, { "indicator": "http://110.36.20.21:39051/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 07:12:17 UTC", "last_seen": "2026-03-11 07:12:17 UTC", "sightings": 1 }, { "indicator": "https://biiev.lockoak.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 07:04:10 UTC", "last_seen": "2026-03-11 07:04:10 UTC", "sightings": 1 }, { "indicator": "https://timb-point.lockoak.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 06:58:07 UTC", "last_seen": "2026-03-11 06:58:07 UTC", "sightings": 1 }, { "indicator": "http://182.116.23.209:49269/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 06:57:11 UTC", "last_seen": "2026-03-11 06:57:11 UTC", "sightings": 1 }, { "indicator": "http://41.141.4.77:32776/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 06:53:10 UTC", "last_seen": "2026-03-11 06:53:10 UTC", "sightings": 1 }, { "indicator": "https://fast-web.luminos.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 06:48:09 UTC", "last_seen": "2026-03-11 06:48:09 UTC", "sightings": 1 }, { "indicator": "https://5yjbyh7h.legalspeckle.digital/?=check&&actmn=EEuFqrXjLrufwdGv", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-11 06:46:10 UTC", "last_seen": "2026-03-11 06:46:10 UTC", "sightings": 1 }, { "indicator": "https://gold-day.luminos.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 06:40:07 UTC", "last_seen": "2026-03-11 06:40:07 UTC", "sightings": 1 }, { "indicator": "https://space-hub.luminos.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 06:36:06 UTC", "last_seen": "2026-03-11 06:36:06 UTC", "sightings": 1 }, { "indicator": "http://182.116.115.219:59775/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 06:35:21 UTC", "last_seen": "2026-03-11 06:35:21 UTC", "sightings": 1 }, { "indicator": "https://night-0.luminos.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 06:25:09 UTC", "last_seen": "2026-03-11 06:25:09 UTC", "sightings": 1 }, { "indicator": "http://211.158.162.238:60941/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-11 06:17:19 UTC", "last_seen": "2026-03-11 06:17:19 UTC", "sightings": 1 }, { "indicator": "http://196.188.135.20:38449/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-11 06:15:18 UTC", "last_seen": "2026-03-11 06:15:18 UTC", "sightings": 1 }, { "indicator": "https://all-stars.velante.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 06:13:07 UTC", "last_seen": "2026-03-11 06:13:07 UTC", "sightings": 1 }, { "indicator": "http://123.10.6.91:59262/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 06:11:16 UTC", "last_seen": "2026-03-11 06:11:16 UTC", "sightings": 1 }, { "indicator": "https://point-v.velante.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 06:03:07 UTC", "last_seen": "2026-03-11 06:03:07 UTC", "sightings": 1 }, { "indicator": "http://125.26.202.100:45695/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-11 06:02:15 UTC", "last_seen": "2026-03-11 06:02:15 UTC", "sightings": 1 }, { "indicator": "http://186.193.107.196:37465/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-11 06:01:14 UTC", "last_seen": "2026-03-11 06:01:14 UTC", "sightings": 1 }, { "indicator": "http://110.37.74.45:51155/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 05:59:14 UTC", "last_seen": "2026-03-11 05:59:14 UTC", "sightings": 1 }, { "indicator": "http://110.37.74.45:51155/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 05:58:13 UTC", "last_seen": "2026-03-11 05:58:13 UTC", "sightings": 1 }, { "indicator": "http://196.188.135.20:38449/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-11 05:58:12 UTC", "last_seen": "2026-03-11 05:58:12 UTC", "sightings": 1 }, { "indicator": "http://42.239.151.90:51176/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 05:56:13 UTC", "last_seen": "2026-03-11 05:56:13 UTC", "sightings": 1 }, { "indicator": "https://up-down.velante.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 05:53:07 UTC", "last_seen": "2026-03-11 05:53:07 UTC", "sightings": 1 }, { "indicator": "http://110.36.20.21:39051/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 05:52:17 UTC", "last_seen": "2026-03-11 05:52:17 UTC", "sightings": 1 }, { "indicator": "http://222.140.185.167:50007/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 05:52:16 UTC", "last_seen": "2026-03-11 05:52:16 UTC", "sightings": 1 }, { "indicator": "http://222.139.96.129:58743/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 05:52:16 UTC", "last_seen": "2026-03-11 05:52:16 UTC", "sightings": 1 }, { "indicator": "http://110.39.232.190:51359/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 05:51:24 UTC", "last_seen": "2026-03-11 05:51:24 UTC", "sightings": 1 }, { "indicator": "http://211.158.162.238:60941/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-11 05:51:16 UTC", "last_seen": "2026-03-11 05:51:16 UTC", "sightings": 1 }, { "indicator": "http://222.140.185.167:50007/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 05:45:16 UTC", "last_seen": "2026-03-11 05:45:16 UTC", "sightings": 1 }, { "indicator": "http://125.26.202.100:45695/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-11 05:36:15 UTC", "last_seen": "2026-03-11 05:36:15 UTC", "sightings": 1 }, { "indicator": "https://soft-touch.velante.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 05:36:06 UTC", "last_seen": "2026-03-11 05:36:06 UTC", "sightings": 1 }, { "indicator": "http://186.193.107.196:37465/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-11 05:35:33 UTC", "last_seen": "2026-03-11 05:35:33 UTC", "sightings": 1 }, { "indicator": "http://123.10.6.91:59262/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 05:30:15 UTC", "last_seen": "2026-03-11 05:30:15 UTC", "sightings": 1 }, { "indicator": "https://free-99.silvura.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 05:27:09 UTC", "last_seen": "2026-03-11 05:27:09 UTC", "sightings": 1 }, { "indicator": "http://110.39.232.190:51359/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 05:23:15 UTC", "last_seen": "2026-03-11 05:23:15 UTC", "sightings": 1 }, { "indicator": "http://110.37.118.66:41468/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-11 05:22:08 UTC", "last_seen": "2026-03-11 05:22:08 UTC", "sightings": 1 }, { "indicator": "http://123.10.0.72:40873/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 05:18:15 UTC", "last_seen": "2026-03-11 05:18:15 UTC", "sightings": 1 }, { "indicator": "https://land-site.silvura.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 05:18:07 UTC", "last_seen": "2026-03-11 05:18:07 UTC", "sightings": 1 }, { "indicator": "http://119.183.55.47:40781/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 05:16:07 UTC", "last_seen": "2026-03-11 05:16:07 UTC", "sightings": 1 }, { "indicator": "http://59.38.93.186:42453/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 05:14:10 UTC", "last_seen": "2026-03-11 05:14:10 UTC", "sightings": 1 }, { "indicator": "https://quick-go.silvura.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 05:12:05 UTC", "last_seen": "2026-03-11 05:12:05 UTC", "sightings": 1 }, { "indicator": "http://222.139.96.129:58743/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 05:09:07 UTC", "last_seen": "2026-03-11 05:09:07 UTC", "sightings": 1 }, { "indicator": "http://59.97.251.72:56065/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 05:06:07 UTC", "last_seen": "2026-03-11 05:06:07 UTC", "sightings": 1 }, { "indicator": "https://small-hub.silvura.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 05:02:06 UTC", "last_seen": "2026-03-11 05:02:06 UTC", "sightings": 1 }, { "indicator": "http://222.138.116.198:45368/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 05:01:13 UTC", "last_seen": "2026-03-11 05:01:13 UTC", "sightings": 1 }, { "indicator": "http://182.126.215.164:33561/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 05:01:13 UTC", "last_seen": "2026-03-11 05:01:13 UTC", "sightings": 1 }, { "indicator": "http://222.138.116.198:45368/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 04:57:08 UTC", "last_seen": "2026-03-11 04:57:08 UTC", "sightings": 1 }, { "indicator": "http://221.14.172.157:56438/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 04:54:14 UTC", "last_seen": "2026-03-11 04:54:14 UTC", "sightings": 1 }, { "indicator": "https://deep-sea.estoria.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 04:52:08 UTC", "last_seen": "2026-03-11 04:52:08 UTC", "sightings": 1 }, { "indicator": "http://125.47.56.70:43963/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 04:51:08 UTC", "last_seen": "2026-03-11 04:51:08 UTC", "sightings": 1 }, { "indicator": "http://110.36.19.215:40356/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 04:46:11 UTC", "last_seen": "2026-03-11 04:46:11 UTC", "sightings": 1 }, { "indicator": "http://182.116.33.78:35627/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 04:46:11 UTC", "last_seen": "2026-03-11 04:46:11 UTC", "sightings": 1 }, { "indicator": "http://59.38.93.186:42453/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 04:45:16 UTC", "last_seen": "2026-03-11 04:45:16 UTC", "sightings": 1 }, { "indicator": "http://221.14.172.157:56438/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 04:41:12 UTC", "last_seen": "2026-03-11 04:41:12 UTC", "sightings": 1 }, { "indicator": "http://59.94.73.69:35161/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 04:40:17 UTC", "last_seen": "2026-03-11 04:40:17 UTC", "sightings": 1 }, { "indicator": "http://59.97.251.72:56065/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 04:40:16 UTC", "last_seen": "2026-03-11 04:40:16 UTC", "sightings": 1 }, { "indicator": "https://sunny9.estoria.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 04:37:08 UTC", "last_seen": "2026-03-11 04:37:08 UTC", "sightings": 1 }, { "indicator": "http://182.126.215.164:33561/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 04:32:16 UTC", "last_seen": "2026-03-11 04:32:16 UTC", "sightings": 1 }, { "indicator": "http://125.47.56.70:43963/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 04:30:37 UTC", "last_seen": "2026-03-11 04:30:37 UTC", "sightings": 1 }, { "indicator": "http://110.37.69.76:60956/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-11 04:30:37 UTC", "last_seen": "2026-03-11 04:30:37 UTC", "sightings": 1 }, { "indicator": "https://new-place.estoria.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 04:30:37 UTC", "last_seen": "2026-03-11 04:30:37 UTC", "sightings": 1 }, { "indicator": "http://110.37.118.66:41468/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-11 04:22:08 UTC", "last_seen": "2026-03-11 04:22:08 UTC", "sightings": 1 }, { "indicator": "https://wild-cat.estoria.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 04:19:07 UTC", "last_seen": "2026-03-11 04:19:07 UTC", "sightings": 1 }, { "indicator": "http://117.216.71.140:47555/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 04:16:13 UTC", "last_seen": "2026-03-11 04:16:13 UTC", "sightings": 1 }, { "indicator": "http://222.138.181.213:33399/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 04:15:14 UTC", "last_seen": "2026-03-11 04:15:14 UTC", "sightings": 1 }, { "indicator": "http://110.36.19.215:40356/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 04:13:16 UTC", "last_seen": "2026-03-11 04:13:16 UTC", "sightings": 1 }, { "indicator": "https://start01.alverto.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 04:13:12 UTC", "last_seen": "2026-03-11 04:13:12 UTC", "sightings": 1 }, { "indicator": "http://222.138.181.213:33399/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 04:12:13 UTC", "last_seen": "2026-03-11 04:12:13 UTC", "sightings": 1 }, { "indicator": "https://top-map.alverto.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 04:09:09 UTC", "last_seen": "2026-03-11 04:09:09 UTC", "sightings": 1 }, { "indicator": "http://60.19.243.78:48764/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 04:01:16 UTC", "last_seen": "2026-03-11 04:01:16 UTC", "sightings": 1 }, { "indicator": "http://117.216.71.140:47555/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 03:59:20 UTC", "last_seen": "2026-03-11 03:59:20 UTC", "sightings": 1 }, { "indicator": "https://easy-fix.alverto.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 03:59:06 UTC", "last_seen": "2026-03-11 03:59:06 UTC", "sightings": 1 }, { "indicator": "http://125.44.243.122:53152/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 03:56:15 UTC", "last_seen": "2026-03-11 03:56:15 UTC", "sightings": 1 }, { "indicator": "https://long-way.alverto.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 03:52:08 UTC", "last_seen": "2026-03-11 03:52:08 UTC", "sightings": 1 }, { "indicator": "http://196.190.224.62:45097/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-11 03:51:09 UTC", "last_seen": "2026-03-11 03:51:09 UTC", "sightings": 1 }, { "indicator": "http://182.116.33.78:35627/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 03:45:18 UTC", "last_seen": "2026-03-11 03:45:18 UTC", "sightings": 1 }, { "indicator": "http://196.190.224.62:45097/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-11 03:45:17 UTC", "last_seen": "2026-03-11 03:45:17 UTC", "sightings": 1 }, { "indicator": "https://super-day.novalis.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 03:41:07 UTC", "last_seen": "2026-03-11 03:41:07 UTC", "sightings": 1 }, { "indicator": "http://175.151.198.114:36114/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 03:36:15 UTC", "last_seen": "2026-03-11 03:36:15 UTC", "sightings": 1 }, { "indicator": "http://117.209.8.142:39809/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 03:31:16 UTC", "last_seen": "2026-03-11 03:31:16 UTC", "sightings": 1 }, { "indicator": "https://best7.novalis.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 03:25:12 UTC", "last_seen": "2026-03-11 03:25:12 UTC", "sightings": 1 }, { "indicator": "http://46.175.184.8:57591/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 03:22:25 UTC", "last_seen": "2026-03-11 03:22:25 UTC", "sightings": 1 }, { "indicator": "http://125.44.243.122:53152/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 03:20:15 UTC", "last_seen": "2026-03-11 03:20:15 UTC", "sightings": 1 }, { "indicator": "http://125.47.229.149:39303/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 03:14:09 UTC", "last_seen": "2026-03-11 03:14:09 UTC", "sightings": 1 }, { "indicator": "http://123.10.141.234:36273/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 03:14:08 UTC", "last_seen": "2026-03-11 03:14:08 UTC", "sightings": 1 }, { "indicator": "http://27.4.74.65:42708/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 03:07:10 UTC", "last_seen": "2026-03-11 03:07:10 UTC", "sightings": 1 }, { "indicator": "http://119.187.179.220:43065/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 03:07:09 UTC", "last_seen": "2026-03-11 03:07:09 UTC", "sightings": 1 }, { "indicator": "http://41.141.4.77:32776/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 02:53:10 UTC", "last_seen": "2026-03-11 02:53:10 UTC", "sightings": 1 }, { "indicator": "http://115.49.7.252:46401/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 02:51:09 UTC", "last_seen": "2026-03-11 02:51:09 UTC", "sightings": 1 }, { "indicator": "https://only-one.novalis.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 02:50:07 UTC", "last_seen": "2026-03-11 02:50:07 UTC", "sightings": 1 }, { "indicator": "http://42.87.160.129:38221/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 02:47:13 UTC", "last_seen": "2026-03-11 02:47:13 UTC", "sightings": 1 }, { "indicator": "http://42.87.160.129:38221/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 02:47:13 UTC", "last_seen": "2026-03-11 02:47:13 UTC", "sightings": 1 }, { "indicator": "http://175.149.67.143:40270/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 02:47:13 UTC", "last_seen": "2026-03-11 02:47:13 UTC", "sightings": 1 }, { "indicator": "http://119.187.179.220:43065/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 02:44:13 UTC", "last_seen": "2026-03-11 02:44:13 UTC", "sightings": 1 }, { "indicator": "http://59.89.1.51:51671/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 02:36:11 UTC", "last_seen": "2026-03-11 02:36:11 UTC", "sightings": 1 }, { "indicator": "https://bright-up.novalis.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 02:34:08 UTC", "last_seen": "2026-03-11 02:34:08 UTC", "sightings": 1 }, { "indicator": "https://hot-line.mirante.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 02:26:07 UTC", "last_seen": "2026-03-11 02:26:07 UTC", "sightings": 1 }, { "indicator": "http://27.4.74.65:42708/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 02:24:11 UTC", "last_seen": "2026-03-11 02:24:11 UTC", "sightings": 1 }, { "indicator": "http://125.45.56.151:36968/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 02:19:15 UTC", "last_seen": "2026-03-11 02:19:15 UTC", "sightings": 1 }, { "indicator": "https://clear-sky.mirante.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 02:19:07 UTC", "last_seen": "2026-03-11 02:19:07 UTC", "sightings": 1 }, { "indicator": "https://simpleweb.mirante.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 02:09:09 UTC", "last_seen": "2026-03-11 02:09:09 UTC", "sightings": 1 }, { "indicator": "https://dream-12.mirante.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 02:06:08 UTC", "last_seen": "2026-03-11 02:06:08 UTC", "sightings": 1 }, { "indicator": "http://115.49.7.252:46401/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 02:01:08 UTC", "last_seen": "2026-03-11 02:01:08 UTC", "sightings": 1 }, { "indicator": "https://nextstep.solenta.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 02:01:06 UTC", "last_seen": "2026-03-11 02:01:06 UTC", "sightings": 1 }, { "indicator": "http://110.37.66.198:33861/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 01:58:15 UTC", "last_seen": "2026-03-11 01:58:15 UTC", "sightings": 1 }, { "indicator": "https://old-3.solenta.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 01:54:06 UTC", "last_seen": "2026-03-11 01:54:06 UTC", "sightings": 1 }, { "indicator": "https://big-city.solenta.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 01:51:08 UTC", "last_seen": "2026-03-11 01:51:08 UTC", "sightings": 1 }, { "indicator": "http://94.156.152.233/bins/o.xml", "indicator_type": "url", "source": "URLhaus", "tags": [ "geofenced", "opendir", "sh", "ua-wget", "USA", "xml" ], "first_seen": "2026-03-11 01:51:07 UTC", "last_seen": "2026-03-11 01:51:07 UTC", "sightings": 1 }, { "indicator": "http://158.94.211.222/files/8317147124/Ugy77D4.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-03-11 01:49:10 UTC", "last_seen": "2026-03-11 01:49:10 UTC", "sightings": 1 }, { "indicator": "https://coolstory.solenta.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 01:46:06 UTC", "last_seen": "2026-03-11 01:46:06 UTC", "sightings": 1 }, { "indicator": "https://just-do.valora.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 01:39:07 UTC", "last_seen": "2026-03-11 01:39:07 UTC", "sightings": 1 }, { "indicator": "http://158.94.211.222/files/8317147124/Kr7cPTQ.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-03-11 01:32:09 UTC", "last_seen": "2026-03-11 01:32:09 UTC", "sightings": 1 }, { "indicator": "https://green-land.valora.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 01:31:07 UTC", "last_seen": "2026-03-11 01:31:07 UTC", "sightings": 1 }, { "indicator": "http://124.129.128.136:40335/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 01:30:18 UTC", "last_seen": "2026-03-11 01:30:18 UTC", "sightings": 1 }, { "indicator": "http://110.37.66.198:33861/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 01:26:15 UTC", "last_seen": "2026-03-11 01:26:15 UTC", "sightings": 1 }, { "indicator": "https://top88.valora.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 01:24:06 UTC", "last_seen": "2026-03-11 01:24:06 UTC", "sightings": 1 }, { "indicator": "http://94.156.152.233/bins/run.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "geofenced", "mirai", "opendir", "sh", "ua-wget", "USA" ], "first_seen": "2026-03-11 01:23:07 UTC", "last_seen": "2026-03-11 01:23:07 UTC", "sightings": 1 }, { "indicator": "https://lucky-point.valora.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 01:20:10 UTC", "last_seen": "2026-03-11 01:20:10 UTC", "sightings": 1 }, { "indicator": "http://115.55.131.82:36264/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 01:16:16 UTC", "last_seen": "2026-03-11 01:16:16 UTC", "sightings": 1 }, { "indicator": "http://117.235.133.211:54521/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 01:13:16 UTC", "last_seen": "2026-03-11 01:13:16 UTC", "sightings": 1 }, { "indicator": "https://myfolder.eluvia.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 01:07:07 UTC", "last_seen": "2026-03-11 01:07:07 UTC", "sightings": 1 }, { "indicator": "http://94.156.152.233/bins/px86", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai" ], "first_seen": "2026-03-11 01:06:15 UTC", "last_seen": "2026-03-11 01:06:15 UTC", "sightings": 1 }, { "indicator": "http://94.156.152.233/bins/pppc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai" ], "first_seen": "2026-03-11 01:06:14 UTC", "last_seen": "2026-03-11 01:06:14 UTC", "sightings": 1 }, { "indicator": "http://94.156.152.233/bins/psh4", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai" ], "first_seen": "2026-03-11 01:06:14 UTC", "last_seen": "2026-03-11 01:06:14 UTC", "sightings": 1 }, { "indicator": "http://94.156.152.233/bins/pmips", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai" ], "first_seen": "2026-03-11 01:05:13 UTC", "last_seen": "2026-03-11 01:05:13 UTC", "sightings": 1 }, { "indicator": "http://94.156.152.233/bins/parm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai" ], "first_seen": "2026-03-11 01:05:12 UTC", "last_seen": "2026-03-11 01:05:12 UTC", "sightings": 1 }, { "indicator": "http://94.156.152.233/bins/parm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai" ], "first_seen": "2026-03-11 01:05:12 UTC", "last_seen": "2026-03-11 01:05:12 UTC", "sightings": 1 }, { "indicator": "http://94.156.152.233/bins/pspc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai" ], "first_seen": "2026-03-11 01:05:11 UTC", "last_seen": "2026-03-11 01:05:11 UTC", "sightings": 1 }, { "indicator": "http://94.156.152.233/bins/pm68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai" ], "first_seen": "2026-03-11 01:05:09 UTC", "last_seen": "2026-03-11 01:05:09 UTC", "sightings": 1 }, { "indicator": "http://94.156.152.233/bins/parm", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai" ], "first_seen": "2026-03-11 01:05:09 UTC", "last_seen": "2026-03-11 01:05:09 UTC", "sightings": 1 }, { "indicator": "http://94.156.152.233/bins/parm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai" ], "first_seen": "2026-03-11 01:05:09 UTC", "last_seen": "2026-03-11 01:05:09 UTC", "sightings": 1 }, { "indicator": "http://94.156.152.233/bins/pmpsl", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai" ], "first_seen": "2026-03-11 01:05:09 UTC", "last_seen": "2026-03-11 01:05:09 UTC", "sightings": 1 }, { "indicator": "https://fast-9.eluvia.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 01:02:05 UTC", "last_seen": "2026-03-11 01:02:05 UTC", "sightings": 1 }, { "indicator": "http://123.129.61.16:54486/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 01:00:13 UTC", "last_seen": "2026-03-11 01:00:13 UTC", "sightings": 1 }, { "indicator": "https://openview.eluvia.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 00:57:07 UTC", "last_seen": "2026-03-11 00:57:07 UTC", "sightings": 1 }, { "indicator": "http://59.184.249.229:44564/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 00:52:07 UTC", "last_seen": "2026-03-11 00:52:07 UTC", "sightings": 1 }, { "indicator": "https://blue-sky4.eluvia.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 00:51:09 UTC", "last_seen": "2026-03-11 00:51:09 UTC", "sightings": 1 }, { "indicator": "http://117.235.133.211:54521/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 00:49:19 UTC", "last_seen": "2026-03-11 00:49:19 UTC", "sightings": 1 }, { "indicator": "http://110.39.229.188:56529/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 00:46:14 UTC", "last_seen": "2026-03-11 00:46:14 UTC", "sightings": 1 }, { "indicator": "http://110.37.97.32:43951/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 00:45:16 UTC", "last_seen": "2026-03-11 00:45:16 UTC", "sightings": 1 }, { "indicator": "https://vw-8.weldoxis.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 00:43:06 UTC", "last_seen": "2026-03-11 00:43:06 UTC", "sightings": 1 }, { "indicator": "https://st-4.weldoxis.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 00:40:06 UTC", "last_seen": "2026-03-11 00:40:06 UTC", "sightings": 1 }, { "indicator": "http://59.177.98.162:35743/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 00:36:14 UTC", "last_seen": "2026-03-11 00:36:14 UTC", "sightings": 1 }, { "indicator": "https://qr-2.weldoxis.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 00:32:07 UTC", "last_seen": "2026-03-11 00:32:07 UTC", "sightings": 1 }, { "indicator": "https://mx-9.weldoxis.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 00:29:09 UTC", "last_seen": "2026-03-11 00:29:09 UTC", "sightings": 1 }, { "indicator": "http://110.37.97.32:43951/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 00:28:09 UTC", "last_seen": "2026-03-11 00:28:09 UTC", "sightings": 1 }, { "indicator": "http://61.3.133.224:33823/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 00:18:15 UTC", "last_seen": "2026-03-11 00:18:15 UTC", "sightings": 1 }, { "indicator": "https://l0t05.exoruby.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 00:18:07 UTC", "last_seen": "2026-03-11 00:18:07 UTC", "sightings": 1 }, { "indicator": "http://117.215.59.164:46357/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 00:17:11 UTC", "last_seen": "2026-03-11 00:17:11 UTC", "sightings": 1 }, { "indicator": "http://124.6.168.74:48655/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-11 00:16:06 UTC", "last_seen": "2026-03-11 00:16:06 UTC", "sightings": 1 }, { "indicator": "https://k7r11.exoruby.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 00:15:09 UTC", "last_seen": "2026-03-11 00:15:09 UTC", "sightings": 1 }, { "indicator": "http://115.55.53.249:59468/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 00:09:13 UTC", "last_seen": "2026-03-11 00:09:13 UTC", "sightings": 1 }, { "indicator": "https://j1m44.exoruby.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 00:09:07 UTC", "last_seen": "2026-03-11 00:09:07 UTC", "sightings": 1 }, { "indicator": "https://h9v22.exoruby.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-11 00:05:11 UTC", "last_seen": "2026-03-11 00:05:11 UTC", "sightings": 1 }, { "indicator": "http://125.47.216.21:48620/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-11 00:01:20 UTC", "last_seen": "2026-03-11 00:01:20 UTC", "sightings": 1 }, { "indicator": "http://124.6.168.74:48655/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-10 23:59:14 UTC", "last_seen": "2026-03-10 23:59:14 UTC", "sightings": 1 }, { "indicator": "http://61.3.133.224:33823/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 23:55:09 UTC", "last_seen": "2026-03-10 23:55:09 UTC", "sightings": 1 }, { "indicator": "http://59.177.98.162:35743/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 23:40:17 UTC", "last_seen": "2026-03-10 23:40:17 UTC", "sightings": 1 }, { "indicator": "http://125.44.211.113:38244/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 23:37:16 UTC", "last_seen": "2026-03-10 23:37:16 UTC", "sightings": 1 }, { "indicator": "https://88-m02.bryzand.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 23:28:06 UTC", "last_seen": "2026-03-10 23:28:06 UTC", "sightings": 1 }, { "indicator": "http://123.129.61.16:54486/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 23:23:19 UTC", "last_seen": "2026-03-10 23:23:19 UTC", "sightings": 1 }, { "indicator": "https://55-j30.bryzand.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 23:21:07 UTC", "last_seen": "2026-03-10 23:21:07 UTC", "sightings": 1 }, { "indicator": "http://42.52.212.152:59515/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 23:19:10 UTC", "last_seen": "2026-03-10 23:19:10 UTC", "sightings": 1 }, { "indicator": "http://222.219.4.21:55895/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-10 23:18:22 UTC", "last_seen": "2026-03-10 23:18:22 UTC", "sightings": 1 }, { "indicator": "https://11-k44.bryzand.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 23:17:06 UTC", "last_seen": "2026-03-10 23:17:06 UTC", "sightings": 1 }, { "indicator": "http://123.5.189.20:55870/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 23:14:20 UTC", "last_seen": "2026-03-10 23:14:20 UTC", "sightings": 1 }, { "indicator": "http://112.232.15.46:46367/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 23:13:12 UTC", "last_seen": "2026-03-10 23:13:12 UTC", "sightings": 1 }, { "indicator": "https://99-f21.bryzand.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 23:12:06 UTC", "last_seen": "2026-03-10 23:12:06 UTC", "sightings": 1 }, { "indicator": "http://125.44.211.113:38244/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 23:11:15 UTC", "last_seen": "2026-03-10 23:11:15 UTC", "sightings": 1 }, { "indicator": "http://222.139.108.8:59121/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 23:11:15 UTC", "last_seen": "2026-03-10 23:11:15 UTC", "sightings": 1 }, { "indicator": "http://110.38.192.30:36952/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 23:03:19 UTC", "last_seen": "2026-03-10 23:03:19 UTC", "sightings": 1 }, { "indicator": "http://113.236.127.92:45950/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 23:03:07 UTC", "last_seen": "2026-03-10 23:03:07 UTC", "sightings": 1 }, { "indicator": "http://110.37.87.13:39744/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 22:54:09 UTC", "last_seen": "2026-03-10 22:54:09 UTC", "sightings": 1 }, { "indicator": "http://110.38.192.30:36952/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 22:51:17 UTC", "last_seen": "2026-03-10 22:51:17 UTC", "sightings": 1 }, { "indicator": "http://220.201.91.136:50595/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 22:49:13 UTC", "last_seen": "2026-03-10 22:49:13 UTC", "sightings": 1 }, { "indicator": "http://110.37.87.13:39744/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 22:46:09 UTC", "last_seen": "2026-03-10 22:46:09 UTC", "sightings": 1 }, { "indicator": "http://222.139.108.8:59121/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 22:45:20 UTC", "last_seen": "2026-03-10 22:45:20 UTC", "sightings": 1 }, { "indicator": "http://158.94.211.222/files/7782139129/4Qrxrgo.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey", "OffLoader" ], "first_seen": "2026-03-10 22:41:11 UTC", "last_seen": "2026-03-10 22:41:11 UTC", "sightings": 1 }, { "indicator": "http://123.5.189.20:55870/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 22:40:20 UTC", "last_seen": "2026-03-10 22:40:20 UTC", "sightings": 1 }, { "indicator": "http://37.235.139.196:36439/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-10 22:34:11 UTC", "last_seen": "2026-03-10 22:34:11 UTC", "sightings": 1 }, { "indicator": "http://61.53.90.5:45971/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 22:33:19 UTC", "last_seen": "2026-03-10 22:33:19 UTC", "sightings": 1 }, { "indicator": "http://182.112.15.198:51460/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 22:25:16 UTC", "last_seen": "2026-03-10 22:25:16 UTC", "sightings": 1 }, { "indicator": "http://110.37.27.164:44813/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 22:24:15 UTC", "last_seen": "2026-03-10 22:24:15 UTC", "sightings": 1 }, { "indicator": "https://dv-77k.moxitron.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 22:24:09 UTC", "last_seen": "2026-03-10 22:24:09 UTC", "sightings": 1 }, { "indicator": "http://119.183.55.47:40781/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 22:19:17 UTC", "last_seen": "2026-03-10 22:19:17 UTC", "sightings": 1 }, { "indicator": "https://ct-11q.moxitron.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 22:17:10 UTC", "last_seen": "2026-03-10 22:17:10 UTC", "sightings": 1 }, { "indicator": "https://br-44z.moxitron.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 22:13:06 UTC", "last_seen": "2026-03-10 22:13:06 UTC", "sightings": 1 }, { "indicator": "http://188.137.250.229/1.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543", "Vidar" ], "first_seen": "2026-03-10 22:12:16 UTC", "last_seen": "2026-03-10 22:12:16 UTC", "sightings": 1 }, { "indicator": "http://110.36.80.163:45688/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 22:07:14 UTC", "last_seen": "2026-03-10 22:07:14 UTC", "sightings": 1 }, { "indicator": "http://117.209.4.47:44110/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 22:02:12 UTC", "last_seen": "2026-03-10 22:02:12 UTC", "sightings": 1 }, { "indicator": "http://112.248.246.120:48144/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 21:59:18 UTC", "last_seen": "2026-03-10 21:59:18 UTC", "sightings": 1 }, { "indicator": "https://ap-90x.moxitron.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 21:58:07 UTC", "last_seen": "2026-03-10 21:58:07 UTC", "sightings": 1 }, { "indicator": "http://182.112.15.198:51460/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 21:55:10 UTC", "last_seen": "2026-03-10 21:55:10 UTC", "sightings": 1 }, { "indicator": "http://110.37.27.164:44813/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 21:53:18 UTC", "last_seen": "2026-03-10 21:53:18 UTC", "sightings": 1 }, { "indicator": "https://0-rw1-t.jelvax.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 21:53:07 UTC", "last_seen": "2026-03-10 21:53:07 UTC", "sightings": 1 }, { "indicator": "http://61.53.135.222:53524/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 21:48:21 UTC", "last_seen": "2026-03-10 21:48:21 UTC", "sightings": 1 }, { "indicator": "https://5-sw8-q.jelvax.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 21:48:09 UTC", "last_seen": "2026-03-10 21:48:09 UTC", "sightings": 1 }, { "indicator": "https://2-nw4-z.jelvax.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 21:43:09 UTC", "last_seen": "2026-03-10 21:43:09 UTC", "sightings": 1 }, { "indicator": "http://94.156.152.67/boyl7molon.old", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "opendir", "ua-wget", "x86" ], "first_seen": "2026-03-10 21:43:06 UTC", "last_seen": "2026-03-10 21:43:06 UTC", "sightings": 1 }, { "indicator": "https://7-tw9-x.jelvax.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 21:38:08 UTC", "last_seen": "2026-03-10 21:38:08 UTC", "sightings": 1 }, { "indicator": "https://v1107.fythoria.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 21:34:13 UTC", "last_seen": "2026-03-10 21:34:13 UTC", "sightings": 1 }, { "indicator": "http://117.209.4.47:44110/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 21:32:17 UTC", "last_seen": "2026-03-10 21:32:17 UTC", "sightings": 1 }, { "indicator": "http://112.248.246.120:48144/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 21:30:48 UTC", "last_seen": "2026-03-10 21:30:48 UTC", "sightings": 1 }, { "indicator": "http://61.53.135.222:53524/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 21:20:25 UTC", "last_seen": "2026-03-10 21:20:25 UTC", "sightings": 1 }, { "indicator": "http://110.37.55.92:45063/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 21:17:21 UTC", "last_seen": "2026-03-10 21:17:21 UTC", "sightings": 1 }, { "indicator": "http://158.94.211.222/files/oblivora/random.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey", "Vidar" ], "first_seen": "2026-03-10 21:17:06 UTC", "last_seen": "2026-03-10 21:17:06 UTC", "sightings": 1 }, { "indicator": "https://c5543.fythoria.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 21:16:08 UTC", "last_seen": "2026-03-10 21:16:08 UTC", "sightings": 1 }, { "indicator": "http://27.215.120.116:59733/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 21:15:21 UTC", "last_seen": "2026-03-10 21:15:21 UTC", "sightings": 1 }, { "indicator": "http://110.36.80.163:45688/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 21:14:11 UTC", "last_seen": "2026-03-10 21:14:11 UTC", "sightings": 1 }, { "indicator": "https://iry0pqwo.easyyear.digital/?=check&&actmn=qbYiualmCMoAukHW", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-10 21:03:08 UTC", "last_seen": "2026-03-10 21:03:08 UTC", "sightings": 1 }, { "indicator": "http://117.209.26.226:37399/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 21:02:15 UTC", "last_seen": "2026-03-10 21:02:15 UTC", "sightings": 1 }, { "indicator": "https://x2281.fythoria.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 21:01:07 UTC", "last_seen": "2026-03-10 21:01:07 UTC", "sightings": 1 }, { "indicator": "http://219.157.67.14:48054/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 20:58:21 UTC", "last_seen": "2026-03-10 20:58:21 UTC", "sightings": 1 }, { "indicator": "http://110.37.55.92:45063/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 20:56:20 UTC", "last_seen": "2026-03-10 20:56:20 UTC", "sightings": 1 }, { "indicator": "http://27.215.120.116:59733/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 20:53:22 UTC", "last_seen": "2026-03-10 20:53:22 UTC", "sightings": 1 }, { "indicator": "http://59.98.238.101:56265/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 20:47:26 UTC", "last_seen": "2026-03-10 20:47:26 UTC", "sightings": 1 }, { "indicator": "http://219.157.67.14:48054/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 20:46:23 UTC", "last_seen": "2026-03-10 20:46:23 UTC", "sightings": 1 }, { "indicator": "https://q9910.fythoria.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 20:45:11 UTC", "last_seen": "2026-03-10 20:45:11 UTC", "sightings": 1 }, { "indicator": "http://182.112.209.155:54039/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 20:44:22 UTC", "last_seen": "2026-03-10 20:44:22 UTC", "sightings": 1 }, { "indicator": "http://175.146.1.18:60209/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 20:42:22 UTC", "last_seen": "2026-03-10 20:42:22 UTC", "sightings": 1 }, { "indicator": "http://125.45.56.151:36968/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 20:40:26 UTC", "last_seen": "2026-03-10 20:40:26 UTC", "sightings": 1 }, { "indicator": "http://117.209.26.226:37399/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 20:32:25 UTC", "last_seen": "2026-03-10 20:32:25 UTC", "sightings": 1 }, { "indicator": "http://125.43.231.97:33594/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 20:31:18 UTC", "last_seen": "2026-03-10 20:31:18 UTC", "sightings": 1 }, { "indicator": "http://45.202.243.118/n2/mpsl", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "geofenced", "mips", "mirai", "ua-wget", "USA" ], "first_seen": "2026-03-10 20:28:07 UTC", "last_seen": "2026-03-10 20:28:07 UTC", "sightings": 1 }, { "indicator": "http://45.202.243.118/n2/x86", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "geofenced", "mirai", "ua-wget", "USA", "x86" ], "first_seen": "2026-03-10 20:28:07 UTC", "last_seen": "2026-03-10 20:28:07 UTC", "sightings": 1 }, { "indicator": "http://45.202.243.118/n2/mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "geofenced", "mips", "mirai", "ua-wget", "USA" ], "first_seen": "2026-03-10 20:28:07 UTC", "last_seen": "2026-03-10 20:28:07 UTC", "sightings": 1 }, { "indicator": "http://45.202.243.118/n2/teleport", "indicator_type": "url", "source": "URLhaus", "tags": [ "geofenced", "sh", "ua-wget", "USA" ], "first_seen": "2026-03-10 20:28:06 UTC", "last_seen": "2026-03-10 20:28:06 UTC", "sightings": 1 }, { "indicator": "http://110.37.127.205:48522/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 20:27:22 UTC", "last_seen": "2026-03-10 20:27:22 UTC", "sightings": 1 }, { "indicator": "https://k77.vokriz.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 20:24:09 UTC", "last_seen": "2026-03-10 20:24:09 UTC", "sightings": 1 }, { "indicator": "http://59.98.238.101:56265/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 20:22:24 UTC", "last_seen": "2026-03-10 20:22:24 UTC", "sightings": 1 }, { "indicator": "http://219.155.82.109:60438/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 20:22:21 UTC", "last_seen": "2026-03-10 20:22:21 UTC", "sightings": 1 }, { "indicator": "http://182.112.209.155:54039/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 20:20:18 UTC", "last_seen": "2026-03-10 20:20:18 UTC", "sightings": 1 }, { "indicator": "https://v-qr14.vokriz.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 20:15:07 UTC", "last_seen": "2026-03-10 20:15:07 UTC", "sightings": 1 }, { "indicator": "https://z1-mk88.vokriz.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 20:11:06 UTC", "last_seen": "2026-03-10 20:11:06 UTC", "sightings": 1 }, { "indicator": "https://x9-pt22.vokriz.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 20:06:05 UTC", "last_seen": "2026-03-10 20:06:05 UTC", "sightings": 1 }, { "indicator": "http://59.88.46.53:52820/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 20:02:08 UTC", "last_seen": "2026-03-10 20:02:08 UTC", "sightings": 1 }, { "indicator": "http://124.129.128.136:40335/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 19:59:23 UTC", "last_seen": "2026-03-10 19:59:23 UTC", "sightings": 1 }, { "indicator": "http://219.155.82.109:60438/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 19:59:08 UTC", "last_seen": "2026-03-10 19:59:08 UTC", "sightings": 1 }, { "indicator": "https://v1120.brythos.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 19:53:05 UTC", "last_seen": "2026-03-10 19:53:05 UTC", "sightings": 1 }, { "indicator": "http://59.91.253.48:53368/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-10 19:50:20 UTC", "last_seen": "2026-03-10 19:50:20 UTC", "sightings": 1 }, { "indicator": "http://115.55.247.20:48695/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 19:47:16 UTC", "last_seen": "2026-03-10 19:47:16 UTC", "sightings": 1 }, { "indicator": "http://110.37.103.93:57810/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 19:45:17 UTC", "last_seen": "2026-03-10 19:45:17 UTC", "sightings": 1 }, { "indicator": "http://163.142.77.174:37090/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 19:44:21 UTC", "last_seen": "2026-03-10 19:44:21 UTC", "sightings": 1 }, { "indicator": "http://165.232.186.159:9000/Desktop/sliver-client_linux", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-10 19:41:23 UTC", "last_seen": "2026-03-10 19:41:23 UTC", "sightings": 1 }, { "indicator": "http://165.232.186.159:9000/Desktop/sys.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "Sliver" ], "first_seen": "2026-03-10 19:41:13 UTC", "last_seen": "2026-03-10 19:41:13 UTC", "sightings": 1 }, { "indicator": "https://z0091.brythos.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 19:36:07 UTC", "last_seen": "2026-03-10 19:36:07 UTC", "sightings": 1 }, { "indicator": "http://27.215.136.104:34569/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 19:35:19 UTC", "last_seen": "2026-03-10 19:35:19 UTC", "sightings": 1 }, { "indicator": "http://123.9.87.69:49381/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 19:34:17 UTC", "last_seen": "2026-03-10 19:34:17 UTC", "sightings": 1 }, { "indicator": "http://59.88.46.53:52820/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 19:32:11 UTC", "last_seen": "2026-03-10 19:32:11 UTC", "sightings": 1 }, { "indicator": "http://27.215.136.104:34569/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 19:31:09 UTC", "last_seen": "2026-03-10 19:31:09 UTC", "sightings": 1 }, { "indicator": "https://sabrineme.com/asfixsoftwaredev.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "QuirkyLoader" ], "first_seen": "2026-03-10 19:27:08 UTC", "last_seen": "2026-03-10 19:27:08 UTC", "sightings": 1 }, { "indicator": "https://x1y2.jovianth.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 19:12:11 UTC", "last_seen": "2026-03-10 19:12:11 UTC", "sightings": 1 }, { "indicator": "http://123.9.87.69:49381/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 19:10:21 UTC", "last_seen": "2026-03-10 19:10:21 UTC", "sightings": 1 }, { "indicator": "http://110.36.19.51:50198/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 19:07:21 UTC", "last_seen": "2026-03-10 19:07:21 UTC", "sightings": 1 }, { "indicator": "https://wr776.vylocore.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 19:05:09 UTC", "last_seen": "2026-03-10 19:05:09 UTC", "sightings": 1 }, { "indicator": "https://pt554.vylocore.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 19:00:09 UTC", "last_seen": "2026-03-10 19:00:09 UTC", "sightings": 1 }, { "indicator": "https://mj118.vylocore.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 18:55:09 UTC", "last_seen": "2026-03-10 18:55:09 UTC", "sightings": 1 }, { "indicator": "https://kx992.vylocore.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 18:52:10 UTC", "last_seen": "2026-03-10 18:52:10 UTC", "sightings": 1 }, { "indicator": "http://182.90.123.164:33064/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-10 18:51:20 UTC", "last_seen": "2026-03-10 18:51:20 UTC", "sightings": 1 }, { "indicator": "http://185.97.113.40:53795/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 18:49:17 UTC", "last_seen": "2026-03-10 18:49:17 UTC", "sightings": 1 }, { "indicator": "https://88dd44.quobix.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 18:43:07 UTC", "last_seen": "2026-03-10 18:43:07 UTC", "sightings": 1 }, { "indicator": "http://45.163.68.86:10317/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 18:39:18 UTC", "last_seen": "2026-03-10 18:39:18 UTC", "sightings": 1 }, { "indicator": "https://99bb22.quobix.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 18:33:07 UTC", "last_seen": "2026-03-10 18:33:07 UTC", "sightings": 1 }, { "indicator": "http://59.182.126.49:33143/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 18:32:11 UTC", "last_seen": "2026-03-10 18:32:11 UTC", "sightings": 1 }, { "indicator": "http://42.231.90.2:55822/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 18:31:11 UTC", "last_seen": "2026-03-10 18:31:11 UTC", "sightings": 1 }, { "indicator": "https://55aa11.quobix.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 18:27:09 UTC", "last_seen": "2026-03-10 18:27:09 UTC", "sightings": 1 }, { "indicator": "http://80.67.33.209:43572/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-10 18:25:18 UTC", "last_seen": "2026-03-10 18:25:18 UTC", "sightings": 1 }, { "indicator": "https://y11m.zylotech.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 18:23:06 UTC", "last_seen": "2026-03-10 18:23:06 UTC", "sightings": 1 }, { "indicator": "http://42.231.90.2:55822/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 18:21:16 UTC", "last_seen": "2026-03-10 18:21:16 UTC", "sightings": 1 }, { "indicator": "http://185.97.113.40:53795/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 18:20:20 UTC", "last_seen": "2026-03-10 18:20:20 UTC", "sightings": 1 }, { "indicator": "http://118.232.137.101:55746/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-10 18:18:16 UTC", "last_seen": "2026-03-10 18:18:16 UTC", "sightings": 1 }, { "indicator": "https://t88j.zylotech.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 18:18:10 UTC", "last_seen": "2026-03-10 18:18:10 UTC", "sightings": 1 }, { "indicator": "http://119.109.212.249:55998/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 18:17:22 UTC", "last_seen": "2026-03-10 18:17:22 UTC", "sightings": 1 }, { "indicator": "https://r55k.zylotech.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 18:15:09 UTC", "last_seen": "2026-03-10 18:15:09 UTC", "sightings": 1 }, { "indicator": "http://59.182.126.49:33143/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 18:02:26 UTC", "last_seen": "2026-03-10 18:02:26 UTC", "sightings": 1 }, { "indicator": "http://219.157.251.161:34280/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 18:01:22 UTC", "last_seen": "2026-03-10 18:01:22 UTC", "sightings": 1 }, { "indicator": "http://118.232.137.101:55746/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-10 18:01:22 UTC", "last_seen": "2026-03-10 18:01:22 UTC", "sightings": 1 }, { "indicator": "http://42.226.73.5:57865/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 18:01:21 UTC", "last_seen": "2026-03-10 18:01:21 UTC", "sightings": 1 }, { "indicator": "https://w22p.zylotech.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 18:01:07 UTC", "last_seen": "2026-03-10 18:01:07 UTC", "sightings": 1 }, { "indicator": "http://119.109.212.249:55998/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 17:58:21 UTC", "last_seen": "2026-03-10 17:58:21 UTC", "sightings": 1 }, { "indicator": "http://42.227.245.57:44314/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 17:57:15 UTC", "last_seen": "2026-03-10 17:57:15 UTC", "sightings": 1 }, { "indicator": "https://fny913.zenithax.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 17:57:12 UTC", "last_seen": "2026-03-10 17:57:12 UTC", "sightings": 1 }, { "indicator": "https://dxt405.zenithax.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 17:54:10 UTC", "last_seen": "2026-03-10 17:54:10 UTC", "sightings": 1 }, { "indicator": "http://110.37.36.23:35728/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-10 17:50:10 UTC", "last_seen": "2026-03-10 17:50:10 UTC", "sightings": 1 }, { "indicator": "http://125.43.231.97:33594/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 17:48:16 UTC", "last_seen": "2026-03-10 17:48:16 UTC", "sightings": 1 }, { "indicator": "http://80.67.33.209:43572/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-10 17:44:20 UTC", "last_seen": "2026-03-10 17:44:20 UTC", "sightings": 1 }, { "indicator": "http://42.56.183.69:49208/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 17:44:20 UTC", "last_seen": "2026-03-10 17:44:20 UTC", "sightings": 1 }, { "indicator": "http://42.226.73.5:57865/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 17:41:17 UTC", "last_seen": "2026-03-10 17:41:17 UTC", "sightings": 1 }, { "indicator": "https://qlm299.zenithax.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 17:41:08 UTC", "last_seen": "2026-03-10 17:41:08 UTC", "sightings": 1 }, { "indicator": "https://z-66-d4.velotronic.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 17:36:09 UTC", "last_seen": "2026-03-10 17:36:09 UTC", "sightings": 1 }, { "indicator": "http://219.157.251.161:34280/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 17:33:21 UTC", "last_seen": "2026-03-10 17:33:21 UTC", "sightings": 1 }, { "indicator": "http://59.88.234.88:41326/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 17:32:20 UTC", "last_seen": "2026-03-10 17:32:20 UTC", "sightings": 1 }, { "indicator": "https://x-12-c7.velotronic.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 17:30:09 UTC", "last_seen": "2026-03-10 17:30:09 UTC", "sightings": 1 }, { "indicator": "https://n-44-b9.velotronic.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 17:27:11 UTC", "last_seen": "2026-03-10 17:27:11 UTC", "sightings": 1 }, { "indicator": "http://222.138.119.139:38740/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 17:22:18 UTC", "last_seen": "2026-03-10 17:22:18 UTC", "sightings": 1 }, { "indicator": "http://59.96.141.228:37061/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 17:21:20 UTC", "last_seen": "2026-03-10 17:21:20 UTC", "sightings": 1 }, { "indicator": "https://v-89-a2.velotronic.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 17:19:11 UTC", "last_seen": "2026-03-10 17:19:11 UTC", "sightings": 1 }, { "indicator": "http://222.138.134.251:51117/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 17:15:20 UTC", "last_seen": "2026-03-10 17:15:20 UTC", "sightings": 1 }, { "indicator": "http://110.37.36.23:35728/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-10 17:14:17 UTC", "last_seen": "2026-03-10 17:14:17 UTC", "sightings": 1 }, { "indicator": "https://mn776-t.dervishcore.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 17:14:06 UTC", "last_seen": "2026-03-10 17:14:06 UTC", "sightings": 1 }, { "indicator": "https://lp440-q.dervishcore.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 17:11:06 UTC", "last_seen": "2026-03-10 17:11:06 UTC", "sightings": 1 }, { "indicator": "https://ka221-z.dervishcore.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 17:05:15 UTC", "last_seen": "2026-03-10 17:05:15 UTC", "sightings": 1 }, { "indicator": "http://59.88.234.88:41326/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 17:02:18 UTC", "last_seen": "2026-03-10 17:02:18 UTC", "sightings": 1 }, { "indicator": "https://jd899-x.dervishcore.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 17:02:14 UTC", "last_seen": "2026-03-10 17:02:14 UTC", "sightings": 1 }, { "indicator": "http://42.56.183.69:49208/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 16:56:18 UTC", "last_seen": "2026-03-10 16:56:18 UTC", "sightings": 1 }, { "indicator": "http://222.138.134.251:51117/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 16:54:09 UTC", "last_seen": "2026-03-10 16:54:09 UTC", "sightings": 1 }, { "indicator": "http://45.141.26.73/bins/sora.x86", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mirai", "x86-32" ], "first_seen": "2026-03-10 16:54:09 UTC", "last_seen": "2026-03-10 16:54:09 UTC", "sightings": 1 }, { "indicator": "http://115.62.133.145:59406/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 16:46:14 UTC", "last_seen": "2026-03-10 16:46:14 UTC", "sightings": 1 }, { "indicator": "http://182.127.133.104:43283/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 16:37:13 UTC", "last_seen": "2026-03-10 16:37:13 UTC", "sightings": 1 }, { "indicator": "https://p9d-x77j.xylophis.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 16:36:06 UTC", "last_seen": "2026-03-10 16:36:06 UTC", "sightings": 1 }, { "indicator": "http://115.50.27.6:56782/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 16:32:07 UTC", "last_seen": "2026-03-10 16:32:07 UTC", "sightings": 1 }, { "indicator": "https://k3l-55v6.xylophis.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 16:30:09 UTC", "last_seen": "2026-03-10 16:30:09 UTC", "sightings": 1 }, { "indicator": "https://z8t-m11q.xylophis.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 16:24:08 UTC", "last_seen": "2026-03-10 16:24:08 UTC", "sightings": 1 }, { "indicator": "http://117.241.205.114:52533/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-10 16:20:24 UTC", "last_seen": "2026-03-10 16:20:24 UTC", "sightings": 1 }, { "indicator": "http://45.131.182.252/1.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543", "Vidar" ], "first_seen": "2026-03-10 16:20:21 UTC", "last_seen": "2026-03-10 16:20:21 UTC", "sightings": 1 }, { "indicator": "http://110.36.70.136:55706/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-10 16:19:18 UTC", "last_seen": "2026-03-10 16:19:18 UTC", "sightings": 1 }, { "indicator": "https://a4x-99f2.xylophis.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 16:18:06 UTC", "last_seen": "2026-03-10 16:18:06 UTC", "sightings": 1 }, { "indicator": "http://175.151.198.114:36114/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 16:17:20 UTC", "last_seen": "2026-03-10 16:17:20 UTC", "sightings": 1 }, { "indicator": "http://182.127.133.104:43283/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 16:12:19 UTC", "last_seen": "2026-03-10 16:12:19 UTC", "sightings": 1 }, { "indicator": "https://learsup.webback.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 16:12:11 UTC", "last_seen": "2026-03-10 16:12:11 UTC", "sightings": 1 }, { "indicator": "http://115.62.133.145:59406/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 16:10:19 UTC", "last_seen": "2026-03-10 16:10:19 UTC", "sightings": 1 }, { "indicator": "https://importuni.webback.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 16:09:14 UTC", "last_seen": "2026-03-10 16:09:14 UTC", "sightings": 1 }, { "indicator": "http://115.50.27.6:56782/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 16:06:12 UTC", "last_seen": "2026-03-10 16:06:12 UTC", "sightings": 1 }, { "indicator": "https://comp7-stack.webback.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 16:05:07 UTC", "last_seen": "2026-03-10 16:05:07 UTC", "sightings": 1 }, { "indicator": "http://110.36.70.136:55706/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-10 15:59:21 UTC", "last_seen": "2026-03-10 15:59:21 UTC", "sightings": 1 }, { "indicator": "https://hodz.webback.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 15:58:13 UTC", "last_seen": "2026-03-10 15:58:13 UTC", "sightings": 1 }, { "indicator": "https://meeting-app.sbs/GoogleMeet/Windows/download.php", "indicator_type": "url", "source": "URLhaus", "tags": [ "AteraAgent" ], "first_seen": "2026-03-10 15:56:16 UTC", "last_seen": "2026-03-10 15:56:16 UTC", "sightings": 1 }, { "indicator": "https://teak.gen.tr/Z/zoom/Windows/download.php", "indicator_type": "url", "source": "URLhaus", "tags": [ "connectwise" ], "first_seen": "2026-03-10 15:56:16 UTC", "last_seen": "2026-03-10 15:56:16 UTC", "sightings": 1 }, { "indicator": "https://googmeetinginvitation.com/Windows/download.php", "indicator_type": "url", "source": "URLhaus", "tags": [ "DattoRMM" ], "first_seen": "2026-03-10 15:56:15 UTC", "last_seen": "2026-03-10 15:56:15 UTC", "sightings": 1 }, { "indicator": "http://85.137.253.58:9000/Test.apk", "indicator_type": "url", "source": "URLhaus", "tags": [ "CoinMiner" ], "first_seen": "2026-03-10 15:56:13 UTC", "last_seen": "2026-03-10 15:56:13 UTC", "sightings": 1 }, { "indicator": "http://85.137.253.58:9000/svchost.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "AsyncRAT" ], "first_seen": "2026-03-10 15:56:09 UTC", "last_seen": "2026-03-10 15:56:09 UTC", "sightings": 1 }, { "indicator": "http://85.137.253.58:9000/csrss.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "njRAT" ], "first_seen": "2026-03-10 15:56:08 UTC", "last_seen": "2026-03-10 15:56:08 UTC", "sightings": 1 }, { "indicator": "http://85.137.253.58:9000/updater.exe", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-10 15:56:08 UTC", "last_seen": "2026-03-10 15:56:08 UTC", "sightings": 1 }, { "indicator": "http://85.137.253.58:9000/XClient.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "AsyncRAT" ], "first_seen": "2026-03-10 15:56:08 UTC", "last_seen": "2026-03-10 15:56:08 UTC", "sightings": 1 }, { "indicator": "http://85.137.253.58:9000/f6l62sJS.exe", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-10 15:56:08 UTC", "last_seen": "2026-03-10 15:56:08 UTC", "sightings": 1 }, { "indicator": "http://182.121.248.101:43190/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 15:55:24 UTC", "last_seen": "2026-03-10 15:55:24 UTC", "sightings": 1 }, { "indicator": "http://222.138.119.139:38740/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 15:52:28 UTC", "last_seen": "2026-03-10 15:52:28 UTC", "sightings": 1 }, { "indicator": "https://canv-shi.oakstart.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 15:52:09 UTC", "last_seen": "2026-03-10 15:52:09 UTC", "sightings": 1 }, { "indicator": "https://nd77.oakstart.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 15:48:09 UTC", "last_seen": "2026-03-10 15:48:09 UTC", "sightings": 1 }, { "indicator": "https://runtim-grid.oakstart.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 15:38:10 UTC", "last_seen": "2026-03-10 15:38:10 UTC", "sightings": 1 }, { "indicator": "http://115.55.29.230:51388/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 15:30:22 UTC", "last_seen": "2026-03-10 15:30:22 UTC", "sightings": 1 }, { "indicator": "http://182.121.248.101:43190/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 15:29:19 UTC", "last_seen": "2026-03-10 15:29:19 UTC", "sightings": 1 }, { "indicator": "https://fdgq.oakstart.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 15:29:16 UTC", "last_seen": "2026-03-10 15:29:16 UTC", "sightings": 1 }, { "indicator": "http://125.47.216.21:48620/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 15:23:20 UTC", "last_seen": "2026-03-10 15:23:20 UTC", "sightings": 1 }, { "indicator": "https://sub-ve1v.starload.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 15:23:12 UTC", "last_seen": "2026-03-10 15:23:12 UTC", "sightings": 1 }, { "indicator": "https://rs95h.starload.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 15:18:12 UTC", "last_seen": "2026-03-10 15:18:12 UTC", "sightings": 1 }, { "indicator": "https://outl-grove.starload.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 15:13:13 UTC", "last_seen": "2026-03-10 15:13:13 UTC", "sightings": 1 }, { "indicator": "http://42.235.74.57:56509/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 15:10:24 UTC", "last_seen": "2026-03-10 15:10:24 UTC", "sightings": 1 }, { "indicator": "https://metric2-route.starload.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 15:10:15 UTC", "last_seen": "2026-03-10 15:10:15 UTC", "sightings": 1 }, { "indicator": "https://r3cor-wave.appcheck.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 15:06:13 UTC", "last_seen": "2026-03-10 15:06:13 UTC", "sightings": 1 }, { "indicator": "https://layotra.appcheck.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 14:58:13 UTC", "last_seen": "2026-03-10 14:58:13 UTC", "sightings": 1 }, { "indicator": "https://zen-draum.appcheck.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 14:53:12 UTC", "last_seen": "2026-03-10 14:53:12 UTC", "sightings": 1 }, { "indicator": "http://91.143.172.196:35719/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 14:53:09 UTC", "last_seen": "2026-03-10 14:53:09 UTC", "sightings": 1 }, { "indicator": "https://quormarkix.appcheck.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 14:44:15 UTC", "last_seen": "2026-03-10 14:44:15 UTC", "sightings": 1 }, { "indicator": "http://182.117.169.127:41173/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-10 14:43:21 UTC", "last_seen": "2026-03-10 14:43:21 UTC", "sightings": 1 }, { "indicator": "https://chefacto.appdeck.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 14:41:12 UTC", "last_seen": "2026-03-10 14:41:12 UTC", "sightings": 1 }, { "indicator": "http://182.117.169.127:41173/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-10 14:40:22 UTC", "last_seen": "2026-03-10 14:40:22 UTC", "sightings": 1 }, { "indicator": "http://117.216.17.138:33893/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 14:36:21 UTC", "last_seen": "2026-03-10 14:36:21 UTC", "sightings": 1 }, { "indicator": "https://merlineos4.appdeck.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 14:34:13 UTC", "last_seen": "2026-03-10 14:34:13 UTC", "sightings": 1 }, { "indicator": "http://96.66.24.241:39432/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 14:32:21 UTC", "last_seen": "2026-03-10 14:32:21 UTC", "sightings": 1 }, { "indicator": "https://thr3a-reach.appdeck.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 14:31:09 UTC", "last_seen": "2026-03-10 14:31:09 UTC", "sightings": 1 }, { "indicator": "http://110.36.30.37:58252/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 14:30:21 UTC", "last_seen": "2026-03-10 14:30:21 UTC", "sightings": 1 }, { "indicator": "http://115.58.161.24:35443/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 14:25:22 UTC", "last_seen": "2026-03-10 14:25:22 UTC", "sightings": 1 }, { "indicator": "http://192.109.200.186/huhu/titanjr.arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-10 14:25:09 UTC", "last_seen": "2026-03-10 14:25:09 UTC", "sightings": 1 }, { "indicator": "http://192.109.200.186/huhu/titanjr.arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-10 14:25:09 UTC", "last_seen": "2026-03-10 14:25:09 UTC", "sightings": 1 }, { "indicator": "https://googleplaystoree.pages.dev/assets/AGENDA2026.apk", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-10 14:24:35 UTC", "last_seen": "2026-03-10 14:24:35 UTC", "sightings": 1 }, { "indicator": "https://preciosasjoyitas.com.mx/pdf/pdf/ScreenConnect.ClientSetup.msi", "indicator_type": "url", "source": "URLhaus", "tags": [ "connectwise" ], "first_seen": "2026-03-10 14:24:34 UTC", "last_seen": "2026-03-10 14:24:34 UTC", "sightings": 1 }, { "indicator": "https://vendasdesistes.com.br/batremcosv7.txt", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-10 14:24:31 UTC", "last_seen": "2026-03-10 14:24:31 UTC", "sightings": 1 }, { "indicator": "https://tykkprivate-uzb.sbs/TikTok18.apk", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-10 14:24:22 UTC", "last_seen": "2026-03-10 14:24:22 UTC", "sightings": 1 }, { "indicator": "https://pub-44db1288f9da4543b525029ecd44e149.r2.dev/SOCIAL-SECURITY_DOCUMENTS_2025.exe", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-10 14:24:21 UTC", "last_seen": "2026-03-10 14:24:21 UTC", "sightings": 1 }, { "indicator": "https://pub-cb25e0ca1e5b4d3b8b4dc881580f5473.r2.dev/ScreenConnect.ClientSetup.msi", "indicator_type": "url", "source": "URLhaus", "tags": [ "connectwise" ], "first_seen": "2026-03-10 14:24:21 UTC", "last_seen": "2026-03-10 14:24:21 UTC", "sightings": 1 }, { "indicator": "https://labrujuladiario.com/tmp/Module8.ps1", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-10 14:24:21 UTC", "last_seen": "2026-03-10 14:24:21 UTC", "sightings": 1 }, { "indicator": "https://fullbet138.money/aplikasi/Fullbet138.apk", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-10 14:24:20 UTC", "last_seen": "2026-03-10 14:24:20 UTC", "sightings": 1 }, { "indicator": "http://192.109.200.186/huhu/titanjr.arm", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-10 14:24:13 UTC", "last_seen": "2026-03-10 14:24:13 UTC", "sightings": 1 }, { "indicator": "http://192.109.200.200/breakingbad/arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-10 14:24:13 UTC", "last_seen": "2026-03-10 14:24:13 UTC", "sightings": 1 }, { "indicator": "http://192.109.200.186/huhu/titanjr.i686", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-10 14:24:13 UTC", "last_seen": "2026-03-10 14:24:13 UTC", "sightings": 1 }, { "indicator": "http://192.109.200.186/huhu/titanjr.x86_64", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-10 14:24:13 UTC", "last_seen": "2026-03-10 14:24:13 UTC", "sightings": 1 }, { "indicator": "http://192.109.200.200/breakingbad/mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-10 14:24:13 UTC", "last_seen": "2026-03-10 14:24:13 UTC", "sightings": 1 }, { "indicator": "http://192.109.200.186/huhu/titanjr.ppc440", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-10 14:24:13 UTC", "last_seen": "2026-03-10 14:24:13 UTC", "sightings": 1 }, { "indicator": "http://192.109.200.186/huhu/titanjr.arc", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-10 14:24:13 UTC", "last_seen": "2026-03-10 14:24:13 UTC", "sightings": 1 }, { "indicator": "http://192.109.200.186/huhu/titanjr.mipsl", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-10 14:24:13 UTC", "last_seen": "2026-03-10 14:24:13 UTC", "sightings": 1 }, { "indicator": "http://192.109.200.186/huhu/titanjr.arm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-10 14:24:13 UTC", "last_seen": "2026-03-10 14:24:13 UTC", "sightings": 1 }, { "indicator": "http://192.109.200.186/huhu/titanjr.ppc", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-10 14:24:13 UTC", "last_seen": "2026-03-10 14:24:13 UTC", "sightings": 1 }, { "indicator": "http://192.109.200.186/huhu/titanjr.sh4", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-10 14:24:13 UTC", "last_seen": "2026-03-10 14:24:13 UTC", "sightings": 1 }, { "indicator": "http://192.109.200.186/huhu/titanjr.mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-10 14:24:13 UTC", "last_seen": "2026-03-10 14:24:13 UTC", "sightings": 1 }, { "indicator": "http://192.109.200.186/all.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-10 14:24:13 UTC", "last_seen": "2026-03-10 14:24:13 UTC", "sightings": 1 }, { "indicator": "http://192.109.200.186/huhu/titanjr.m68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-10 14:24:13 UTC", "last_seen": "2026-03-10 14:24:13 UTC", "sightings": 1 }, { "indicator": "http://192.109.200.186/huhu/titanjr.i486", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-10 14:24:13 UTC", "last_seen": "2026-03-10 14:24:13 UTC", "sightings": 1 }, { "indicator": "http://192.109.200.200/breakingbad/x86", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-10 14:24:13 UTC", "last_seen": "2026-03-10 14:24:13 UTC", "sightings": 1 }, { "indicator": "http://192.109.200.186/huhu/titanjr.x86_32", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-10 14:24:13 UTC", "last_seen": "2026-03-10 14:24:13 UTC", "sightings": 1 }, { "indicator": "http://112.198.186.100:46144/Mozi.a", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-10 14:24:12 UTC", "last_seen": "2026-03-10 14:24:12 UTC", "sightings": 1 }, { "indicator": "http://91.143.172.196:35719/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 14:22:16 UTC", "last_seen": "2026-03-10 14:22:16 UTC", "sightings": 1 }, { "indicator": "https://signalcraft.appdeck.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 14:20:14 UTC", "last_seen": "2026-03-10 14:20:14 UTC", "sightings": 1 }, { "indicator": "https://handlerasset.winlog.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 14:14:11 UTC", "last_seen": "2026-03-10 14:14:11 UTC", "sightings": 1 }, { "indicator": "https://arkcoreex.winlog.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 14:09:12 UTC", "last_seen": "2026-03-10 14:09:12 UTC", "sightings": 1 }, { "indicator": "http://117.216.17.138:33893/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 14:07:34 UTC", "last_seen": "2026-03-10 14:07:34 UTC", "sightings": 1 }, { "indicator": "https://nobclo.winlog.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 14:04:13 UTC", "last_seen": "2026-03-10 14:04:13 UTC", "sightings": 1 }, { "indicator": "http://96.66.24.241:39432/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 14:02:17 UTC", "last_seen": "2026-03-10 14:02:17 UTC", "sightings": 1 }, { "indicator": "http://115.58.161.24:35443/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 13:59:17 UTC", "last_seen": "2026-03-10 13:59:17 UTC", "sightings": 1 }, { "indicator": "https://dispatchercasc.winlog.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 13:58:13 UTC", "last_seen": "2026-03-10 13:58:13 UTC", "sightings": 1 }, { "indicator": "http://117.244.68.123:50562/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 13:52:27 UTC", "last_seen": "2026-03-10 13:52:27 UTC", "sightings": 1 }, { "indicator": "https://icetermi.decktop.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 13:52:12 UTC", "last_seen": "2026-03-10 13:52:12 UTC", "sightings": 1 }, { "indicator": "http://110.37.115.90:60180/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 13:51:19 UTC", "last_seen": "2026-03-10 13:51:19 UTC", "sightings": 1 }, { "indicator": "http://59.180.181.91:60023/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 13:49:17 UTC", "last_seen": "2026-03-10 13:49:17 UTC", "sightings": 1 }, { "indicator": "https://1ink9-bridge.decktop.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 13:47:09 UTC", "last_seen": "2026-03-10 13:47:09 UTC", "sightings": 1 }, { "indicator": "https://invoicepixe.decktop.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 13:40:09 UTC", "last_seen": "2026-03-10 13:40:09 UTC", "sightings": 1 }, { "indicator": "http://115.63.55.105:42295/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 13:37:17 UTC", "last_seen": "2026-03-10 13:37:17 UTC", "sightings": 1 }, { "indicator": "https://splitboos.decktop.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 13:34:13 UTC", "last_seen": "2026-03-10 13:34:13 UTC", "sightings": 1 }, { "indicator": "http://110.37.59.113:55486/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 13:32:13 UTC", "last_seen": "2026-03-10 13:32:13 UTC", "sightings": 1 }, { "indicator": "http://110.37.65.231:49484/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 13:31:08 UTC", "last_seen": "2026-03-10 13:31:08 UTC", "sightings": 1 }, { "indicator": "https://velnex4ex.soldop.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 13:27:12 UTC", "last_seen": "2026-03-10 13:27:12 UTC", "sightings": 1 }, { "indicator": "http://115.55.29.230:51388/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 13:23:19 UTC", "last_seen": "2026-03-10 13:23:19 UTC", "sightings": 1 }, { "indicator": "https://en3vikif.soldop.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 13:22:12 UTC", "last_seen": "2026-03-10 13:22:12 UTC", "sightings": 1 }, { "indicator": "http://117.223.141.106:39707/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips" ], "first_seen": "2026-03-10 13:21:10 UTC", "last_seen": "2026-03-10 13:21:10 UTC", "sightings": 1 }, { "indicator": "https://tqiauc.soldop.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 13:15:13 UTC", "last_seen": "2026-03-10 13:15:13 UTC", "sightings": 1 }, { "indicator": "http://42.55.2.130:55599/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 13:13:20 UTC", "last_seen": "2026-03-10 13:13:20 UTC", "sightings": 1 }, { "indicator": "http://115.63.55.105:42295/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 13:12:19 UTC", "last_seen": "2026-03-10 13:12:19 UTC", "sightings": 1 }, { "indicator": "http://110.37.11.215:49837/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 13:08:15 UTC", "last_seen": "2026-03-10 13:08:15 UTC", "sightings": 1 }, { "indicator": "http://179.108.90.55:53325/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-10 13:03:17 UTC", "last_seen": "2026-03-10 13:03:17 UTC", "sightings": 1 }, { "indicator": "https://h4rd-cache.soldop.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 13:03:16 UTC", "last_seen": "2026-03-10 13:03:16 UTC", "sightings": 1 }, { "indicator": "http://110.37.11.215:49837/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 13:02:08 UTC", "last_seen": "2026-03-10 13:02:08 UTC", "sightings": 1 }, { "indicator": "https://dispatc-tra.windev.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 12:58:12 UTC", "last_seen": "2026-03-10 12:58:12 UTC", "sightings": 1 }, { "indicator": "http://59.88.12.81:55545/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 12:54:14 UTC", "last_seen": "2026-03-10 12:54:14 UTC", "sightings": 1 }, { "indicator": "https://vor-crestet.windev.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 12:51:13 UTC", "last_seen": "2026-03-10 12:51:13 UTC", "sightings": 1 }, { "indicator": "http://117.223.141.106:39707/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips" ], "first_seen": "2026-03-10 12:50:24 UTC", "last_seen": "2026-03-10 12:50:24 UTC", "sightings": 1 }, { "indicator": "http://110.37.52.73:36883/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 12:50:12 UTC", "last_seen": "2026-03-10 12:50:12 UTC", "sightings": 1 }, { "indicator": "http://179.108.90.55:53325/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-10 12:46:18 UTC", "last_seen": "2026-03-10 12:46:18 UTC", "sightings": 1 }, { "indicator": "https://v4ul6-scope.windev.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 12:44:12 UTC", "last_seen": "2026-03-10 12:44:12 UTC", "sightings": 1 }, { "indicator": "http://42.4.115.94:50685/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 12:42:18 UTC", "last_seen": "2026-03-10 12:42:18 UTC", "sightings": 1 }, { "indicator": "http://115.50.226.102:57231/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 12:41:10 UTC", "last_seen": "2026-03-10 12:41:10 UTC", "sightings": 1 }, { "indicator": "https://open1-branch.windev.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 12:39:13 UTC", "last_seen": "2026-03-10 12:39:13 UTC", "sightings": 1 }, { "indicator": "http://110.37.65.231:49484/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 12:37:18 UTC", "last_seen": "2026-03-10 12:37:18 UTC", "sightings": 1 }, { "indicator": "https://basa-cod.skyroad.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 12:33:11 UTC", "last_seen": "2026-03-10 12:33:11 UTC", "sightings": 1 }, { "indicator": "https://mastoken.skyroad.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 12:28:10 UTC", "last_seen": "2026-03-10 12:28:10 UTC", "sightings": 1 }, { "indicator": "http://115.49.243.31:39353/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 12:27:21 UTC", "last_seen": "2026-03-10 12:27:21 UTC", "sightings": 1 }, { "indicator": "http://59.182.145.50:39691/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 12:27:21 UTC", "last_seen": "2026-03-10 12:27:21 UTC", "sightings": 1 }, { "indicator": "http://115.55.253.116:53154/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 12:26:10 UTC", "last_seen": "2026-03-10 12:26:10 UTC", "sightings": 1 }, { "indicator": "http://115.57.183.127:43744/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 12:26:10 UTC", "last_seen": "2026-03-10 12:26:10 UTC", "sightings": 1 }, { "indicator": "http://115.55.253.116:53154/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 12:24:16 UTC", "last_seen": "2026-03-10 12:24:16 UTC", "sightings": 1 }, { "indicator": "http://115.57.183.127:43744/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 12:24:16 UTC", "last_seen": "2026-03-10 12:24:16 UTC", "sightings": 1 }, { "indicator": "http://59.88.12.81:55545/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 12:24:14 UTC", "last_seen": "2026-03-10 12:24:14 UTC", "sightings": 1 }, { "indicator": "https://st0n-index.skyroad.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 12:21:11 UTC", "last_seen": "2026-03-10 12:21:11 UTC", "sightings": 1 }, { "indicator": "https://72jk.skyroad.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 12:15:15 UTC", "last_seen": "2026-03-10 12:15:15 UTC", "sightings": 1 }, { "indicator": "http://115.50.226.102:57231/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 12:13:21 UTC", "last_seen": "2026-03-10 12:13:21 UTC", "sightings": 1 }, { "indicator": "http://42.4.115.94:50685/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 12:09:15 UTC", "last_seen": "2026-03-10 12:09:15 UTC", "sightings": 1 }, { "indicator": "https://gath3r1-phase.skybit.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 12:08:13 UTC", "last_seen": "2026-03-10 12:08:13 UTC", "sightings": 1 }, { "indicator": "https://kt9p9evj.lighthouseup.digital/?=check&&actmn=peyjyLtrGRbjEgND", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-10 12:08:13 UTC", "last_seen": "2026-03-10 12:08:13 UTC", "sightings": 1 }, { "indicator": "http://27.37.113.228:43810/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 12:00:16 UTC", "last_seen": "2026-03-10 12:00:16 UTC", "sightings": 1 }, { "indicator": "http://110.37.39.234:52837/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-10 12:00:14 UTC", "last_seen": "2026-03-10 12:00:14 UTC", "sightings": 1 }, { "indicator": "http://59.182.145.50:39691/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 11:58:36 UTC", "last_seen": "2026-03-10 11:58:36 UTC", "sightings": 1 }, { "indicator": "http://27.37.113.228:43810/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 11:53:16 UTC", "last_seen": "2026-03-10 11:53:16 UTC", "sightings": 1 }, { "indicator": "https://glyphcrest.skybit.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 11:53:08 UTC", "last_seen": "2026-03-10 11:53:08 UTC", "sightings": 1 }, { "indicator": "https://t3rm-trace.skybit.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 11:48:12 UTC", "last_seen": "2026-03-10 11:48:12 UTC", "sightings": 1 }, { "indicator": "http://117.205.168.233:54247/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 11:47:22 UTC", "last_seen": "2026-03-10 11:47:22 UTC", "sightings": 1 }, { "indicator": "https://xhepy.skybit.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 11:41:13 UTC", "last_seen": "2026-03-10 11:41:13 UTC", "sightings": 1 }, { "indicator": "http://115.55.6.213:51850/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 11:40:18 UTC", "last_seen": "2026-03-10 11:40:18 UTC", "sightings": 1 }, { "indicator": "http://117.205.168.233:54247/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 11:40:18 UTC", "last_seen": "2026-03-10 11:40:18 UTC", "sightings": 1 }, { "indicator": "https://5xt2jam.moondev.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 11:36:15 UTC", "last_seen": "2026-03-10 11:36:15 UTC", "sightings": 1 }, { "indicator": "https://sdkwinter.moondev.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 11:30:08 UTC", "last_seen": "2026-03-10 11:30:08 UTC", "sightings": 1 }, { "indicator": "https://canvsoc.moondev.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 11:23:15 UTC", "last_seen": "2026-03-10 11:23:15 UTC", "sightings": 1 }, { "indicator": "https://focufield.moondev.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 11:18:14 UTC", "last_seen": "2026-03-10 11:18:14 UTC", "sightings": 1 }, { "indicator": "http://115.55.6.213:51850/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 11:14:22 UTC", "last_seen": "2026-03-10 11:14:22 UTC", "sightings": 1 }, { "indicator": "http://27.194.35.14:36331/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 11:13:07 UTC", "last_seen": "2026-03-10 11:13:07 UTC", "sightings": 1 }, { "indicator": "https://st4r-field.starapi.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 11:06:15 UTC", "last_seen": "2026-03-10 11:06:15 UTC", "sightings": 1 }, { "indicator": "http://182.113.15.7:48464/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 10:59:18 UTC", "last_seen": "2026-03-10 10:59:18 UTC", "sightings": 1 }, { "indicator": "http://182.113.15.7:48464/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 10:58:09 UTC", "last_seen": "2026-03-10 10:58:09 UTC", "sightings": 1 }, { "indicator": "http://64.89.161.144:28816/CZRmrtxnrNONBXhwfFeqjNfBrliNaShG", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf" ], "first_seen": "2026-03-10 10:49:19 UTC", "last_seen": "2026-03-10 10:49:19 UTC", "sightings": 1 }, { "indicator": "http://110.37.85.16:51696/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 10:49:18 UTC", "last_seen": "2026-03-10 10:49:18 UTC", "sightings": 1 }, { "indicator": "https://dl.dropboxusercontent.com/scl/fi/v2kq2p1pi88qdu0bwyi2t/ZoomInstallerUpdate8.3.zip?rlkey=vcceb5woskdxr09i7w9b6zhra&st=b4sxzsuh&dl=1", "indicator_type": "url", "source": "URLhaus", "tags": [ "GoToResolve", "vbs", "Zoom" ], "first_seen": "2026-03-10 10:49:09 UTC", "last_seen": "2026-03-10 10:49:09 UTC", "sightings": 1 }, { "indicator": "https://www.dropbox.com/scl/fi/n21z2a7fwawlrk56o9cb9/vmware-viclient-0dfc12e1.exe?rlkey=kjx4biy1xc3qf2mogq57pv80b&st=irspqesm&dl=1", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-10 10:49:09 UTC", "last_seen": "2026-03-10 10:49:09 UTC", "sightings": 1 }, { "indicator": "https://kelcoreet.starapi.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 10:44:13 UTC", "last_seen": "2026-03-10 10:44:13 UTC", "sightings": 1 }, { "indicator": "http://182.127.108.136:34568/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 10:42:21 UTC", "last_seen": "2026-03-10 10:42:21 UTC", "sightings": 1 }, { "indicator": "http://27.194.35.14:36331/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 10:40:17 UTC", "last_seen": "2026-03-10 10:40:17 UTC", "sightings": 1 }, { "indicator": "https://nad1d.starapi.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 10:38:12 UTC", "last_seen": "2026-03-10 10:38:12 UTC", "sightings": 1 }, { "indicator": "https://kelmesha3.ironhub.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 10:34:12 UTC", "last_seen": "2026-03-10 10:34:12 UTC", "sightings": 1 }, { "indicator": "http://115.49.243.31:39353/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 10:32:22 UTC", "last_seen": "2026-03-10 10:32:22 UTC", "sightings": 1 }, { "indicator": "https://google-2gy.pages.dev/chrome.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "rustystealer" ], "first_seen": "2026-03-10 10:27:15 UTC", "last_seen": "2026-03-10 10:27:15 UTC", "sightings": 1 }, { "indicator": "https://eastvine.ironhub.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 10:26:17 UTC", "last_seen": "2026-03-10 10:26:17 UTC", "sightings": 1 }, { "indicator": "http://117.206.36.109:58816/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 10:22:15 UTC", "last_seen": "2026-03-10 10:22:15 UTC", "sightings": 1 }, { "indicator": "https://garde-sha.ironhub.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 10:20:17 UTC", "last_seen": "2026-03-10 10:20:17 UTC", "sightings": 1 }, { "indicator": "http://117.213.249.95:42248/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 10:19:09 UTC", "last_seen": "2026-03-10 10:19:09 UTC", "sightings": 1 }, { "indicator": "http://117.245.141.97:53799/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 10:18:16 UTC", "last_seen": "2026-03-10 10:18:16 UTC", "sightings": 1 }, { "indicator": "http://123.5.185.55:53533/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 10:17:11 UTC", "last_seen": "2026-03-10 10:17:11 UTC", "sightings": 1 }, { "indicator": "https://u68ojr.ironhub.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 10:03:12 UTC", "last_seen": "2026-03-10 10:03:12 UTC", "sightings": 1 }, { "indicator": "http://123.5.185.55:53533/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 10:00:19 UTC", "last_seen": "2026-03-10 10:00:19 UTC", "sightings": 1 }, { "indicator": "http://39.187.68.209:38945/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 10:00:18 UTC", "last_seen": "2026-03-10 10:00:18 UTC", "sightings": 1 }, { "indicator": "http://110.36.15.18:37139/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 09:57:22 UTC", "last_seen": "2026-03-10 09:57:22 UTC", "sightings": 1 }, { "indicator": "https://48z9.lakeweb.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 09:57:12 UTC", "last_seen": "2026-03-10 09:57:12 UTC", "sightings": 1 }, { "indicator": "http://117.213.249.95:42248/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 09:55:17 UTC", "last_seen": "2026-03-10 09:55:17 UTC", "sightings": 1 }, { "indicator": "http://117.206.36.109:58816/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 09:52:33 UTC", "last_seen": "2026-03-10 09:52:33 UTC", "sightings": 1 }, { "indicator": "http://39.187.68.209:38945/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 09:51:19 UTC", "last_seen": "2026-03-10 09:51:19 UTC", "sightings": 1 }, { "indicator": "http://182.117.129.134:38162/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 09:50:19 UTC", "last_seen": "2026-03-10 09:50:19 UTC", "sightings": 1 }, { "indicator": "https://supplybrave.lakeweb.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 09:47:12 UTC", "last_seen": "2026-03-10 09:47:12 UTC", "sightings": 1 }, { "indicator": "http://110.37.13.110:51166/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 09:44:23 UTC", "last_seen": "2026-03-10 09:44:23 UTC", "sightings": 1 }, { "indicator": "http://113.75.12.5:55690/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-10 09:43:24 UTC", "last_seen": "2026-03-10 09:43:24 UTC", "sightings": 1 }, { "indicator": "http://61.52.87.63:49958/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 09:41:18 UTC", "last_seen": "2026-03-10 09:41:18 UTC", "sightings": 1 }, { "indicator": "https://quornexum.lakeweb.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 09:40:15 UTC", "last_seen": "2026-03-10 09:40:15 UTC", "sightings": 1 }, { "indicator": "https://vellithos7.lakeweb.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 09:34:07 UTC", "last_seen": "2026-03-10 09:34:07 UTC", "sightings": 1 }, { "indicator": "http://110.186.230.9:58137/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-10 09:32:27 UTC", "last_seen": "2026-03-10 09:32:27 UTC", "sightings": 1 }, { "indicator": "http://110.38.221.108:60505/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 09:31:19 UTC", "last_seen": "2026-03-10 09:31:19 UTC", "sightings": 1 }, { "indicator": "http://123.9.198.26:34847/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 09:29:21 UTC", "last_seen": "2026-03-10 09:29:21 UTC", "sightings": 1 }, { "indicator": "https://lagoo-craft.rockapp.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 09:28:14 UTC", "last_seen": "2026-03-10 09:28:14 UTC", "sightings": 1 }, { "indicator": "http://110.37.52.73:36883/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 09:27:19 UTC", "last_seen": "2026-03-10 09:27:19 UTC", "sightings": 1 }, { "indicator": "https://n5s8iqqg.arabtransplant.digital/?=check&&actmn=KtfcyHxEIWogcNVV", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-10 09:25:14 UTC", "last_seen": "2026-03-10 09:25:14 UTC", "sightings": 1 }, { "indicator": "https://grovalue.rockapp.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 09:22:13 UTC", "last_seen": "2026-03-10 09:22:13 UTC", "sightings": 1 }, { "indicator": "http://117.216.177.12:39054/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 09:17:23 UTC", "last_seen": "2026-03-10 09:17:23 UTC", "sightings": 1 }, { "indicator": "https://studiosha.rockapp.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 09:17:13 UTC", "last_seen": "2026-03-10 09:17:13 UTC", "sightings": 1 }, { "indicator": "http://60.243.207.15:57542/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 09:15:20 UTC", "last_seen": "2026-03-10 09:15:20 UTC", "sightings": 1 }, { "indicator": "http://110.37.13.110:51166/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 09:13:23 UTC", "last_seen": "2026-03-10 09:13:23 UTC", "sightings": 1 }, { "indicator": "http://123.9.198.26:34847/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 09:12:28 UTC", "last_seen": "2026-03-10 09:12:28 UTC", "sightings": 1 }, { "indicator": "https://importsan.rockapp.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 09:10:15 UTC", "last_seen": "2026-03-10 09:10:15 UTC", "sightings": 1 }, { "indicator": "http://113.75.12.5:55690/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-10 09:07:08 UTC", "last_seen": "2026-03-10 09:07:08 UTC", "sightings": 1 }, { "indicator": "http://110.37.61.34:44127/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 09:02:19 UTC", "last_seen": "2026-03-10 09:02:19 UTC", "sightings": 1 }, { "indicator": "https://kel-tideix.goldsys.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 09:02:14 UTC", "last_seen": "2026-03-10 09:02:14 UTC", "sightings": 1 }, { "indicator": "http://42.227.245.57:44314/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 08:59:15 UTC", "last_seen": "2026-03-10 08:59:15 UTC", "sightings": 1 }, { "indicator": "http://122.148.184.156:54123/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-10 08:58:23 UTC", "last_seen": "2026-03-10 08:58:23 UTC", "sightings": 1 }, { "indicator": "http://175.169.124.204:33390/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 08:57:20 UTC", "last_seen": "2026-03-10 08:57:20 UTC", "sightings": 1 }, { "indicator": "http://117.241.56.53:60662/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-10 08:53:21 UTC", "last_seen": "2026-03-10 08:53:21 UTC", "sightings": 1 }, { "indicator": "https://buildsprou.goldsys.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 08:53:06 UTC", "last_seen": "2026-03-10 08:53:06 UTC", "sightings": 1 }, { "indicator": "http://117.216.177.12:39054/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 08:52:29 UTC", "last_seen": "2026-03-10 08:52:29 UTC", "sightings": 1 }, { "indicator": "http://115.48.0.169:38334/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 08:50:23 UTC", "last_seen": "2026-03-10 08:50:23 UTC", "sightings": 1 }, { "indicator": "http://158.94.211.222/files/7942715918/1SbgglW.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543", "QuasarRAT" ], "first_seen": "2026-03-10 08:47:07 UTC", "last_seen": "2026-03-10 08:47:07 UTC", "sightings": 1 }, { "indicator": "https://x2zev.goldsys.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 08:44:08 UTC", "last_seen": "2026-03-10 08:44:08 UTC", "sightings": 1 }, { "indicator": "http://110.37.61.34:44127/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 08:43:25 UTC", "last_seen": "2026-03-10 08:43:25 UTC", "sightings": 1 }, { "indicator": "http://115.57.235.206:51198/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 08:43:25 UTC", "last_seen": "2026-03-10 08:43:25 UTC", "sightings": 1 }, { "indicator": "http://117.241.95.54:45529/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 08:40:23 UTC", "last_seen": "2026-03-10 08:40:23 UTC", "sightings": 1 }, { "indicator": "http://182.127.4.146:48357/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 08:40:10 UTC", "last_seen": "2026-03-10 08:40:10 UTC", "sightings": 1 }, { "indicator": "https://ioqdz.winddev.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 08:38:14 UTC", "last_seen": "2026-03-10 08:38:14 UTC", "sightings": 1 }, { "indicator": "https://elvenforest.s3.us-east-005.backblazeb2.com/notion/Notion-App-6.475.3-win-x64.exe", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-10 08:37:06 UTC", "last_seen": "2026-03-10 08:37:06 UTC", "sightings": 1 }, { "indicator": "https://elvenforest.s3.us-east-005.backblazeb2.com/blender/blender-9.0.364_win_x64.exe", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-10 08:36:39 UTC", "last_seen": "2026-03-10 08:36:39 UTC", "sightings": 1 }, { "indicator": "https://elvenforest.s3.us-east-005.backblazeb2.com/windsurf/windsurf-setup-9.0.582_x64.exe", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-10 08:36:36 UTC", "last_seen": "2026-03-10 08:36:36 UTC", "sightings": 1 }, { "indicator": "https://elvenforest.s3.us-east-005.backblazeb2.com/inventor/Autodesk-Inventor-x64-5.35.374.exe", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-10 08:36:35 UTC", "last_seen": "2026-03-10 08:36:35 UTC", "sightings": 1 }, { "indicator": "https://www.cloudflara.xyz/api/v1/customer-sync-47a2d/jquery.js", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-10 08:35:15 UTC", "last_seen": "2026-03-10 08:35:15 UTC", "sightings": 1 }, { "indicator": "https://meta-tr3n.winddev.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 08:32:13 UTC", "last_seen": "2026-03-10 08:32:13 UTC", "sightings": 1 }, { "indicator": "http://117.245.84.217:37713/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 08:25:15 UTC", "last_seen": "2026-03-10 08:25:15 UTC", "sightings": 1 }, { "indicator": "http://117.241.56.53:60662/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-10 08:24:27 UTC", "last_seen": "2026-03-10 08:24:27 UTC", "sightings": 1 }, { "indicator": "https://lum-forgear.winddev.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 08:24:14 UTC", "last_seen": "2026-03-10 08:24:14 UTC", "sightings": 1 }, { "indicator": "https://report-gold.winddev.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 08:20:14 UTC", "last_seen": "2026-03-10 08:20:14 UTC", "sightings": 1 }, { "indicator": "http://182.114.33.179:43477/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 08:18:22 UTC", "last_seen": "2026-03-10 08:18:22 UTC", "sightings": 1 }, { "indicator": "https://mhrmjphd.oaknet.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 08:14:08 UTC", "last_seen": "2026-03-10 08:14:08 UTC", "sightings": 1 }, { "indicator": "http://117.241.95.54:45529/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 08:12:28 UTC", "last_seen": "2026-03-10 08:12:28 UTC", "sightings": 1 }, { "indicator": "http://115.57.235.206:51198/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 08:12:22 UTC", "last_seen": "2026-03-10 08:12:22 UTC", "sightings": 1 }, { "indicator": "http://115.50.226.99:40061/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 08:11:26 UTC", "last_seen": "2026-03-10 08:11:26 UTC", "sightings": 1 }, { "indicator": "http://27.222.62.140:50797/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 08:10:21 UTC", "last_seen": "2026-03-10 08:10:21 UTC", "sightings": 1 }, { "indicator": "https://deploymesh.oaknet.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 08:09:12 UTC", "last_seen": "2026-03-10 08:09:12 UTC", "sightings": 1 }, { "indicator": "http://59.88.228.145:59507/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 08:08:19 UTC", "last_seen": "2026-03-10 08:08:19 UTC", "sightings": 1 }, { "indicator": "http://42.224.29.43:59284/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 08:05:20 UTC", "last_seen": "2026-03-10 08:05:20 UTC", "sightings": 1 }, { "indicator": "https://jbstvz.oaknet.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 08:01:11 UTC", "last_seen": "2026-03-10 08:01:11 UTC", "sightings": 1 }, { "indicator": "http://42.227.239.140:59658/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 07:58:23 UTC", "last_seen": "2026-03-10 07:58:23 UTC", "sightings": 1 }, { "indicator": "https://p4cket-signal.oaknet.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 07:56:12 UTC", "last_seen": "2026-03-10 07:56:12 UTC", "sightings": 1 }, { "indicator": "https://t3mp0-zone.sunbit.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 07:50:09 UTC", "last_seen": "2026-03-10 07:50:09 UTC", "sightings": 1 }, { "indicator": "http://182.114.33.179:43477/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 07:44:19 UTC", "last_seen": "2026-03-10 07:44:19 UTC", "sightings": 1 }, { "indicator": "https://c1ip-scope.sunbit.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 07:44:07 UTC", "last_seen": "2026-03-10 07:44:07 UTC", "sightings": 1 }, { "indicator": "http://42.224.29.43:59284/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 07:43:17 UTC", "last_seen": "2026-03-10 07:43:17 UTC", "sightings": 1 }, { "indicator": "http://42.227.243.146:35774/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 07:42:09 UTC", "last_seen": "2026-03-10 07:42:09 UTC", "sightings": 1 }, { "indicator": "http://42.227.239.140:59658/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 07:41:19 UTC", "last_seen": "2026-03-10 07:41:19 UTC", "sightings": 1 }, { "indicator": "http://27.222.62.140:50797/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 07:41:18 UTC", "last_seen": "2026-03-10 07:41:18 UTC", "sightings": 1 }, { "indicator": "http://110.37.13.16:38250/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 07:41:18 UTC", "last_seen": "2026-03-10 07:41:18 UTC", "sightings": 1 }, { "indicator": "http://www.45-90-98-218.plesk.page/yakuza.m68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-10 07:41:18 UTC", "last_seen": "2026-03-10 07:41:18 UTC", "sightings": 1 }, { "indicator": "http://110.36.30.247:55063/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 07:41:18 UTC", "last_seen": "2026-03-10 07:41:18 UTC", "sightings": 1 }, { "indicator": "http://110.36.30.247:55063/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 07:41:18 UTC", "last_seen": "2026-03-10 07:41:18 UTC", "sightings": 1 }, { "indicator": "http://musing-visvesvaraya.45-90-98-218.plesk.page/yakuza.sh4", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-10 07:41:18 UTC", "last_seen": "2026-03-10 07:41:18 UTC", "sightings": 1 }, { "indicator": "http://59.88.228.145:59507/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 07:41:18 UTC", "last_seen": "2026-03-10 07:41:18 UTC", "sightings": 1 }, { "indicator": "https://www.mediafire.com/file_premium/eq8e1l4b0qjd22w/chrome_100_percent.pak/file", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-10 07:41:18 UTC", "last_seen": "2026-03-10 07:41:18 UTC", "sightings": 1 }, { "indicator": "https://casyetnx.pw/eq8e1l4b0qjd22w", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-10 07:41:13 UTC", "last_seen": "2026-03-10 07:41:13 UTC", "sightings": 1 }, { "indicator": "https://parceldusk.sunbit.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 07:41:13 UTC", "last_seen": "2026-03-10 07:41:13 UTC", "sightings": 1 }, { "indicator": "https://nodesteri.sunbit.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 07:41:13 UTC", "last_seen": "2026-03-10 07:41:13 UTC", "sightings": 1 }, { "indicator": "https://glob-k2.siliconcanyon.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 07:41:12 UTC", "last_seen": "2026-03-10 07:41:12 UTC", "sightings": 1 }, { "indicator": "http://www.45-90-98-218.plesk.page/yakuza.arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-10 07:25:28 UTC", "last_seen": "2026-03-10 07:25:28 UTC", "sightings": 1 }, { "indicator": "http://musing-visvesvaraya.45-90-98-218.plesk.page/yakuza.mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-10 07:25:28 UTC", "last_seen": "2026-03-10 07:25:28 UTC", "sightings": 1 }, { "indicator": "http://musing-visvesvaraya.45-90-98-218.plesk.page/yakuza.m68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-10 07:25:28 UTC", "last_seen": "2026-03-10 07:25:28 UTC", "sightings": 1 }, { "indicator": "http://musing-visvesvaraya.45-90-98-218.plesk.page/yakuza.arm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-10 07:25:28 UTC", "last_seen": "2026-03-10 07:25:28 UTC", "sightings": 1 }, { "indicator": "http://musing-visvesvaraya.45-90-98-218.plesk.page/yakuza.spc", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-10 07:25:28 UTC", "last_seen": "2026-03-10 07:25:28 UTC", "sightings": 1 }, { "indicator": "http://musing-visvesvaraya.45-90-98-218.plesk.page/yakuza.arm", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-10 07:25:28 UTC", "last_seen": "2026-03-10 07:25:28 UTC", "sightings": 1 }, { "indicator": "http://musing-visvesvaraya.45-90-98-218.plesk.page/scanner.arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "ua-wget" ], "first_seen": "2026-03-10 07:25:28 UTC", "last_seen": "2026-03-10 07:25:28 UTC", "sightings": 1 }, { "indicator": "http://www.45-90-98-218.plesk.page/yakuza.mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-10 07:25:28 UTC", "last_seen": "2026-03-10 07:25:28 UTC", "sightings": 1 }, { "indicator": "http://www.45-90-98-218.plesk.page/scanner.arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "ua-wget" ], "first_seen": "2026-03-10 07:25:28 UTC", "last_seen": "2026-03-10 07:25:28 UTC", "sightings": 1 }, { "indicator": "http://www.45-90-98-218.plesk.page/yakuza.arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-10 07:25:28 UTC", "last_seen": "2026-03-10 07:25:28 UTC", "sightings": 1 }, { "indicator": "http://musing-visvesvaraya.45-90-98-218.plesk.page/yakuza.arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-10 07:25:28 UTC", "last_seen": "2026-03-10 07:25:28 UTC", "sightings": 1 }, { "indicator": "http://www.45-90-98-218.plesk.page/yakuza.mpsl", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-10 07:25:22 UTC", "last_seen": "2026-03-10 07:25:22 UTC", "sightings": 1 }, { "indicator": "http://musing-visvesvaraya.45-90-98-218.plesk.page/sc.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "mirai", "sh", "ua-wget" ], "first_seen": "2026-03-10 07:25:22 UTC", "last_seen": "2026-03-10 07:25:22 UTC", "sightings": 1 }, { "indicator": "http://www.45-90-98-218.plesk.page/yakuza.x86", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-10 07:25:20 UTC", "last_seen": "2026-03-10 07:25:20 UTC", "sightings": 1 }, { "indicator": "http://www.45-90-98-218.plesk.page/yakuza.arm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-10 07:25:20 UTC", "last_seen": "2026-03-10 07:25:20 UTC", "sightings": 1 }, { "indicator": "http://musing-visvesvaraya.45-90-98-218.plesk.page/yakuza.mpsl", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-10 07:25:20 UTC", "last_seen": "2026-03-10 07:25:20 UTC", "sightings": 1 }, { "indicator": "http://www.45-90-98-218.plesk.page/sc.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "mirai", "sh", "ua-wget" ], "first_seen": "2026-03-10 07:25:20 UTC", "last_seen": "2026-03-10 07:25:20 UTC", "sightings": 1 }, { "indicator": "http://musing-visvesvaraya.45-90-98-218.plesk.page/yakuza.arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-10 07:25:19 UTC", "last_seen": "2026-03-10 07:25:19 UTC", "sightings": 1 }, { "indicator": "http://musing-visvesvaraya.45-90-98-218.plesk.page/yakuza.x86", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-10 07:25:19 UTC", "last_seen": "2026-03-10 07:25:19 UTC", "sightings": 1 }, { "indicator": "http://www.45-90-98-218.plesk.page/yakuza.spc", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-10 07:25:19 UTC", "last_seen": "2026-03-10 07:25:19 UTC", "sightings": 1 }, { "indicator": "http://www.45-90-98-218.plesk.page/yakuza.arm", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-10 07:25:19 UTC", "last_seen": "2026-03-10 07:25:19 UTC", "sightings": 1 }, { "indicator": "http://musing-visvesvaraya.45-90-98-218.plesk.page/yakuza.ppc", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-10 07:25:19 UTC", "last_seen": "2026-03-10 07:25:19 UTC", "sightings": 1 }, { "indicator": "http://www.45-90-98-218.plesk.page/yakuza.sh4", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-10 07:25:19 UTC", "last_seen": "2026-03-10 07:25:19 UTC", "sightings": 1 }, { "indicator": "http://www.45-90-98-218.plesk.page/yakuza.ppc", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-10 07:25:19 UTC", "last_seen": "2026-03-10 07:25:19 UTC", "sightings": 1 }, { "indicator": "http://45.90.98.218/sc.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai", "sh", "ua-wget" ], "first_seen": "2026-03-10 07:23:12 UTC", "last_seen": "2026-03-10 07:23:12 UTC", "sightings": 1 }, { "indicator": "http://45.90.98.218/yakuza.arm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-10 07:22:12 UTC", "last_seen": "2026-03-10 07:22:12 UTC", "sightings": 1 }, { "indicator": "http://45.90.98.218/yakuza.arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-10 07:22:12 UTC", "last_seen": "2026-03-10 07:22:12 UTC", "sightings": 1 }, { "indicator": "http://45.90.98.218/scanner.arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-10 07:22:12 UTC", "last_seen": "2026-03-10 07:22:12 UTC", "sightings": 1 }, { "indicator": "http://45.90.98.218/yakuza.sh4", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-10 07:22:12 UTC", "last_seen": "2026-03-10 07:22:12 UTC", "sightings": 1 }, { "indicator": "http://45.90.98.218/yakuza.m68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-10 07:22:12 UTC", "last_seen": "2026-03-10 07:22:12 UTC", "sightings": 1 }, { "indicator": "http://45.90.98.218/yakuza.spc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-10 07:22:12 UTC", "last_seen": "2026-03-10 07:22:12 UTC", "sightings": 1 }, { "indicator": "http://45.90.98.218/yakuza.arm", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-10 07:22:12 UTC", "last_seen": "2026-03-10 07:22:12 UTC", "sightings": 1 }, { "indicator": "http://45.90.98.218/yakuza.x86", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-10 07:22:12 UTC", "last_seen": "2026-03-10 07:22:12 UTC", "sightings": 1 }, { "indicator": "http://45.90.98.218/yakuza.mpsl", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-10 07:22:12 UTC", "last_seen": "2026-03-10 07:22:12 UTC", "sightings": 1 }, { "indicator": "http://45.90.98.218/yakuza.ppc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-10 07:22:09 UTC", "last_seen": "2026-03-10 07:22:09 UTC", "sightings": 1 }, { "indicator": "http://45.90.98.218/yakuza.mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-10 07:22:09 UTC", "last_seen": "2026-03-10 07:22:09 UTC", "sightings": 1 }, { "indicator": "https://unit-r1.siliconcanyon.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 07:21:12 UTC", "last_seen": "2026-03-10 07:21:12 UTC", "sightings": 1 }, { "indicator": "https://sili-h7.siliconcanyon.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 07:15:18 UTC", "last_seen": "2026-03-10 07:15:18 UTC", "sightings": 1 }, { "indicator": "http://115.63.48.229:58878/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 07:10:08 UTC", "last_seen": "2026-03-10 07:10:08 UTC", "sightings": 1 }, { "indicator": "https://pl5-zw18.siliconcanyon.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 07:08:14 UTC", "last_seen": "2026-03-10 07:08:14 UTC", "sightings": 1 }, { "indicator": "https://node-s0.quartzhorizon.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 07:02:13 UTC", "last_seen": "2026-03-10 07:02:13 UTC", "sightings": 1 }, { "indicator": "https://orig-m4.quartzhorizon.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 06:55:13 UTC", "last_seen": "2026-03-10 06:55:13 UTC", "sightings": 1 }, { "indicator": "http://45.141.148.121/s.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-10 06:51:07 UTC", "last_seen": "2026-03-10 06:51:07 UTC", "sightings": 1 }, { "indicator": "http://219.155.80.78:60438/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-10 06:50:23 UTC", "last_seen": "2026-03-10 06:50:23 UTC", "sightings": 1 }, { "indicator": "http://117.254.103.108:38644/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-10 06:50:22 UTC", "last_seen": "2026-03-10 06:50:22 UTC", "sightings": 1 }, { "indicator": "http://113.238.196.88:59172/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-10 06:50:22 UTC", "last_seen": "2026-03-10 06:50:22 UTC", "sightings": 1 }, { "indicator": "http://113.238.196.88:59172/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-10 06:50:22 UTC", "last_seen": "2026-03-10 06:50:22 UTC", "sightings": 1 }, { "indicator": "http://213.139.77.111", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-10 06:50:22 UTC", "last_seen": "2026-03-10 06:50:22 UTC", "sightings": 1 }, { "indicator": "http://182.117.129.134:38162/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-10 06:50:12 UTC", "last_seen": "2026-03-10 06:50:12 UTC", "sightings": 1 }, { "indicator": "http://86.127.241.132:58647/.i", "indicator_type": "url", "source": "URLhaus", "tags": [ "hajime" ], "first_seen": "2026-03-10 06:50:12 UTC", "last_seen": "2026-03-10 06:50:12 UTC", "sightings": 1 }, { "indicator": "http://61.54.223.170:36094/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-10 06:50:12 UTC", "last_seen": "2026-03-10 06:50:12 UTC", "sightings": 1 }, { "indicator": "http://45.90.98.218/yakuza.arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-10 06:50:12 UTC", "last_seen": "2026-03-10 06:50:12 UTC", "sightings": 1 }, { "indicator": "http://61.54.223.170:36094/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-10 06:50:12 UTC", "last_seen": "2026-03-10 06:50:12 UTC", "sightings": 1 }, { "indicator": "http://42.98.214.195:42270/.i", "indicator_type": "url", "source": "URLhaus", "tags": [ "hajime" ], "first_seen": "2026-03-10 06:50:12 UTC", "last_seen": "2026-03-10 06:50:12 UTC", "sightings": 1 }, { "indicator": "http://211.203.168.162:3974/.i", "indicator_type": "url", "source": "URLhaus", "tags": [ "hajime" ], "first_seen": "2026-03-10 06:50:12 UTC", "last_seen": "2026-03-10 06:50:12 UTC", "sightings": 1 }, { "indicator": "https://quar-c2.quartzhorizon.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 06:50:11 UTC", "last_seen": "2026-03-10 06:50:11 UTC", "sightings": 1 }, { "indicator": "http://88.85.183.120:49994/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-10 06:50:11 UTC", "last_seen": "2026-03-10 06:50:11 UTC", "sightings": 1 }, { "indicator": "http://88.85.183.120:49994/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-10 06:50:11 UTC", "last_seen": "2026-03-10 06:50:11 UTC", "sightings": 1 }, { "indicator": "http://59.182.67.72:59154/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-10 06:50:09 UTC", "last_seen": "2026-03-10 06:50:09 UTC", "sightings": 1 }, { "indicator": "http://110.39.242.66:58306/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-10 06:50:07 UTC", "last_seen": "2026-03-10 06:50:07 UTC", "sightings": 1 }, { "indicator": "http://117.247.189.148:55860/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-10 06:50:07 UTC", "last_seen": "2026-03-10 06:50:07 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Mahadzu/gigachad-grc/main/terraform/modules/redis/gigachad-grc-v3.3-alpha.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "Stealc" ], "first_seen": "2026-03-10 06:49:10 UTC", "last_seen": "2026-03-10 06:49:10 UTC", "sightings": 1 }, { "indicator": "https://github.com/pesanuntukanda/chatgpt-enterprise-premium-unlocked/raw/branch/scourwort/unlocked_chatgpt_premium_enterprise_1.9.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ " chatgpt", " github", " loader", " zip", "infostealer" ], "first_seen": "2026-03-10 06:49:08 UTC", "last_seen": "2026-03-10 06:49:08 UTC", "sightings": 1 }, { "indicator": "http://115.56.151.37:44949/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 06:48:24 UTC", "last_seen": "2026-03-10 06:48:24 UTC", "sightings": 1 }, { "indicator": "http://216.126.86.108:49773/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-10 06:44:27 UTC", "last_seen": "2026-03-10 06:44:27 UTC", "sightings": 1 }, { "indicator": "https://hx9-mv33.quartzhorizon.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 06:43:08 UTC", "last_seen": "2026-03-10 06:43:08 UTC", "sightings": 1 }, { "indicator": "http://196.189.9.27:52215/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-10 06:37:19 UTC", "last_seen": "2026-03-10 06:37:19 UTC", "sightings": 1 }, { "indicator": "https://flow-x3.staticmotion.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 06:35:19 UTC", "last_seen": "2026-03-10 06:35:19 UTC", "sightings": 1 }, { "indicator": "http://70.39.197.112:6699/chfs/shared/dqwcsaa.jpg", "indicator_type": "url", "source": "URLhaus", "tags": [ "ua-wget" ], "first_seen": "2026-03-10 06:34:17 UTC", "last_seen": "2026-03-10 06:34:17 UTC", "sightings": 1 }, { "indicator": "https://srv-p8.staticmotion.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 06:32:07 UTC", "last_seen": "2026-03-10 06:32:07 UTC", "sightings": 1 }, { "indicator": "https://stat-d6.staticmotion.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 06:27:12 UTC", "last_seen": "2026-03-10 06:27:12 UTC", "sightings": 1 }, { "indicator": "https://jn2-bt04.staticmotion.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 06:23:10 UTC", "last_seen": "2026-03-10 06:23:10 UTC", "sightings": 1 }, { "indicator": "https://auth-z1.motiongravity.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 06:12:08 UTC", "last_seen": "2026-03-10 06:12:08 UTC", "sightings": 1 }, { "indicator": "https://iqqppe36.cigarettecombin.digital/?=check&&actmn=QWwawPfMTxgXyjEM", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-10 06:11:10 UTC", "last_seen": "2026-03-10 06:11:10 UTC", "sightings": 1 }, { "indicator": "https://web-k9.motiongravity.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 06:09:14 UTC", "last_seen": "2026-03-10 06:09:14 UTC", "sightings": 1 }, { "indicator": "http://115.57.249.138:58357/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 06:07:25 UTC", "last_seen": "2026-03-10 06:07:25 UTC", "sightings": 1 }, { "indicator": "http://110.37.106.54:51161/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 06:05:15 UTC", "last_seen": "2026-03-10 06:05:15 UTC", "sightings": 1 }, { "indicator": "https://moti-u5.motiongravity.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 06:03:07 UTC", "last_seen": "2026-03-10 06:03:07 UTC", "sightings": 1 }, { "indicator": "https://cr4-xw90.motiongravity.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 06:02:16 UTC", "last_seen": "2026-03-10 06:02:16 UTC", "sightings": 1 }, { "indicator": "https://data-f6.orbitcapture.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 05:55:13 UTC", "last_seen": "2026-03-10 05:55:13 UTC", "sightings": 1 }, { "indicator": "http://115.57.249.138:58357/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 05:50:21 UTC", "last_seen": "2026-03-10 05:50:21 UTC", "sightings": 1 }, { "indicator": "http://115.55.229.129:49633/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 05:50:20 UTC", "last_seen": "2026-03-10 05:50:20 UTC", "sightings": 1 }, { "indicator": "https://edge-v3.orbitcapture.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 05:48:11 UTC", "last_seen": "2026-03-10 05:48:11 UTC", "sightings": 1 }, { "indicator": "http://117.95.131.110:54900/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-10 05:43:23 UTC", "last_seen": "2026-03-10 05:43:23 UTC", "sightings": 1 }, { "indicator": "https://orbi-q7.orbitcapture.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 05:42:12 UTC", "last_seen": "2026-03-10 05:42:12 UTC", "sightings": 1 }, { "indicator": "http://175.165.54.80:55931/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 05:40:32 UTC", "last_seen": "2026-03-10 05:40:32 UTC", "sightings": 1 }, { "indicator": "http://42.238.192.58:49977/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 05:35:25 UTC", "last_seen": "2026-03-10 05:35:25 UTC", "sightings": 1 }, { "indicator": "http://110.36.18.167:60596/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 05:27:21 UTC", "last_seen": "2026-03-10 05:27:21 UTC", "sightings": 1 }, { "indicator": "http://42.180.12.75:45414/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 05:25:28 UTC", "last_seen": "2026-03-10 05:25:28 UTC", "sightings": 1 }, { "indicator": "https://link-y5.vertexanchor.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 05:21:09 UTC", "last_seen": "2026-03-10 05:21:09 UTC", "sightings": 1 }, { "indicator": "https://host-b1.vertexanchor.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 05:17:08 UTC", "last_seen": "2026-03-10 05:17:08 UTC", "sightings": 1 }, { "indicator": "http://175.165.54.80:55931/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 05:15:46 UTC", "last_seen": "2026-03-10 05:15:46 UTC", "sightings": 1 }, { "indicator": "http://115.55.229.129:49633/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 05:04:19 UTC", "last_seen": "2026-03-10 05:04:19 UTC", "sightings": 1 }, { "indicator": "https://lp3-qv06.vertexanchor.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 05:02:06 UTC", "last_seen": "2026-03-10 05:02:06 UTC", "sightings": 1 }, { "indicator": "http://42.238.192.58:49977/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 04:55:18 UTC", "last_seen": "2026-03-10 04:55:18 UTC", "sightings": 1 }, { "indicator": "https://core-t9.tensorfield.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 04:53:07 UTC", "last_seen": "2026-03-10 04:53:07 UTC", "sightings": 1 }, { "indicator": "http://110.39.249.140:44170/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 04:52:16 UTC", "last_seen": "2026-03-10 04:52:16 UTC", "sightings": 1 }, { "indicator": "https://main-p4.tensorfield.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 04:49:11 UTC", "last_seen": "2026-03-10 04:49:11 UTC", "sightings": 1 }, { "indicator": "https://tens-r8.tensorfield.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 04:38:09 UTC", "last_seen": "2026-03-10 04:38:09 UTC", "sightings": 1 }, { "indicator": "https://bz1-gh55.tensorfield.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 04:35:10 UTC", "last_seen": "2026-03-10 04:35:10 UTC", "sightings": 1 }, { "indicator": "http://110.37.120.17:47376/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 04:35:10 UTC", "last_seen": "2026-03-10 04:35:10 UTC", "sightings": 1 }, { "indicator": "http://112.242.48.85:38818/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 04:35:10 UTC", "last_seen": "2026-03-10 04:35:10 UTC", "sightings": 1 }, { "indicator": "http://112.239.113.71:53554/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 04:34:15 UTC", "last_seen": "2026-03-10 04:34:15 UTC", "sightings": 1 }, { "indicator": "http://110.39.249.140:44170/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 04:32:14 UTC", "last_seen": "2026-03-10 04:32:14 UTC", "sightings": 1 }, { "indicator": "http://27.215.38.124:46853/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 04:15:16 UTC", "last_seen": "2026-03-10 04:15:16 UTC", "sightings": 1 }, { "indicator": "http://39.88.116.210:58631/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 04:10:18 UTC", "last_seen": "2026-03-10 04:10:18 UTC", "sightings": 1 }, { "indicator": "http://112.239.113.71:53554/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 04:05:32 UTC", "last_seen": "2026-03-10 04:05:32 UTC", "sightings": 1 }, { "indicator": "http://112.242.48.85:38818/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 03:58:30 UTC", "last_seen": "2026-03-10 03:58:30 UTC", "sightings": 1 }, { "indicator": "http://117.219.156.214:35672/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 03:58:14 UTC", "last_seen": "2026-03-10 03:58:14 UTC", "sightings": 1 }, { "indicator": "http://110.39.235.67:36333/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 03:56:16 UTC", "last_seen": "2026-03-10 03:56:16 UTC", "sightings": 1 }, { "indicator": "https://root-x2.metricfusion.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 03:53:08 UTC", "last_seen": "2026-03-10 03:53:08 UTC", "sightings": 1 }, { "indicator": "http://123.8.84.146:52124/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 03:51:18 UTC", "last_seen": "2026-03-10 03:51:18 UTC", "sightings": 1 }, { "indicator": "https://metr-k44.metricfusion.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 03:50:16 UTC", "last_seen": "2026-03-10 03:50:16 UTC", "sightings": 1 }, { "indicator": "http://123.8.84.146:52124/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 03:50:12 UTC", "last_seen": "2026-03-10 03:50:12 UTC", "sightings": 1 }, { "indicator": "http://39.88.116.210:58631/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 03:37:19 UTC", "last_seen": "2026-03-10 03:37:19 UTC", "sightings": 1 }, { "indicator": "http://110.37.5.55:51103/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 03:30:15 UTC", "last_seen": "2026-03-10 03:30:15 UTC", "sightings": 1 }, { "indicator": "http://117.219.156.214:35672/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 03:29:22 UTC", "last_seen": "2026-03-10 03:29:22 UTC", "sightings": 1 }, { "indicator": "http://110.37.55.23:53770/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 03:24:19 UTC", "last_seen": "2026-03-10 03:24:19 UTC", "sightings": 1 }, { "indicator": "http://116.138.106.124:46872/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 03:23:27 UTC", "last_seen": "2026-03-10 03:23:27 UTC", "sightings": 1 }, { "indicator": "http://110.37.55.23:53770/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 03:19:18 UTC", "last_seen": "2026-03-10 03:19:18 UTC", "sightings": 1 }, { "indicator": "http://110.36.77.35:42412/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 03:11:19 UTC", "last_seen": "2026-03-10 03:11:19 UTC", "sightings": 1 }, { "indicator": "https://serv-z9.metricfusion.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 03:09:08 UTC", "last_seen": "2026-03-10 03:09:08 UTC", "sightings": 1 }, { "indicator": "http://123.5.30.48:49549/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 03:04:25 UTC", "last_seen": "2026-03-10 03:04:25 UTC", "sightings": 1 }, { "indicator": "https://local-s1.patternshadow.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 02:58:13 UTC", "last_seen": "2026-03-10 02:58:13 UTC", "sightings": 1 }, { "indicator": "http://122.148.184.156:54123/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-10 02:57:50 UTC", "last_seen": "2026-03-10 02:57:50 UTC", "sightings": 1 }, { "indicator": "http://116.138.106.124:46872/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 02:56:23 UTC", "last_seen": "2026-03-10 02:56:23 UTC", "sightings": 1 }, { "indicator": "http://59.97.249.49:49480/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 02:56:19 UTC", "last_seen": "2026-03-10 02:56:19 UTC", "sightings": 1 }, { "indicator": "http://115.48.149.43:59775/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 02:55:20 UTC", "last_seen": "2026-03-10 02:55:20 UTC", "sightings": 1 }, { "indicator": "https://patt-f21.patternshadow.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 02:55:09 UTC", "last_seen": "2026-03-10 02:55:09 UTC", "sightings": 1 }, { "indicator": "https://dist-mx5.patternshadow.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 02:52:10 UTC", "last_seen": "2026-03-10 02:52:10 UTC", "sightings": 1 }, { "indicator": "http://42.227.203.139:42429/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 02:47:25 UTC", "last_seen": "2026-03-10 02:47:25 UTC", "sightings": 1 }, { "indicator": "http://42.227.203.139:42429/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 02:45:34 UTC", "last_seen": "2026-03-10 02:45:34 UTC", "sightings": 1 }, { "indicator": "http://123.9.197.48:44764/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips" ], "first_seen": "2026-03-10 02:44:21 UTC", "last_seen": "2026-03-10 02:44:21 UTC", "sightings": 1 }, { "indicator": "http://60.18.80.236:51482/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 02:32:20 UTC", "last_seen": "2026-03-10 02:32:20 UTC", "sightings": 1 }, { "indicator": "http://119.179.215.99:51426/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 02:31:20 UTC", "last_seen": "2026-03-10 02:31:20 UTC", "sightings": 1 }, { "indicator": "http://5.175.223.124/data.mipsel-uclibc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "geofenced", "mips", "mirai", "ua-wget", "USA" ], "first_seen": "2026-03-10 02:16:08 UTC", "last_seen": "2026-03-10 02:16:08 UTC", "sightings": 1 }, { "indicator": "http://108.168.10.70:41281/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 02:11:08 UTC", "last_seen": "2026-03-10 02:11:08 UTC", "sightings": 1 }, { "indicator": "http://60.18.80.236:51482/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 02:07:25 UTC", "last_seen": "2026-03-10 02:07:25 UTC", "sightings": 1 }, { "indicator": "http://115.55.50.241:44688/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 02:05:22 UTC", "last_seen": "2026-03-10 02:05:22 UTC", "sightings": 1 }, { "indicator": "http://115.48.149.43:59775/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 02:04:34 UTC", "last_seen": "2026-03-10 02:04:34 UTC", "sightings": 1 }, { "indicator": "http://77.245.107.223:36220/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 02:04:21 UTC", "last_seen": "2026-03-10 02:04:21 UTC", "sightings": 1 }, { "indicator": "http://119.185.240.21:56083/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 02:02:20 UTC", "last_seen": "2026-03-10 02:02:20 UTC", "sightings": 1 }, { "indicator": "http://182.119.226.146:33935/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 02:02:17 UTC", "last_seen": "2026-03-10 02:02:17 UTC", "sightings": 1 }, { "indicator": "http://182.119.226.146:33935/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 02:01:13 UTC", "last_seen": "2026-03-10 02:01:13 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.42/bins/cool.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "geofenced", "mirai", "opendir", "sh", "ua-wget", "USA" ], "first_seen": "2026-03-10 02:01:05 UTC", "last_seen": "2026-03-10 02:01:05 UTC", "sightings": 1 }, { "indicator": "http://119.179.215.99:51426/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 01:59:10 UTC", "last_seen": "2026-03-10 01:59:10 UTC", "sightings": 1 }, { "indicator": "https://term-sync.vibratronic.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 01:55:08 UTC", "last_seen": "2026-03-10 01:55:08 UTC", "sightings": 1 }, { "indicator": "http://119.117.62.67:34258/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 01:53:12 UTC", "last_seen": "2026-03-10 01:53:12 UTC", "sightings": 1 }, { "indicator": "https://vibr-v08.vibratronic.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 01:53:09 UTC", "last_seen": "2026-03-10 01:53:09 UTC", "sightings": 1 }, { "indicator": "http://108.168.10.70:41281/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 01:44:07 UTC", "last_seen": "2026-03-10 01:44:07 UTC", "sightings": 1 }, { "indicator": "http://221.1.226.197:35053/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 01:43:17 UTC", "last_seen": "2026-03-10 01:43:17 UTC", "sightings": 1 }, { "indicator": "http://42.180.12.75:45414/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 01:39:09 UTC", "last_seen": "2026-03-10 01:39:09 UTC", "sightings": 1 }, { "indicator": "http://115.63.48.229:58878/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 01:32:18 UTC", "last_seen": "2026-03-10 01:32:18 UTC", "sightings": 1 }, { "indicator": "https://main-peak.obsidianix.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 01:19:06 UTC", "last_seen": "2026-03-10 01:19:06 UTC", "sightings": 1 }, { "indicator": "http://117.209.80.33:59911/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 01:17:20 UTC", "last_seen": "2026-03-10 01:17:20 UTC", "sightings": 1 }, { "indicator": "http://110.37.48.94:33974/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 01:09:12 UTC", "last_seen": "2026-03-10 01:09:12 UTC", "sightings": 1 }, { "indicator": "https://vult-hub.spectrometric.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 01:00:15 UTC", "last_seen": "2026-03-10 01:00:15 UTC", "sightings": 1 }, { "indicator": "http://117.209.80.33:59911/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 00:59:09 UTC", "last_seen": "2026-03-10 00:59:09 UTC", "sightings": 1 }, { "indicator": "http://110.38.221.11:52204/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 00:56:17 UTC", "last_seen": "2026-03-10 00:56:17 UTC", "sightings": 1 }, { "indicator": "http://115.55.50.241:44688/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 00:54:08 UTC", "last_seen": "2026-03-10 00:54:08 UTC", "sightings": 1 }, { "indicator": "http://110.36.80.170:47101/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 00:39:15 UTC", "last_seen": "2026-03-10 00:39:15 UTC", "sightings": 1 }, { "indicator": "http://110.38.221.11:52204/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 00:31:18 UTC", "last_seen": "2026-03-10 00:31:18 UTC", "sightings": 1 }, { "indicator": "https://quan-v3.quantovault.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 00:22:09 UTC", "last_seen": "2026-03-10 00:22:09 UTC", "sightings": 1 }, { "indicator": "https://alti-flow.altimetrica.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-10 00:15:11 UTC", "last_seen": "2026-03-10 00:15:11 UTC", "sightings": 1 }, { "indicator": "http://123.5.30.135:49549/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-10 00:04:21 UTC", "last_seen": "2026-03-10 00:04:21 UTC", "sightings": 1 }, { "indicator": "https://cent-base.centurionix.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-09 23:46:07 UTC", "last_seen": "2026-03-09 23:46:07 UTC", "sightings": 1 }, { "indicator": "http://171.25.158.78/bins/mipsel", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "geofenced", "mips", "mirai", "opendir", "ua-wget", "USA" ], "first_seen": "2026-03-09 23:22:27 UTC", "last_seen": "2026-03-09 23:22:27 UTC", "sightings": 1 }, { "indicator": "http://171.25.158.78/bins/arm", "indicator_type": "url", "source": "URLhaus", "tags": [ "arm", "elf", "geofenced", "mirai", "opendir", "ua-wget", "USA" ], "first_seen": "2026-03-09 23:22:12 UTC", "last_seen": "2026-03-09 23:22:12 UTC", "sightings": 1 }, { "indicator": "http://171.25.158.78/bins/x86", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "geofenced", "mirai", "opendir", "ua-wget", "USA", "x86" ], "first_seen": "2026-03-09 23:22:11 UTC", "last_seen": "2026-03-09 23:22:11 UTC", "sightings": 1 }, { "indicator": "http://171.25.158.78/bins/spc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "geofenced", "mirai", "opendir", "sparc", "ua-wget", "USA" ], "first_seen": "2026-03-09 23:22:11 UTC", "last_seen": "2026-03-09 23:22:11 UTC", "sightings": 1 }, { "indicator": "http://171.25.158.78/bins/arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "arm", "elf", "geofenced", "mirai", "opendir", "ua-wget", "USA" ], "first_seen": "2026-03-09 23:22:11 UTC", "last_seen": "2026-03-09 23:22:11 UTC", "sightings": 1 }, { "indicator": "http://171.25.158.78/bins/sh4", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "geofenced", "mirai", "opendir", "SuperH", "ua-wget", "USA" ], "first_seen": "2026-03-09 23:22:11 UTC", "last_seen": "2026-03-09 23:22:11 UTC", "sightings": 1 }, { "indicator": "http://171.25.158.78/bins/mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "geofenced", "mips", "mirai", "opendir", "ua-wget", "USA" ], "first_seen": "2026-03-09 23:22:11 UTC", "last_seen": "2026-03-09 23:22:11 UTC", "sightings": 1 }, { "indicator": "http://171.25.158.78/bins/ppc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "geofenced", "mirai", "opendir", "PowerPC", "ua-wget", "USA" ], "first_seen": "2026-03-09 23:22:11 UTC", "last_seen": "2026-03-09 23:22:11 UTC", "sightings": 1 }, { "indicator": "http://171.25.158.78/bins/arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "arm", "elf", "geofenced", "mirai", "opendir", "ua-wget", "USA" ], "first_seen": "2026-03-09 23:22:11 UTC", "last_seen": "2026-03-09 23:22:11 UTC", "sightings": 1 }, { "indicator": "http://171.25.158.78/bins/x86_64", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "geofenced", "mirai", "opendir", "ua-wget", "USA", "x86" ], "first_seen": "2026-03-09 23:22:11 UTC", "last_seen": "2026-03-09 23:22:11 UTC", "sightings": 1 }, { "indicator": "http://171.25.158.78/bins/arm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "arm", "elf", "geofenced", "mirai", "opendir", "ua-wget", "USA" ], "first_seen": "2026-03-09 23:22:11 UTC", "last_seen": "2026-03-09 23:22:11 UTC", "sightings": 1 }, { "indicator": "http://171.25.158.78/bins/m68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "geofenced", "m68k", "mirai", "opendir", "ua-wget", "USA" ], "first_seen": "2026-03-09 23:22:11 UTC", "last_seen": "2026-03-09 23:22:11 UTC", "sightings": 1 }, { "indicator": "http://171.25.158.78/wget.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "geofenced", "opendir", "sh", "ua-wget", "USA" ], "first_seen": "2026-03-09 23:22:08 UTC", "last_seen": "2026-03-09 23:22:08 UTC", "sightings": 1 }, { "indicator": "http://171.25.158.78/w.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "geofenced", "opendir", "sh", "ua-wget", "USA" ], "first_seen": "2026-03-09 23:22:08 UTC", "last_seen": "2026-03-09 23:22:08 UTC", "sightings": 1 }, { "indicator": "http://171.25.158.78/tr064", "indicator_type": "url", "source": "URLhaus", "tags": [ "geofenced", "opendir", "sh", "ua-wget", "USA" ], "first_seen": "2026-03-09 23:22:07 UTC", "last_seen": "2026-03-09 23:22:07 UTC", "sightings": 1 }, { "indicator": "https://syst-node.centurionix.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-09 23:18:06 UTC", "last_seen": "2026-03-09 23:18:06 UTC", "sightings": 1 }, { "indicator": "https://stru-run.structovista.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-09 23:13:07 UTC", "last_seen": "2026-03-09 23:13:07 UTC", "sightings": 1 }, { "indicator": "http://110.37.40.215:35458/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 23:10:12 UTC", "last_seen": "2026-03-09 23:10:12 UTC", "sightings": 1 }, { "indicator": "http://115.48.187.41:47660/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 23:08:19 UTC", "last_seen": "2026-03-09 23:08:19 UTC", "sightings": 1 }, { "indicator": "https://link-net.structovista.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-09 23:08:06 UTC", "last_seen": "2026-03-09 23:08:06 UTC", "sightings": 1 }, { "indicator": "http://182.121.42.54:58121/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 23:06:08 UTC", "last_seen": "2026-03-09 23:06:08 UTC", "sightings": 1 }, { "indicator": "https://stru-v77.structovista.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-09 23:03:08 UTC", "last_seen": "2026-03-09 23:03:08 UTC", "sightings": 1 }, { "indicator": "http://182.121.42.54:58121/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 22:56:16 UTC", "last_seen": "2026-03-09 22:56:16 UTC", "sightings": 1 }, { "indicator": "https://link-node.structovista.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-09 22:55:09 UTC", "last_seen": "2026-03-09 22:55:09 UTC", "sightings": 1 }, { "indicator": "http://115.60.252.46:35776/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 22:52:19 UTC", "last_seen": "2026-03-09 22:52:19 UTC", "sightings": 1 }, { "indicator": "https://gala-net.galactoview.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-09 22:50:10 UTC", "last_seen": "2026-03-09 22:50:10 UTC", "sightings": 1 }, { "indicator": "https://tech-base.galactoview.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-09 22:46:09 UTC", "last_seen": "2026-03-09 22:46:09 UTC", "sightings": 1 }, { "indicator": "http://115.48.187.41:47660/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 22:42:11 UTC", "last_seen": "2026-03-09 22:42:11 UTC", "sightings": 1 }, { "indicator": "http://110.37.65.64:46135/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 22:39:13 UTC", "last_seen": "2026-03-09 22:39:13 UTC", "sightings": 1 }, { "indicator": "http://110.38.209.204:43462/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-09 22:38:15 UTC", "last_seen": "2026-03-09 22:38:15 UTC", "sightings": 1 }, { "indicator": "http://222.141.131.33:46649/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 22:36:18 UTC", "last_seen": "2026-03-09 22:36:18 UTC", "sightings": 1 }, { "indicator": "http://115.60.252.46:35776/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 22:28:10 UTC", "last_seen": "2026-03-09 22:28:10 UTC", "sightings": 1 }, { "indicator": "https://gala-v11.galactoview.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-09 22:27:06 UTC", "last_seen": "2026-03-09 22:27:06 UTC", "sightings": 1 }, { "indicator": "http://182.127.4.146:48357/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 22:26:17 UTC", "last_seen": "2026-03-09 22:26:17 UTC", "sightings": 1 }, { "indicator": "http://182.113.207.29:55511/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 22:26:16 UTC", "last_seen": "2026-03-09 22:26:16 UTC", "sightings": 1 }, { "indicator": "http://125.43.7.105:46866/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 22:23:16 UTC", "last_seen": "2026-03-09 22:23:16 UTC", "sightings": 1 }, { "indicator": "https://tech-ref.galactoview.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-09 22:23:08 UTC", "last_seen": "2026-03-09 22:23:08 UTC", "sightings": 1 }, { "indicator": "https://sync-unit.synchromesh.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-09 22:21:07 UTC", "last_seen": "2026-03-09 22:21:07 UTC", "sightings": 1 }, { "indicator": "http://61.136.85.111:43610/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 22:17:20 UTC", "last_seen": "2026-03-09 22:17:20 UTC", "sightings": 1 }, { "indicator": "https://flow-gate.synchromesh.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-09 22:16:08 UTC", "last_seen": "2026-03-09 22:16:08 UTC", "sightings": 1 }, { "indicator": "https://sync-v09.synchromesh.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-09 22:12:07 UTC", "last_seen": "2026-03-09 22:12:07 UTC", "sightings": 1 }, { "indicator": "http://222.141.131.33:46649/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 22:10:18 UTC", "last_seen": "2026-03-09 22:10:18 UTC", "sightings": 1 }, { "indicator": "http://42.226.65.130:56856/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 22:06:20 UTC", "last_seen": "2026-03-09 22:06:20 UTC", "sightings": 1 }, { "indicator": "https://vibr-flow.vibratronic.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-09 22:04:09 UTC", "last_seen": "2026-03-09 22:04:09 UTC", "sightings": 1 }, { "indicator": "http://42.226.65.130:56856/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 21:58:21 UTC", "last_seen": "2026-03-09 21:58:21 UTC", "sightings": 1 }, { "indicator": "http://182.121.73.84:58002/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 21:56:19 UTC", "last_seen": "2026-03-09 21:56:19 UTC", "sightings": 1 }, { "indicator": "http://59.94.126.163:54070/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 21:52:20 UTC", "last_seen": "2026-03-09 21:52:20 UTC", "sightings": 1 }, { "indicator": "http://117.205.92.243:44162/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 21:48:08 UTC", "last_seen": "2026-03-09 21:48:08 UTC", "sightings": 1 }, { "indicator": "http://125.43.7.105:46866/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 21:47:17 UTC", "last_seen": "2026-03-09 21:47:17 UTC", "sightings": 1 }, { "indicator": "http://182.121.217.39:49370/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 21:47:16 UTC", "last_seen": "2026-03-09 21:47:16 UTC", "sightings": 1 }, { "indicator": "https://term-way.vibratronic.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-09 21:43:12 UTC", "last_seen": "2026-03-09 21:43:12 UTC", "sightings": 1 }, { "indicator": "https://obsi-base.obsidianix.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-09 21:35:13 UTC", "last_seen": "2026-03-09 21:35:13 UTC", "sightings": 1 }, { "indicator": "http://88.228.249.54:59970/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 21:27:30 UTC", "last_seen": "2026-03-09 21:27:30 UTC", "sightings": 1 }, { "indicator": "http://88.228.249.54:59970/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 21:27:30 UTC", "last_seen": "2026-03-09 21:27:30 UTC", "sightings": 1 }, { "indicator": "http://115.53.199.175:59521/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 21:27:24 UTC", "last_seen": "2026-03-09 21:27:24 UTC", "sightings": 1 }, { "indicator": "https://main-sys.obsidianix.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-09 21:25:19 UTC", "last_seen": "2026-03-09 21:25:19 UTC", "sightings": 1 }, { "indicator": "http://182.191.72.235:35371/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 21:24:29 UTC", "last_seen": "2026-03-09 21:24:29 UTC", "sightings": 1 }, { "indicator": "http://117.205.92.243:44162/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 21:19:24 UTC", "last_seen": "2026-03-09 21:19:24 UTC", "sightings": 1 }, { "indicator": "https://obsi-v6.obsidianix.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-09 21:19:15 UTC", "last_seen": "2026-03-09 21:19:15 UTC", "sightings": 1 }, { "indicator": "http://182.113.207.29:55511/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 21:18:15 UTC", "last_seen": "2026-03-09 21:18:15 UTC", "sightings": 1 }, { "indicator": "https://spec-node.spectrometric.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-09 21:09:17 UTC", "last_seen": "2026-03-09 21:09:17 UTC", "sightings": 1 }, { "indicator": "http://182.121.73.84:58002/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 21:07:19 UTC", "last_seen": "2026-03-09 21:07:19 UTC", "sightings": 1 }, { "indicator": "https://spec-v05.spectrometric.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-09 21:00:16 UTC", "last_seen": "2026-03-09 21:00:16 UTC", "sightings": 1 }, { "indicator": "https://f0fjv96k.demogsystemat.digital/?=check&&actmn=GMXBhVrdBSaIoizJ", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-09 20:59:17 UTC", "last_seen": "2026-03-09 20:59:17 UTC", "sightings": 1 }, { "indicator": "http://27.215.211.252:56232/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 20:58:19 UTC", "last_seen": "2026-03-09 20:58:19 UTC", "sightings": 1 }, { "indicator": "http://110.39.245.10:52312/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 20:50:31 UTC", "last_seen": "2026-03-09 20:50:31 UTC", "sightings": 1 }, { "indicator": "https://vult-vault.spectrometric.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-09 20:50:15 UTC", "last_seen": "2026-03-09 20:50:15 UTC", "sightings": 1 }, { "indicator": "https://prim-data.primordialis.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-09 20:42:13 UTC", "last_seen": "2026-03-09 20:42:13 UTC", "sightings": 1 }, { "indicator": "http://115.49.25.54:56748/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 20:39:22 UTC", "last_seen": "2026-03-09 20:39:22 UTC", "sightings": 1 }, { "indicator": "http://182.114.196.87:46096/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 20:35:11 UTC", "last_seen": "2026-03-09 20:35:11 UTC", "sightings": 1 }, { "indicator": "https://prim-v44.primordialis.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-09 20:31:07 UTC", "last_seen": "2026-03-09 20:31:07 UTC", "sightings": 1 }, { "indicator": "http://182.114.196.87:46096/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 20:25:36 UTC", "last_seen": "2026-03-09 20:25:36 UTC", "sightings": 1 }, { "indicator": "https://logic-core.primordialis.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-09 20:25:32 UTC", "last_seen": "2026-03-09 20:25:32 UTC", "sightings": 1 }, { "indicator": "http://158.94.211.162/sodal", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-Phorpiex" ], "first_seen": "2026-03-09 20:23:08 UTC", "last_seen": "2026-03-09 20:23:08 UTC", "sightings": 1 }, { "indicator": "http://46.163.184.136:35437/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 20:21:20 UTC", "last_seen": "2026-03-09 20:21:20 UTC", "sightings": 1 }, { "indicator": "https://quan-edge.quantovault.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-09 20:21:12 UTC", "last_seen": "2026-03-09 20:21:12 UTC", "sightings": 1 }, { "indicator": "http://117.205.94.182:40928/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 20:20:24 UTC", "last_seen": "2026-03-09 20:20:24 UTC", "sightings": 1 }, { "indicator": "https://data-unit.quantovault.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-09 20:17:07 UTC", "last_seen": "2026-03-09 20:17:07 UTC", "sightings": 1 }, { "indicator": "http://115.49.25.54:56748/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 20:16:17 UTC", "last_seen": "2026-03-09 20:16:17 UTC", "sightings": 1 }, { "indicator": "http://116.68.162.210:44616/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-09 20:16:16 UTC", "last_seen": "2026-03-09 20:16:16 UTC", "sightings": 1 }, { "indicator": "http://182.114.51.101:54757/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 20:14:25 UTC", "last_seen": "2026-03-09 20:14:25 UTC", "sightings": 1 }, { "indicator": "https://data-gate.quantovault.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-09 20:10:14 UTC", "last_seen": "2026-03-09 20:10:14 UTC", "sightings": 1 }, { "indicator": "http://115.50.228.2:58095/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 20:06:17 UTC", "last_seen": "2026-03-09 20:06:17 UTC", "sightings": 1 }, { "indicator": "https://infra-net.altimetrica.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-09 20:05:09 UTC", "last_seen": "2026-03-09 20:05:09 UTC", "sightings": 1 }, { "indicator": "https://alti-v12.altimetrica.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-09 19:55:16 UTC", "last_seen": "2026-03-09 19:55:16 UTC", "sightings": 1 }, { "indicator": "http://116.68.162.210:44616/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-09 19:53:19 UTC", "last_seen": "2026-03-09 19:53:19 UTC", "sightings": 1 }, { "indicator": "http://110.37.31.174:32776/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 19:52:18 UTC", "last_seen": "2026-03-09 19:52:18 UTC", "sightings": 1 }, { "indicator": "http://182.114.51.101:54757/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 19:50:16 UTC", "last_seen": "2026-03-09 19:50:16 UTC", "sightings": 1 }, { "indicator": "http://115.55.114.170:47422/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips" ], "first_seen": "2026-03-09 19:46:10 UTC", "last_seen": "2026-03-09 19:46:10 UTC", "sightings": 1 }, { "indicator": "https://infra-hub.altimetrica.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-09 19:43:15 UTC", "last_seen": "2026-03-09 19:43:15 UTC", "sightings": 1 }, { "indicator": "http://115.55.114.170:47422/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips" ], "first_seen": "2026-03-09 19:34:18 UTC", "last_seen": "2026-03-09 19:34:18 UTC", "sightings": 1 }, { "indicator": "https://syst-sync.centurionix.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-09 19:29:10 UTC", "last_seen": "2026-03-09 19:29:10 UTC", "sightings": 1 }, { "indicator": "https://cent-v01.centurionix.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-09 19:26:06 UTC", "last_seen": "2026-03-09 19:26:06 UTC", "sightings": 1 }, { "indicator": "http://110.37.31.174:32776/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 19:25:15 UTC", "last_seen": "2026-03-09 19:25:15 UTC", "sightings": 1 }, { "indicator": "https://syncryp.bestink.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-09 19:17:12 UTC", "last_seen": "2026-03-09 19:17:12 UTC", "sightings": 1 }, { "indicator": "https://ch3c-line.bestink.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-09 19:02:13 UTC", "last_seen": "2026-03-09 19:02:13 UTC", "sightings": 1 }, { "indicator": "http://115.49.203.200:59050/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 19:00:20 UTC", "last_seen": "2026-03-09 19:00:20 UTC", "sightings": 1 }, { "indicator": "https://u1tr5-bridge.lookback.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-09 18:59:09 UTC", "last_seen": "2026-03-09 18:59:09 UTC", "sightings": 1 }, { "indicator": "http://125.43.247.209:33395/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 18:57:14 UTC", "last_seen": "2026-03-09 18:57:14 UTC", "sightings": 1 }, { "indicator": "http://46.163.184.136:35437/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 18:55:19 UTC", "last_seen": "2026-03-09 18:55:19 UTC", "sightings": 1 }, { "indicator": "https://sp4rrow-phase.lookback.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-09 18:52:11 UTC", "last_seen": "2026-03-09 18:52:11 UTC", "sightings": 1 }, { "indicator": "http://110.37.1.254:59756/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 18:50:19 UTC", "last_seen": "2026-03-09 18:50:19 UTC", "sightings": 1 }, { "indicator": "https://eaec4m.droplast.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-09 18:35:12 UTC", "last_seen": "2026-03-09 18:35:12 UTC", "sightings": 1 }, { "indicator": "http://115.58.92.55:56852/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 18:33:17 UTC", "last_seen": "2026-03-09 18:33:17 UTC", "sightings": 1 }, { "indicator": "https://dark-shi.droplast.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-09 18:32:08 UTC", "last_seen": "2026-03-09 18:32:08 UTC", "sightings": 1 }, { "indicator": "http://120.84.215.242:38495/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 18:11:22 UTC", "last_seen": "2026-03-09 18:11:22 UTC", "sightings": 1 }, { "indicator": "https://reel-tok.costfee.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-09 18:08:07 UTC", "last_seen": "2026-03-09 18:08:07 UTC", "sightings": 1 }, { "indicator": "http://111.76.224.175:37151/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-09 18:06:18 UTC", "last_seen": "2026-03-09 18:06:18 UTC", "sightings": 1 }, { "indicator": "http://110.37.67.68:55475/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 18:02:11 UTC", "last_seen": "2026-03-09 18:02:11 UTC", "sightings": 1 }, { "indicator": "http://158.94.211.222/files/825476364/6HMd4Pg.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543", "SalatStealer" ], "first_seen": "2026-03-09 18:02:07 UTC", "last_seen": "2026-03-09 18:02:07 UTC", "sightings": 1 }, { "indicator": "http://158.94.211.222/files/8538310255/Ouxs217.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-03-09 18:01:09 UTC", "last_seen": "2026-03-09 18:01:09 UTC", "sightings": 1 }, { "indicator": "http://110.37.1.254:59756/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 17:55:19 UTC", "last_seen": "2026-03-09 17:55:19 UTC", "sightings": 1 }, { "indicator": "http://115.58.92.55:56852/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 17:53:14 UTC", "last_seen": "2026-03-09 17:53:14 UTC", "sightings": 1 }, { "indicator": "http://110.36.19.215:33331/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 17:52:12 UTC", "last_seen": "2026-03-09 17:52:12 UTC", "sightings": 1 }, { "indicator": "http://110.37.67.68:55475/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 17:50:14 UTC", "last_seen": "2026-03-09 17:50:14 UTC", "sightings": 1 }, { "indicator": "http://59.184.241.103:43347/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 17:48:20 UTC", "last_seen": "2026-03-09 17:48:20 UTC", "sightings": 1 }, { "indicator": "https://deal1-point.greentea.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-09 17:47:07 UTC", "last_seen": "2026-03-09 17:47:07 UTC", "sightings": 1 }, { "indicator": "http://125.41.76.79:57271/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 17:46:20 UTC", "last_seen": "2026-03-09 17:46:20 UTC", "sightings": 1 }, { "indicator": "http://39.81.157.227:60882/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 17:43:17 UTC", "last_seen": "2026-03-09 17:43:17 UTC", "sightings": 1 }, { "indicator": "https://guid-route.greentea.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-09 17:43:07 UTC", "last_seen": "2026-03-09 17:43:07 UTC", "sightings": 1 }, { "indicator": "http://111.76.224.175:37151/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-09 17:41:19 UTC", "last_seen": "2026-03-09 17:41:19 UTC", "sightings": 1 }, { "indicator": "http://115.63.231.227:47814/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 17:40:21 UTC", "last_seen": "2026-03-09 17:40:21 UTC", "sightings": 1 }, { "indicator": "http://42.58.2.39:42339/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 17:40:21 UTC", "last_seen": "2026-03-09 17:40:21 UTC", "sightings": 1 }, { "indicator": "https://render5-line.wayton.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-09 17:33:11 UTC", "last_seen": "2026-03-09 17:33:11 UTC", "sightings": 1 }, { "indicator": "https://faitdem.wayton.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-09 17:28:12 UTC", "last_seen": "2026-03-09 17:28:12 UTC", "sightings": 1 }, { "indicator": "http://110.36.19.215:33331/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 17:27:12 UTC", "last_seen": "2026-03-09 17:27:12 UTC", "sightings": 1 }, { "indicator": "http://115.50.68.239:55385/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 17:23:20 UTC", "last_seen": "2026-03-09 17:23:20 UTC", "sightings": 1 }, { "indicator": "https://transmfield.wayton.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-09 17:23:12 UTC", "last_seen": "2026-03-09 17:23:12 UTC", "sightings": 1 }, { "indicator": "http://125.41.76.79:57271/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 17:22:11 UTC", "last_seen": "2026-03-09 17:22:11 UTC", "sightings": 1 }, { "indicator": "https://45.59.119.161/download/gitlol", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-09 17:22:05 UTC", "last_seen": "2026-03-09 17:22:05 UTC", "sightings": 1 }, { "indicator": "https://quin-net.quintura.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-09 17:20:07 UTC", "last_seen": "2026-03-09 17:20:07 UTC", "sightings": 1 }, { "indicator": "http://42.58.2.39:42339/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 17:19:32 UTC", "last_seen": "2026-03-09 17:19:32 UTC", "sightings": 1 }, { "indicator": "http://115.63.231.227:47814/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 17:18:13 UTC", "last_seen": "2026-03-09 17:18:13 UTC", "sightings": 1 }, { "indicator": "https://tech-base.quintura.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-09 17:13:08 UTC", "last_seen": "2026-03-09 17:13:08 UTC", "sightings": 1 }, { "indicator": "https://quin-v11.quintura.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-09 17:10:12 UTC", "last_seen": "2026-03-09 17:10:12 UTC", "sightings": 1 }, { "indicator": "https://tech-ref.quintura.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-09 17:04:08 UTC", "last_seen": "2026-03-09 17:04:08 UTC", "sightings": 1 }, { "indicator": "https://spec-unit.spectris.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-09 17:00:07 UTC", "last_seen": "2026-03-09 17:00:07 UTC", "sightings": 1 }, { "indicator": "http://158.94.211.222/files/8538310255/aoT9QRm.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-09 16:58:10 UTC", "last_seen": "2026-03-09 16:58:10 UTC", "sightings": 1 }, { "indicator": "https://link-gate.spectris.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-09 16:52:08 UTC", "last_seen": "2026-03-09 16:52:08 UTC", "sightings": 1 }, { "indicator": "https://spec-v09.spectris.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-09 16:47:07 UTC", "last_seen": "2026-03-09 16:47:07 UTC", "sightings": 1 }, { "indicator": "https://link-logic.spectris.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-09 16:42:08 UTC", "last_seen": "2026-03-09 16:42:08 UTC", "sightings": 1 }, { "indicator": "http://117.241.95.105:43878/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 16:41:16 UTC", "last_seen": "2026-03-09 16:41:16 UTC", "sightings": 1 }, { "indicator": "http://61.53.133.111:34226/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 16:40:23 UTC", "last_seen": "2026-03-09 16:40:23 UTC", "sightings": 1 }, { "indicator": "https://vibr-flow.vibrante.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-09 16:40:06 UTC", "last_seen": "2026-03-09 16:40:06 UTC", "sightings": 1 }, { "indicator": "https://term-sync.vibrante.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-09 16:34:11 UTC", "last_seen": "2026-03-09 16:34:11 UTC", "sightings": 1 }, { "indicator": "https://vibr-v08.vibrante.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-09 16:29:10 UTC", "last_seen": "2026-03-09 16:29:10 UTC", "sightings": 1 }, { "indicator": "https://term-way.vibrante.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-09 16:22:12 UTC", "last_seen": "2026-03-09 16:22:12 UTC", "sightings": 1 }, { "indicator": "http://175.149.92.7:49382/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 16:20:21 UTC", "last_seen": "2026-03-09 16:20:21 UTC", "sightings": 1 }, { "indicator": "https://marsalek.cy/static/plugin3.plg", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-09 16:17:09 UTC", "last_seen": "2026-03-09 16:17:09 UTC", "sightings": 1 }, { "indicator": "http://61.52.38.201:41198/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 16:16:19 UTC", "last_seen": "2026-03-09 16:16:19 UTC", "sightings": 1 }, { "indicator": "https://flux-run.fluxoris.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-09 16:16:07 UTC", "last_seen": "2026-03-09 16:16:07 UTC", "sightings": 1 }, { "indicator": "https://site-net.fluxoris.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-09 16:11:07 UTC", "last_seen": "2026-03-09 16:11:07 UTC", "sightings": 1 }, { "indicator": "http://115.56.158.23:39006/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 16:09:24 UTC", "last_seen": "2026-03-09 16:09:24 UTC", "sightings": 1 }, { "indicator": "http://123.11.240.203:37155/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 16:08:19 UTC", "last_seen": "2026-03-09 16:08:19 UTC", "sightings": 1 }, { "indicator": "https://flux-v77.fluxoris.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-09 16:04:12 UTC", "last_seen": "2026-03-09 16:04:12 UTC", "sightings": 1 }, { "indicator": "http://158.94.211.222/files/7782139129/fYf2bHV.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-09 16:02:07 UTC", "last_seen": "2026-03-09 16:02:07 UTC", "sightings": 1 }, { "indicator": "https://site-node.fluxoris.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-09 15:57:12 UTC", "last_seen": "2026-03-09 15:57:12 UTC", "sightings": 1 }, { "indicator": "http://115.56.158.23:39006/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 15:56:15 UTC", "last_seen": "2026-03-09 15:56:15 UTC", "sightings": 1 }, { "indicator": "http://117.241.95.105:43878/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 15:51:25 UTC", "last_seen": "2026-03-09 15:51:25 UTC", "sightings": 1 }, { "indicator": "https://orbi-base.orbisura.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-09 15:51:07 UTC", "last_seen": "2026-03-09 15:51:07 UTC", "sightings": 1 }, { "indicator": "http://123.11.240.203:37155/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 15:46:22 UTC", "last_seen": "2026-03-09 15:46:22 UTC", "sightings": 1 }, { "indicator": "https://main-sys.orbisura.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-09 15:46:08 UTC", "last_seen": "2026-03-09 15:46:08 UTC", "sightings": 1 }, { "indicator": "https://qpgroup.top/uploads/Coral_Setup.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "Amadey", "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-09 15:44:14 UTC", "last_seen": "2026-03-09 15:44:14 UTC", "sightings": 1 }, { "indicator": "https://orbi-v6.orbisura.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-09 15:39:13 UTC", "last_seen": "2026-03-09 15:39:13 UTC", "sightings": 1 }, { "indicator": "http://39.79.131.103:46863/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 15:35:24 UTC", "last_seen": "2026-03-09 15:35:24 UTC", "sightings": 1 }, { "indicator": "https://main-peak.orbisura.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-09 15:34:11 UTC", "last_seen": "2026-03-09 15:34:11 UTC", "sightings": 1 }, { "indicator": "https://zent-node.zentalis.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-09 15:29:14 UTC", "last_seen": "2026-03-09 15:29:14 UTC", "sightings": 1 }, { "indicator": "http://42.239.142.132:41670/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 15:27:56 UTC", "last_seen": "2026-03-09 15:27:56 UTC", "sightings": 1 }, { "indicator": "https://cocinanikkei.com.pe/img_085359.png", "indicator_type": "url", "source": "URLhaus", "tags": [ "VIPKeylogger" ], "first_seen": "2026-03-09 15:23:12 UTC", "last_seen": "2026-03-09 15:23:12 UTC", "sightings": 1 }, { "indicator": "https://bit-hub.zentalis.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-09 15:21:10 UTC", "last_seen": "2026-03-09 15:21:10 UTC", "sightings": 1 }, { "indicator": "http://60.19.222.244:41389/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 15:19:29 UTC", "last_seen": "2026-03-09 15:19:29 UTC", "sightings": 1 }, { "indicator": "http://80.89.238.200/1.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543", "Vidar" ], "first_seen": "2026-03-09 15:18:19 UTC", "last_seen": "2026-03-09 15:18:19 UTC", "sightings": 1 }, { "indicator": "https://zent-v05.zentalis.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-09 15:16:13 UTC", "last_seen": "2026-03-09 15:16:13 UTC", "sightings": 1 }, { "indicator": "http://158.94.211.222/files/7093422244/JHvHyiz.msi", "indicator_type": "url", "source": "URLhaus", "tags": [ "connectwise", "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-09 15:13:17 UTC", "last_seen": "2026-03-09 15:13:17 UTC", "sightings": 1 }, { "indicator": "http://39.79.131.103:46863/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 15:12:25 UTC", "last_seen": "2026-03-09 15:12:25 UTC", "sightings": 1 }, { "indicator": "http://39.87.121.203:47275/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 15:10:11 UTC", "last_seen": "2026-03-09 15:10:11 UTC", "sightings": 1 }, { "indicator": "https://bit-vault.zentalis.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-09 15:09:13 UTC", "last_seen": "2026-03-09 15:09:13 UTC", "sightings": 1 }, { "indicator": "http://110.39.228.78:53594/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 15:06:25 UTC", "last_seen": "2026-03-09 15:06:25 UTC", "sightings": 1 }, { "indicator": "https://nexu-data.nexulon.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-09 15:05:12 UTC", "last_seen": "2026-03-09 15:05:12 UTC", "sightings": 1 }, { "indicator": "http://110.36.76.43:50872/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 15:02:21 UTC", "last_seen": "2026-03-09 15:02:21 UTC", "sightings": 1 }, { "indicator": "https://dist-sync.nexulon.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-09 14:58:07 UTC", "last_seen": "2026-03-09 14:58:07 UTC", "sightings": 1 }, { "indicator": "https://sfrc.ckmo.live/Cyrex.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "pw-cyrex", "zip" ], "first_seen": "2026-03-09 14:57:47 UTC", "last_seen": "2026-03-09 14:57:47 UTC", "sightings": 1 }, { "indicator": "http://115.63.149.131:39767/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 14:55:26 UTC", "last_seen": "2026-03-09 14:55:26 UTC", "sightings": 1 }, { "indicator": "https://nexu-v44.nexulon.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-09 14:53:07 UTC", "last_seen": "2026-03-09 14:53:07 UTC", "sightings": 1 }, { "indicator": "http://60.19.222.244:41389/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 14:49:33 UTC", "last_seen": "2026-03-09 14:49:33 UTC", "sightings": 1 }, { "indicator": "https://dist-core.nexulon.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-09 14:49:07 UTC", "last_seen": "2026-03-09 14:49:07 UTC", "sightings": 1 }, { "indicator": "http://110.36.76.43:50872/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 14:46:19 UTC", "last_seen": "2026-03-09 14:46:19 UTC", "sightings": 1 }, { "indicator": "http://110.39.228.78:53594/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 14:45:27 UTC", "last_seen": "2026-03-09 14:45:27 UTC", "sightings": 1 }, { "indicator": "https://dyna-edge.dynastis.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-09 14:43:07 UTC", "last_seen": "2026-03-09 14:43:07 UTC", "sightings": 1 }, { "indicator": "http://110.37.35.199:47257/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 14:42:27 UTC", "last_seen": "2026-03-09 14:42:27 UTC", "sightings": 1 }, { "indicator": "https://8r6d1s3j.cheesechubary.digital/?=check&&actmn=GqFQTOxXmlHLfmLo", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-09 14:42:06 UTC", "last_seen": "2026-03-09 14:42:06 UTC", "sightings": 1 }, { "indicator": "https://ops-unit.dynastis.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-09 14:40:08 UTC", "last_seen": "2026-03-09 14:40:08 UTC", "sightings": 1 }, { "indicator": "https://dyna-v3.dynastis.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-09 14:32:10 UTC", "last_seen": "2026-03-09 14:32:10 UTC", "sightings": 1 }, { "indicator": "https://ops-gate.dynastis.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-09 14:27:09 UTC", "last_seen": "2026-03-09 14:27:09 UTC", "sightings": 1 }, { "indicator": "http://45.131.182.242/1.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543", "Vidar" ], "first_seen": "2026-03-09 14:26:19 UTC", "last_seen": "2026-03-09 14:26:19 UTC", "sightings": 1 }, { "indicator": "https://kron-flow.kronosis.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-09 14:20:14 UTC", "last_seen": "2026-03-09 14:20:14 UTC", "sightings": 1 }, { "indicator": "http://110.37.35.199:47257/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 14:17:21 UTC", "last_seen": "2026-03-09 14:17:21 UTC", "sightings": 1 }, { "indicator": "http://158.94.211.222/files/7782139129/EK789KM.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543", "Smoke Loader" ], "first_seen": "2026-03-09 14:17:09 UTC", "last_seen": "2026-03-09 14:17:09 UTC", "sightings": 1 }, { "indicator": "https://alt-net.kronosis.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-09 14:16:08 UTC", "last_seen": "2026-03-09 14:16:08 UTC", "sightings": 1 }, { "indicator": "https://kron-v12.kronosis.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-09 14:11:13 UTC", "last_seen": "2026-03-09 14:11:13 UTC", "sightings": 1 }, { "indicator": "https://alt-hub.kronosis.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-09 14:08:07 UTC", "last_seen": "2026-03-09 14:08:07 UTC", "sightings": 1 }, { "indicator": "https://pastes.io/raw/0QC9JNhs", "indicator_type": "url", "source": "URLhaus", "tags": [ "RemcosRAT" ], "first_seen": "2026-03-09 14:06:17 UTC", "last_seen": "2026-03-09 14:06:17 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/dunigghhh/Hii/refs/heads/main/server.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "ua-wget" ], "first_seen": "2026-03-09 14:05:18 UTC", "last_seen": "2026-03-09 14:05:18 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/dunigghhh/Hii/refs/heads/main/asd.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "ua-wget" ], "first_seen": "2026-03-09 14:02:07 UTC", "last_seen": "2026-03-09 14:02:07 UTC", "sightings": 1 }, { "indicator": "http://103.206.207.23:37555/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 14:01:18 UTC", "last_seen": "2026-03-09 14:01:18 UTC", "sightings": 1 }, { "indicator": "http://158.94.211.222/files/8290342669/SBD1ils.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-09 14:01:05 UTC", "last_seen": "2026-03-09 14:01:05 UTC", "sightings": 1 }, { "indicator": "https://veri-base.veritax.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-09 13:56:12 UTC", "last_seen": "2026-03-09 13:56:12 UTC", "sightings": 1 }, { "indicator": "https://prim-sync.veritax.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-09 13:52:09 UTC", "last_seen": "2026-03-09 13:52:09 UTC", "sightings": 1 }, { "indicator": "http://xf221.cn/cs12.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "ua-wget" ], "first_seen": "2026-03-09 13:50:11 UTC", "last_seen": "2026-03-09 13:50:11 UTC", "sightings": 1 }, { "indicator": "http://115.49.65.228:46401/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 13:48:17 UTC", "last_seen": "2026-03-09 13:48:17 UTC", "sightings": 1 }, { "indicator": "https://veri-v01.veritax.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-09 13:48:06 UTC", "last_seen": "2026-03-09 13:48:06 UTC", "sightings": 1 }, { "indicator": "http://62.60.226.97:5553/freks.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "ua-wget" ], "first_seen": "2026-03-09 13:45:09 UTC", "last_seen": "2026-03-09 13:45:09 UTC", "sightings": 1 }, { "indicator": "http://47.80.11.103:2222/loader1.bin", "indicator_type": "url", "source": "URLhaus", "tags": [ "ua-wget" ], "first_seen": "2026-03-09 13:44:07 UTC", "last_seen": "2026-03-09 13:44:07 UTC", "sightings": 1 }, { "indicator": "http://188.241.219.55:9000/peer.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "ua-wget" ], "first_seen": "2026-03-09 13:42:26 UTC", "last_seen": "2026-03-09 13:42:26 UTC", "sightings": 1 }, { "indicator": "https://prim-node.veritax.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-09 13:42:12 UTC", "last_seen": "2026-03-09 13:42:12 UTC", "sightings": 1 }, { "indicator": "https://columnreel.slowbend.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-09 13:37:11 UTC", "last_seen": "2026-03-09 13:37:11 UTC", "sightings": 1 }, { "indicator": "http://103.206.207.23:37555/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 13:35:15 UTC", "last_seen": "2026-03-09 13:35:15 UTC", "sightings": 1 }, { "indicator": "http://158.94.211.222/files/8290342669/SBD1ils.bat", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-03-09 13:34:06 UTC", "last_seen": "2026-03-09 13:34:06 UTC", "sightings": 1 }, { "indicator": "http://125.40.155.117:49840/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 13:28:17 UTC", "last_seen": "2026-03-09 13:28:17 UTC", "sightings": 1 }, { "indicator": "https://iqdrq.slowbend.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-09 13:28:12 UTC", "last_seen": "2026-03-09 13:28:12 UTC", "sightings": 1 }, { "indicator": "http://115.49.65.228:46401/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 13:25:13 UTC", "last_seen": "2026-03-09 13:25:13 UTC", "sightings": 1 }, { "indicator": "http://188.137.224.92/cache.bin", "indicator_type": "url", "source": "URLhaus", "tags": [ "Vidar" ], "first_seen": "2026-03-09 13:23:09 UTC", "last_seen": "2026-03-09 13:23:09 UTC", "sightings": 1 }, { "indicator": "http://125.44.19.106:60875/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 13:22:15 UTC", "last_seen": "2026-03-09 13:22:15 UTC", "sightings": 1 }, { "indicator": "https://s0lid-leaf.slowbend.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-09 13:21:11 UTC", "last_seen": "2026-03-09 13:21:11 UTC", "sightings": 1 }, { "indicator": "https://warmgrim.slowbend.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-09 13:16:18 UTC", "last_seen": "2026-03-09 13:16:18 UTC", "sightings": 1 }, { "indicator": "http://125.44.19.106:60875/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 13:14:20 UTC", "last_seen": "2026-03-09 13:14:20 UTC", "sightings": 1 }, { "indicator": "http://110.36.15.18:37139/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 13:10:18 UTC", "last_seen": "2026-03-09 13:10:18 UTC", "sightings": 1 }, { "indicator": "http://112.198.238.30:48410/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-09 13:07:26 UTC", "last_seen": "2026-03-09 13:07:26 UTC", "sightings": 1 }, { "indicator": "http://59.177.107.56:37055/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 13:02:25 UTC", "last_seen": "2026-03-09 13:02:25 UTC", "sightings": 1 }, { "indicator": "http://125.40.155.117:49840/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 13:01:36 UTC", "last_seen": "2026-03-09 13:01:36 UTC", "sightings": 1 }, { "indicator": "http://61.53.120.63:47826/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 12:58:18 UTC", "last_seen": "2026-03-09 12:58:18 UTC", "sightings": 1 }, { "indicator": "http://192.3.136.196/GhLOHHKDpUMwZf161.bin", "indicator_type": "url", "source": "URLhaus", "tags": [ "encrypted", "GuLoader" ], "first_seen": "2026-03-09 12:58:07 UTC", "last_seen": "2026-03-09 12:58:07 UTC", "sightings": 1 }, { "indicator": "http://192.3.136.196/tcDvNyMIVEautDnohjSyS139.bin", "indicator_type": "url", "source": "URLhaus", "tags": [ "encrypted", "GuLoader" ], "first_seen": "2026-03-09 12:58:06 UTC", "last_seen": "2026-03-09 12:58:06 UTC", "sightings": 1 }, { "indicator": "http://115.61.6.181:46328/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 12:46:16 UTC", "last_seen": "2026-03-09 12:46:16 UTC", "sightings": 1 }, { "indicator": "https://letcurre.windright.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-09 12:42:11 UTC", "last_seen": "2026-03-09 12:42:11 UTC", "sightings": 1 }, { "indicator": "https://unload-bridge.windright.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-09 12:40:45 UTC", "last_seen": "2026-03-09 12:40:45 UTC", "sightings": 1 }, { "indicator": "http://221.15.7.71:55396/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 12:40:43 UTC", "last_seen": "2026-03-09 12:40:43 UTC", "sightings": 1 }, { "indicator": "https://pngup.com/rv2N/optimized_MSI.png", "indicator_type": "url", "source": "URLhaus", "tags": [ "MassLogger" ], "first_seen": "2026-03-09 12:37:17 UTC", "last_seen": "2026-03-09 12:37:17 UTC", "sightings": 1 }, { "indicator": "https://cocinanikkei.com.pe/img_094738.png", "indicator_type": "url", "source": "URLhaus", "tags": [ "MassLogger" ], "first_seen": "2026-03-09 12:37:15 UTC", "last_seen": "2026-03-09 12:37:15 UTC", "sightings": 1 }, { "indicator": "http://36.88.136.202:32899/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-09 12:37:09 UTC", "last_seen": "2026-03-09 12:37:09 UTC", "sightings": 1 }, { "indicator": "https://6h76gr0n.diagnosfirst.digital/?=check&&actmn=PQGIVLyIagdgLkgG", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-09 12:36:11 UTC", "last_seen": "2026-03-09 12:36:11 UTC", "sightings": 1 }, { "indicator": "http://110.37.100.152:47745/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 12:31:17 UTC", "last_seen": "2026-03-09 12:31:17 UTC", "sightings": 1 }, { "indicator": "http://61.168.137.159:49505/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 12:29:18 UTC", "last_seen": "2026-03-09 12:29:18 UTC", "sightings": 1 }, { "indicator": "https://lknz.windright.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-09 12:29:14 UTC", "last_seen": "2026-03-09 12:29:14 UTC", "sightings": 1 }, { "indicator": "http://27.215.156.145:51564/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 12:24:08 UTC", "last_seen": "2026-03-09 12:24:08 UTC", "sightings": 1 }, { "indicator": "https://r3nder-switch.windright.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-09 12:22:13 UTC", "last_seen": "2026-03-09 12:22:13 UTC", "sightings": 1 }, { "indicator": "http://110.37.100.152:47745/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 12:20:10 UTC", "last_seen": "2026-03-09 12:20:10 UTC", "sightings": 1 }, { "indicator": "http://158.94.211.222/files/7903503838/kUpExhy.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-03-09 12:19:08 UTC", "last_seen": "2026-03-09 12:19:08 UTC", "sightings": 1 }, { "indicator": "http://115.61.6.181:46328/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 12:18:10 UTC", "last_seen": "2026-03-09 12:18:10 UTC", "sightings": 1 }, { "indicator": "http://222.140.181.224:56641/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 12:16:16 UTC", "last_seen": "2026-03-09 12:16:16 UTC", "sightings": 1 }, { "indicator": "https://stri5-reach.spinpath.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-09 12:15:13 UTC", "last_seen": "2026-03-09 12:15:13 UTC", "sightings": 1 }, { "indicator": "http://182.90.123.164:33064/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-09 12:10:20 UTC", "last_seen": "2026-03-09 12:10:20 UTC", "sightings": 1 }, { "indicator": "https://repairdefend.spinpath.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-09 12:08:12 UTC", "last_seen": "2026-03-09 12:08:12 UTC", "sightings": 1 }, { "indicator": "http://221.15.7.71:55396/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 12:03:18 UTC", "last_seen": "2026-03-09 12:03:18 UTC", "sightings": 1 }, { "indicator": "http://42.235.80.154:41988/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 12:01:17 UTC", "last_seen": "2026-03-09 12:01:17 UTC", "sightings": 1 }, { "indicator": "https://quorlithix3.spinpath.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-09 12:00:08 UTC", "last_seen": "2026-03-09 12:00:08 UTC", "sightings": 1 }, { "indicator": "http://27.215.156.145:51564/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 11:59:13 UTC", "last_seen": "2026-03-09 11:59:13 UTC", "sightings": 1 }, { "indicator": "http://61.168.137.159:49505/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 11:56:17 UTC", "last_seen": "2026-03-09 11:56:17 UTC", "sightings": 1 }, { "indicator": "http://110.39.231.36:43900/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 11:56:16 UTC", "last_seen": "2026-03-09 11:56:16 UTC", "sightings": 1 }, { "indicator": "http://158.94.211.222/files/7942715918/otRD45B.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543", "QuasarRAT" ], "first_seen": "2026-03-09 11:50:08 UTC", "last_seen": "2026-03-09 11:50:08 UTC", "sightings": 1 }, { "indicator": "http://110.39.231.36:43900/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 11:46:13 UTC", "last_seen": "2026-03-09 11:46:13 UTC", "sightings": 1 }, { "indicator": "https://valu-crest.spinpath.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-09 11:45:14 UTC", "last_seen": "2026-03-09 11:45:14 UTC", "sightings": 1 }, { "indicator": "http://42.87.41.227:44480/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 11:43:16 UTC", "last_seen": "2026-03-09 11:43:16 UTC", "sightings": 1 }, { "indicator": "http://36.88.136.202:32899/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-09 11:39:20 UTC", "last_seen": "2026-03-09 11:39:20 UTC", "sightings": 1 }, { "indicator": "https://neo-gu1de.rollbend.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-09 11:38:07 UTC", "last_seen": "2026-03-09 11:38:07 UTC", "sightings": 1 }, { "indicator": "https://velline5en.rollbend.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-09 11:31:10 UTC", "last_seen": "2026-03-09 11:31:10 UTC", "sightings": 1 }, { "indicator": "https://b74nufw.rollbend.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-09 11:26:08 UTC", "last_seen": "2026-03-09 11:26:08 UTC", "sightings": 1 }, { "indicator": "http://27.215.214.134:60116/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 11:10:16 UTC", "last_seen": "2026-03-09 11:10:16 UTC", "sightings": 1 }, { "indicator": "https://gaydkonx.fullgate.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-09 11:09:10 UTC", "last_seen": "2026-03-09 11:09:10 UTC", "sightings": 1 }, { "indicator": "http://110.36.77.36:42855/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 11:02:07 UTC", "last_seen": "2026-03-09 11:02:07 UTC", "sightings": 1 }, { "indicator": "http://115.50.177.138:44681/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 10:57:14 UTC", "last_seen": "2026-03-09 10:57:14 UTC", "sightings": 1 }, { "indicator": "http://110.37.123.210:35562/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 10:53:08 UTC", "last_seen": "2026-03-09 10:53:08 UTC", "sightings": 1 }, { "indicator": "http://27.215.214.134:60116/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 10:52:30 UTC", "last_seen": "2026-03-09 10:52:30 UTC", "sightings": 1 }, { "indicator": "https://queuemarsh.fullgate.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-09 10:52:09 UTC", "last_seen": "2026-03-09 10:52:09 UTC", "sightings": 1 }, { "indicator": "http://168.195.7.106:37892/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-09 10:48:12 UTC", "last_seen": "2026-03-09 10:48:12 UTC", "sightings": 1 }, { "indicator": "https://hyrfnqqh.fullgate.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-09 10:47:09 UTC", "last_seen": "2026-03-09 10:47:09 UTC", "sightings": 1 }, { "indicator": "http://170.0.60.80:53897/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-09 10:45:22 UTC", "last_seen": "2026-03-09 10:45:22 UTC", "sightings": 1 }, { "indicator": "http://42.87.41.227:44480/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 10:44:21 UTC", "last_seen": "2026-03-09 10:44:21 UTC", "sightings": 1 }, { "indicator": "https://1ago-plate.blackford.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-09 10:42:09 UTC", "last_seen": "2026-03-09 10:42:09 UTC", "sightings": 1 }, { "indicator": "https://mossoak.blackford.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-09 10:36:09 UTC", "last_seen": "2026-03-09 10:36:09 UTC", "sightings": 1 }, { "indicator": "http://27.215.55.225:54327/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 10:30:09 UTC", "last_seen": "2026-03-09 10:30:09 UTC", "sightings": 1 }, { "indicator": "https://oute2-grid.blackford.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-09 10:29:06 UTC", "last_seen": "2026-03-09 10:29:06 UTC", "sightings": 1 }, { "indicator": "http://115.50.177.138:44681/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 10:27:25 UTC", "last_seen": "2026-03-09 10:27:25 UTC", "sightings": 1 }, { "indicator": "http://170.0.60.80:53897/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-09 10:24:12 UTC", "last_seen": "2026-03-09 10:24:12 UTC", "sightings": 1 }, { "indicator": "http://115.63.82.131:35331/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 10:22:18 UTC", "last_seen": "2026-03-09 10:22:18 UTC", "sightings": 1 }, { "indicator": "https://reel-mount.toolbend.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-09 10:22:08 UTC", "last_seen": "2026-03-09 10:22:08 UTC", "sightings": 1 }, { "indicator": "http://115.63.82.131:35331/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 10:21:16 UTC", "last_seen": "2026-03-09 10:21:16 UTC", "sightings": 1 }, { "indicator": "http://168.195.7.106:37892/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-09 10:20:13 UTC", "last_seen": "2026-03-09 10:20:13 UTC", "sightings": 1 }, { "indicator": "https://guardtrans.toolbend.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-09 10:17:06 UTC", "last_seen": "2026-03-09 10:17:06 UTC", "sightings": 1 }, { "indicator": "http://45.163.68.86:10317/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 10:15:19 UTC", "last_seen": "2026-03-09 10:15:19 UTC", "sightings": 1 }, { "indicator": "http://42.235.80.154:41988/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 10:12:20 UTC", "last_seen": "2026-03-09 10:12:20 UTC", "sightings": 1 }, { "indicator": "https://prrnftoa.toolbend.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-09 10:12:11 UTC", "last_seen": "2026-03-09 10:12:11 UTC", "sightings": 1 }, { "indicator": "https://carrierstream.toolbend.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-09 10:07:11 UTC", "last_seen": "2026-03-09 10:07:11 UTC", "sightings": 1 }, { "indicator": "https://jfjoj.askloop.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-09 10:02:08 UTC", "last_seen": "2026-03-09 10:02:08 UTC", "sightings": 1 }, { "indicator": "https://tri-fluxor.askloop.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-09 09:55:09 UTC", "last_seen": "2026-03-09 09:55:09 UTC", "sightings": 1 }, { "indicator": "http://221.203.224.92:60301/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 09:54:18 UTC", "last_seen": "2026-03-09 09:54:18 UTC", "sightings": 1 }, { "indicator": "https://dev-moral.askloop.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-09 09:52:08 UTC", "last_seen": "2026-03-09 09:52:08 UTC", "sightings": 1 }, { "indicator": "http://123.129.128.47:42521/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 09:48:17 UTC", "last_seen": "2026-03-09 09:48:17 UTC", "sightings": 1 }, { "indicator": "http://221.203.224.92:60301/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 09:38:21 UTC", "last_seen": "2026-03-09 09:38:21 UTC", "sightings": 1 }, { "indicator": "https://transfer.weepee.io/139H8d/ldx", "indicator_type": "url", "source": "URLhaus", "tags": [ "CoinMiner", "CVE-2026-1731", "elf", "ua-curl" ], "first_seen": "2026-03-09 09:33:35 UTC", "last_seen": "2026-03-09 09:33:35 UTC", "sightings": 1 }, { "indicator": "https://transfer.weepee.io/MvSx6/super.drx", "indicator_type": "url", "source": "URLhaus", "tags": [ "ascii", "bash", "CVE-2026-1731", "sh", "ua-curl" ], "first_seen": "2026-03-09 09:28:18 UTC", "last_seen": "2026-03-09 09:28:18 UTC", "sightings": 1 }, { "indicator": "https://mox-net.moxura.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-09 09:28:14 UTC", "last_seen": "2026-03-09 09:28:14 UTC", "sightings": 1 }, { "indicator": "https://transfer.weepee.io/7nZw7/blue.drx", "indicator_type": "url", "source": "URLhaus", "tags": [ "ascii", "bash", "CVE-2026-1731", "sh", "ua-curl" ], "first_seen": "2026-03-09 09:27:16 UTC", "last_seen": "2026-03-09 09:27:16 UTC", "sightings": 1 }, { "indicator": "http://123.129.128.47:42521/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 09:26:26 UTC", "last_seen": "2026-03-09 09:26:26 UTC", "sightings": 1 }, { "indicator": "http://27.215.55.225:54327/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 09:25:28 UTC", "last_seen": "2026-03-09 09:25:28 UTC", "sightings": 1 }, { "indicator": "http://120.84.214.131:46073/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 09:21:32 UTC", "last_seen": "2026-03-09 09:21:32 UTC", "sightings": 1 }, { "indicator": "http://42.239.142.132:41670/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 09:19:20 UTC", "last_seen": "2026-03-09 09:19:20 UTC", "sightings": 1 }, { "indicator": "https://tech-base.moxura.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-09 09:18:09 UTC", "last_seen": "2026-03-09 09:18:09 UTC", "sightings": 1 }, { "indicator": "http://110.37.115.91:37452/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 09:17:28 UTC", "last_seen": "2026-03-09 09:17:28 UTC", "sightings": 1 }, { "indicator": "https://mox-v11.moxura.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-09 09:13:13 UTC", "last_seen": "2026-03-09 09:13:13 UTC", "sightings": 1 }, { "indicator": "https://tech-ref.moxura.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-09 09:09:13 UTC", "last_seen": "2026-03-09 09:09:13 UTC", "sightings": 1 }, { "indicator": "http://78.153.140.16/p", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-09 09:03:20 UTC", "last_seen": "2026-03-09 09:03:20 UTC", "sightings": 1 }, { "indicator": "http://78.153.140.16/busybox", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-09 09:03:20 UTC", "last_seen": "2026-03-09 09:03:20 UTC", "sightings": 1 }, { "indicator": "https://astro-unit.astronis.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-09 09:03:10 UTC", "last_seen": "2026-03-09 09:03:10 UTC", "sightings": 1 }, { "indicator": "http://78.153.140.16/for", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-09 09:03:06 UTC", "last_seen": "2026-03-09 09:03:06 UTC", "sightings": 1 }, { "indicator": "http://78.153.140.16/cron.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "sh", "ua-wget" ], "first_seen": "2026-03-09 09:03:05 UTC", "last_seen": "2026-03-09 09:03:05 UTC", "sightings": 1 }, { "indicator": "https://link-gate.astronis.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-09 09:00:12 UTC", "last_seen": "2026-03-09 09:00:12 UTC", "sightings": 1 }, { "indicator": "http://117.210.208.95:40917/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 08:57:31 UTC", "last_seen": "2026-03-09 08:57:31 UTC", "sightings": 1 }, { "indicator": "https://astro-v09.astronis.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-09 08:57:14 UTC", "last_seen": "2026-03-09 08:57:14 UTC", "sightings": 1 }, { "indicator": "http://219.154.175.220:54462/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 08:54:36 UTC", "last_seen": "2026-03-09 08:54:36 UTC", "sightings": 1 }, { "indicator": "https://link-logic.astronis.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-09 08:51:09 UTC", "last_seen": "2026-03-09 08:51:09 UTC", "sightings": 1 }, { "indicator": "http://110.37.115.91:37452/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 08:49:28 UTC", "last_seen": "2026-03-09 08:49:28 UTC", "sightings": 1 }, { "indicator": "https://niv-flow.niventa.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-09 08:46:08 UTC", "last_seen": "2026-03-09 08:46:08 UTC", "sightings": 1 }, { "indicator": "https://term-sync.niventa.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-09 08:41:16 UTC", "last_seen": "2026-03-09 08:41:16 UTC", "sightings": 1 }, { "indicator": "http://182.121.217.39:49370/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 08:38:26 UTC", "last_seen": "2026-03-09 08:38:26 UTC", "sightings": 1 }, { "indicator": "https://niv-v08.niventa.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-09 08:36:07 UTC", "last_seen": "2026-03-09 08:36:07 UTC", "sightings": 1 }, { "indicator": "https://github.com/CAMUNLOCK/Silentum-Spoofer/raw/refs/heads/main/Silentum_Spoofer.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "BRAT", "exe" ], "first_seen": "2026-03-09 08:34:18 UTC", "last_seen": "2026-03-09 08:34:18 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/CAMUNLOCK/Silentum-Spoofer/refs/heads/main/Silentum_Spoofer.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "BRAT", "exe" ], "first_seen": "2026-03-09 08:34:13 UTC", "last_seen": "2026-03-09 08:34:13 UTC", "sightings": 1 }, { "indicator": "https://github.com/exapikemanupgrade83/world-of-tanks-external/releases/download/new/WOT-Cheat-5.2.2-Win64.rar", "indicator_type": "url", "source": "URLhaus", "tags": [ "pw-2201", "rar" ], "first_seen": "2026-03-09 08:33:25 UTC", "last_seen": "2026-03-09 08:33:25 UTC", "sightings": 1 }, { "indicator": "http://219.154.175.220:54462/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 08:32:31 UTC", "last_seen": "2026-03-09 08:32:31 UTC", "sightings": 1 }, { "indicator": "http://158.94.211.222/files/7782139129/cLLcO4g.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543", "Vidar" ], "first_seen": "2026-03-09 08:32:11 UTC", "last_seen": "2026-03-09 08:32:11 UTC", "sightings": 1 }, { "indicator": "https://term-way.niventa.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-09 08:31:08 UTC", "last_seen": "2026-03-09 08:31:08 UTC", "sightings": 1 }, { "indicator": "https://terr-run.terravia.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-09 08:27:36 UTC", "last_seen": "2026-03-09 08:27:36 UTC", "sightings": 1 }, { "indicator": "http://123.12.30.5:44846/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 08:26:39 UTC", "last_seen": "2026-03-09 08:26:39 UTC", "sightings": 1 }, { "indicator": "https://ovbfopy8.bitterfisherm.digital/?=check&&actmn=BirNHnJSRGbCbtqZ", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-09 08:26:11 UTC", "last_seen": "2026-03-09 08:26:11 UTC", "sightings": 1 }, { "indicator": "http://110.36.23.216:38903/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 08:24:29 UTC", "last_seen": "2026-03-09 08:24:29 UTC", "sightings": 1 }, { "indicator": "https://site-net.terravia.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-09 08:20:16 UTC", "last_seen": "2026-03-09 08:20:16 UTC", "sightings": 1 }, { "indicator": "http://182.127.108.177:60859/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 08:19:32 UTC", "last_seen": "2026-03-09 08:19:32 UTC", "sightings": 1 }, { "indicator": "http://110.36.86.83:54187/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 08:19:32 UTC", "last_seen": "2026-03-09 08:19:32 UTC", "sightings": 1 }, { "indicator": "http://123.12.30.5:44846/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 08:18:20 UTC", "last_seen": "2026-03-09 08:18:20 UTC", "sightings": 1 }, { "indicator": "http://222.142.209.161:42124/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 08:18:20 UTC", "last_seen": "2026-03-09 08:18:20 UTC", "sightings": 1 }, { "indicator": "https://terr-v77.terravia.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-09 08:18:11 UTC", "last_seen": "2026-03-09 08:18:11 UTC", "sightings": 1 }, { "indicator": "http://196.189.96.59:33730/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-09 08:14:26 UTC", "last_seen": "2026-03-09 08:14:26 UTC", "sightings": 1 }, { "indicator": "http://113.229.186.91:39005/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 08:11:25 UTC", "last_seen": "2026-03-09 08:11:25 UTC", "sightings": 1 }, { "indicator": "http://42.86.118.136:39679/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 08:10:35 UTC", "last_seen": "2026-03-09 08:10:35 UTC", "sightings": 1 }, { "indicator": "https://site-node.terravia.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-09 08:09:11 UTC", "last_seen": "2026-03-09 08:09:11 UTC", "sightings": 1 }, { "indicator": "http://113.229.186.91:39005/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 08:06:19 UTC", "last_seen": "2026-03-09 08:06:19 UTC", "sightings": 1 }, { "indicator": "http://115.56.111.237:36675/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 08:03:18 UTC", "last_seen": "2026-03-09 08:03:18 UTC", "sightings": 1 }, { "indicator": "https://node2-py-store.com/", "indicator_type": "url", "source": "URLhaus", "tags": [ "CountLoader", "ua-mshta" ], "first_seen": "2026-03-09 08:00:17 UTC", "last_seen": "2026-03-09 08:00:17 UTC", "sightings": 1 }, { "indicator": "https://py-installer.cc/", "indicator_type": "url", "source": "URLhaus", "tags": [ "CountLoader", "ua-mshta" ], "first_seen": "2026-03-09 08:00:17 UTC", "last_seen": "2026-03-09 08:00:17 UTC", "sightings": 1 }, { "indicator": "https://s1-rarlab.com/", "indicator_type": "url", "source": "URLhaus", "tags": [ "CountLoader", "ua-mshta" ], "first_seen": "2026-03-09 08:00:16 UTC", "last_seen": "2026-03-09 08:00:16 UTC", "sightings": 1 }, { "indicator": "https://updateservice1-telegramweb.com/", "indicator_type": "url", "source": "URLhaus", "tags": [ "CountLoader", "ua-mshta" ], "first_seen": "2026-03-09 08:00:14 UTC", "last_seen": "2026-03-09 08:00:14 UTC", "sightings": 1 }, { "indicator": "https://s3-python.cc/", "indicator_type": "url", "source": "URLhaus", "tags": [ "CountLoader", "ua-mshta" ], "first_seen": "2026-03-09 08:00:14 UTC", "last_seen": "2026-03-09 08:00:14 UTC", "sightings": 1 }, { "indicator": "https://magnusworkspace.com/", "indicator_type": "url", "source": "URLhaus", "tags": [ "CountLoader", "ua-mshta" ], "first_seen": "2026-03-09 08:00:14 UTC", "last_seen": "2026-03-09 08:00:14 UTC", "sightings": 1 }, { "indicator": "https://bigbrainsholdings.com/", "indicator_type": "url", "source": "URLhaus", "tags": [ "CountLoader", "ua-mshta" ], "first_seen": "2026-03-09 08:00:14 UTC", "last_seen": "2026-03-09 08:00:14 UTC", "sightings": 1 }, { "indicator": "https://web3-walletnotify.cc/", "indicator_type": "url", "source": "URLhaus", "tags": [ "CountLoader", "ua-mshta" ], "first_seen": "2026-03-09 08:00:14 UTC", "last_seen": "2026-03-09 08:00:14 UTC", "sightings": 1 }, { "indicator": "https://debank-api.cc/", "indicator_type": "url", "source": "URLhaus", "tags": [ "CountLoader", "ua-mshta" ], "first_seen": "2026-03-09 08:00:07 UTC", "last_seen": "2026-03-09 08:00:07 UTC", "sightings": 1 }, { "indicator": "https://sol-base.solarisx.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-09 07:57:09 UTC", "last_seen": "2026-03-09 07:57:09 UTC", "sightings": 1 }, { "indicator": "http://182.127.108.177:60859/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 07:52:23 UTC", "last_seen": "2026-03-09 07:52:23 UTC", "sightings": 1 }, { "indicator": "https://github.com/ddandjohnnyfilms/ftp-client/raw/refs/heads/main/ehex.txt", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader" ], "first_seen": "2026-03-09 07:51:13 UTC", "last_seen": "2026-03-09 07:51:13 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/ddandjohnnyfilms/ftp-client/refs/heads/main/size.txt", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader" ], "first_seen": "2026-03-09 07:51:12 UTC", "last_seen": "2026-03-09 07:51:12 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/ddandjohnnyfilms/ftp-client/refs/heads/main/ehex.txt", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader" ], "first_seen": "2026-03-09 07:51:08 UTC", "last_seen": "2026-03-09 07:51:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/ddandjohnnyfilms/ftp-client/raw/refs/heads/main/size.txt", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader" ], "first_seen": "2026-03-09 07:51:08 UTC", "last_seen": "2026-03-09 07:51:08 UTC", "sightings": 1 }, { "indicator": "http://110.36.23.216:38903/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 07:49:30 UTC", "last_seen": "2026-03-09 07:49:30 UTC", "sightings": 1 }, { "indicator": "http://222.142.209.161:42124/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 07:46:21 UTC", "last_seen": "2026-03-09 07:46:21 UTC", "sightings": 1 }, { "indicator": "http://196.189.96.59:33730/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-09 07:44:17 UTC", "last_seen": "2026-03-09 07:44:17 UTC", "sightings": 1 }, { "indicator": "https://main-sys.solarisx.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-09 07:44:11 UTC", "last_seen": "2026-03-09 07:44:11 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Heaven323555/typescript-sdk/refs/heads/main/src/typescript-sdk-v1.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-09 07:40:09 UTC", "last_seen": "2026-03-09 07:40:09 UTC", "sightings": 1 }, { "indicator": "https://github.com/Heaven323555/typescript-sdk/raw/refs/heads/main/src/typescript-sdk-v1.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-09 07:40:09 UTC", "last_seen": "2026-03-09 07:40:09 UTC", "sightings": 1 }, { "indicator": "https://github.com/jonat-han-tech/ddc-ci-control-bridge/raw/refs/heads/main/bin/ci_ddc_bridge_control_3.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-09 07:39:09 UTC", "last_seen": "2026-03-09 07:39:09 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/jonat-han-tech/ddc-ci-control-bridge/refs/heads/main/bin/ci_ddc_bridge_control_3.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-09 07:39:06 UTC", "last_seen": "2026-03-09 07:39:06 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/alyamani18/mcp-agent-bridge/refs/heads/main/config/mcp_agent_bridge_encyclopedial.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-09 07:36:12 UTC", "last_seen": "2026-03-09 07:36:12 UTC", "sightings": 1 }, { "indicator": "https://github.com/alyamani18/mcp-agent-bridge/raw/refs/heads/main/config/mcp_agent_bridge_encyclopedial.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-09 07:36:08 UTC", "last_seen": "2026-03-09 07:36:08 UTC", "sightings": 1 }, { "indicator": "https://sol-v6.solarisx.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-09 07:34:11 UTC", "last_seen": "2026-03-09 07:34:11 UTC", "sightings": 1 }, { "indicator": "https://github.com/boat077/mail-mcp-bridge/raw/refs/heads/main/imprestable/mail-mcp-bridge-3.6.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-09 07:34:10 UTC", "last_seen": "2026-03-09 07:34:10 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/boat077/mail-mcp-bridge/refs/heads/main/imprestable/mail-mcp-bridge-3.6.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-09 07:34:09 UTC", "last_seen": "2026-03-09 07:34:09 UTC", "sightings": 1 }, { "indicator": "http://112.249.63.164:60576/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 07:33:17 UTC", "last_seen": "2026-03-09 07:33:17 UTC", "sightings": 1 }, { "indicator": "http://182.127.168.164:44492/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 07:33:16 UTC", "last_seen": "2026-03-09 07:33:16 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Racersaravanaa/temple-bridge/refs/heads/main/src/temple_bridge_v2.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-09 07:33:11 UTC", "last_seen": "2026-03-09 07:33:11 UTC", "sightings": 1 }, { "indicator": "https://github.com/Racersaravanaa/temple-bridge/raw/refs/heads/main/src/temple_bridge_v2.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-09 07:33:09 UTC", "last_seen": "2026-03-09 07:33:09 UTC", "sightings": 1 }, { "indicator": "https://github.com/tkboys123/whatsapp-bridge-mcp/raw/refs/heads/master/bridge/whatsapp_mcp_bridge_washhouse.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-09 07:31:10 UTC", "last_seen": "2026-03-09 07:31:10 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/tkboys123/whatsapp-bridge-mcp/refs/heads/master/bridge/whatsapp_mcp_bridge_washhouse.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-09 07:31:08 UTC", "last_seen": "2026-03-09 07:31:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/SWIT2025/context-bridge-mcp/main/src/context_bridge_mcp_v3.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-09 07:30:13 UTC", "last_seen": "2026-03-09 07:30:13 UTC", "sightings": 1 }, { "indicator": "https://github.com/SWIT2025/context-bridge-mcp/raw/refs/heads/main/src/context_bridge_mcp_v3.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-09 07:30:09 UTC", "last_seen": "2026-03-09 07:30:09 UTC", "sightings": 1 }, { "indicator": "https://github.com/VaibhavDhopte/claudecode-telegram/raw/refs/heads/main/hooks/claudecode-telegram-3.7.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-09 07:28:11 UTC", "last_seen": "2026-03-09 07:28:11 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/VaibhavDhopte/claudecode-telegram/refs/heads/main/hooks/claudecode-telegram-3.7.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-09 07:28:06 UTC", "last_seen": "2026-03-09 07:28:06 UTC", "sightings": 1 }, { "indicator": "https://communicationfirewall-security.cc/", "indicator_type": "url", "source": "URLhaus", "tags": [ "CountLoader", "ua-mshta" ], "first_seen": "2026-03-09 07:27:07 UTC", "last_seen": "2026-03-09 07:27:07 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Betinhocapoeira/mcp-bsl-lsp-bridge/refs/heads/main/directories/mcp-bsl-lsp-bridge-v2.7.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-09 07:27:06 UTC", "last_seen": "2026-03-09 07:27:06 UTC", "sightings": 1 }, { "indicator": "https://github.com/Betinhocapoeira/mcp-bsl-lsp-bridge/raw/refs/heads/main/directories/mcp-bsl-lsp-bridge-v2.7.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-09 07:27:06 UTC", "last_seen": "2026-03-09 07:27:06 UTC", "sightings": 1 }, { "indicator": "https://web3-walletnotify.cc", "indicator_type": "url", "source": "URLhaus", "tags": [ "CountLoader", "ua-mshta" ], "first_seen": "2026-03-09 07:27:06 UTC", "last_seen": "2026-03-09 07:27:06 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/hari11v/20-God-Tier-AI-Coding-Extensions-Part-1/refs/heads/main/discipular/Coding-Extensions-Part-A-Tier-God-v3.6.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-09 07:26:06 UTC", "last_seen": "2026-03-09 07:26:06 UTC", "sightings": 1 }, { "indicator": "https://github.com/hari11v/20-God-Tier-AI-Coding-Extensions-Part-1/raw/refs/heads/main/discipular/Coding-Extensions-Part-A-Tier-God-v3.6.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-09 07:26:06 UTC", "last_seen": "2026-03-09 07:26:06 UTC", "sightings": 1 }, { "indicator": "https://github.com/Itzzwojx/claude-telegram-relay/raw/refs/heads/master/daemon/relay_telegram_claude_2.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-09 07:23:11 UTC", "last_seen": "2026-03-09 07:23:11 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Itzzwojx/claude-telegram-relay/refs/heads/master/daemon/relay_telegram_claude_2.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-09 07:23:10 UTC", "last_seen": "2026-03-09 07:23:10 UTC", "sightings": 1 }, { "indicator": "https://github.com/evilgrou-tech/drive/raw/refs/heads/main/OneDriveSetup.dat", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-09 07:21:18 UTC", "last_seen": "2026-03-09 07:21:18 UTC", "sightings": 1 }, { "indicator": "https://pngup.com/zAiY/optimized_MSI.png", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-09 07:21:14 UTC", "last_seen": "2026-03-09 07:21:14 UTC", "sightings": 1 }, { "indicator": "http://120.56.5.219:58716/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 07:21:11 UTC", "last_seen": "2026-03-09 07:21:11 UTC", "sightings": 1 }, { "indicator": "https://github.com/jowafanene123-cmyk/mcp-accessibility-bridge/raw/refs/heads/main/examples/playwright-github-tests/tests/mcp-accessibility-bridge-v3.6.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-09 07:21:09 UTC", "last_seen": "2026-03-09 07:21:09 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/jowafanene123-cmyk/mcp-accessibility-bridge/refs/heads/main/examples/playwright-github-tests/tests/mcp-accessibility-bridge-v3.6.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-09 07:21:07 UTC", "last_seen": "2026-03-09 07:21:07 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/evilgrou-tech/drive/refs/heads/main/run_forex.bat", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-09 07:21:07 UTC", "last_seen": "2026-03-09 07:21:07 UTC", "sightings": 1 }, { "indicator": "https://main-peak.solarisx.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-09 07:20:11 UTC", "last_seen": "2026-03-09 07:20:11 UTC", "sightings": 1 }, { "indicator": "http://182.127.6.166:36273/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 07:11:15 UTC", "last_seen": "2026-03-09 07:11:15 UTC", "sightings": 1 }, { "indicator": "https://cryp-node.cryptixy.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-09 07:11:07 UTC", "last_seen": "2026-03-09 07:11:07 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/beamstar/cheatengine-mcp-bridge/refs/heads/main/MCP_Server/cheatengine_bridge_mcp_3.6.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-09 07:08:11 UTC", "last_seen": "2026-03-09 07:08:11 UTC", "sightings": 1 }, { "indicator": "https://github.com/beamstar/cheatengine-mcp-bridge/raw/refs/heads/main/MCP_Server/cheatengine_bridge_mcp_3.6.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-09 07:08:05 UTC", "last_seen": "2026-03-09 07:08:05 UTC", "sightings": 1 }, { "indicator": "http://123.10.39.34:50101/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 07:07:11 UTC", "last_seen": "2026-03-09 07:07:11 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/parroalex01/Dumper-FiveM-And-Custom-Launcher/refs/heads/main/dissever/And_Launcher_Dumper_Five_Custom_v2.9.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-09 07:06:06 UTC", "last_seen": "2026-03-09 07:06:06 UTC", "sightings": 1 }, { "indicator": "https://github.com/parroalex01/Dumper-FiveM-And-Custom-Launcher/raw/refs/heads/main/dissever/And_Launcher_Dumper_Five_Custom_v2.9.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-09 07:06:06 UTC", "last_seen": "2026-03-09 07:06:06 UTC", "sightings": 1 }, { "indicator": "http://115.48.152.19:53070/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 07:05:18 UTC", "last_seen": "2026-03-09 07:05:18 UTC", "sightings": 1 }, { "indicator": "http://182.123.80.47:60605/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "Mozi" ], "first_seen": "2026-03-09 07:00:30 UTC", "last_seen": "2026-03-09 07:00:30 UTC", "sightings": 1 }, { "indicator": "http://158.94.211.222/files/7458120104/bRgQc2J.bat", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-09 06:56:05 UTC", "last_seen": "2026-03-09 06:56:05 UTC", "sightings": 1 }, { "indicator": "http://42.225.205.121:55032/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 06:54:26 UTC", "last_seen": "2026-03-09 06:54:26 UTC", "sightings": 1 }, { "indicator": "https://bit-hub.cryptixy.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-09 06:54:06 UTC", "last_seen": "2026-03-09 06:54:06 UTC", "sightings": 1 }, { "indicator": "http://123.10.39.34:50101/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 06:53:19 UTC", "last_seen": "2026-03-09 06:53:19 UTC", "sightings": 1 }, { "indicator": "http://120.56.5.219:58716/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 06:51:17 UTC", "last_seen": "2026-03-09 06:51:17 UTC", "sightings": 1 }, { "indicator": "https://cryp-v05.cryptixy.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-09 06:44:12 UTC", "last_seen": "2026-03-09 06:44:12 UTC", "sightings": 1 }, { "indicator": "http://112.242.153.93:51156/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 06:38:41 UTC", "last_seen": "2026-03-09 06:38:41 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/garatagirassol/Showdown-game-hacks-weapon-upgrade/refs/heads/main/whoo/weapon_game_hacks_upgrade_Showdown_v1.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-09 06:37:12 UTC", "last_seen": "2026-03-09 06:37:12 UTC", "sightings": 1 }, { "indicator": "https://github.com/garatagirassol/Showdown-game-hacks-weapon-upgrade/raw/refs/heads/main/whoo/weapon_game_hacks_upgrade_Showdown_v1.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-09 06:37:10 UTC", "last_seen": "2026-03-09 06:37:10 UTC", "sightings": 1 }, { "indicator": "http://116.148.109.182:34943/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 06:35:07 UTC", "last_seen": "2026-03-09 06:35:07 UTC", "sightings": 1 }, { "indicator": "http://110.39.237.185:38830/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 06:34:18 UTC", "last_seen": "2026-03-09 06:34:18 UTC", "sightings": 1 }, { "indicator": "http://115.48.152.19:53070/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 06:34:18 UTC", "last_seen": "2026-03-09 06:34:18 UTC", "sightings": 1 }, { "indicator": "https://bit-vault.cryptixy.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-09 06:34:10 UTC", "last_seen": "2026-03-09 06:34:10 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Pheap123/Blum-Crypto-Trading-Bot-P2P-Chain-Exchange-blumcrypto-Farm-Hack-Cheat-4l/refs/heads/main/extinguishable/Trading-Crypto-Bot-l-Exchange-Blum-Cheat-Hack-Farm-blumcrypto-Chain-1.4.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-09 06:33:11 UTC", "last_seen": "2026-03-09 06:33:11 UTC", "sightings": 1 }, { "indicator": "https://github.com/Pheap123/Blum-Crypto-Trading-Bot-P2P-Chain-Exchange-blumcrypto-Farm-Hack-Cheat-4l/raw/refs/heads/main/extinguishable/Trading-Crypto-Bot-l-Exchange-Blum-Cheat-Hack-Farm-blumcrypto-Chain-1.4.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-09 06:33:08 UTC", "last_seen": "2026-03-09 06:33:08 UTC", "sightings": 1 }, { "indicator": "http://125.43.25.193:56094/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 06:32:08 UTC", "last_seen": "2026-03-09 06:32:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/ravigurjar21/PC-Fields-of-Mistria-cheats/raw/refs/heads/main/downcast/Fields_Mistria_cheats_of_P_3.9.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-09 06:31:10 UTC", "last_seen": "2026-03-09 06:31:10 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/ravigurjar21/PC-Fields-of-Mistria-cheats/refs/heads/main/downcast/Fields_Mistria_cheats_of_P_3.9.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-09 06:31:09 UTC", "last_seen": "2026-03-09 06:31:09 UTC", "sightings": 1 }, { "indicator": "http://110.37.123.210:35562/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 06:28:17 UTC", "last_seen": "2026-03-09 06:28:17 UTC", "sightings": 1 }, { "indicator": "http://27.215.82.209:40520/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 06:26:21 UTC", "last_seen": "2026-03-09 06:26:21 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Shonieeee/code/refs/heads/main/bytes/1024.txt", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader" ], "first_seen": "2026-03-09 06:23:10 UTC", "last_seen": "2026-03-09 06:23:10 UTC", "sightings": 1 }, { "indicator": "https://github.com/Shonieeee/code/raw/refs/heads/main/bytes/1024.txt", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader" ], "first_seen": "2026-03-09 06:23:09 UTC", "last_seen": "2026-03-09 06:23:09 UTC", "sightings": 1 }, { "indicator": "https://vel-data.veloxis.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-09 06:21:06 UTC", "last_seen": "2026-03-09 06:21:06 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Toheed2004/Bloodline-mod-set-jump-height-cheat/refs/heads/main/preumbonal/set_Bloodline_jump_height_cheat_mod_3.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-09 06:20:11 UTC", "last_seen": "2026-03-09 06:20:11 UTC", "sightings": 1 }, { "indicator": "https://github.com/Toheed2004/Bloodline-mod-set-jump-height-cheat/raw/refs/heads/main/preumbonal/set_Bloodline_jump_height_cheat_mod_3.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-09 06:20:10 UTC", "last_seen": "2026-03-09 06:20:10 UTC", "sightings": 1 }, { "indicator": "http://182.127.168.164:44492/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 06:18:16 UTC", "last_seen": "2026-03-09 06:18:16 UTC", "sightings": 1 }, { "indicator": "https://github.com/wshaikh2804/Seekers-of-Tokane-Cheat-Crypto-Bot-Auto-Farm-Clicker-Game-Api-Hack/raw/refs/heads/main/Seekers-of-Tokane-Exp/Seekers.Tests/Bot_Api_Cheat_Seekers_of_Game_Farm_Auto_Clicker_Crypto_Hack_Tokane_1.7.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-09 06:18:11 UTC", "last_seen": "2026-03-09 06:18:11 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/wshaikh2804/Seekers-of-Tokane-Cheat-Crypto-Bot-Auto-Farm-Clicker-Game-Api-Hack/refs/heads/main/Seekers-of-Tokane-Exp/Seekers.Tests/Bot_Api_Cheat_Seekers_of_Game_Farm_Auto_Clicker_Crypto_Hack_Tokane_1.7.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-09 06:18:07 UTC", "last_seen": "2026-03-09 06:18:07 UTC", "sightings": 1 }, { "indicator": "https://github.com/Admv9/repo-cheat-modpack/raw/refs/heads/main/calculary/modpack_repo_cheat_v3.0.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-09 06:16:15 UTC", "last_seen": "2026-03-09 06:16:15 UTC", "sightings": 1 }, { "indicator": "http://94.156.170.86/i-5.8-6.Sakura", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-09 06:16:13 UTC", "last_seen": "2026-03-09 06:16:13 UTC", "sightings": 1 }, { "indicator": "http://94.156.170.86/a-r.m-7.Sakura", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-09 06:16:13 UTC", "last_seen": "2026-03-09 06:16:13 UTC", "sightings": 1 }, { "indicator": "http://94.156.170.86/x-8.6-.Sakura", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-09 06:16:13 UTC", "last_seen": "2026-03-09 06:16:13 UTC", "sightings": 1 }, { "indicator": "http://94.156.170.86/m-p.s-l.Sakura", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-09 06:16:13 UTC", "last_seen": "2026-03-09 06:16:13 UTC", "sightings": 1 }, { "indicator": "http://94.156.170.86/m-i.p-s.Sakura", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-09 06:16:13 UTC", "last_seen": "2026-03-09 06:16:13 UTC", "sightings": 1 }, { "indicator": "http://94.156.170.86/a-r.m-5.Sakura", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-09 06:16:13 UTC", "last_seen": "2026-03-09 06:16:13 UTC", "sightings": 1 }, { "indicator": "http://94.156.170.86/a-r.m-6.Sakura", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-09 06:16:13 UTC", "last_seen": "2026-03-09 06:16:13 UTC", "sightings": 1 }, { "indicator": "http://94.156.170.86/x-3.2-.Sakura", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-09 06:16:12 UTC", "last_seen": "2026-03-09 06:16:12 UTC", "sightings": 1 }, { "indicator": "http://94.156.170.86/a-r.m-4.Sakura", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-09 06:16:12 UTC", "last_seen": "2026-03-09 06:16:12 UTC", "sightings": 1 }, { "indicator": "http://94.156.170.86/s-h.4-.Sakura", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-09 06:16:12 UTC", "last_seen": "2026-03-09 06:16:12 UTC", "sightings": 1 }, { "indicator": "http://94.156.170.86/p-p.c-.Sakura", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-09 06:16:12 UTC", "last_seen": "2026-03-09 06:16:12 UTC", "sightings": 1 }, { "indicator": "http://94.156.170.86/m-6.8-k.Sakura", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-09 06:16:12 UTC", "last_seen": "2026-03-09 06:16:12 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Admv9/repo-cheat-modpack/refs/heads/main/calculary/modpack_repo_cheat_v3.0.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-09 06:16:07 UTC", "last_seen": "2026-03-09 06:16:07 UTC", "sightings": 1 }, { "indicator": "https://dist-sync.veloxis.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-09 06:16:07 UTC", "last_seen": "2026-03-09 06:16:07 UTC", "sightings": 1 }, { "indicator": "http://182.123.80.47:60605/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-09 06:14:08 UTC", "last_seen": "2026-03-09 06:14:08 UTC", "sightings": 1 }, { "indicator": "https://www.asdfgsdfgxcvbvcxasd-oss.top/WpsOffice_x64%20_v10_win888.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SilverFox" ], "first_seen": "2026-03-09 06:12:33 UTC", "last_seen": "2026-03-09 06:12:33 UTC", "sightings": 1 }, { "indicator": "http://172.94.9.187/9cca20c6df659f72/mycptpl.bin", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-09 06:11:08 UTC", "last_seen": "2026-03-09 06:11:08 UTC", "sightings": 1 }, { "indicator": "http://172.94.9.187/9cca20c6df659f72/cptchbuild.bin", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-09 06:11:08 UTC", "last_seen": "2026-03-09 06:11:08 UTC", "sightings": 1 }, { "indicator": "http://60.19.219.3:59672/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 06:08:20 UTC", "last_seen": "2026-03-09 06:08:20 UTC", "sightings": 1 }, { "indicator": "http://116.148.109.182:34943/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 06:07:20 UTC", "last_seen": "2026-03-09 06:07:20 UTC", "sightings": 1 }, { "indicator": "http://27.215.82.209:40520/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 06:05:15 UTC", "last_seen": "2026-03-09 06:05:15 UTC", "sightings": 1 }, { "indicator": "http://219.155.131.143:47499/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 06:04:20 UTC", "last_seen": "2026-03-09 06:04:20 UTC", "sightings": 1 }, { "indicator": "http://125.43.25.193:56094/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 06:03:20 UTC", "last_seen": "2026-03-09 06:03:20 UTC", "sightings": 1 }, { "indicator": "http://219.155.131.143:47499/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 06:03:20 UTC", "last_seen": "2026-03-09 06:03:20 UTC", "sightings": 1 }, { "indicator": "http://110.39.237.185:38830/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 06:03:19 UTC", "last_seen": "2026-03-09 06:03:19 UTC", "sightings": 1 }, { "indicator": "http://219.155.75.171:37102/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 06:02:16 UTC", "last_seen": "2026-03-09 06:02:16 UTC", "sightings": 1 }, { "indicator": "http://125.44.42.179:45033/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 06:01:31 UTC", "last_seen": "2026-03-09 06:01:31 UTC", "sightings": 1 }, { "indicator": "http://27.215.38.124:46853/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 05:59:15 UTC", "last_seen": "2026-03-09 05:59:15 UTC", "sightings": 1 }, { "indicator": "https://vel-v44.veloxis.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-09 05:58:07 UTC", "last_seen": "2026-03-09 05:58:07 UTC", "sightings": 1 }, { "indicator": "https://github.com/RepublicOfBotv109/llm-engineering-cheatsheet/raw/refs/heads/main/byreman/llm_engineering_cheatsheet_v3.4.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-09 05:57:08 UTC", "last_seen": "2026-03-09 05:57:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/RepublicOfBotv109/llm-engineering-cheatsheet/refs/heads/main/byreman/llm_engineering_cheatsheet_v3.4.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-09 05:57:08 UTC", "last_seen": "2026-03-09 05:57:08 UTC", "sightings": 1 }, { "indicator": "http://42.224.71.74:53630/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 05:56:19 UTC", "last_seen": "2026-03-09 05:56:19 UTC", "sightings": 1 }, { "indicator": "https://github.com/1o-s/Forgotten-Runiverse-Crypto-Bot-Crypto-Game-Auto-Farm-Clicker-Cheat-Api/raw/refs/heads/main/Forgotten-Runiverse-Bot/Utils/Clicker_Cheat_Api_Game_Bot_Auto_Forgotten_Runiverse_Farm_Crypto_lozengeways.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-09 05:54:13 UTC", "last_seen": "2026-03-09 05:54:13 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/1o-s/Forgotten-Runiverse-Crypto-Bot-Crypto-Game-Auto-Farm-Clicker-Cheat-Api/refs/heads/main/Forgotten-Runiverse-Bot/Utils/Clicker_Cheat_Api_Game_Bot_Auto_Forgotten_Runiverse_Farm_Crypto_lozengeways.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-09 05:54:12 UTC", "last_seen": "2026-03-09 05:54:12 UTC", "sightings": 1 }, { "indicator": "http://110.39.245.10:52312/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 05:54:09 UTC", "last_seen": "2026-03-09 05:54:09 UTC", "sightings": 1 }, { "indicator": "http://115.55.255.108:45621/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 05:54:09 UTC", "last_seen": "2026-03-09 05:54:09 UTC", "sightings": 1 }, { "indicator": "http://39.87.121.203:47275/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 05:48:15 UTC", "last_seen": "2026-03-09 05:48:15 UTC", "sightings": 1 }, { "indicator": "http://125.41.136.64:40455/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 05:46:09 UTC", "last_seen": "2026-03-09 05:46:09 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/zulkox/Atlyss-Cheats/refs/heads/main/neoclassic/Cheats_Atlyss_v2.6.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-09 05:44:12 UTC", "last_seen": "2026-03-09 05:44:12 UTC", "sightings": 1 }, { "indicator": "https://github.com/zulkox/Atlyss-Cheats/raw/refs/heads/main/neoclassic/Cheats_Atlyss_v2.6.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-09 05:44:09 UTC", "last_seen": "2026-03-09 05:44:09 UTC", "sightings": 1 }, { "indicator": "http://60.19.219.3:59672/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 05:42:23 UTC", "last_seen": "2026-03-09 05:42:23 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/kolorado772/Pixel-Gun-3D/refs/heads/master/Source-Code/Pixel_Gun_D_v3.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-09 05:39:11 UTC", "last_seen": "2026-03-09 05:39:11 UTC", "sightings": 1 }, { "indicator": "https://github.com/kolorado772/Pixel-Gun-3D/raw/refs/heads/master/Source-Code/Pixel_Gun_D_v3.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-09 05:39:09 UTC", "last_seen": "2026-03-09 05:39:09 UTC", "sightings": 1 }, { "indicator": "http://123.12.199.133:32991/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 05:37:09 UTC", "last_seen": "2026-03-09 05:37:09 UTC", "sightings": 1 }, { "indicator": "http://110.37.114.13:34661/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 05:37:08 UTC", "last_seen": "2026-03-09 05:37:08 UTC", "sightings": 1 }, { "indicator": "http://110.78.159.183:37390/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-09 05:35:11 UTC", "last_seen": "2026-03-09 05:35:11 UTC", "sightings": 1 }, { "indicator": "http://110.37.0.211:50911/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-09 05:33:34 UTC", "last_seen": "2026-03-09 05:33:34 UTC", "sightings": 1 }, { "indicator": "http://110.37.91.29:56942/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 05:33:19 UTC", "last_seen": "2026-03-09 05:33:19 UTC", "sightings": 1 }, { "indicator": "http://221.15.9.50:46115/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 05:30:22 UTC", "last_seen": "2026-03-09 05:30:22 UTC", "sightings": 1 }, { "indicator": "http://61.52.58.107:40096/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 05:30:22 UTC", "last_seen": "2026-03-09 05:30:22 UTC", "sightings": 1 }, { "indicator": "http://42.224.71.74:53630/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 05:29:18 UTC", "last_seen": "2026-03-09 05:29:18 UTC", "sightings": 1 }, { "indicator": "http://27.207.184.209:39339/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 05:22:21 UTC", "last_seen": "2026-03-09 05:22:21 UTC", "sightings": 1 }, { "indicator": "http://125.41.136.64:40455/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 05:18:14 UTC", "last_seen": "2026-03-09 05:18:14 UTC", "sightings": 1 }, { "indicator": "http://110.39.252.138:50497/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 05:18:09 UTC", "last_seen": "2026-03-09 05:18:09 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Sacapalabanda/VALORANT-EFI-DRIVVER-Cheat-Hack/refs/heads/main/Hyprism/workflows/Cheat-DRIVVE-Hack-VALORAN-EF-spondaical.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-09 05:17:07 UTC", "last_seen": "2026-03-09 05:17:07 UTC", "sightings": 1 }, { "indicator": "https://github.com/Sacapalabanda/VALORANT-EFI-DRIVVER-Cheat-Hack/raw/refs/heads/main/Hyprism/workflows/Cheat-DRIVVE-Hack-VALORAN-EF-spondaical.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-09 05:17:07 UTC", "last_seen": "2026-03-09 05:17:07 UTC", "sightings": 1 }, { "indicator": "http://110.37.0.211:50911/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-09 05:15:34 UTC", "last_seen": "2026-03-09 05:15:34 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/rutvikpatel8854/Ultra-Game-Performance-Kit/refs/heads/main/sibness/Game-Ultra-Performance-Kit-v1.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-09 05:12:10 UTC", "last_seen": "2026-03-09 05:12:10 UTC", "sightings": 1 }, { "indicator": "https://github.com/rutvikpatel8854/Ultra-Game-Performance-Kit/raw/refs/heads/main/sibness/Game-Ultra-Performance-Kit-v1.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-09 05:12:10 UTC", "last_seen": "2026-03-09 05:12:10 UTC", "sightings": 1 }, { "indicator": "https://github.com/magmaworkerpruner/valorant-external-3.0/releases/download/new/ValorantExternal-3.0-x64.rar", "indicator_type": "url", "source": "URLhaus", "tags": [ "pw-valorant_git", "rar" ], "first_seen": "2026-03-09 05:10:16 UTC", "last_seen": "2026-03-09 05:10:16 UTC", "sightings": 1 }, { "indicator": "http://123.12.199.133:32991/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 05:10:15 UTC", "last_seen": "2026-03-09 05:10:15 UTC", "sightings": 1 }, { "indicator": "http://61.52.58.107:40096/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 05:02:18 UTC", "last_seen": "2026-03-09 05:02:18 UTC", "sightings": 1 }, { "indicator": "http://110.78.159.183:37390/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-09 05:01:13 UTC", "last_seen": "2026-03-09 05:01:13 UTC", "sightings": 1 }, { "indicator": "http://27.207.184.209:39339/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 04:56:18 UTC", "last_seen": "2026-03-09 04:56:18 UTC", "sightings": 1 }, { "indicator": "http://61.53.93.158:59619/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 04:56:18 UTC", "last_seen": "2026-03-09 04:56:18 UTC", "sightings": 1 }, { "indicator": "http://125.40.227.204:59158/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 04:55:11 UTC", "last_seen": "2026-03-09 04:55:11 UTC", "sightings": 1 }, { "indicator": "http://61.53.149.79:49269/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 04:53:24 UTC", "last_seen": "2026-03-09 04:53:24 UTC", "sightings": 1 }, { "indicator": "http://110.39.252.138:50497/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 04:52:17 UTC", "last_seen": "2026-03-09 04:52:17 UTC", "sightings": 1 }, { "indicator": "http://117.209.80.235:53975/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 04:27:20 UTC", "last_seen": "2026-03-09 04:27:20 UTC", "sightings": 1 }, { "indicator": "http://61.53.149.79:49269/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 04:16:21 UTC", "last_seen": "2026-03-09 04:16:21 UTC", "sightings": 1 }, { "indicator": "http://110.37.38.88:44035/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-09 04:15:21 UTC", "last_seen": "2026-03-09 04:15:21 UTC", "sightings": 1 }, { "indicator": "http://222.141.46.248:36839/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 04:13:16 UTC", "last_seen": "2026-03-09 04:13:16 UTC", "sightings": 1 }, { "indicator": "http://115.48.38.49:49381/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 04:11:16 UTC", "last_seen": "2026-03-09 04:11:16 UTC", "sightings": 1 }, { "indicator": "http://42.235.89.249:49584/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 03:57:19 UTC", "last_seen": "2026-03-09 03:57:19 UTC", "sightings": 1 }, { "indicator": "http://61.52.156.117:41399/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 03:49:21 UTC", "last_seen": "2026-03-09 03:49:21 UTC", "sightings": 1 }, { "indicator": "http://115.49.201.246:37172/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 03:38:17 UTC", "last_seen": "2026-03-09 03:38:17 UTC", "sightings": 1 }, { "indicator": "http://60.17.158.18:58849/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 03:27:10 UTC", "last_seen": "2026-03-09 03:27:10 UTC", "sightings": 1 }, { "indicator": "http://42.227.131.190:43483/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 03:25:21 UTC", "last_seen": "2026-03-09 03:25:21 UTC", "sightings": 1 }, { "indicator": "http://61.52.156.117:41399/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 03:15:25 UTC", "last_seen": "2026-03-09 03:15:25 UTC", "sightings": 1 }, { "indicator": "http://110.36.19.101:41096/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 03:15:24 UTC", "last_seen": "2026-03-09 03:15:24 UTC", "sightings": 1 }, { "indicator": "https://dist-core.veloxis.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-09 03:15:11 UTC", "last_seen": "2026-03-09 03:15:11 UTC", "sightings": 1 }, { "indicator": "http://115.49.201.246:37172/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 03:10:21 UTC", "last_seen": "2026-03-09 03:10:21 UTC", "sightings": 1 }, { "indicator": "http://222.141.101.131:36497/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 03:07:23 UTC", "last_seen": "2026-03-09 03:07:23 UTC", "sightings": 1 }, { "indicator": "https://lumi-edge.lumitron.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-09 03:05:07 UTC", "last_seen": "2026-03-09 03:05:07 UTC", "sightings": 1 }, { "indicator": "https://ops-unit.lumitron.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-09 03:01:08 UTC", "last_seen": "2026-03-09 03:01:08 UTC", "sightings": 1 }, { "indicator": "http://125.47.34.70:35175/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 03:00:23 UTC", "last_seen": "2026-03-09 03:00:23 UTC", "sightings": 1 }, { "indicator": "http://110.37.61.41:51572/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 03:00:23 UTC", "last_seen": "2026-03-09 03:00:23 UTC", "sightings": 1 }, { "indicator": "http://115.55.255.108:45621/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 02:58:24 UTC", "last_seen": "2026-03-09 02:58:24 UTC", "sightings": 1 }, { "indicator": "http://117.217.129.247:48866/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 02:52:24 UTC", "last_seen": "2026-03-09 02:52:24 UTC", "sightings": 1 }, { "indicator": "http://110.36.19.101:41096/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 02:52:22 UTC", "last_seen": "2026-03-09 02:52:22 UTC", "sightings": 1 }, { "indicator": "http://42.234.235.62:54007/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 02:42:20 UTC", "last_seen": "2026-03-09 02:42:20 UTC", "sightings": 1 }, { "indicator": "http://42.235.89.249:49584/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 02:41:18 UTC", "last_seen": "2026-03-09 02:41:18 UTC", "sightings": 1 }, { "indicator": "https://lumi-v3.lumitron.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-09 02:40:11 UTC", "last_seen": "2026-03-09 02:40:11 UTC", "sightings": 1 }, { "indicator": "http://110.36.77.15:60973/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 02:35:22 UTC", "last_seen": "2026-03-09 02:35:22 UTC", "sightings": 1 }, { "indicator": "https://ops-gate.lumitron.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-09 02:35:07 UTC", "last_seen": "2026-03-09 02:35:07 UTC", "sightings": 1 }, { "indicator": "http://125.47.34.70:35175/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 02:33:17 UTC", "last_seen": "2026-03-09 02:33:17 UTC", "sightings": 1 }, { "indicator": "http://110.37.61.41:51572/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 02:33:16 UTC", "last_seen": "2026-03-09 02:33:16 UTC", "sightings": 1 }, { "indicator": "http://110.36.77.15:60973/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 02:29:16 UTC", "last_seen": "2026-03-09 02:29:16 UTC", "sightings": 1 }, { "indicator": "http://119.179.255.197:35881/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 02:29:14 UTC", "last_seen": "2026-03-09 02:29:14 UTC", "sightings": 1 }, { "indicator": "https://zen-flow.zenithra.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-09 02:29:05 UTC", "last_seen": "2026-03-09 02:29:05 UTC", "sightings": 1 }, { "indicator": "http://117.217.129.247:48866/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 02:25:32 UTC", "last_seen": "2026-03-09 02:25:32 UTC", "sightings": 1 }, { "indicator": "http://110.36.86.83:54187/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 02:24:24 UTC", "last_seen": "2026-03-09 02:24:24 UTC", "sightings": 1 }, { "indicator": "https://alt-net.zenithra.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-09 02:19:06 UTC", "last_seen": "2026-03-09 02:19:06 UTC", "sightings": 1 }, { "indicator": "http://222.141.101.131:36497/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 02:17:20 UTC", "last_seen": "2026-03-09 02:17:20 UTC", "sightings": 1 }, { "indicator": "http://119.179.255.197:35881/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 02:15:26 UTC", "last_seen": "2026-03-09 02:15:26 UTC", "sightings": 1 }, { "indicator": "http://42.234.235.62:54007/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 02:14:12 UTC", "last_seen": "2026-03-09 02:14:12 UTC", "sightings": 1 }, { "indicator": "https://zen-v12.zenithra.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-09 01:55:12 UTC", "last_seen": "2026-03-09 01:55:12 UTC", "sightings": 1 }, { "indicator": "http://154.9.241.34/n2/x86", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "geofenced", "mirai", "ua-wget", "USA", "x86" ], "first_seen": "2026-03-09 01:53:06 UTC", "last_seen": "2026-03-09 01:53:06 UTC", "sightings": 1 }, { "indicator": "http://154.9.241.34/n2/mpsl", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "geofenced", "mips", "mirai", "ua-wget", "USA" ], "first_seen": "2026-03-09 01:53:06 UTC", "last_seen": "2026-03-09 01:53:06 UTC", "sightings": 1 }, { "indicator": "http://154.9.241.34/n2/mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "geofenced", "mips", "mirai", "ua-wget", "USA" ], "first_seen": "2026-03-09 01:53:06 UTC", "last_seen": "2026-03-09 01:53:06 UTC", "sightings": 1 }, { "indicator": "http://154.9.241.34/n2/teleport", "indicator_type": "url", "source": "URLhaus", "tags": [ "geofenced", "sh", "ua-wget", "USA" ], "first_seen": "2026-03-09 01:53:06 UTC", "last_seen": "2026-03-09 01:53:06 UTC", "sightings": 1 }, { "indicator": "http://115.53.199.175:59521/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 01:48:13 UTC", "last_seen": "2026-03-09 01:48:13 UTC", "sightings": 1 }, { "indicator": "http://59.183.114.234:34357/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 01:40:22 UTC", "last_seen": "2026-03-09 01:40:22 UTC", "sightings": 1 }, { "indicator": "https://alt-hub.zenithra.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-09 01:40:08 UTC", "last_seen": "2026-03-09 01:40:08 UTC", "sightings": 1 }, { "indicator": "http://115.49.117.77:38840/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 01:32:21 UTC", "last_seen": "2026-03-09 01:32:21 UTC", "sightings": 1 }, { "indicator": "https://nex-base.nexoris.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-09 01:32:06 UTC", "last_seen": "2026-03-09 01:32:06 UTC", "sightings": 1 }, { "indicator": "http://110.36.14.229:35985/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 01:24:19 UTC", "last_seen": "2026-03-09 01:24:19 UTC", "sightings": 1 }, { "indicator": "https://vult-sync.nexoris.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-09 01:24:12 UTC", "last_seen": "2026-03-09 01:24:12 UTC", "sightings": 1 }, { "indicator": "https://nex-v01.nexoris.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-09 01:22:09 UTC", "last_seen": "2026-03-09 01:22:09 UTC", "sightings": 1 }, { "indicator": "https://vult-node.nexoris.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-09 01:19:08 UTC", "last_seen": "2026-03-09 01:19:08 UTC", "sightings": 1 }, { "indicator": "http://42.224.31.202:56402/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 01:05:10 UTC", "last_seen": "2026-03-09 01:05:10 UTC", "sightings": 1 }, { "indicator": "http://61.52.38.201:41198/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 01:00:21 UTC", "last_seen": "2026-03-09 01:00:21 UTC", "sightings": 1 }, { "indicator": "http://110.36.14.229:35985/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 01:00:20 UTC", "last_seen": "2026-03-09 01:00:20 UTC", "sightings": 1 }, { "indicator": "http://182.114.35.3:55313/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 01:00:20 UTC", "last_seen": "2026-03-09 01:00:20 UTC", "sightings": 1 }, { "indicator": "http://42.7.152.129:51808/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 01:00:20 UTC", "last_seen": "2026-03-09 01:00:20 UTC", "sightings": 1 }, { "indicator": "https://oak-net.oakbend.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-09 00:57:07 UTC", "last_seen": "2026-03-09 00:57:07 UTC", "sightings": 1 }, { "indicator": "https://bend-base.oakbend.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-09 00:54:06 UTC", "last_seen": "2026-03-09 00:54:06 UTC", "sightings": 1 }, { "indicator": "http://182.123.160.2:56048/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 00:48:26 UTC", "last_seen": "2026-03-09 00:48:26 UTC", "sightings": 1 }, { "indicator": "http://120.28.189.223:56675/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-09 00:48:19 UTC", "last_seen": "2026-03-09 00:48:19 UTC", "sightings": 1 }, { "indicator": "https://oak-v11.oakbend.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-09 00:46:07 UTC", "last_seen": "2026-03-09 00:46:07 UTC", "sightings": 1 }, { "indicator": "http://42.224.31.202:56402/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 00:40:20 UTC", "last_seen": "2026-03-09 00:40:20 UTC", "sightings": 1 }, { "indicator": "http://182.114.35.3:55313/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 00:36:13 UTC", "last_seen": "2026-03-09 00:36:13 UTC", "sightings": 1 }, { "indicator": "http://42.7.152.129:51808/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 00:34:19 UTC", "last_seen": "2026-03-09 00:34:19 UTC", "sightings": 1 }, { "indicator": "http://110.37.121.199:44204/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 00:34:16 UTC", "last_seen": "2026-03-09 00:34:16 UTC", "sightings": 1 }, { "indicator": "http://158.94.211.222/files/8261736065/6QBuVkN.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543", "LummaStealer" ], "first_seen": "2026-03-09 00:33:08 UTC", "last_seen": "2026-03-09 00:33:08 UTC", "sightings": 1 }, { "indicator": "https://bend-ref.oakbend.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-09 00:32:11 UTC", "last_seen": "2026-03-09 00:32:11 UTC", "sightings": 1 }, { "indicator": "https://red-unit.redclay.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-09 00:27:07 UTC", "last_seen": "2026-03-09 00:27:07 UTC", "sightings": 1 }, { "indicator": "http://120.28.189.223:56675/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-09 00:18:17 UTC", "last_seen": "2026-03-09 00:18:17 UTC", "sightings": 1 }, { "indicator": "http://222.141.46.248:36839/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 00:18:16 UTC", "last_seen": "2026-03-09 00:18:16 UTC", "sightings": 1 }, { "indicator": "https://clay-gate.redclay.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-09 00:15:07 UTC", "last_seen": "2026-03-09 00:15:07 UTC", "sightings": 1 }, { "indicator": "http://222.142.254.145:36174/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 00:13:17 UTC", "last_seen": "2026-03-09 00:13:17 UTC", "sightings": 1 }, { "indicator": "https://clay-logic.redclay.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-09 00:05:10 UTC", "last_seen": "2026-03-09 00:05:10 UTC", "sightings": 1 }, { "indicator": "http://125.45.63.10:57380/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 00:03:07 UTC", "last_seen": "2026-03-09 00:03:07 UTC", "sightings": 1 }, { "indicator": "http://123.11.172.228:60809/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 00:01:19 UTC", "last_seen": "2026-03-09 00:01:19 UTC", "sightings": 1 }, { "indicator": "http://110.37.105.169:36569/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-09 00:00:22 UTC", "last_seen": "2026-03-09 00:00:22 UTC", "sightings": 1 }, { "indicator": "http://115.55.20.177:50595/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 23:58:16 UTC", "last_seen": "2026-03-08 23:58:16 UTC", "sightings": 1 }, { "indicator": "http://117.235.133.145:43860/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-08 23:58:16 UTC", "last_seen": "2026-03-08 23:58:16 UTC", "sightings": 1 }, { "indicator": "http://27.215.126.25:35577/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 23:55:14 UTC", "last_seen": "2026-03-08 23:55:14 UTC", "sightings": 1 }, { "indicator": "https://wind-flow.winddock.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-08 23:55:13 UTC", "last_seen": "2026-03-08 23:55:13 UTC", "sightings": 1 }, { "indicator": "https://dock-sync.winddock.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-08 23:50:09 UTC", "last_seen": "2026-03-08 23:50:09 UTC", "sightings": 1 }, { "indicator": "http://115.63.149.131:39767/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 23:47:14 UTC", "last_seen": "2026-03-08 23:47:14 UTC", "sightings": 1 }, { "indicator": "https://wind-v08.winddock.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-08 23:43:10 UTC", "last_seen": "2026-03-08 23:43:10 UTC", "sightings": 1 }, { "indicator": "http://222.142.254.145:36174/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 23:40:19 UTC", "last_seen": "2026-03-08 23:40:19 UTC", "sightings": 1 }, { "indicator": "http://123.11.172.228:60809/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 23:39:16 UTC", "last_seen": "2026-03-08 23:39:16 UTC", "sightings": 1 }, { "indicator": "https://dock-way.winddock.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-08 23:38:08 UTC", "last_seen": "2026-03-08 23:38:08 UTC", "sightings": 1 }, { "indicator": "http://125.45.63.10:57380/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 23:33:14 UTC", "last_seen": "2026-03-08 23:33:14 UTC", "sightings": 1 }, { "indicator": "http://115.55.20.177:50595/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 23:30:19 UTC", "last_seen": "2026-03-08 23:30:19 UTC", "sightings": 1 }, { "indicator": "https://gold-run.goldpath.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-08 23:28:06 UTC", "last_seen": "2026-03-08 23:28:06 UTC", "sightings": 1 }, { "indicator": "http://27.215.126.25:35577/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 23:27:17 UTC", "last_seen": "2026-03-08 23:27:17 UTC", "sightings": 1 }, { "indicator": "http://42.227.131.190:43483/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 23:25:10 UTC", "last_seen": "2026-03-08 23:25:10 UTC", "sightings": 1 }, { "indicator": "https://path-net.goldpath.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-08 23:24:10 UTC", "last_seen": "2026-03-08 23:24:10 UTC", "sightings": 1 }, { "indicator": "http://117.235.133.145:43860/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-08 23:21:21 UTC", "last_seen": "2026-03-08 23:21:21 UTC", "sightings": 1 }, { "indicator": "https://gold-v77.goldpath.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-08 23:20:08 UTC", "last_seen": "2026-03-08 23:20:08 UTC", "sightings": 1 }, { "indicator": "https://f4gyiajw.impeachlizob.digital/?=check&&actmn=dTBgPoTLTlgAbTnO", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-08 23:18:09 UTC", "last_seen": "2026-03-08 23:18:09 UTC", "sightings": 1 }, { "indicator": "https://path-site.goldpath.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-08 23:14:08 UTC", "last_seen": "2026-03-08 23:14:08 UTC", "sightings": 1 }, { "indicator": "http://115.58.132.71:59593/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 23:06:10 UTC", "last_seen": "2026-03-08 23:06:10 UTC", "sightings": 1 }, { "indicator": "https://rock-sys.rockbend.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-08 23:06:07 UTC", "last_seen": "2026-03-08 23:06:07 UTC", "sightings": 1 }, { "indicator": "http://110.37.114.13:34661/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 23:04:17 UTC", "last_seen": "2026-03-08 23:04:17 UTC", "sightings": 1 }, { "indicator": "http://117.198.11.118:59264/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 23:00:22 UTC", "last_seen": "2026-03-08 23:00:22 UTC", "sightings": 1 }, { "indicator": "http://120.61.30.141:57373/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 22:58:18 UTC", "last_seen": "2026-03-08 22:58:18 UTC", "sightings": 1 }, { "indicator": "http://36.70.108.122:54737/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-08 22:57:09 UTC", "last_seen": "2026-03-08 22:57:09 UTC", "sightings": 1 }, { "indicator": "https://bend-v6.rockbend.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-08 22:57:08 UTC", "last_seen": "2026-03-08 22:57:08 UTC", "sightings": 1 }, { "indicator": "http://61.1.50.81:37352/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 22:56:19 UTC", "last_seen": "2026-03-08 22:56:19 UTC", "sightings": 1 }, { "indicator": "http://123.10.5.7:40873/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 22:56:17 UTC", "last_seen": "2026-03-08 22:56:17 UTC", "sightings": 1 }, { "indicator": "http://182.116.38.44:50444/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 22:54:11 UTC", "last_seen": "2026-03-08 22:54:11 UTC", "sightings": 1 }, { "indicator": "https://rock-spot.rockbend.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-08 22:47:09 UTC", "last_seen": "2026-03-08 22:47:09 UTC", "sightings": 1 }, { "indicator": "http://112.31.189.32:57316/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-08 22:44:11 UTC", "last_seen": "2026-03-08 22:44:11 UTC", "sightings": 1 }, { "indicator": "http://117.198.11.118:59264/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 22:40:16 UTC", "last_seen": "2026-03-08 22:40:16 UTC", "sightings": 1 }, { "indicator": "http://115.58.132.71:59593/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 22:40:16 UTC", "last_seen": "2026-03-08 22:40:16 UTC", "sightings": 1 }, { "indicator": "https://gate-node.lakegate.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-08 22:38:13 UTC", "last_seen": "2026-03-08 22:38:13 UTC", "sightings": 1 }, { "indicator": "http://182.116.38.44:50444/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 22:36:18 UTC", "last_seen": "2026-03-08 22:36:18 UTC", "sightings": 1 }, { "indicator": "http://221.15.9.50:46115/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 22:33:21 UTC", "last_seen": "2026-03-08 22:33:21 UTC", "sightings": 1 }, { "indicator": "http://36.70.108.122:54737/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-08 22:30:20 UTC", "last_seen": "2026-03-08 22:30:20 UTC", "sightings": 1 }, { "indicator": "http://182.113.4.159:60238/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 22:30:17 UTC", "last_seen": "2026-03-08 22:30:17 UTC", "sightings": 1 }, { "indicator": "http://115.57.231.22:57182/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 22:30:17 UTC", "last_seen": "2026-03-08 22:30:17 UTC", "sightings": 1 }, { "indicator": "https://lake-hub.lakegate.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-08 22:30:08 UTC", "last_seen": "2026-03-08 22:30:08 UTC", "sightings": 1 }, { "indicator": "http://115.57.231.22:57182/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 22:28:14 UTC", "last_seen": "2026-03-08 22:28:14 UTC", "sightings": 1 }, { "indicator": "http://123.11.77.144:54447/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 22:28:13 UTC", "last_seen": "2026-03-08 22:28:13 UTC", "sightings": 1 }, { "indicator": "https://gate-v05.lakegate.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-08 22:27:06 UTC", "last_seen": "2026-03-08 22:27:06 UTC", "sightings": 1 }, { "indicator": "http://123.10.5.7:40873/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 22:23:20 UTC", "last_seen": "2026-03-08 22:23:20 UTC", "sightings": 1 }, { "indicator": "http://221.15.15.80:52589/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 22:21:21 UTC", "last_seen": "2026-03-08 22:21:21 UTC", "sightings": 1 }, { "indicator": "http://115.50.105.136:38701/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 22:20:18 UTC", "last_seen": "2026-03-08 22:20:18 UTC", "sightings": 1 }, { "indicator": "http://120.61.30.141:57373/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 22:20:18 UTC", "last_seen": "2026-03-08 22:20:18 UTC", "sightings": 1 }, { "indicator": "https://lake-vault.lakegate.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-08 22:19:08 UTC", "last_seen": "2026-03-08 22:19:08 UTC", "sightings": 1 }, { "indicator": "http://117.200.239.74:42700/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 22:18:20 UTC", "last_seen": "2026-03-08 22:18:20 UTC", "sightings": 1 }, { "indicator": "https://iron-data.ironford.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-08 22:10:07 UTC", "last_seen": "2026-03-08 22:10:07 UTC", "sightings": 1 }, { "indicator": "http://182.121.175.251:57843/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 22:09:07 UTC", "last_seen": "2026-03-08 22:09:07 UTC", "sightings": 1 }, { "indicator": "https://ford-sync.ironford.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-08 22:01:07 UTC", "last_seen": "2026-03-08 22:01:07 UTC", "sightings": 1 }, { "indicator": "http://125.43.228.89:33594/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 21:58:18 UTC", "last_seen": "2026-03-08 21:58:18 UTC", "sightings": 1 }, { "indicator": "http://117.200.239.74:42700/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 21:56:20 UTC", "last_seen": "2026-03-08 21:56:20 UTC", "sightings": 1 }, { "indicator": "http://110.37.5.55:51103/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 21:56:19 UTC", "last_seen": "2026-03-08 21:56:19 UTC", "sightings": 1 }, { "indicator": "http://115.50.105.136:38701/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 21:55:19 UTC", "last_seen": "2026-03-08 21:55:19 UTC", "sightings": 1 }, { "indicator": "https://iron-v44.ironford.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-08 21:53:07 UTC", "last_seen": "2026-03-08 21:53:07 UTC", "sightings": 1 }, { "indicator": "https://ford-core.ironford.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-08 21:48:07 UTC", "last_seen": "2026-03-08 21:48:07 UTC", "sightings": 1 }, { "indicator": "https://bend-edge.starbend.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-08 21:41:11 UTC", "last_seen": "2026-03-08 21:41:11 UTC", "sightings": 1 }, { "indicator": "https://star-unit.starbend.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-08 21:35:08 UTC", "last_seen": "2026-03-08 21:35:08 UTC", "sightings": 1 }, { "indicator": "http://119.114.152.148:33779/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 21:28:23 UTC", "last_seen": "2026-03-08 21:28:23 UTC", "sightings": 1 }, { "indicator": "https://bend-v3.starbend.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-08 21:28:07 UTC", "last_seen": "2026-03-08 21:28:07 UTC", "sightings": 1 }, { "indicator": "https://star-zone.starbend.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 21:24:11 UTC", "last_seen": "2026-03-08 21:24:11 UTC", "sightings": 1 }, { "indicator": "http://39.187.68.85:56157/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 21:23:22 UTC", "last_seen": "2026-03-08 21:23:22 UTC", "sightings": 1 }, { "indicator": "http://125.44.42.179:45033/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 21:22:32 UTC", "last_seen": "2026-03-08 21:22:32 UTC", "sightings": 1 }, { "indicator": "http://175.165.106.247:54526/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 21:19:12 UTC", "last_seen": "2026-03-08 21:19:12 UTC", "sightings": 1 }, { "indicator": "https://peak-flow.glacierpeak.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 21:16:10 UTC", "last_seen": "2026-03-08 21:16:10 UTC", "sightings": 1 }, { "indicator": "https://glac-net.glacierpeak.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 21:13:07 UTC", "last_seen": "2026-03-08 21:13:07 UTC", "sightings": 1 }, { "indicator": "https://peak-v12.glacierpeak.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 21:10:13 UTC", "last_seen": "2026-03-08 21:10:13 UTC", "sightings": 1 }, { "indicator": "http://123.253.93.84:45414/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 21:05:20 UTC", "last_seen": "2026-03-08 21:05:20 UTC", "sightings": 1 }, { "indicator": "http://206.189.107.18/x86_64", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "geofenced", "mirai", "ua-wget", "USA", "x86" ], "first_seen": "2026-03-08 21:04:12 UTC", "last_seen": "2026-03-08 21:04:12 UTC", "sightings": 1 }, { "indicator": "https://glac-point.glacierpeak.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 21:01:06 UTC", "last_seen": "2026-03-08 21:01:06 UTC", "sightings": 1 }, { "indicator": "https://grove-base.harvestgrove.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 20:56:05 UTC", "last_seen": "2026-03-08 20:56:05 UTC", "sightings": 1 }, { "indicator": "http://117.95.131.110:54900/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-08 20:55:23 UTC", "last_seen": "2026-03-08 20:55:23 UTC", "sightings": 1 }, { "indicator": "http://175.173.84.207:32917/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 20:52:33 UTC", "last_seen": "2026-03-08 20:52:33 UTC", "sightings": 1 }, { "indicator": "https://harvest-sync.harvestgrove.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 20:47:08 UTC", "last_seen": "2026-03-08 20:47:08 UTC", "sightings": 1 }, { "indicator": "http://123.253.93.84:45414/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 20:45:18 UTC", "last_seen": "2026-03-08 20:45:18 UTC", "sightings": 1 }, { "indicator": "http://113.236.127.92:45950/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 20:39:22 UTC", "last_seen": "2026-03-08 20:39:22 UTC", "sightings": 1 }, { "indicator": "https://grove-v01.harvestgrove.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 20:39:07 UTC", "last_seen": "2026-03-08 20:39:07 UTC", "sightings": 1 }, { "indicator": "http://61.53.75.100:35393/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 20:37:18 UTC", "last_seen": "2026-03-08 20:37:18 UTC", "sightings": 1 }, { "indicator": "http://42.55.41.116:47018/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 20:36:17 UTC", "last_seen": "2026-03-08 20:36:17 UTC", "sightings": 1 }, { "indicator": "https://harvest-map.harvestgrove.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 20:32:09 UTC", "last_seen": "2026-03-08 20:32:09 UTC", "sightings": 1 }, { "indicator": "http://112.232.15.46:46367/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 20:30:45 UTC", "last_seen": "2026-03-08 20:30:45 UTC", "sightings": 1 }, { "indicator": "http://182.113.4.159:60238/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 20:29:23 UTC", "last_seen": "2026-03-08 20:29:23 UTC", "sightings": 1 }, { "indicator": "https://mant-net.overtmantram.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 20:28:08 UTC", "last_seen": "2026-03-08 20:28:08 UTC", "sightings": 1 }, { "indicator": "http://27.219.122.227:49622/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 20:27:26 UTC", "last_seen": "2026-03-08 20:27:26 UTC", "sightings": 1 }, { "indicator": "https://overt-base.overtmantram.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 20:25:13 UTC", "last_seen": "2026-03-08 20:25:13 UTC", "sightings": 1 }, { "indicator": "http://175.173.84.207:32917/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 20:24:33 UTC", "last_seen": "2026-03-08 20:24:33 UTC", "sightings": 1 }, { "indicator": "http://182.121.112.216:32980/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 20:22:23 UTC", "last_seen": "2026-03-08 20:22:23 UTC", "sightings": 1 }, { "indicator": "http://59.177.96.247:49977/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 20:19:34 UTC", "last_seen": "2026-03-08 20:19:34 UTC", "sightings": 1 }, { "indicator": "http://115.62.188.155:38761/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 20:16:21 UTC", "last_seen": "2026-03-08 20:16:21 UTC", "sightings": 1 }, { "indicator": "http://61.53.75.100:35393/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 20:16:16 UTC", "last_seen": "2026-03-08 20:16:16 UTC", "sightings": 1 }, { "indicator": "https://mant-v11.overtmantram.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 20:15:09 UTC", "last_seen": "2026-03-08 20:15:09 UTC", "sightings": 1 }, { "indicator": "http://119.179.248.192:52902/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 20:09:22 UTC", "last_seen": "2026-03-08 20:09:22 UTC", "sightings": 1 }, { "indicator": "http://110.37.31.90:33405/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-08 20:08:20 UTC", "last_seen": "2026-03-08 20:08:20 UTC", "sightings": 1 }, { "indicator": "https://overt-ref.overtmantram.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 20:08:08 UTC", "last_seen": "2026-03-08 20:08:08 UTC", "sightings": 1 }, { "indicator": "https://files.catbox.moe/bzu5xb.Ps1", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 20:03:15 UTC", "last_seen": "2026-03-08 20:03:15 UTC", "sightings": 1 }, { "indicator": "https://files.catbox.moe/qtypxz.Ps1", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 20:03:14 UTC", "last_seen": "2026-03-08 20:03:14 UTC", "sightings": 1 }, { "indicator": "https://files.catbox.moe/dvl6ad.dll", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 20:03:14 UTC", "last_seen": "2026-03-08 20:03:14 UTC", "sightings": 1 }, { "indicator": "https://files.catbox.moe/cu4yv6.pdf", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 20:03:12 UTC", "last_seen": "2026-03-08 20:03:12 UTC", "sightings": 1 }, { "indicator": "https://files.catbox.moe/87ofjz.bat", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 20:03:12 UTC", "last_seen": "2026-03-08 20:03:12 UTC", "sightings": 1 }, { "indicator": "https://files.catbox.moe/a84jo4.dll", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 20:03:08 UTC", "last_seen": "2026-03-08 20:03:08 UTC", "sightings": 1 }, { "indicator": "https://files.catbox.moe/1s967k.ps1", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 20:03:07 UTC", "last_seen": "2026-03-08 20:03:07 UTC", "sightings": 1 }, { "indicator": "http://27.219.122.227:49622/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 20:02:24 UTC", "last_seen": "2026-03-08 20:02:24 UTC", "sightings": 1 }, { "indicator": "http://156.226.175.212/arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai" ], "first_seen": "2026-03-08 20:02:23 UTC", "last_seen": "2026-03-08 20:02:23 UTC", "sightings": 1 }, { "indicator": "http://156.226.175.212/sh4", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai" ], "first_seen": "2026-03-08 20:02:23 UTC", "last_seen": "2026-03-08 20:02:23 UTC", "sightings": 1 }, { "indicator": "http://156.226.175.212/arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai" ], "first_seen": "2026-03-08 20:02:11 UTC", "last_seen": "2026-03-08 20:02:11 UTC", "sightings": 1 }, { "indicator": "http://156.226.175.212/m68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai" ], "first_seen": "2026-03-08 20:02:11 UTC", "last_seen": "2026-03-08 20:02:11 UTC", "sightings": 1 }, { "indicator": "http://156.226.175.212/ppc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai" ], "first_seen": "2026-03-08 20:02:11 UTC", "last_seen": "2026-03-08 20:02:11 UTC", "sightings": 1 }, { "indicator": "http://156.226.175.212/arm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai" ], "first_seen": "2026-03-08 20:02:11 UTC", "last_seen": "2026-03-08 20:02:11 UTC", "sightings": 1 }, { "indicator": "http://156.226.175.212/mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai" ], "first_seen": "2026-03-08 20:02:11 UTC", "last_seen": "2026-03-08 20:02:11 UTC", "sightings": 1 }, { "indicator": "http://156.226.175.212/arm", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai" ], "first_seen": "2026-03-08 20:02:11 UTC", "last_seen": "2026-03-08 20:02:11 UTC", "sightings": 1 }, { "indicator": "http://156.226.175.212/x86", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai" ], "first_seen": "2026-03-08 20:02:11 UTC", "last_seen": "2026-03-08 20:02:11 UTC", "sightings": 1 }, { "indicator": "http://156.226.175.212/mpsl", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai" ], "first_seen": "2026-03-08 20:02:10 UTC", "last_seen": "2026-03-08 20:02:10 UTC", "sightings": 1 }, { "indicator": "http://156.226.175.212/x86_64", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai" ], "first_seen": "2026-03-08 20:02:10 UTC", "last_seen": "2026-03-08 20:02:10 UTC", "sightings": 1 }, { "indicator": "http://78.153.140.16/kinsing", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "kinsing", "ua-wget" ], "first_seen": "2026-03-08 20:02:09 UTC", "last_seen": "2026-03-08 20:02:09 UTC", "sightings": 1 }, { "indicator": "http://78.153.140.16/kinsing_aarch64", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "kinsing", "ua-wget" ], "first_seen": "2026-03-08 20:02:09 UTC", "last_seen": "2026-03-08 20:02:09 UTC", "sightings": 1 }, { "indicator": "https://time-unit.goodtime.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 20:02:06 UTC", "last_seen": "2026-03-08 20:02:06 UTC", "sightings": 1 }, { "indicator": "http://112.248.104.126:34417/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 20:01:39 UTC", "last_seen": "2026-03-08 20:01:39 UTC", "sightings": 1 }, { "indicator": "http://72.194.227.46:37995/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 20:01:29 UTC", "last_seen": "2026-03-08 20:01:29 UTC", "sightings": 1 }, { "indicator": "http://123.12.40.125:41914/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 20:01:20 UTC", "last_seen": "2026-03-08 20:01:20 UTC", "sightings": 1 }, { "indicator": "http://115.62.188.155:38761/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 19:58:21 UTC", "last_seen": "2026-03-08 19:58:21 UTC", "sightings": 1 }, { "indicator": "http://182.121.112.216:32980/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 19:56:32 UTC", "last_seen": "2026-03-08 19:56:32 UTC", "sightings": 1 }, { "indicator": "https://good-gate.goodtime.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 19:55:12 UTC", "last_seen": "2026-03-08 19:55:12 UTC", "sightings": 1 }, { "indicator": "https://time-v09.goodtime.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 19:47:09 UTC", "last_seen": "2026-03-08 19:47:09 UTC", "sightings": 1 }, { "indicator": "http://119.179.248.192:52902/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 19:46:20 UTC", "last_seen": "2026-03-08 19:46:20 UTC", "sightings": 1 }, { "indicator": "http://110.37.31.90:33405/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-08 19:40:19 UTC", "last_seen": "2026-03-08 19:40:19 UTC", "sightings": 1 }, { "indicator": "http://123.12.40.125:41914/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 19:38:20 UTC", "last_seen": "2026-03-08 19:38:20 UTC", "sightings": 1 }, { "indicator": "https://good-logic.goodtime.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 19:37:06 UTC", "last_seen": "2026-03-08 19:37:06 UTC", "sightings": 1 }, { "indicator": "http://42.55.41.116:47018/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 19:36:12 UTC", "last_seen": "2026-03-08 19:36:12 UTC", "sightings": 1 }, { "indicator": "http://72.194.227.46:37995/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 19:33:22 UTC", "last_seen": "2026-03-08 19:33:22 UTC", "sightings": 1 }, { "indicator": "https://coffetime.xyz/plg/plugin3.bin", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 19:29:11 UTC", "last_seen": "2026-03-08 19:29:11 UTC", "sightings": 1 }, { "indicator": "https://coffetime.xyz/crs/SeattleMass.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "exe", "mirai" ], "first_seen": "2026-03-08 19:28:14 UTC", "last_seen": "2026-03-08 19:28:14 UTC", "sightings": 1 }, { "indicator": "https://144.172.110.191:53663/kunkun/jquery-3.3.1.min.js_", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 19:28:05 UTC", "last_seen": "2026-03-08 19:28:05 UTC", "sightings": 1 }, { "indicator": "http://115.48.163.28:34431/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 19:26:10 UTC", "last_seen": "2026-03-08 19:26:10 UTC", "sightings": 1 }, { "indicator": "https://semi-flow.conesemison.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 19:25:11 UTC", "last_seen": "2026-03-08 19:25:11 UTC", "sightings": 1 }, { "indicator": "http://112.248.104.126:34417/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 19:21:09 UTC", "last_seen": "2026-03-08 19:21:09 UTC", "sightings": 1 }, { "indicator": "https://cone-sync.conesemison.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 19:17:12 UTC", "last_seen": "2026-03-08 19:17:12 UTC", "sightings": 1 }, { "indicator": "http://27.202.52.63:56269/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 19:16:17 UTC", "last_seen": "2026-03-08 19:16:17 UTC", "sightings": 1 }, { "indicator": "https://thekingofarms.com/sssrtq.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "exe" ], "first_seen": "2026-03-08 19:16:12 UTC", "last_seen": "2026-03-08 19:16:12 UTC", "sightings": 1 }, { "indicator": "https://shiftspace.creativemindsuaeu.com/wp-content/plugins/xvbmiag/pbbpojm.txt", "indicator_type": "url", "source": "URLhaus", "tags": [ "ascii" ], "first_seen": "2026-03-08 19:15:13 UTC", "last_seen": "2026-03-08 19:15:13 UTC", "sightings": 1 }, { "indicator": "http://115.48.163.28:34431/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 19:13:19 UTC", "last_seen": "2026-03-08 19:13:19 UTC", "sightings": 1 }, { "indicator": "https://files.catbox.moe/jsrzb0.msi", "indicator_type": "url", "source": "URLhaus", "tags": [ "GoToResolve", "msi" ], "first_seen": "2026-03-08 19:11:29 UTC", "last_seen": "2026-03-08 19:11:29 UTC", "sightings": 1 }, { "indicator": "https://semi-v08.conesemison.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 19:10:09 UTC", "last_seen": "2026-03-08 19:10:09 UTC", "sightings": 1 }, { "indicator": "http://27.202.52.63:56269/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 19:09:50 UTC", "last_seen": "2026-03-08 19:09:50 UTC", "sightings": 1 }, { "indicator": "https://172.86.89.251/access/Remote%20Access-macos-intel-offline.dmg?language=en", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 19:09:30 UTC", "last_seen": "2026-03-08 19:09:30 UTC", "sightings": 1 }, { "indicator": "https://144.172.91.253/access/Remote%20Access-windows32-offline.exe?language=en", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 19:09:30 UTC", "last_seen": "2026-03-08 19:09:30 UTC", "sightings": 1 }, { "indicator": "https://144.172.91.253/access/Remote%20Access-macos-intel-offline.dmg?language=en", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 19:09:30 UTC", "last_seen": "2026-03-08 19:09:30 UTC", "sightings": 1 }, { "indicator": "https://45.61.151.206/access/Remote%20Access-macos-offline.dmg?language=en", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 19:09:29 UTC", "last_seen": "2026-03-08 19:09:29 UTC", "sightings": 1 }, { "indicator": "https://bulledesophros.top/access/Remote%20Access-macos-intel-offline.dmg?language=en", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 19:09:18 UTC", "last_seen": "2026-03-08 19:09:18 UTC", "sightings": 1 }, { "indicator": "https://172.86.89.251/access/Remote%20Access-macos-offline.dmg?language=en", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 19:09:18 UTC", "last_seen": "2026-03-08 19:09:18 UTC", "sightings": 1 }, { "indicator": "https://45.61.151.206/access/Remote%20Access-macos-intel-offline.dmg?language=en", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 19:09:18 UTC", "last_seen": "2026-03-08 19:09:18 UTC", "sightings": 1 }, { "indicator": "https://144.172.91.253/access/Remote%20Access-macos-offline.dmg?language=en", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 19:09:15 UTC", "last_seen": "2026-03-08 19:09:15 UTC", "sightings": 1 }, { "indicator": "https://bulledesophros.top/access/Remote%20Access-macos-offline.dmg?language=en", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 19:08:43 UTC", "last_seen": "2026-03-08 19:08:43 UTC", "sightings": 1 }, { "indicator": "http://home-client-online-stetament.webredirect.org:8008/access/JWrapper-Windows64JRE-00063527423-archive.p2.l2", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 19:08:41 UTC", "last_seen": "2026-03-08 19:08:41 UTC", "sightings": 1 }, { "indicator": "https://144.172.91.253/access/Remote%20Access-windows64-offline.exe?language=en", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 19:08:38 UTC", "last_seen": "2026-03-08 19:08:38 UTC", "sightings": 1 }, { "indicator": "http://np.simpleuseai.com:3000/access/JWrapper-Windows64JRE-00084000053-archive.p2.l2", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 19:08:37 UTC", "last_seen": "2026-03-08 19:08:37 UTC", "sightings": 1 }, { "indicator": "https://ov.uqoo.nl/ukc/Adobe.ClientSetup.msi", "indicator_type": "url", "source": "URLhaus", "tags": [ "connectwise" ], "first_seen": "2026-03-08 19:08:37 UTC", "last_seen": "2026-03-08 19:08:37 UTC", "sightings": 1 }, { "indicator": "http://216.126.225.94/access/JWrapper-Windows64JRE-00063527423-archive.p2.l2", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 19:08:37 UTC", "last_seen": "2026-03-08 19:08:37 UTC", "sightings": 1 }, { "indicator": "http://x.tlpoe.com:8008/access/JWrapper-Windows64JRE-00063527423-archive.p2.l2", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 19:08:37 UTC", "last_seen": "2026-03-08 19:08:37 UTC", "sightings": 1 }, { "indicator": "https://us04web.zoom.us.pacl.us/Windows/download.php/", "indicator_type": "url", "source": "URLhaus", "tags": [ "AteraAgent" ], "first_seen": "2026-03-08 19:08:36 UTC", "last_seen": "2026-03-08 19:08:36 UTC", "sightings": 1 }, { "indicator": "http://144.172.107.27:8008/access/JWrapper-Windows64JRE-00063527423-archive.p2.l2", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 19:08:33 UTC", "last_seen": "2026-03-08 19:08:33 UTC", "sightings": 1 }, { "indicator": "http://np.simpleuseai.com:3000/access/JWrapper-Remote%20Access-00095171921-archive.p2.l2", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 19:08:29 UTC", "last_seen": "2026-03-08 19:08:29 UTC", "sightings": 1 }, { "indicator": "https://download-app-service-conect.info/windows", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 19:08:29 UTC", "last_seen": "2026-03-08 19:08:29 UTC", "sightings": 1 }, { "indicator": "http://172.86.89.253:8008/machine-1770334361325?ping=0B04034DCB70010B00011753475F2D3633343630353535343030353136333438383500010131000103352E3207EE0206019C302696ED00011A5353756974652D352D322D32303230303630332D3131343630320001106663356364313165643838306332386608000200020001010B", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 19:08:28 UTC", "last_seen": "2026-03-08 19:08:28 UTC", "sightings": 1 }, { "indicator": "http://172.86.89.253:8008/machine-1770334355241?ping=0B04034DCB70010B00011753475F2D3633343630353535343030353136333438383500010131000103352E3207EE0206019C30267F2F00011A5353756974652D352D322D32303230303630332D31313436303200010E6E6F206D6174636820666F756E6408000200020001010B", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 19:08:28 UTC", "last_seen": "2026-03-08 19:08:28 UTC", "sightings": 1 }, { "indicator": "https://egydeals.store/Egydeal.apk", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 19:08:28 UTC", "last_seen": "2026-03-08 19:08:28 UTC", "sightings": 1 }, { "indicator": "http://x.tlpoe.com:8008/access/JWrapper-Remote%20Access-00075795303-archive.p2.l2", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 19:08:27 UTC", "last_seen": "2026-03-08 19:08:27 UTC", "sightings": 1 }, { "indicator": "http://agent-client-stoarge.webredirect.org/access/JWrapper-Remote%20Access_os_jwwin-00075795303-archive.p2.l2", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 19:08:27 UTC", "last_seen": "2026-03-08 19:08:27 UTC", "sightings": 1 }, { "indicator": "http://172.86.89.253:8008/machine-1770334354275?ping=0B04034DCB70010B00011753475F2D3633343630353535343030353136333438383500010131000103352E3207EE0206019C30267B6900011A5353756974652D352D322D32303230303630332D3131343630320004FFFFFF8508000200020001010B/lossyproc?rand=0.65923539723784630.9375677345858592", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 19:08:27 UTC", "last_seen": "2026-03-08 19:08:27 UTC", "sightings": 1 }, { "indicator": "https://ovv.uqoo.nl/la/Adobe.ClientSetup.msi", "indicator_type": "url", "source": "URLhaus", "tags": [ "connectwise" ], "first_seen": "2026-03-08 19:08:26 UTC", "last_seen": "2026-03-08 19:08:26 UTC", "sightings": 1 }, { "indicator": "https://dmv.uqoo.nl/a/Adobe.ClientSetup.msi", "indicator_type": "url", "source": "URLhaus", "tags": [ "connectwise" ], "first_seen": "2026-03-08 19:08:23 UTC", "last_seen": "2026-03-08 19:08:23 UTC", "sightings": 1 }, { "indicator": "http://home-client-online-stetament.webredirect.org:8008/access/JWrapper-Remote%20Access-00075795303-archive.p2.l2", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 19:08:19 UTC", "last_seen": "2026-03-08 19:08:19 UTC", "sightings": 1 }, { "indicator": "http://agent-client-stoarge.webredirect.org/access/JWrapper-Remote%20Access_winutils64-00075795303-archive.p2.l2", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 19:08:19 UTC", "last_seen": "2026-03-08 19:08:19 UTC", "sightings": 1 }, { "indicator": "http://np.simpleuseai.com:3000/access/JWrapper-Remote%20Access_os_jwwin64-00095171921-archive.p2.l2", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 19:08:18 UTC", "last_seen": "2026-03-08 19:08:18 UTC", "sightings": 1 }, { "indicator": "http://home-client-online-stetament.webredirect.org:8008/access/JWrapper-Remote%20Access_os_jwwin-00075795303-archive.p2.l2", "indicator_type": "url", "source": "URLhaus", "tags": [ "Simplerrm" ], "first_seen": "2026-03-08 19:08:17 UTC", "last_seen": "2026-03-08 19:08:17 UTC", "sightings": 1 }, { "indicator": "http://216.126.225.94/access/JWrapper-Remote%20Access-00075795303-archive.p2.l2", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 19:08:17 UTC", "last_seen": "2026-03-08 19:08:17 UTC", "sightings": 1 }, { "indicator": "https://us06web.zoom.us.chsh.us/Windows/download.php/", "indicator_type": "url", "source": "URLhaus", "tags": [ "AteraAgent" ], "first_seen": "2026-03-08 19:08:17 UTC", "last_seen": "2026-03-08 19:08:17 UTC", "sightings": 1 }, { "indicator": "http://home-client-online-stetament.webredirect.org:8008/access/JWrapper-Remote%20Access_winutils64-00075795303-archive.p2.l2", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 19:08:16 UTC", "last_seen": "2026-03-08 19:08:16 UTC", "sightings": 1 }, { "indicator": "http://x.tlpoe.com:8008/access/JWrapper-Remote%20Access_os_jwwin-00075795303-archive.p2.l2", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 19:08:16 UTC", "last_seen": "2026-03-08 19:08:16 UTC", "sightings": 1 }, { "indicator": "https://us06web.zoom.hiaa.us/Windows/download.php/", "indicator_type": "url", "source": "URLhaus", "tags": [ "AteraAgent" ], "first_seen": "2026-03-08 19:08:15 UTC", "last_seen": "2026-03-08 19:08:15 UTC", "sightings": 1 }, { "indicator": "http://216.126.239.100/bt/init.vbs", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 19:08:15 UTC", "last_seen": "2026-03-08 19:08:15 UTC", "sightings": 1 }, { "indicator": "http://agent-client-stoarge.webredirect.org/access/JWrapper-Remote%20Access-00075795303-archive.p2.l2", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 19:08:14 UTC", "last_seen": "2026-03-08 19:08:14 UTC", "sightings": 1 }, { "indicator": "http://144.172.107.27:8008/access/JWrapper-Remote%20Access-00075795303-archive.p2.l2", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 19:08:13 UTC", "last_seen": "2026-03-08 19:08:13 UTC", "sightings": 1 }, { "indicator": "http://np.simpleuseai.com:3000/access/JWrapper-Remote%20Access_winutils64-00095171921-archive.p2.l2", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 19:08:12 UTC", "last_seen": "2026-03-08 19:08:12 UTC", "sightings": 1 }, { "indicator": "http://144.172.110.191/beacon_encrypted.bin", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 19:08:11 UTC", "last_seen": "2026-03-08 19:08:11 UTC", "sightings": 1 }, { "indicator": "http://144.172.107.27:8008/access/JWrapper-Remote%20Access_os_jwwin-00075795303-archive.p2.l2", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 19:08:11 UTC", "last_seen": "2026-03-08 19:08:11 UTC", "sightings": 1 }, { "indicator": "https://casadoserralheirosaocarlos.com.br/ENCRYPT.Ps1", "indicator_type": "url", "source": "URLhaus", "tags": [ "ascii", "powershell", "ps1" ], "first_seen": "2026-03-08 19:08:11 UTC", "last_seen": "2026-03-08 19:08:11 UTC", "sightings": 1 }, { "indicator": "http://216.126.239.100/webdav_server.py", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 19:08:11 UTC", "last_seen": "2026-03-08 19:08:11 UTC", "sightings": 1 }, { "indicator": "https://216.126.236.17/Ezo0HJkTPWyaIZsj86znTAzDNBQB3JFjrh2qin0yZKkczcchQlrXoftNLL8Sw64H_NJ8Kmljo7qZ5PpDzK-QGxm4L7zmhr1DsEdR/", "indicator_type": "url", "source": "URLhaus", "tags": [ "meterpreter" ], "first_seen": "2026-03-08 19:08:11 UTC", "last_seen": "2026-03-08 19:08:11 UTC", "sightings": 1 }, { "indicator": "http://proxy005.vgate.app/winlocker/autoupdate/gamelauncher.ini?ver=1.3.0.20", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 19:08:11 UTC", "last_seen": "2026-03-08 19:08:11 UTC", "sightings": 1 }, { "indicator": "http://x.tlpoe.com:8008/access/JWrapper-Remote%20Access_winutils64-00075795303-archive.p2.l2", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 19:08:11 UTC", "last_seen": "2026-03-08 19:08:11 UTC", "sightings": 1 }, { "indicator": "https://files.wintestwin.xyz/cloud/a.txt.vbs", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 19:08:11 UTC", "last_seen": "2026-03-08 19:08:11 UTC", "sightings": 1 }, { "indicator": "http://216.126.225.94/access/JWrapper-Remote%20Access_os_jwwin-00075795303-archive.p2.l2", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 19:08:10 UTC", "last_seen": "2026-03-08 19:08:10 UTC", "sightings": 1 }, { "indicator": "http://216.126.225.94/access/JWrapper-Remote%20Access_winutils64-00075795303-archive.p2.l2", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 19:08:10 UTC", "last_seen": "2026-03-08 19:08:10 UTC", "sightings": 1 }, { "indicator": "http://172.86.89.253:8008/machine-1770334356004?ping=0B04034DCB70010B00011753475F2D3633343630353535343030353136333438383500010131000103352E3207EE0206019C3026822400011A5353756974652D352D322D32303230303630332D3131343630320001106663356364313165643838306332386608000200020001010B", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 19:08:09 UTC", "last_seen": "2026-03-08 19:08:09 UTC", "sightings": 1 }, { "indicator": "http://172.86.89.253:8008/machine-1770334393741?ping=0B04034DCB70010B00011753475F2D3633343630353535343030353136333438383500010131000103352E3207EE0206019C3027158D00011A5353756974652D352D322D32303230303630332D3131343630320001106663356364313165643838306332386608000200020001010B", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 19:08:09 UTC", "last_seen": "2026-03-08 19:08:09 UTC", "sightings": 1 }, { "indicator": "https://proxy005.vgate.app/winlocker/autoupdate/gamelauncher.ini?ver=1.3.0.20/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 19:08:08 UTC", "last_seen": "2026-03-08 19:08:08 UTC", "sightings": 1 }, { "indicator": "https://216.126.236.17/Ezo0HJkTPWyaIZsj87UOzwVE3wvHPKN9X9ojr5dtNpWYrk1sBSK_BezQik_BGpbF06nJgoTxHoDD0ZXerxMKKZgmFjhD6bCpDxbk9TP7jnX2zqZ/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 19:08:07 UTC", "last_seen": "2026-03-08 19:08:07 UTC", "sightings": 1 }, { "indicator": "http://216.126.239.100/phishing/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 19:08:06 UTC", "last_seen": "2026-03-08 19:08:06 UTC", "sightings": 1 }, { "indicator": "https://216.126.236.17/Ezo0HJkTPWyaIZsj84zzGw84qZIvRb_Fi4xFDrmII5/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 19:08:06 UTC", "last_seen": "2026-03-08 19:08:06 UTC", "sightings": 1 }, { "indicator": "https://216.126.236.17/Ezo0HJkTPWyaIZsj87UO5QRjSgA9ZYu2mMr4qAYHXp0xa9MDpW78CPq3ZZI0foJZRhOe/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 19:08:06 UTC", "last_seen": "2026-03-08 19:08:06 UTC", "sightings": 1 }, { "indicator": "http://120.238.189.72:47659/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-08 19:07:22 UTC", "last_seen": "2026-03-08 19:07:22 UTC", "sightings": 1 }, { "indicator": "https://cone-way.conesemison.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 19:07:09 UTC", "last_seen": "2026-03-08 19:07:09 UTC", "sightings": 1 }, { "indicator": "http://crm.razatelefonia.pro/new/k.php", "indicator_type": "url", "source": "URLhaus", "tags": [ "base64", "obfuscated", "sh" ], "first_seen": "2026-03-08 19:06:21 UTC", "last_seen": "2026-03-08 19:06:21 UTC", "sightings": 1 }, { "indicator": "http://crm.razatelefonia.pro/new/c", "indicator_type": "url", "source": "URLhaus", "tags": [ "base64", "obfuscated", "sh" ], "first_seen": "2026-03-08 19:06:20 UTC", "last_seen": "2026-03-08 19:06:20 UTC", "sightings": 1 }, { "indicator": "http://178.16.54.109/xmrget.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "CoinMiner", "dropped-by-Phorpiex" ], "first_seen": "2026-03-08 19:01:05 UTC", "last_seen": "2026-03-08 19:01:05 UTC", "sightings": 1 }, { "indicator": "https://meow-run.boynitsameow.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 18:56:08 UTC", "last_seen": "2026-03-08 18:56:08 UTC", "sightings": 1 }, { "indicator": "https://boy-net.boynitsameow.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 18:49:07 UTC", "last_seen": "2026-03-08 18:49:07 UTC", "sightings": 1 }, { "indicator": "http://42.229.161.113:58763/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 18:47:09 UTC", "last_seen": "2026-03-08 18:47:09 UTC", "sightings": 1 }, { "indicator": "http://112.31.189.32:57316/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-08 18:44:16 UTC", "last_seen": "2026-03-08 18:44:16 UTC", "sightings": 1 }, { "indicator": "http://125.40.227.204:59158/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 18:41:16 UTC", "last_seen": "2026-03-08 18:41:16 UTC", "sightings": 1 }, { "indicator": "http://110.38.209.204:43462/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-08 18:39:20 UTC", "last_seen": "2026-03-08 18:39:20 UTC", "sightings": 1 }, { "indicator": "https://boy-site.boynitsameow.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 18:39:08 UTC", "last_seen": "2026-03-08 18:39:08 UTC", "sightings": 1 }, { "indicator": "https://cleav-base.bobikcleavage.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 18:34:09 UTC", "last_seen": "2026-03-08 18:34:09 UTC", "sightings": 1 }, { "indicator": "http://222.139.119.111:60661/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 18:31:19 UTC", "last_seen": "2026-03-08 18:31:19 UTC", "sightings": 1 }, { "indicator": "https://bobik-sys.bobikcleavage.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 18:28:07 UTC", "last_seen": "2026-03-08 18:28:07 UTC", "sightings": 1 }, { "indicator": "http://176.106.241.72:54655/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 18:22:15 UTC", "last_seen": "2026-03-08 18:22:15 UTC", "sightings": 1 }, { "indicator": "https://cleav-v6.bobikcleavage.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 18:22:11 UTC", "last_seen": "2026-03-08 18:22:11 UTC", "sightings": 1 }, { "indicator": "http://app.enekora.com/app/download.php", "indicator_type": "url", "source": "URLhaus", "tags": [ "ua-wget", "Vidar" ], "first_seen": "2026-03-08 18:15:15 UTC", "last_seen": "2026-03-08 18:15:15 UTC", "sightings": 1 }, { "indicator": "https://bobik-peak.bobikcleavage.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 18:11:11 UTC", "last_seen": "2026-03-08 18:11:11 UTC", "sightings": 1 }, { "indicator": "https://fuckcartel.icu/download/gitlol", "indicator_type": "url", "source": "URLhaus", "tags": [ "EpsilonStealer", "ua-wget" ], "first_seen": "2026-03-08 18:08:36 UTC", "last_seen": "2026-03-08 18:08:36 UTC", "sightings": 1 }, { "indicator": "https://silen-node.amperesilence.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 18:05:10 UTC", "last_seen": "2026-03-08 18:05:10 UTC", "sightings": 1 }, { "indicator": "http://182.112.186.130:54913/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 18:02:14 UTC", "last_seen": "2026-03-08 18:02:14 UTC", "sightings": 1 }, { "indicator": "http://182.112.186.130:54913/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 18:00:25 UTC", "last_seen": "2026-03-08 18:00:25 UTC", "sightings": 1 }, { "indicator": "https://amp-hub.amperesilence.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 18:00:11 UTC", "last_seen": "2026-03-08 18:00:11 UTC", "sightings": 1 }, { "indicator": "https://silen-v05.amperesilence.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 17:55:09 UTC", "last_seen": "2026-03-08 17:55:09 UTC", "sightings": 1 }, { "indicator": "https://amp-vault.amperesilence.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 17:51:08 UTC", "last_seen": "2026-03-08 17:51:08 UTC", "sightings": 1 }, { "indicator": "https://sing-data.limbsingle.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 17:45:09 UTC", "last_seen": "2026-03-08 17:45:09 UTC", "sightings": 1 }, { "indicator": "http://110.37.66.64:56667/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-08 17:40:23 UTC", "last_seen": "2026-03-08 17:40:23 UTC", "sightings": 1 }, { "indicator": "https://limb-sync.limbsingle.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 17:38:07 UTC", "last_seen": "2026-03-08 17:38:07 UTC", "sightings": 1 }, { "indicator": "http://123.4.178.185:53655/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 17:36:13 UTC", "last_seen": "2026-03-08 17:36:13 UTC", "sightings": 1 }, { "indicator": "http://222.139.119.111:60661/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 17:35:23 UTC", "last_seen": "2026-03-08 17:35:23 UTC", "sightings": 1 }, { "indicator": "http://45.194.92.55/main_arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-08 17:33:25 UTC", "last_seen": "2026-03-08 17:33:25 UTC", "sightings": 1 }, { "indicator": "http://45.194.92.55/main_arm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-08 17:33:24 UTC", "last_seen": "2026-03-08 17:33:24 UTC", "sightings": 1 }, { "indicator": "http://bobnet.exiled.fit/main_mpsl", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-08 17:33:24 UTC", "last_seen": "2026-03-08 17:33:24 UTC", "sightings": 1 }, { "indicator": "http://45.194.92.55/main_x86_64", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-08 17:33:24 UTC", "last_seen": "2026-03-08 17:33:24 UTC", "sightings": 1 }, { "indicator": "http://45.194.92.55/main_sh4", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-08 17:33:23 UTC", "last_seen": "2026-03-08 17:33:23 UTC", "sightings": 1 }, { "indicator": "http://bobnet.exiled.fit/main_arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-08 17:33:20 UTC", "last_seen": "2026-03-08 17:33:20 UTC", "sightings": 1 }, { "indicator": "http://45.194.92.55/main_x86", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-08 17:33:19 UTC", "last_seen": "2026-03-08 17:33:19 UTC", "sightings": 1 }, { "indicator": "http://bobnet.exiled.fit/main_arm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-08 17:33:19 UTC", "last_seen": "2026-03-08 17:33:19 UTC", "sightings": 1 }, { "indicator": "http://45.194.92.55/main_arm", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-08 17:33:19 UTC", "last_seen": "2026-03-08 17:33:19 UTC", "sightings": 1 }, { "indicator": "http://45.194.92.55/main_m68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-08 17:33:19 UTC", "last_seen": "2026-03-08 17:33:19 UTC", "sightings": 1 }, { "indicator": "http://bobnet.exiled.fit/main_arm", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-08 17:33:19 UTC", "last_seen": "2026-03-08 17:33:19 UTC", "sightings": 1 }, { "indicator": "http://bobnet.exiled.fit/main_x86", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-08 17:33:19 UTC", "last_seen": "2026-03-08 17:33:19 UTC", "sightings": 1 }, { "indicator": "http://bobnet.exiled.fit/main_x86_64", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-08 17:33:19 UTC", "last_seen": "2026-03-08 17:33:19 UTC", "sightings": 1 }, { "indicator": "http://bobnet.exiled.fit/main_sh4", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-08 17:33:19 UTC", "last_seen": "2026-03-08 17:33:19 UTC", "sightings": 1 }, { "indicator": "http://45.194.92.55/main_ppc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-08 17:33:19 UTC", "last_seen": "2026-03-08 17:33:19 UTC", "sightings": 1 }, { "indicator": "http://45.194.92.55/main_mpsl", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-08 17:33:19 UTC", "last_seen": "2026-03-08 17:33:19 UTC", "sightings": 1 }, { "indicator": "http://bobnet.exiled.fit/main_m68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-08 17:33:19 UTC", "last_seen": "2026-03-08 17:33:19 UTC", "sightings": 1 }, { "indicator": "http://45.194.92.55/main_mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-08 17:33:19 UTC", "last_seen": "2026-03-08 17:33:19 UTC", "sightings": 1 }, { "indicator": "http://bobnet.exiled.fit/main_mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-08 17:33:19 UTC", "last_seen": "2026-03-08 17:33:19 UTC", "sightings": 1 }, { "indicator": "http://bobnet.exiled.fit/main_ppc", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-08 17:33:19 UTC", "last_seen": "2026-03-08 17:33:19 UTC", "sightings": 1 }, { "indicator": "http://bobnet.exiled.fit/main_arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-08 17:33:18 UTC", "last_seen": "2026-03-08 17:33:18 UTC", "sightings": 1 }, { "indicator": "https://sing-v44.limbsingle.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 17:33:08 UTC", "last_seen": "2026-03-08 17:33:08 UTC", "sightings": 1 }, { "indicator": "https://limb-core.limbsingle.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 17:25:09 UTC", "last_seen": "2026-03-08 17:25:09 UTC", "sightings": 1 }, { "indicator": "https://seni-edge.oakumsenile.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 17:20:08 UTC", "last_seen": "2026-03-08 17:20:08 UTC", "sightings": 1 }, { "indicator": "http://110.37.127.205:48522/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 17:18:11 UTC", "last_seen": "2026-03-08 17:18:11 UTC", "sightings": 1 }, { "indicator": "https://oakum-unit.oakumsenile.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 17:13:13 UTC", "last_seen": "2026-03-08 17:13:13 UTC", "sightings": 1 }, { "indicator": "http://110.37.66.64:56667/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-08 17:11:10 UTC", "last_seen": "2026-03-08 17:11:10 UTC", "sightings": 1 }, { "indicator": "http://123.4.178.185:53655/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 17:09:23 UTC", "last_seen": "2026-03-08 17:09:23 UTC", "sightings": 1 }, { "indicator": "https://seni-v3.oakumsenile.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 17:09:07 UTC", "last_seen": "2026-03-08 17:09:07 UTC", "sightings": 1 }, { "indicator": "http://140.233.190.114/arm-linux-musleabi", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-08 17:07:19 UTC", "last_seen": "2026-03-08 17:07:19 UTC", "sightings": 1 }, { "indicator": "http://140.233.190.114/armel-linux-musleabihf", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-08 17:07:18 UTC", "last_seen": "2026-03-08 17:07:18 UTC", "sightings": 1 }, { "indicator": "http://140.233.190.114/armeb-linux-musleabihf", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-08 17:06:29 UTC", "last_seen": "2026-03-08 17:06:29 UTC", "sightings": 1 }, { "indicator": "http://140.233.190.114/armeb-linux-musleabi", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-08 17:06:29 UTC", "last_seen": "2026-03-08 17:06:29 UTC", "sightings": 1 }, { "indicator": "http://140.233.190.114/armv7r-linux-musleabihf", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-08 17:06:29 UTC", "last_seen": "2026-03-08 17:06:29 UTC", "sightings": 1 }, { "indicator": "http://140.233.190.114/armel-linux-musleabi", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-08 17:06:29 UTC", "last_seen": "2026-03-08 17:06:29 UTC", "sightings": 1 }, { "indicator": "http://140.233.190.114/armv5l-linux-musleabi", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-08 17:06:26 UTC", "last_seen": "2026-03-08 17:06:26 UTC", "sightings": 1 }, { "indicator": "http://140.233.190.114/armv6-linux-musleabi", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-08 17:06:26 UTC", "last_seen": "2026-03-08 17:06:26 UTC", "sightings": 1 }, { "indicator": "http://140.233.190.114/armv5l-linux-musleabihf", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-08 17:06:26 UTC", "last_seen": "2026-03-08 17:06:26 UTC", "sightings": 1 }, { "indicator": "http://140.233.190.114/arm-linux-musleabihf", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-08 17:06:26 UTC", "last_seen": "2026-03-08 17:06:26 UTC", "sightings": 1 }, { "indicator": "http://140.233.190.114/armv7l-linux-musleabihf", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-08 17:06:21 UTC", "last_seen": "2026-03-08 17:06:21 UTC", "sightings": 1 }, { "indicator": "http://140.233.190.114/armv6-linux-musleabihf", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-08 17:06:21 UTC", "last_seen": "2026-03-08 17:06:21 UTC", "sightings": 1 }, { "indicator": "http://140.233.190.114/armv7m-linux-musleabi", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-08 17:06:21 UTC", "last_seen": "2026-03-08 17:06:21 UTC", "sightings": 1 }, { "indicator": "https://oakum-gate.oakumsenile.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 17:05:15 UTC", "last_seen": "2026-03-08 17:05:15 UTC", "sightings": 1 }, { "indicator": "http://42.232.225.134:44891/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 17:04:26 UTC", "last_seen": "2026-03-08 17:04:26 UTC", "sightings": 1 }, { "indicator": "http://115.56.111.237:36675/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 17:03:14 UTC", "last_seen": "2026-03-08 17:03:14 UTC", "sightings": 1 }, { "indicator": "https://foll-flow.excitfollower.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 16:59:09 UTC", "last_seen": "2026-03-08 16:59:09 UTC", "sightings": 1 }, { "indicator": "https://excit-net.excitfollower.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 16:56:13 UTC", "last_seen": "2026-03-08 16:56:13 UTC", "sightings": 1 }, { "indicator": "http://115.50.45.103:55572/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 16:55:29 UTC", "last_seen": "2026-03-08 16:55:29 UTC", "sightings": 1 }, { "indicator": "http://219.157.22.183:46342/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 16:55:29 UTC", "last_seen": "2026-03-08 16:55:29 UTC", "sightings": 1 }, { "indicator": "http://27.121.83.226:40210/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-08 16:53:10 UTC", "last_seen": "2026-03-08 16:53:10 UTC", "sightings": 1 }, { "indicator": "https://foll-v12.excitfollower.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 16:51:10 UTC", "last_seen": "2026-03-08 16:51:10 UTC", "sightings": 1 }, { "indicator": "http://42.5.229.81:50685/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 16:48:28 UTC", "last_seen": "2026-03-08 16:48:28 UTC", "sightings": 1 }, { "indicator": "http://182.126.81.137:56547/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 16:47:09 UTC", "last_seen": "2026-03-08 16:47:09 UTC", "sightings": 1 }, { "indicator": "https://excit-hub.excitfollower.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 16:44:12 UTC", "last_seen": "2026-03-08 16:44:12 UTC", "sightings": 1 }, { "indicator": "https://nord-base.navignord.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 16:38:11 UTC", "last_seen": "2026-03-08 16:38:11 UTC", "sightings": 1 }, { "indicator": "https://zverda.space/FileArchiver.rar", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 16:38:09 UTC", "last_seen": "2026-03-08 16:38:09 UTC", "sightings": 1 }, { "indicator": "http://95.56.232.109:39091/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-08 16:34:16 UTC", "last_seen": "2026-03-08 16:34:16 UTC", "sightings": 1 }, { "indicator": "https://zxjasjkask1992.sbs/load.ps1", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClickFix" ], "first_seen": "2026-03-08 16:34:10 UTC", "last_seen": "2026-03-08 16:34:10 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/even88813-hash/anticheat/main/Scottish/Software_2.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-08 16:33:10 UTC", "last_seen": "2026-03-08 16:33:10 UTC", "sightings": 1 }, { "indicator": "https://github.com/even88813-hash/anticheat/raw/refs/heads/main/Scottish/Software_2.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-08 16:33:09 UTC", "last_seen": "2026-03-08 16:33:09 UTC", "sightings": 1 }, { "indicator": "https://navig-sync.navignord.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 16:30:13 UTC", "last_seen": "2026-03-08 16:30:13 UTC", "sightings": 1 }, { "indicator": "http://219.157.22.183:46342/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 16:25:23 UTC", "last_seen": "2026-03-08 16:25:23 UTC", "sightings": 1 }, { "indicator": "https://nord-v01.navignord.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 16:25:12 UTC", "last_seen": "2026-03-08 16:25:12 UTC", "sightings": 1 }, { "indicator": "http://27.121.83.226:40210/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-08 16:22:14 UTC", "last_seen": "2026-03-08 16:22:14 UTC", "sightings": 1 }, { "indicator": "https://github.com/Sof1st1s/Astralis-Client/releases/download/1.0.3/Astralis.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "exe", "ToxicEye" ], "first_seen": "2026-03-08 16:22:10 UTC", "last_seen": "2026-03-08 16:22:10 UTC", "sightings": 1 }, { "indicator": "https://navig-node.navignord.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 16:21:11 UTC", "last_seen": "2026-03-08 16:21:11 UTC", "sightings": 1 }, { "indicator": "http://42.5.229.81:50685/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 16:18:21 UTC", "last_seen": "2026-03-08 16:18:21 UTC", "sightings": 1 }, { "indicator": "https://fr4me-hinge.breezefield.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 16:14:06 UTC", "last_seen": "2026-03-08 16:14:06 UTC", "sightings": 1 }, { "indicator": "http://182.126.81.137:56547/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 16:11:14 UTC", "last_seen": "2026-03-08 16:11:14 UTC", "sightings": 1 }, { "indicator": "https://royalstream.breezefield.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 16:07:05 UTC", "last_seen": "2026-03-08 16:07:05 UTC", "sightings": 1 }, { "indicator": "https://packecle.breezefield.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 15:59:12 UTC", "last_seen": "2026-03-08 15:59:12 UTC", "sightings": 1 }, { "indicator": "http://61.53.135.250:35459/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 15:57:16 UTC", "last_seen": "2026-03-08 15:57:16 UTC", "sightings": 1 }, { "indicator": "https://hollowcatalog.breezefield.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 15:52:07 UTC", "last_seen": "2026-03-08 15:52:07 UTC", "sightings": 1 }, { "indicator": "https://5un-craft.harborcliff.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 15:45:14 UTC", "last_seen": "2026-03-08 15:45:14 UTC", "sightings": 1 }, { "indicator": "http://125.45.65.9:49664/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 15:41:20 UTC", "last_seen": "2026-03-08 15:41:20 UTC", "sightings": 1 }, { "indicator": "https://1ayo-route.harborcliff.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 15:40:14 UTC", "last_seen": "2026-03-08 15:40:14 UTC", "sightings": 1 }, { "indicator": "http://59.91.181.172:44178/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 15:35:18 UTC", "last_seen": "2026-03-08 15:35:18 UTC", "sightings": 1 }, { "indicator": "https://eenlgmi.harborcliff.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 15:35:14 UTC", "last_seen": "2026-03-08 15:35:14 UTC", "sightings": 1 }, { "indicator": "https://live-coupo.harborcliff.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 15:30:08 UTC", "last_seen": "2026-03-08 15:30:08 UTC", "sightings": 1 }, { "indicator": "http://182.115.239.32:50330/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 15:27:39 UTC", "last_seen": "2026-03-08 15:27:39 UTC", "sightings": 1 }, { "indicator": "http://61.53.135.250:35459/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 15:27:25 UTC", "last_seen": "2026-03-08 15:27:25 UTC", "sightings": 1 }, { "indicator": "http://125.45.65.9:49664/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 15:25:20 UTC", "last_seen": "2026-03-08 15:25:20 UTC", "sightings": 1 }, { "indicator": "https://kelnex2or.summitgrove.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 15:23:09 UTC", "last_seen": "2026-03-08 15:23:09 UTC", "sightings": 1 }, { "indicator": "http://115.53.203.7:56782/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 15:22:18 UTC", "last_seen": "2026-03-08 15:22:18 UTC", "sightings": 1 }, { "indicator": "http://60.18.81.162:47775/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 15:16:23 UTC", "last_seen": "2026-03-08 15:16:23 UTC", "sightings": 1 }, { "indicator": "http://115.53.203.7:56782/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 15:15:36 UTC", "last_seen": "2026-03-08 15:15:36 UTC", "sightings": 1 }, { "indicator": "http://110.37.43.128:39298/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-08 15:15:21 UTC", "last_seen": "2026-03-08 15:15:21 UTC", "sightings": 1 }, { "indicator": "http://222.142.245.77:41205/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 15:15:21 UTC", "last_seen": "2026-03-08 15:15:21 UTC", "sightings": 1 }, { "indicator": "https://mpthp.summitgrove.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 15:15:08 UTC", "last_seen": "2026-03-08 15:15:08 UTC", "sightings": 1 }, { "indicator": "http://124.94.78.2:40299/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 15:10:23 UTC", "last_seen": "2026-03-08 15:10:23 UTC", "sightings": 1 }, { "indicator": "https://reedfreigh.summitgrove.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 15:07:07 UTC", "last_seen": "2026-03-08 15:07:07 UTC", "sightings": 1 }, { "indicator": "https://granit3-beam.summitgrove.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 15:02:16 UTC", "last_seen": "2026-03-08 15:02:16 UTC", "sightings": 1 }, { "indicator": "http://178.141.173.225:56483/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 14:56:15 UTC", "last_seen": "2026-03-08 14:56:15 UTC", "sightings": 1 }, { "indicator": "https://extendnode.granitevalley.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 14:56:08 UTC", "last_seen": "2026-03-08 14:56:08 UTC", "sightings": 1 }, { "indicator": "http://222.142.245.77:41205/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 14:52:09 UTC", "last_seen": "2026-03-08 14:52:09 UTC", "sightings": 1 }, { "indicator": "https://34lhj33.granitevalley.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 14:50:14 UTC", "last_seen": "2026-03-08 14:50:14 UTC", "sightings": 1 }, { "indicator": "http://115.55.229.117:57964/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 14:48:24 UTC", "last_seen": "2026-03-08 14:48:24 UTC", "sightings": 1 }, { "indicator": "http://111.127.226.170:38830/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-08 14:48:23 UTC", "last_seen": "2026-03-08 14:48:23 UTC", "sightings": 1 }, { "indicator": "https://valspro.granitevalley.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 14:46:07 UTC", "last_seen": "2026-03-08 14:46:07 UTC", "sightings": 1 }, { "indicator": "http://110.37.43.128:39298/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-08 14:45:21 UTC", "last_seen": "2026-03-08 14:45:21 UTC", "sightings": 1 }, { "indicator": "http://158.94.211.222/files/7824924311/u0J9Mv7.msi", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "connectwise", "dropped-by-amadey" ], "first_seen": "2026-03-08 14:43:10 UTC", "last_seen": "2026-03-08 14:43:10 UTC", "sightings": 1 }, { "indicator": "https://notifierflame.granitevalley.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 14:42:07 UTC", "last_seen": "2026-03-08 14:42:07 UTC", "sightings": 1 }, { "indicator": "http://120.238.189.72:47659/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-08 14:37:31 UTC", "last_seen": "2026-03-08 14:37:31 UTC", "sightings": 1 }, { "indicator": "http://60.18.81.162:47775/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 14:37:19 UTC", "last_seen": "2026-03-08 14:37:19 UTC", "sightings": 1 }, { "indicator": "http://39.81.157.227:60882/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 14:37:18 UTC", "last_seen": "2026-03-08 14:37:18 UTC", "sightings": 1 }, { "indicator": "http://110.37.61.44:34207/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-08 14:37:17 UTC", "last_seen": "2026-03-08 14:37:17 UTC", "sightings": 1 }, { "indicator": "http://110.37.45.161:49884/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-08 14:37:17 UTC", "last_seen": "2026-03-08 14:37:17 UTC", "sightings": 1 }, { "indicator": "http://59.97.248.197:57061/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 14:37:17 UTC", "last_seen": "2026-03-08 14:37:17 UTC", "sightings": 1 }, { "indicator": "http://60.19.220.151:37507/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 14:28:20 UTC", "last_seen": "2026-03-08 14:28:20 UTC", "sightings": 1 }, { "indicator": "http://222.140.192.112:38237/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 14:27:12 UTC", "last_seen": "2026-03-08 14:27:12 UTC", "sightings": 1 }, { "indicator": "http://115.55.229.117:57964/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 14:26:23 UTC", "last_seen": "2026-03-08 14:26:23 UTC", "sightings": 1 }, { "indicator": "https://kel-meshet.thunderplain.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 14:26:06 UTC", "last_seen": "2026-03-08 14:26:06 UTC", "sightings": 1 }, { "indicator": "https://tlccjre.thunderplain.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 14:18:08 UTC", "last_seen": "2026-03-08 14:18:08 UTC", "sightings": 1 }, { "indicator": "http://117.208.242.121:49460/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 14:15:25 UTC", "last_seen": "2026-03-08 14:15:25 UTC", "sightings": 1 }, { "indicator": "http://115.55.85.112:58553/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 14:14:23 UTC", "last_seen": "2026-03-08 14:14:23 UTC", "sightings": 1 }, { "indicator": "http://42.231.91.49:59468/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 14:08:10 UTC", "last_seen": "2026-03-08 14:08:10 UTC", "sightings": 1 }, { "indicator": "https://bundleroug.thunderplain.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 14:08:06 UTC", "last_seen": "2026-03-08 14:08:06 UTC", "sightings": 1 }, { "indicator": "http://59.97.248.197:57061/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 14:07:20 UTC", "last_seen": "2026-03-08 14:07:20 UTC", "sightings": 1 }, { "indicator": "http://115.61.3.215:46328/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 14:04:19 UTC", "last_seen": "2026-03-08 14:04:19 UTC", "sightings": 1 }, { "indicator": "https://hfze93t5.autumnbrook.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 14:04:10 UTC", "last_seen": "2026-03-08 14:04:10 UTC", "sightings": 1 }, { "indicator": "http://222.140.192.112:38237/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 14:02:30 UTC", "last_seen": "2026-03-08 14:02:30 UTC", "sightings": 1 }, { "indicator": "http://42.231.91.49:59468/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 13:58:14 UTC", "last_seen": "2026-03-08 13:58:14 UTC", "sightings": 1 }, { "indicator": "http://115.61.3.215:46328/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 13:57:16 UTC", "last_seen": "2026-03-08 13:57:16 UTC", "sightings": 1 }, { "indicator": "https://quormarkis8.autumnbrook.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 13:56:09 UTC", "last_seen": "2026-03-08 13:56:09 UTC", "sightings": 1 }, { "indicator": "http://42.227.243.146:35774/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 13:53:10 UTC", "last_seen": "2026-03-08 13:53:10 UTC", "sightings": 1 }, { "indicator": "https://4uzr61.autumnbrook.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 13:51:13 UTC", "last_seen": "2026-03-08 13:51:13 UTC", "sightings": 1 }, { "indicator": "http://77.125.241.200:34930/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 13:48:17 UTC", "last_seen": "2026-03-08 13:48:17 UTC", "sightings": 1 }, { "indicator": "http://115.55.85.112:58553/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 13:47:25 UTC", "last_seen": "2026-03-08 13:47:25 UTC", "sightings": 1 }, { "indicator": "https://trinexex5.autumnbrook.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 13:47:10 UTC", "last_seen": "2026-03-08 13:47:10 UTC", "sightings": 1 }, { "indicator": "http://117.208.242.121:49460/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 13:45:30 UTC", "last_seen": "2026-03-08 13:45:30 UTC", "sightings": 1 }, { "indicator": "http://110.37.87.233:38485/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-08 13:45:20 UTC", "last_seen": "2026-03-08 13:45:20 UTC", "sightings": 1 }, { "indicator": "https://e2yy59.silvermeadow.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 13:42:07 UTC", "last_seen": "2026-03-08 13:42:07 UTC", "sightings": 1 }, { "indicator": "http://222.139.194.17:33621/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 13:38:14 UTC", "last_seen": "2026-03-08 13:38:14 UTC", "sightings": 1 }, { "indicator": "https://eopulls.silvermeadow.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 13:35:09 UTC", "last_seen": "2026-03-08 13:35:09 UTC", "sightings": 1 }, { "indicator": "http://88.84.222.217:43870/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 13:28:16 UTC", "last_seen": "2026-03-08 13:28:16 UTC", "sightings": 1 }, { "indicator": "https://spooldiscover.silvermeadow.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 13:28:07 UTC", "last_seen": "2026-03-08 13:28:07 UTC", "sightings": 1 }, { "indicator": "http://60.19.220.151:37507/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 13:24:24 UTC", "last_seen": "2026-03-08 13:24:24 UTC", "sightings": 1 }, { "indicator": "http://77.125.241.200:34930/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 13:23:21 UTC", "last_seen": "2026-03-08 13:23:21 UTC", "sightings": 1 }, { "indicator": "https://shafun.silvermeadow.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 13:23:11 UTC", "last_seen": "2026-03-08 13:23:11 UTC", "sightings": 1 }, { "indicator": "http://61.174.147.26:58951/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-08 13:20:20 UTC", "last_seen": "2026-03-08 13:20:20 UTC", "sightings": 1 }, { "indicator": "http://27.37.230.121:53155/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 13:17:17 UTC", "last_seen": "2026-03-08 13:17:17 UTC", "sightings": 1 }, { "indicator": "http://222.139.194.17:33621/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 13:09:17 UTC", "last_seen": "2026-03-08 13:09:17 UTC", "sightings": 1 }, { "indicator": "http://61.174.147.26:58951/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-08 13:08:19 UTC", "last_seen": "2026-03-08 13:08:19 UTC", "sightings": 1 }, { "indicator": "https://clipwes.crimsonridge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 13:08:07 UTC", "last_seen": "2026-03-08 13:08:07 UTC", "sightings": 1 }, { "indicator": "http://42.232.225.134:44891/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 13:07:11 UTC", "last_seen": "2026-03-08 13:07:11 UTC", "sightings": 1 }, { "indicator": "http://112.252.242.46:35037/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 13:06:11 UTC", "last_seen": "2026-03-08 13:06:11 UTC", "sightings": 1 }, { "indicator": "http://182.113.206.7:45551/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 13:06:10 UTC", "last_seen": "2026-03-08 13:06:10 UTC", "sightings": 1 }, { "indicator": "https://gr1m-mark.crimsonridge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 13:04:10 UTC", "last_seen": "2026-03-08 13:04:10 UTC", "sightings": 1 }, { "indicator": "http://88.84.222.217:43870/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 13:03:19 UTC", "last_seen": "2026-03-08 13:03:19 UTC", "sightings": 1 }, { "indicator": "https://hub-path.crimsonridge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 12:58:07 UTC", "last_seen": "2026-03-08 12:58:07 UTC", "sightings": 1 }, { "indicator": "http://27.37.230.121:53155/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 12:53:23 UTC", "last_seen": "2026-03-08 12:53:23 UTC", "sightings": 1 }, { "indicator": "https://g755rs.crimsonridge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 12:53:10 UTC", "last_seen": "2026-03-08 12:53:10 UTC", "sightings": 1 }, { "indicator": "http://222.133.100.187:40255/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 12:52:14 UTC", "last_seen": "2026-03-08 12:52:14 UTC", "sightings": 1 }, { "indicator": "https://taltideal3.emberfield.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 12:48:07 UTC", "last_seen": "2026-03-08 12:48:07 UTC", "sightings": 1 }, { "indicator": "http://61.52.54.215:43744/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 12:45:10 UTC", "last_seen": "2026-03-08 12:45:10 UTC", "sightings": 1 }, { "indicator": "http://61.52.54.215:43744/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 12:44:09 UTC", "last_seen": "2026-03-08 12:44:09 UTC", "sightings": 1 }, { "indicator": "https://oas1-sheet.emberfield.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 12:43:13 UTC", "last_seen": "2026-03-08 12:43:13 UTC", "sightings": 1 }, { "indicator": "https://norfluxex2.emberfield.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 12:38:12 UTC", "last_seen": "2026-03-08 12:38:12 UTC", "sightings": 1 }, { "indicator": "http://112.252.242.46:35037/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 12:37:27 UTC", "last_seen": "2026-03-08 12:37:27 UTC", "sightings": 1 }, { "indicator": "https://v16m.emberfield.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 12:32:13 UTC", "last_seen": "2026-03-08 12:32:13 UTC", "sightings": 1 }, { "indicator": "http://182.113.206.7:45551/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 12:29:09 UTC", "last_seen": "2026-03-08 12:29:09 UTC", "sightings": 1 }, { "indicator": "https://xg38z.dawnforest.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 12:27:07 UTC", "last_seen": "2026-03-08 12:27:07 UTC", "sightings": 1 }, { "indicator": "http://123.11.96.26:58428/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 12:26:07 UTC", "last_seen": "2026-03-08 12:26:07 UTC", "sightings": 1 }, { "indicator": "http://115.50.20.13:37386/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 12:24:18 UTC", "last_seen": "2026-03-08 12:24:18 UTC", "sightings": 1 }, { "indicator": "http://182.127.177.51:33144/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 12:23:18 UTC", "last_seen": "2026-03-08 12:23:18 UTC", "sightings": 1 }, { "indicator": "https://norven7en.dawnforest.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 12:19:09 UTC", "last_seen": "2026-03-08 12:19:09 UTC", "sightings": 1 }, { "indicator": "http://158.94.211.222/files/8546791173/H8eEFNo.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "CoinMiner", "dropped-by-amadey", "fbf543", "rustystealer" ], "first_seen": "2026-03-08 12:14:09 UTC", "last_seen": "2026-03-08 12:14:09 UTC", "sightings": 1 }, { "indicator": "https://carrierloose.dawnforest.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 12:12:11 UTC", "last_seen": "2026-03-08 12:12:11 UTC", "sightings": 1 }, { "indicator": "https://inkcarry.dawnforest.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 12:08:13 UTC", "last_seen": "2026-03-08 12:08:13 UTC", "sightings": 1 }, { "indicator": "http://182.127.6.166:36273/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 11:59:11 UTC", "last_seen": "2026-03-08 11:59:11 UTC", "sightings": 1 }, { "indicator": "http://123.8.84.146:56285/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 11:59:10 UTC", "last_seen": "2026-03-08 11:59:10 UTC", "sightings": 1 }, { "indicator": "https://binaryscale.overtmantram.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 11:55:08 UTC", "last_seen": "2026-03-08 11:55:08 UTC", "sightings": 1 }, { "indicator": "http://115.50.20.13:37386/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 11:51:20 UTC", "last_seen": "2026-03-08 11:51:20 UTC", "sightings": 1 }, { "indicator": "https://sparrowmerg.overtmantram.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 11:50:12 UTC", "last_seen": "2026-03-08 11:50:12 UTC", "sightings": 1 }, { "indicator": "http://182.127.177.51:33144/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 11:48:11 UTC", "last_seen": "2026-03-08 11:48:11 UTC", "sightings": 1 }, { "indicator": "https://proto-p45s.overtmantram.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 11:45:10 UTC", "last_seen": "2026-03-08 11:45:10 UTC", "sightings": 1 }, { "indicator": "http://61.176.24.11:36571/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 11:42:19 UTC", "last_seen": "2026-03-08 11:42:19 UTC", "sightings": 1 }, { "indicator": "https://neo-5tor.overtmantram.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 11:40:11 UTC", "last_seen": "2026-03-08 11:40:11 UTC", "sightings": 1 }, { "indicator": "https://fgklagg.goodtime.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 11:34:06 UTC", "last_seen": "2026-03-08 11:34:06 UTC", "sightings": 1 }, { "indicator": "http://110.38.210.180:40672/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 11:29:17 UTC", "last_seen": "2026-03-08 11:29:17 UTC", "sightings": 1 }, { "indicator": "http://110.38.210.180:40672/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 11:29:16 UTC", "last_seen": "2026-03-08 11:29:16 UTC", "sightings": 1 }, { "indicator": "https://hyp3r-stream.goodtime.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 11:29:08 UTC", "last_seen": "2026-03-08 11:29:08 UTC", "sightings": 1 }, { "indicator": "http://175.149.137.173:53936/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 11:27:10 UTC", "last_seen": "2026-03-08 11:27:10 UTC", "sightings": 1 }, { "indicator": "https://ledger5-well.goodtime.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 11:25:15 UTC", "last_seen": "2026-03-08 11:25:15 UTC", "sightings": 1 }, { "indicator": "http://42.224.26.177:47259/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 11:25:12 UTC", "last_seen": "2026-03-08 11:25:12 UTC", "sightings": 1 }, { "indicator": "https://sync-sys.goodtime.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 11:20:12 UTC", "last_seen": "2026-03-08 11:20:12 UTC", "sightings": 1 }, { "indicator": "http://117.209.88.234:46675/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 11:18:20 UTC", "last_seen": "2026-03-08 11:18:20 UTC", "sightings": 1 }, { "indicator": "http://158.94.211.222/files/7903503838/isxodFn.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey", "rustystealer" ], "first_seen": "2026-03-08 11:15:13 UTC", "last_seen": "2026-03-08 11:15:13 UTC", "sightings": 1 }, { "indicator": "https://audiocast.conesemison.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 11:14:08 UTC", "last_seen": "2026-03-08 11:14:08 UTC", "sightings": 1 }, { "indicator": "http://42.224.26.177:47259/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 11:13:18 UTC", "last_seen": "2026-03-08 11:13:18 UTC", "sightings": 1 }, { "indicator": "http://124.94.82.74:48696/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 11:10:20 UTC", "last_seen": "2026-03-08 11:10:20 UTC", "sightings": 1 }, { "indicator": "https://tri-venor.conesemison.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 11:10:08 UTC", "last_seen": "2026-03-08 11:10:08 UTC", "sightings": 1 }, { "indicator": "https://81mtae9.conesemison.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 11:05:12 UTC", "last_seen": "2026-03-08 11:05:12 UTC", "sightings": 1 }, { "indicator": "http://39.187.68.85:56157/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 11:04:11 UTC", "last_seen": "2026-03-08 11:04:11 UTC", "sightings": 1 }, { "indicator": "https://grovv4-node.conesemison.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 11:00:16 UTC", "last_seen": "2026-03-08 11:00:16 UTC", "sightings": 1 }, { "indicator": "https://tquq11g4.colitishatred.digital/?=check&&actmn=IGIRAdjVetwzjGzH", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-08 10:57:09 UTC", "last_seen": "2026-03-08 10:57:09 UTC", "sightings": 1 }, { "indicator": "http://110.37.89.210:52256/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-08 10:52:18 UTC", "last_seen": "2026-03-08 10:52:18 UTC", "sightings": 1 }, { "indicator": "http://117.235.99.14:53549/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 10:51:13 UTC", "last_seen": "2026-03-08 10:51:13 UTC", "sightings": 1 }, { "indicator": "http://94.156.152.67/cnctest", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "opendir", "ua-wget", "x86" ], "first_seen": "2026-03-08 10:49:05 UTC", "last_seen": "2026-03-08 10:49:05 UTC", "sightings": 1 }, { "indicator": "http://94.156.152.67/bot_windows.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "exe", "opendir" ], "first_seen": "2026-03-08 10:49:05 UTC", "last_seen": "2026-03-08 10:49:05 UTC", "sightings": 1 }, { "indicator": "https://im4g-path.boynitsameow.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 10:48:08 UTC", "last_seen": "2026-03-08 10:48:08 UTC", "sightings": 1 }, { "indicator": "http://115.49.126.177:35214/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 10:46:08 UTC", "last_seen": "2026-03-08 10:46:08 UTC", "sightings": 1 }, { "indicator": "http://219.155.210.119:35175/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 10:45:19 UTC", "last_seen": "2026-03-08 10:45:19 UTC", "sightings": 1 }, { "indicator": "http://221.15.15.80:52589/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 10:44:19 UTC", "last_seen": "2026-03-08 10:44:19 UTC", "sightings": 1 }, { "indicator": "https://9smjiz.boynitsameow.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 10:43:12 UTC", "last_seen": "2026-03-08 10:43:12 UTC", "sightings": 1 }, { "indicator": "https://harddense.boynitsameow.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 10:40:09 UTC", "last_seen": "2026-03-08 10:40:09 UTC", "sightings": 1 }, { "indicator": "http://182.126.110.18:39100/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 10:38:20 UTC", "last_seen": "2026-03-08 10:38:20 UTC", "sightings": 1 }, { "indicator": "http://37.235.139.196:36439/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-08 10:35:17 UTC", "last_seen": "2026-03-08 10:35:17 UTC", "sightings": 1 }, { "indicator": "http://110.37.89.210:52256/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-08 10:35:17 UTC", "last_seen": "2026-03-08 10:35:17 UTC", "sightings": 1 }, { "indicator": "http://219.155.210.119:35175/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 10:34:19 UTC", "last_seen": "2026-03-08 10:34:19 UTC", "sightings": 1 }, { "indicator": "http://42.224.28.168:55385/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 10:34:18 UTC", "last_seen": "2026-03-08 10:34:18 UTC", "sightings": 1 }, { "indicator": "http://117.235.99.14:53549/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 10:25:13 UTC", "last_seen": "2026-03-08 10:25:13 UTC", "sightings": 1 }, { "indicator": "https://sp115-index.bobikcleavage.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 10:21:07 UTC", "last_seen": "2026-03-08 10:21:07 UTC", "sightings": 1 }, { "indicator": "http://61.3.143.170:49568/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 10:20:14 UTC", "last_seen": "2026-03-08 10:20:14 UTC", "sightings": 1 }, { "indicator": "http://110.37.115.21:55914/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 10:14:22 UTC", "last_seen": "2026-03-08 10:14:22 UTC", "sightings": 1 }, { "indicator": "https://qhye.bobikcleavage.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 10:11:08 UTC", "last_seen": "2026-03-08 10:11:08 UTC", "sightings": 1 }, { "indicator": "http://27.215.176.145:41385/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 10:06:22 UTC", "last_seen": "2026-03-08 10:06:22 UTC", "sightings": 1 }, { "indicator": "https://cr3s9-mesh.bobikcleavage.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 10:06:12 UTC", "last_seen": "2026-03-08 10:06:12 UTC", "sightings": 1 }, { "indicator": "http://42.224.28.168:55385/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 10:03:18 UTC", "last_seen": "2026-03-08 10:03:18 UTC", "sightings": 1 }, { "indicator": "https://1n5igh6-lab.bobikcleavage.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 10:03:08 UTC", "last_seen": "2026-03-08 10:03:08 UTC", "sightings": 1 }, { "indicator": "http://61.3.29.117:46212/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 10:02:19 UTC", "last_seen": "2026-03-08 10:02:19 UTC", "sightings": 1 }, { "indicator": "https://mvxc.amperesilence.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 10:00:08 UTC", "last_seen": "2026-03-08 10:00:08 UTC", "sightings": 1 }, { "indicator": "http://172.86.68.175/ngAO13/aJ3IWhQK6/oRlkx", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:59:06 UTC", "last_seen": "2026-03-08 09:59:06 UTC", "sightings": 1 }, { "indicator": "http://172.86.68.175/LVuL/pfa1SuY7/8iHKTx9B", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:59:06 UTC", "last_seen": "2026-03-08 09:59:06 UTC", "sightings": 1 }, { "indicator": "http://www.172.86.68.175/MyWallet.exe", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:59:06 UTC", "last_seen": "2026-03-08 09:59:06 UTC", "sightings": 1 }, { "indicator": "http://172.86.68.175/OzXb5y4KH/pyqyD/yH8U", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:59:06 UTC", "last_seen": "2026-03-08 09:59:06 UTC", "sightings": 1 }, { "indicator": "http://172.86.68.175/mnEQ/PIoMQh/Vx0KJ", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:59:06 UTC", "last_seen": "2026-03-08 09:59:06 UTC", "sightings": 1 }, { "indicator": "http://172.86.68.175/lpIHU/oKoxUE/Z2TAg9T", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:59:06 UTC", "last_seen": "2026-03-08 09:59:06 UTC", "sightings": 1 }, { "indicator": "http://172.86.68.175/v8dPWoBGj/UWwSqKFf/0qXUGTJEob", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:59:06 UTC", "last_seen": "2026-03-08 09:59:06 UTC", "sightings": 1 }, { "indicator": "http://172.86.68.175/Q7Fz0uUZ/0x7Y4/GcFeu5", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:59:06 UTC", "last_seen": "2026-03-08 09:59:06 UTC", "sightings": 1 }, { "indicator": "http://172.86.68.175/CjZkAPj/rvvCs1t/fnM8vLqg1E", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:59:06 UTC", "last_seen": "2026-03-08 09:59:06 UTC", "sightings": 1 }, { "indicator": "http://172.86.68.175/nERr/o2IOTis91/buMCUWWmJSG", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:59:06 UTC", "last_seen": "2026-03-08 09:59:06 UTC", "sightings": 1 }, { "indicator": "http://172.86.68.175/EHWRs/h0KexPII5/HzQHKr", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:59:06 UTC", "last_seen": "2026-03-08 09:59:06 UTC", "sightings": 1 }, { "indicator": "http://172.86.68.175/z8rbpP/VC2TqCt/0tEF3", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:59:06 UTC", "last_seen": "2026-03-08 09:59:06 UTC", "sightings": 1 }, { "indicator": "http://172.86.68.175/YesRgs/8pm4a/YzXdwgzAuo", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:59:06 UTC", "last_seen": "2026-03-08 09:59:06 UTC", "sightings": 1 }, { "indicator": "http://172.86.68.175/JHzgh/5f3t/8SCqrxAX", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:59:06 UTC", "last_seen": "2026-03-08 09:59:06 UTC", "sightings": 1 }, { "indicator": "http://172.86.68.175/I9wj/RPGOgl8/NtTX", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:59:06 UTC", "last_seen": "2026-03-08 09:59:06 UTC", "sightings": 1 }, { "indicator": "http://172.86.68.175/gCLW8P0xBN.lnk", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:59:06 UTC", "last_seen": "2026-03-08 09:59:06 UTC", "sightings": 1 }, { "indicator": "http://172.86.68.175/lCbkW9d7/0BVA4/gylQzHWAQr", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:59:06 UTC", "last_seen": "2026-03-08 09:59:06 UTC", "sightings": 1 }, { "indicator": "http://172.86.68.175/nBqFVpkaus8/yi7RwlZ/qxsA1OP", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:59:06 UTC", "last_seen": "2026-03-08 09:59:06 UTC", "sightings": 1 }, { "indicator": "https://172.86.68.175/PapaPepeV1.4.exe", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:59:06 UTC", "last_seen": "2026-03-08 09:59:06 UTC", "sightings": 1 }, { "indicator": "http://172.86.68.175/YTO3grVoir/iwBvW/8KfZWkT", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:59:06 UTC", "last_seen": "2026-03-08 09:59:06 UTC", "sightings": 1 }, { "indicator": "http://172.86.68.175/GzmIzH7CVN/xThu/kNG79Sfy", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:59:06 UTC", "last_seen": "2026-03-08 09:59:06 UTC", "sightings": 1 }, { "indicator": "https://www.172.86.68.175/PapaPepeV1.4.exe", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:59:06 UTC", "last_seen": "2026-03-08 09:59:06 UTC", "sightings": 1 }, { "indicator": "http://172.86.68.175/2glFK/Nx4udA3T/s7r9", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:59:06 UTC", "last_seen": "2026-03-08 09:59:06 UTC", "sightings": 1 }, { "indicator": "http://172.86.68.175/EmgX1d/o4nx5/Mqmg2XB", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:59:06 UTC", "last_seen": "2026-03-08 09:59:06 UTC", "sightings": 1 }, { "indicator": "http://172.86.68.175/KhDx6D/dM7z7/FT0jxB", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:59:06 UTC", "last_seen": "2026-03-08 09:59:06 UTC", "sightings": 1 }, { "indicator": "http://172.86.68.175/OMxc/u2OMdbZvf/nkbLcVb7u5", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:59:06 UTC", "last_seen": "2026-03-08 09:59:06 UTC", "sightings": 1 }, { "indicator": "http://172.86.68.175/NlFVdzHj88/NdqVhMoh2/BlRP", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:59:06 UTC", "last_seen": "2026-03-08 09:59:06 UTC", "sightings": 1 }, { "indicator": "https://172.86.68.175/MyWallet.exe", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:59:06 UTC", "last_seen": "2026-03-08 09:59:06 UTC", "sightings": 1 }, { "indicator": "http://172.86.68.175/MtJm9YVObG/7hv8LiOyl/CgZ8p8DbJ5", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:59:06 UTC", "last_seen": "2026-03-08 09:59:06 UTC", "sightings": 1 }, { "indicator": "http://172.86.68.175/ooq4yz1sw1u/bwrd/GbPz3WUNp", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:59:06 UTC", "last_seen": "2026-03-08 09:59:06 UTC", "sightings": 1 }, { "indicator": "http://172.86.68.175/P4251j/8IYMHuLRd/3D5Aw3", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:59:06 UTC", "last_seen": "2026-03-08 09:59:06 UTC", "sightings": 1 }, { "indicator": "http://172.86.68.175/tz6K58/ILsA7cw/mMLCQC6iaO", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:59:06 UTC", "last_seen": "2026-03-08 09:59:06 UTC", "sightings": 1 }, { "indicator": "http://172.86.68.175/eEFNP/JmrJPVjW/pFNouz71i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:59:06 UTC", "last_seen": "2026-03-08 09:59:06 UTC", "sightings": 1 }, { "indicator": "http://172.86.68.175/FZxHXuqIv/lNggqi/hvzk5Yx", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:59:06 UTC", "last_seen": "2026-03-08 09:59:06 UTC", "sightings": 1 }, { "indicator": "http://172.86.68.175/0Z4DkMnG/YiSRPO4/7VjM3PszY", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:59:06 UTC", "last_seen": "2026-03-08 09:59:06 UTC", "sightings": 1 }, { "indicator": "http://172.86.68.175/kaEt5LKvZ/GcOj/HtItwTkb0", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:59:06 UTC", "last_seen": "2026-03-08 09:59:06 UTC", "sightings": 1 }, { "indicator": "http://172.86.68.175/d7X9VHk/Lulf/pIfKNvq", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:59:05 UTC", "last_seen": "2026-03-08 09:59:05 UTC", "sightings": 1 }, { "indicator": "http://172.86.68.175/D3rhTuf/ybazus/GuievxNlz", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:59:05 UTC", "last_seen": "2026-03-08 09:59:05 UTC", "sightings": 1 }, { "indicator": "http://172.86.68.175/3IwuRD5x/KRtN9f/a3OEdUSzKCM", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:59:05 UTC", "last_seen": "2026-03-08 09:59:05 UTC", "sightings": 1 }, { "indicator": "http://172.86.68.175/YjCBqRHg/LeU4rzOan/4joAC", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:59:05 UTC", "last_seen": "2026-03-08 09:59:05 UTC", "sightings": 1 }, { "indicator": "http://172.86.68.175/0tIKofR/BbZV8/U23gb6UD9Ca", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:59:05 UTC", "last_seen": "2026-03-08 09:59:05 UTC", "sightings": 1 }, { "indicator": "http://172.86.68.175/c34Vd/Zqyvn/test.dll", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:59:05 UTC", "last_seen": "2026-03-08 09:59:05 UTC", "sightings": 1 }, { "indicator": "http://172.86.68.175/ngzi/orzc9xiz/wtag", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:59:05 UTC", "last_seen": "2026-03-08 09:59:05 UTC", "sightings": 1 }, { "indicator": "http://172.86.68.175/FeBo/I4tc/ATre4ao", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:59:05 UTC", "last_seen": "2026-03-08 09:59:05 UTC", "sightings": 1 }, { "indicator": "http://172.86.68.175/zhS2yS/f4Xjyp/bf0cNvht", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:59:05 UTC", "last_seen": "2026-03-08 09:59:05 UTC", "sightings": 1 }, { "indicator": "http://172.86.68.175/0FQum2BFeA/qGNNxl4/6mzmPwGPQWF", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:59:05 UTC", "last_seen": "2026-03-08 09:59:05 UTC", "sightings": 1 }, { "indicator": "http://172.86.68.175/aki8Wu/T8Hzbk7Z/ePuOKZ7", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:59:05 UTC", "last_seen": "2026-03-08 09:59:05 UTC", "sightings": 1 }, { "indicator": "http://172.86.68.175/zbXIYiy/dLJH/QrCktLD114", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:59:05 UTC", "last_seen": "2026-03-08 09:59:05 UTC", "sightings": 1 }, { "indicator": "http://172.86.68.175/s3hHk/awaqpy/bdSQsK8zSpI", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:59:05 UTC", "last_seen": "2026-03-08 09:59:05 UTC", "sightings": 1 }, { "indicator": "http://172.86.68.175/T7vdNebIbOD/1x6FBRO6/ELBhS", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:59:05 UTC", "last_seen": "2026-03-08 09:59:05 UTC", "sightings": 1 }, { "indicator": "http://172.86.68.175/eCpCbUF/n0R1c/RLOGdaQAR", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:59:05 UTC", "last_seen": "2026-03-08 09:59:05 UTC", "sightings": 1 }, { "indicator": "http://172.86.68.175/ZiNjvYB3/VgD5o/x1NATLCW2uj", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:59:05 UTC", "last_seen": "2026-03-08 09:59:05 UTC", "sightings": 1 }, { "indicator": "http://172.86.68.175/VSAXpRHOR/MIuHzbJ/9OFIv", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:59:05 UTC", "last_seen": "2026-03-08 09:59:05 UTC", "sightings": 1 }, { "indicator": "http://172.86.68.175/JH26V/WZa7QYS/yMy4WBYwz8R", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:59:05 UTC", "last_seen": "2026-03-08 09:59:05 UTC", "sightings": 1 }, { "indicator": "http://172.86.68.175/j7se1/lgcd/os6wxd", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:59:05 UTC", "last_seen": "2026-03-08 09:59:05 UTC", "sightings": 1 }, { "indicator": "https://172.86.68.175/yLfOQasO/r5VOEfrp/zhTWFgAGsl", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:59:05 UTC", "last_seen": "2026-03-08 09:59:05 UTC", "sightings": 1 }, { "indicator": "http://172.86.68.175/tzODbjbiRwT/JPe2/6Vd4T6", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:59:05 UTC", "last_seen": "2026-03-08 09:59:05 UTC", "sightings": 1 }, { "indicator": "http://172.86.68.175/UevZCkQcgw2/2GBmwCao/hNlB8", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:59:05 UTC", "last_seen": "2026-03-08 09:59:05 UTC", "sightings": 1 }, { "indicator": "http://172.86.68.175/dwo428Tf/mkUan/frTb", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:59:05 UTC", "last_seen": "2026-03-08 09:59:05 UTC", "sightings": 1 }, { "indicator": "http://172.86.68.175/acqo93z1i/lptwvcj/ncrzj", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:59:05 UTC", "last_seen": "2026-03-08 09:59:05 UTC", "sightings": 1 }, { "indicator": "http://172.86.68.175/pxMWrr/2GVnGWo9I/dnTMaWdh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:59:05 UTC", "last_seen": "2026-03-08 09:59:05 UTC", "sightings": 1 }, { "indicator": "http://172.86.68.175/index.html.want_to_cry", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:59:05 UTC", "last_seen": "2026-03-08 09:59:05 UTC", "sightings": 1 }, { "indicator": "http://172.86.68.175/pT3uhvD/kt9T6/lXs78", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:59:05 UTC", "last_seen": "2026-03-08 09:59:05 UTC", "sightings": 1 }, { "indicator": "http://172.86.68.175/p9U5/jXyyJGi/wZ1NM68U", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:59:05 UTC", "last_seen": "2026-03-08 09:59:05 UTC", "sightings": 1 }, { "indicator": "http://172.86.68.175/ofaf/BXQmxBK/akt1Ft", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:59:05 UTC", "last_seen": "2026-03-08 09:59:05 UTC", "sightings": 1 }, { "indicator": "http://172.86.68.175/tqBDdhIxETF/elGarP/27Oo", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:59:05 UTC", "last_seen": "2026-03-08 09:59:05 UTC", "sightings": 1 }, { "indicator": "http://172.86.68.175/398IiY/PVsGB9lN/VjxNIcrN", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:59:05 UTC", "last_seen": "2026-03-08 09:59:05 UTC", "sightings": 1 }, { "indicator": "http://172.86.68.175/y4V7C4zJ/2LmOYj/33YE", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:59:05 UTC", "last_seen": "2026-03-08 09:59:05 UTC", "sightings": 1 }, { "indicator": "http://172.86.68.175/G2EqAodPCN7/cefMgc5/rWdJPxuSklI", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:59:05 UTC", "last_seen": "2026-03-08 09:59:05 UTC", "sightings": 1 }, { "indicator": "http://172.86.68.175/SIOPtlRj/1PrLwsPKJ/hcGgZDkMB", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:59:05 UTC", "last_seen": "2026-03-08 09:59:05 UTC", "sightings": 1 }, { "indicator": "http://172.86.68.175/UyG2MULfK/CVQfMbw/S1KEt", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:59:05 UTC", "last_seen": "2026-03-08 09:59:05 UTC", "sightings": 1 }, { "indicator": "http://172.86.68.175/sQPb4/YLN44WOzl/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:59:05 UTC", "last_seen": "2026-03-08 09:59:05 UTC", "sightings": 1 }, { "indicator": "http://172.86.68.175/widES7/ntjVoCi46/dsVc2fO", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:59:05 UTC", "last_seen": "2026-03-08 09:59:05 UTC", "sightings": 1 }, { "indicator": "http://172.86.68.175/SZRuIhJ8dd/slS6/GBaY30Zjkf", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:59:05 UTC", "last_seen": "2026-03-08 09:59:05 UTC", "sightings": 1 }, { "indicator": "http://172.86.68.175/WPdWYL/KYeSdaN/iVtZm5K", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:59:05 UTC", "last_seen": "2026-03-08 09:59:05 UTC", "sightings": 1 }, { "indicator": "http://172.86.68.175/zkEBiwNbs/ImfR/PaO8nH", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:59:05 UTC", "last_seen": "2026-03-08 09:59:05 UTC", "sightings": 1 }, { "indicator": "http://172.86.68.175/3m8D2l/lKQvsy/1f4MlBphL", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:59:05 UTC", "last_seen": "2026-03-08 09:59:05 UTC", "sightings": 1 }, { "indicator": "http://172.86.68.175/gCLW8P0xBN/9y7ZsloP5/s2gv3vxwC", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:59:05 UTC", "last_seen": "2026-03-08 09:59:05 UTC", "sightings": 1 }, { "indicator": "http://172.86.68.175/yLfOQasO/r5VOEfrp/zhTWFgAGsl", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:59:05 UTC", "last_seen": "2026-03-08 09:59:05 UTC", "sightings": 1 }, { "indicator": "http://172.86.68.175/PapaPepeV1.4.exe", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:59:05 UTC", "last_seen": "2026-03-08 09:59:05 UTC", "sightings": 1 }, { "indicator": "http://172.86.68.175/yxkCrauO2/6t6msK/1dfw7t", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:59:05 UTC", "last_seen": "2026-03-08 09:59:05 UTC", "sightings": 1 }, { "indicator": "http://172.86.68.175/O7VTCDQ/ipiX/dh8FXO", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:59:05 UTC", "last_seen": "2026-03-08 09:59:05 UTC", "sightings": 1 }, { "indicator": "http://nelavohomet.com/0tIKofR/BbZV8/U23gb6UD9Ca", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:57:15 UTC", "last_seen": "2026-03-08 09:57:15 UTC", "sightings": 1 }, { "indicator": "http://nelavohomet.com/yxkCrauO2/6t6msK/1dfw7t", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:57:14 UTC", "last_seen": "2026-03-08 09:57:14 UTC", "sightings": 1 }, { "indicator": "http://nelavohomet.com/ngzi/orzc9xiz/wtag", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:57:14 UTC", "last_seen": "2026-03-08 09:57:14 UTC", "sightings": 1 }, { "indicator": "http://nelavohomet.com/zbXIYiy/dLJH/QrCktLD114", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:57:13 UTC", "last_seen": "2026-03-08 09:57:13 UTC", "sightings": 1 }, { "indicator": "http://nelavohomet.com/c34Vd/Zqyvn/test.dll", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:57:13 UTC", "last_seen": "2026-03-08 09:57:13 UTC", "sightings": 1 }, { "indicator": "http://nelavohomet.com/gCLW8P0xBN.lnk", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:57:13 UTC", "last_seen": "2026-03-08 09:57:13 UTC", "sightings": 1 }, { "indicator": "http://nelavohomet.com/y4V7C4zJ/2LmOYj/33YE", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:57:13 UTC", "last_seen": "2026-03-08 09:57:13 UTC", "sightings": 1 }, { "indicator": "http://nelavohomet.com/EHWRs/h0KexPII5/HzQHKr", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:57:12 UTC", "last_seen": "2026-03-08 09:57:12 UTC", "sightings": 1 }, { "indicator": "http://nelavohomet.com/I9wj/RPGOgl8/NtTX", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:57:12 UTC", "last_seen": "2026-03-08 09:57:12 UTC", "sightings": 1 }, { "indicator": "http://nelavohomet.com/eEFNP/JmrJPVjW/pFNouz71i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:57:11 UTC", "last_seen": "2026-03-08 09:57:11 UTC", "sightings": 1 }, { "indicator": "http://nelavohomet.com/NlFVdzHj88/NdqVhMoh2/BlRP", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:57:11 UTC", "last_seen": "2026-03-08 09:57:11 UTC", "sightings": 1 }, { "indicator": "http://nelavohomet.com/p9U5/jXyyJGi/wZ1NM68U", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:57:11 UTC", "last_seen": "2026-03-08 09:57:11 UTC", "sightings": 1 }, { "indicator": "http://nelavohomet.com/D3rhTuf/ybazus/GuievxNlz", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:57:11 UTC", "last_seen": "2026-03-08 09:57:11 UTC", "sightings": 1 }, { "indicator": "http://nelavohomet.com/yLfOQasO/r5VOEfrp/zhTWFgAGsl", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:57:11 UTC", "last_seen": "2026-03-08 09:57:11 UTC", "sightings": 1 }, { "indicator": "http://nelavohomet.com/s3hHk/awaqpy/bdSQsK8zSpI", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:57:11 UTC", "last_seen": "2026-03-08 09:57:11 UTC", "sightings": 1 }, { "indicator": "http://nelavohomet.com/LVuL/pfa1SuY7/8iHKTx9B", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:57:11 UTC", "last_seen": "2026-03-08 09:57:11 UTC", "sightings": 1 }, { "indicator": "http://nelavohomet.com/ofaf/BXQmxBK/akt1Ft", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:57:11 UTC", "last_seen": "2026-03-08 09:57:11 UTC", "sightings": 1 }, { "indicator": "http://nelavohomet.com/eCpCbUF/n0R1c/RLOGdaQAR", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:57:11 UTC", "last_seen": "2026-03-08 09:57:11 UTC", "sightings": 1 }, { "indicator": "http://nelavohomet.com/aki8Wu/T8Hzbk7Z/ePuOKZ7", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:57:10 UTC", "last_seen": "2026-03-08 09:57:10 UTC", "sightings": 1 }, { "indicator": "http://nelavohomet.com/JHzgh/5f3t/8SCqrxAX", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:57:10 UTC", "last_seen": "2026-03-08 09:57:10 UTC", "sightings": 1 }, { "indicator": "http://nelavohomet.com/ngAO13/aJ3IWhQK6/oRlkx", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:57:10 UTC", "last_seen": "2026-03-08 09:57:10 UTC", "sightings": 1 }, { "indicator": "http://nelavohomet.com/G2EqAodPCN7/cefMgc5/rWdJPxuSklI", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:57:10 UTC", "last_seen": "2026-03-08 09:57:10 UTC", "sightings": 1 }, { "indicator": "http://nelavohomet.com/acqo93z1i/lptwvcj/ncrzj", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:57:10 UTC", "last_seen": "2026-03-08 09:57:10 UTC", "sightings": 1 }, { "indicator": "http://nelavohomet.com/gCLW8P0xBN/9y7ZsloP5/s2gv3vxwC", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:57:10 UTC", "last_seen": "2026-03-08 09:57:10 UTC", "sightings": 1 }, { "indicator": "http://nelavohomet.com/ooq4yz1sw1u/bwrd/GbPz3WUNp", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:57:10 UTC", "last_seen": "2026-03-08 09:57:10 UTC", "sightings": 1 }, { "indicator": "http://nelavohomet.com/v8dPWoBGj/UWwSqKFf/0qXUGTJEob", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:57:10 UTC", "last_seen": "2026-03-08 09:57:10 UTC", "sightings": 1 }, { "indicator": "http://nelavohomet.com/MtJm9YVObG/7hv8LiOyl/CgZ8p8DbJ5", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:57:10 UTC", "last_seen": "2026-03-08 09:57:10 UTC", "sightings": 1 }, { "indicator": "http://nelavohomet.com/VSAXpRHOR/MIuHzbJ/9OFIv", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:57:10 UTC", "last_seen": "2026-03-08 09:57:10 UTC", "sightings": 1 }, { "indicator": "http://nelavohomet.com/O7VTCDQ/ipiX/dh8FXO", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:57:10 UTC", "last_seen": "2026-03-08 09:57:10 UTC", "sightings": 1 }, { "indicator": "http://www.nelavohomet.com/MyWallet.exe", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:57:09 UTC", "last_seen": "2026-03-08 09:57:09 UTC", "sightings": 1 }, { "indicator": "http://nelavohomet.com/mnEQ/PIoMQh/Vx0KJ", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:57:09 UTC", "last_seen": "2026-03-08 09:57:09 UTC", "sightings": 1 }, { "indicator": "http://nelavohomet.com/d7X9VHk/Lulf/pIfKNvq", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:57:09 UTC", "last_seen": "2026-03-08 09:57:09 UTC", "sightings": 1 }, { "indicator": "http://nelavohomet.com/j7se1/lgcd/os6wxd", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:57:09 UTC", "last_seen": "2026-03-08 09:57:09 UTC", "sightings": 1 }, { "indicator": "http://nelavohomet.com/0FQum2BFeA/qGNNxl4/6mzmPwGPQWF", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:57:09 UTC", "last_seen": "2026-03-08 09:57:09 UTC", "sightings": 1 }, { "indicator": "https://nelavohomet.com/MyWallet.exe", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:57:09 UTC", "last_seen": "2026-03-08 09:57:09 UTC", "sightings": 1 }, { "indicator": "http://nelavohomet.com/GzmIzH7CVN/xThu/kNG79Sfy", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:57:09 UTC", "last_seen": "2026-03-08 09:57:09 UTC", "sightings": 1 }, { "indicator": "http://nelavohomet.com/zkEBiwNbs/ImfR/PaO8nH", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:57:09 UTC", "last_seen": "2026-03-08 09:57:09 UTC", "sightings": 1 }, { "indicator": "http://nelavohomet.com/tqBDdhIxETF/elGarP/27Oo", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:57:09 UTC", "last_seen": "2026-03-08 09:57:09 UTC", "sightings": 1 }, { "indicator": "http://nelavohomet.com/nBqFVpkaus8/yi7RwlZ/qxsA1OP", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:57:08 UTC", "last_seen": "2026-03-08 09:57:08 UTC", "sightings": 1 }, { "indicator": "http://nelavohomet.com/P4251j/8IYMHuLRd/3D5Aw3", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:57:08 UTC", "last_seen": "2026-03-08 09:57:08 UTC", "sightings": 1 }, { "indicator": "http://nelavohomet.com/FZxHXuqIv/lNggqi/hvzk5Yx", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:57:08 UTC", "last_seen": "2026-03-08 09:57:08 UTC", "sightings": 1 }, { "indicator": "http://nelavohomet.com/JH26V/WZa7QYS/yMy4WBYwz8R", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:57:08 UTC", "last_seen": "2026-03-08 09:57:08 UTC", "sightings": 1 }, { "indicator": "http://nelavohomet.com/pT3uhvD/kt9T6/lXs78", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:57:08 UTC", "last_seen": "2026-03-08 09:57:08 UTC", "sightings": 1 }, { "indicator": "http://nelavohomet.com/tzODbjbiRwT/JPe2/6Vd4T6", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:57:08 UTC", "last_seen": "2026-03-08 09:57:08 UTC", "sightings": 1 }, { "indicator": "http://nelavohomet.com/kaEt5LKvZ/GcOj/HtItwTkb0", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:57:08 UTC", "last_seen": "2026-03-08 09:57:08 UTC", "sightings": 1 }, { "indicator": "http://nelavohomet.com/EmgX1d/o4nx5/Mqmg2XB", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:57:08 UTC", "last_seen": "2026-03-08 09:57:08 UTC", "sightings": 1 }, { "indicator": "http://nelavohomet.com/WPdWYL/KYeSdaN/iVtZm5K", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:57:08 UTC", "last_seen": "2026-03-08 09:57:08 UTC", "sightings": 1 }, { "indicator": "http://nelavohomet.com/CjZkAPj/rvvCs1t/fnM8vLqg1E", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:57:08 UTC", "last_seen": "2026-03-08 09:57:08 UTC", "sightings": 1 }, { "indicator": "http://nelavohomet.com/pxMWrr/2GVnGWo9I/dnTMaWdh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:57:08 UTC", "last_seen": "2026-03-08 09:57:08 UTC", "sightings": 1 }, { "indicator": "http://nelavohomet.com/2glFK/Nx4udA3T/s7r9", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:57:08 UTC", "last_seen": "2026-03-08 09:57:08 UTC", "sightings": 1 }, { "indicator": "http://nelavohomet.com/YjCBqRHg/LeU4rzOan/4joAC", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:57:08 UTC", "last_seen": "2026-03-08 09:57:08 UTC", "sightings": 1 }, { "indicator": "https://nelavohomet.com/PapaPepeV1.4.exe", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:57:08 UTC", "last_seen": "2026-03-08 09:57:08 UTC", "sightings": 1 }, { "indicator": "http://nelavohomet.com/OzXb5y4KH/pyqyD/yH8U", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:57:08 UTC", "last_seen": "2026-03-08 09:57:08 UTC", "sightings": 1 }, { "indicator": "http://nelavohomet.com/zhS2yS/f4Xjyp/bf0cNvht", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:57:08 UTC", "last_seen": "2026-03-08 09:57:08 UTC", "sightings": 1 }, { "indicator": "http://nelavohomet.com/3m8D2l/lKQvsy/1f4MlBphL", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:57:08 UTC", "last_seen": "2026-03-08 09:57:08 UTC", "sightings": 1 }, { "indicator": "http://nelavohomet.com/ZiNjvYB3/VgD5o/x1NATLCW2uj", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:57:08 UTC", "last_seen": "2026-03-08 09:57:08 UTC", "sightings": 1 }, { "indicator": "https://nelavohomet.com/yLfOQasO/r5VOEfrp/zhTWFgAGsl", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:57:08 UTC", "last_seen": "2026-03-08 09:57:08 UTC", "sightings": 1 }, { "indicator": "http://nelavohomet.com/lCbkW9d7/0BVA4/gylQzHWAQr", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:57:08 UTC", "last_seen": "2026-03-08 09:57:08 UTC", "sightings": 1 }, { "indicator": "http://nelavohomet.com/YTO3grVoir/iwBvW/8KfZWkT", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:57:08 UTC", "last_seen": "2026-03-08 09:57:08 UTC", "sightings": 1 }, { "indicator": "https://172.86.68.175/PapaPepeV1.6.exe", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:57:08 UTC", "last_seen": "2026-03-08 09:57:08 UTC", "sightings": 1 }, { "indicator": "http://nelavohomet.com/Q7Fz0uUZ/0x7Y4/GcFeu5", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:57:08 UTC", "last_seen": "2026-03-08 09:57:08 UTC", "sightings": 1 }, { "indicator": "https://www.nelavohomet.com/PapaPepeV1.4.exe", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:57:08 UTC", "last_seen": "2026-03-08 09:57:08 UTC", "sightings": 1 }, { "indicator": "http://nelavohomet.com/widES7/ntjVoCi46/dsVc2fO", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:57:08 UTC", "last_seen": "2026-03-08 09:57:08 UTC", "sightings": 1 }, { "indicator": "http://nelavohomet.com/T7vdNebIbOD/1x6FBRO6/ELBhS", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:57:08 UTC", "last_seen": "2026-03-08 09:57:08 UTC", "sightings": 1 }, { "indicator": "http://nelavohomet.com/SZRuIhJ8dd/slS6/GBaY30Zjkf", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:57:08 UTC", "last_seen": "2026-03-08 09:57:08 UTC", "sightings": 1 }, { "indicator": "http://nelavohomet.com/UevZCkQcgw2/2GBmwCao/hNlB8", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:57:08 UTC", "last_seen": "2026-03-08 09:57:08 UTC", "sightings": 1 }, { "indicator": "http://nelavohomet.com/tz6K58/ILsA7cw/mMLCQC6iaO", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:57:08 UTC", "last_seen": "2026-03-08 09:57:08 UTC", "sightings": 1 }, { "indicator": "http://nelavohomet.com/index.html.want_to_cry", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:57:08 UTC", "last_seen": "2026-03-08 09:57:08 UTC", "sightings": 1 }, { "indicator": "http://nelavohomet.com/dwo428Tf/mkUan/frTb", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:57:08 UTC", "last_seen": "2026-03-08 09:57:08 UTC", "sightings": 1 }, { "indicator": "http://nelavohomet.com/UyG2MULfK/CVQfMbw/S1KEt", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:57:08 UTC", "last_seen": "2026-03-08 09:57:08 UTC", "sightings": 1 }, { "indicator": "http://nelavohomet.com/nERr/o2IOTis91/buMCUWWmJSG", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:57:08 UTC", "last_seen": "2026-03-08 09:57:08 UTC", "sightings": 1 }, { "indicator": "http://nelavohomet.com/sQPb4/YLN44WOzl/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:57:07 UTC", "last_seen": "2026-03-08 09:57:07 UTC", "sightings": 1 }, { "indicator": "http://nelavohomet.com/398IiY/PVsGB9lN/VjxNIcrN", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:57:07 UTC", "last_seen": "2026-03-08 09:57:07 UTC", "sightings": 1 }, { "indicator": "http://nelavohomet.com/PapaPepeV1.4.exe", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:57:07 UTC", "last_seen": "2026-03-08 09:57:07 UTC", "sightings": 1 }, { "indicator": "http://nelavohomet.com/KhDx6D/dM7z7/FT0jxB", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:57:07 UTC", "last_seen": "2026-03-08 09:57:07 UTC", "sightings": 1 }, { "indicator": "http://nelavohomet.com/OMxc/u2OMdbZvf/nkbLcVb7u5", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:57:06 UTC", "last_seen": "2026-03-08 09:57:06 UTC", "sightings": 1 }, { "indicator": "http://nelavohomet.com/lpIHU/oKoxUE/Z2TAg9T", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:57:06 UTC", "last_seen": "2026-03-08 09:57:06 UTC", "sightings": 1 }, { "indicator": "http://nelavohomet.com/FeBo/I4tc/ATre4ao", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:57:06 UTC", "last_seen": "2026-03-08 09:57:06 UTC", "sightings": 1 }, { "indicator": "http://nelavohomet.com/YesRgs/8pm4a/YzXdwgzAuo", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:57:06 UTC", "last_seen": "2026-03-08 09:57:06 UTC", "sightings": 1 }, { "indicator": "http://nelavohomet.com/0Z4DkMnG/YiSRPO4/7VjM3PszY", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:57:06 UTC", "last_seen": "2026-03-08 09:57:06 UTC", "sightings": 1 }, { "indicator": "http://nelavohomet.com/3IwuRD5x/KRtN9f/a3OEdUSzKCM", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:57:05 UTC", "last_seen": "2026-03-08 09:57:05 UTC", "sightings": 1 }, { "indicator": "http://nelavohomet.com/z8rbpP/VC2TqCt/0tEF3", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:57:05 UTC", "last_seen": "2026-03-08 09:57:05 UTC", "sightings": 1 }, { "indicator": "http://216.126.239.100/Documentos/NotaFiscal-Fev2026-NF38291.pdf.lnk", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:55:07 UTC", "last_seen": "2026-03-08 09:55:07 UTC", "sightings": 1 }, { "indicator": "http://216.126.237.216/boatnet.arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf" ], "first_seen": "2026-03-08 09:54:28 UTC", "last_seen": "2026-03-08 09:54:28 UTC", "sightings": 1 }, { "indicator": "https://zoom.us05-web.us/ft?topic=s>=209", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf" ], "first_seen": "2026-03-08 09:54:18 UTC", "last_seen": "2026-03-08 09:54:18 UTC", "sightings": 1 }, { "indicator": "http://nelavohomet.com/SIOPtlRj/1PrLwsPKJ/hcGgZDkMB", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf" ], "first_seen": "2026-03-08 09:54:17 UTC", "last_seen": "2026-03-08 09:54:17 UTC", "sightings": 1 }, { "indicator": "http://nelavohomet.com/XHyS/t8yNH/PsGFxXS", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf" ], "first_seen": "2026-03-08 09:54:15 UTC", "last_seen": "2026-03-08 09:54:15 UTC", "sightings": 1 }, { "indicator": "https://cloudaxis.cc/Ezo0HJkTPWyaIZsj86znTAzDNBQB3JFjrh2qin0yZKkczcchQlrXoftNLL8Sw64H_NJ8Kmljo7qZ5PpDzK-QGxm4L7zmhr1DsEdR", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:54:07 UTC", "last_seen": "2026-03-08 09:54:07 UTC", "sightings": 1 }, { "indicator": "https://cloudaxis.cc/gsmft/yueu/fkvqld/tvqqwh/ushu/22.exe", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:50:10 UTC", "last_seen": "2026-03-08 09:50:10 UTC", "sightings": 1 }, { "indicator": "https://cloudaxis.cc/gsmft/yueu/fkvqld/tvqqwh/ushu/update.exe", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:50:08 UTC", "last_seen": "2026-03-08 09:50:08 UTC", "sightings": 1 }, { "indicator": "https://cloudaxis.cc/gsmft/yueu/fkvqld/tvqqwh/ushu/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:50:07 UTC", "last_seen": "2026-03-08 09:50:07 UTC", "sightings": 1 }, { "indicator": "https://216.126.236.17/Ezo0HJkTPWyaIZsj87Rd9wA8HcCowvpp0JDNhzRcNjRgrtJ80eCRVI0vHbhu2pRjhAAgKrOGFdQd1eNKdPmTkMlwd3WSR2PYy1mWTzx6B-a/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:50:06 UTC", "last_seen": "2026-03-08 09:50:06 UTC", "sightings": 1 }, { "indicator": "https://216.126.236.17/Ezo0HJkTPWyaIZsj87Rd9wA8HcCowvpp0JDNhzRcNjRgrtJ80eCRVI0vHbhu2pRjhAAgKrOGF", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:50:06 UTC", "last_seen": "2026-03-08 09:50:06 UTC", "sightings": 1 }, { "indicator": "https://216.126.236.17/Ezo0HJkTPWyaIZsj87UO5QRjSgA9ZYu2mMr4qAYHXp0xa9MDpW78CPq3ZZI0foJZRhOe", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:50:06 UTC", "last_seen": "2026-03-08 09:50:06 UTC", "sightings": 1 }, { "indicator": "https://216.126.236.17/Ezo0HJkTPWyaIZsj87RenASrl5gEf79sX86-yFR34h14nRacuUQrHpRvBPAuSypQ77Y9vaq9x3SHb6yBq882-MoJrCXSF2544huQRqZ-8_", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:50:06 UTC", "last_seen": "2026-03-08 09:50:06 UTC", "sightings": 1 }, { "indicator": "http://cloudaxis.cc/gsmft/yueu/fkvqld/tvqqwh/ushu/22.exe/", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:50:06 UTC", "last_seen": "2026-03-08 09:50:06 UTC", "sightings": 1 }, { "indicator": "http://cloudaxis.cc/gsmft/yueu/fkvqld/tvqqwh/ushu/22.exe", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:50:06 UTC", "last_seen": "2026-03-08 09:50:06 UTC", "sightings": 1 }, { "indicator": "https://216.126.236.17/Ezo0HJkTPWyaIZsj87UOzwVE3wvHPKN9X9ojr5dtNpWYrk1sBSK_BezQik_BGpbF06nJgoTxHoDD0ZXerxMKKZgmFjhD6bCpDxbk9TP7jnX2zqZ", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:50:05 UTC", "last_seen": "2026-03-08 09:50:05 UTC", "sightings": 1 }, { "indicator": "http://216.126.236.17/Ezo0HJkTPWyaIZsj86znTAzDNBQB3JFjrh2qin0yZKkczcchQlrXoftNLL8Sw64H_NJ8Kmljo7qZ5PpDzK-QGxm4L7zmhr1DsEdR", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:50:05 UTC", "last_seen": "2026-03-08 09:50:05 UTC", "sightings": 1 }, { "indicator": "http://216.126.236.17/Ezo0HJkTPWyaIZsj87UO5QRjSgA9ZYu2mMr4qAYHXp0xa9MDpW78CPq3ZZI0foJZRhOe", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:50:05 UTC", "last_seen": "2026-03-08 09:50:05 UTC", "sightings": 1 }, { "indicator": "https://45.61.149.19/test_exe/sv_chost.exe", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:48:12 UTC", "last_seen": "2026-03-08 09:48:12 UTC", "sightings": 1 }, { "indicator": "http://45.61.149.19/test_exe_!/config.b64", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:48:06 UTC", "last_seen": "2026-03-08 09:48:06 UTC", "sightings": 1 }, { "indicator": "http://45.61.149.19/test_exe/config.b64", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:48:06 UTC", "last_seen": "2026-03-08 09:48:06 UTC", "sightings": 1 }, { "indicator": "http://45.61.149.19/test_exe_1/config.b64", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:48:06 UTC", "last_seen": "2026-03-08 09:48:06 UTC", "sightings": 1 }, { "indicator": "https://roy46-cast.amperesilence.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 09:46:10 UTC", "last_seen": "2026-03-08 09:46:10 UTC", "sightings": 1 }, { "indicator": "https://216.126.236.17/Ezo0HJkTPWyaIZsj86znTAzDNBQB3JFjrh2qin0yZKkczcchQlrXoftNLL8Sw64H_NJ8Kmljo7qZ5PpDzK-QGxm4L7zmhr1DsEdR", "indicator_type": "url", "source": "URLhaus", "tags": [ "Metasploit", "meterpreter" ], "first_seen": "2026-03-08 09:45:26 UTC", "last_seen": "2026-03-08 09:45:26 UTC", "sightings": 1 }, { "indicator": "https://45.61.151.206/access/Remote%20Access-windows64-offline.exe?language=en", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:44:48 UTC", "last_seen": "2026-03-08 09:44:48 UTC", "sightings": 1 }, { "indicator": "https://45.61.151.206/access/Remote%20Access-windows32-offline.exe?language=en", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:44:48 UTC", "last_seen": "2026-03-08 09:44:48 UTC", "sightings": 1 }, { "indicator": "https://172.86.89.251/access/Remote%20Access-windows32-offline.exe?language=en", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:44:47 UTC", "last_seen": "2026-03-08 09:44:47 UTC", "sightings": 1 }, { "indicator": "https://bulledesophros.top/access/Remote%20Access-windows64-offline.exe?language=en", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:44:47 UTC", "last_seen": "2026-03-08 09:44:47 UTC", "sightings": 1 }, { "indicator": "https://bulledesophros.top/access/Remote%20Access-windows32-offline.exe?language=en", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:44:46 UTC", "last_seen": "2026-03-08 09:44:46 UTC", "sightings": 1 }, { "indicator": "http://45.61.149.19/test_exe/new.exe", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:44:32 UTC", "last_seen": "2026-03-08 09:44:32 UTC", "sightings": 1 }, { "indicator": "https://172.86.89.251/access/Remote%20Access-windows64-offline.exe?language=en", "indicator_type": "url", "source": "URLhaus", "tags": [ "SimpleHelp" ], "first_seen": "2026-03-08 09:44:26 UTC", "last_seen": "2026-03-08 09:44:26 UTC", "sightings": 1 }, { "indicator": "http://216.126.239.100/bt/svchost.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "njRAT" ], "first_seen": "2026-03-08 09:44:15 UTC", "last_seen": "2026-03-08 09:44:15 UTC", "sightings": 1 }, { "indicator": "http://45.61.149.19/test_exe/sv_chost.exe", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 09:44:13 UTC", "last_seen": "2026-03-08 09:44:13 UTC", "sightings": 1 }, { "indicator": "http://42.224.173.217:47812/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 09:40:18 UTC", "last_seen": "2026-03-08 09:40:18 UTC", "sightings": 1 }, { "indicator": "http://123.8.84.146:56285/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 09:39:21 UTC", "last_seen": "2026-03-08 09:39:21 UTC", "sightings": 1 }, { "indicator": "http://27.215.176.145:41385/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 09:38:19 UTC", "last_seen": "2026-03-08 09:38:19 UTC", "sightings": 1 }, { "indicator": "https://xvneiys.limbsingle.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 09:36:10 UTC", "last_seen": "2026-03-08 09:36:10 UTC", "sightings": 1 }, { "indicator": "http://110.39.237.16:60003/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 09:35:20 UTC", "last_seen": "2026-03-08 09:35:20 UTC", "sightings": 1 }, { "indicator": "https://bandwidt-mesh.limbsingle.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 09:29:28 UTC", "last_seen": "2026-03-08 09:29:28 UTC", "sightings": 1 }, { "indicator": "http://42.224.70.80:41984/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 09:24:26 UTC", "last_seen": "2026-03-08 09:24:26 UTC", "sightings": 1 }, { "indicator": "https://7axh.limbsingle.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 09:24:12 UTC", "last_seen": "2026-03-08 09:24:12 UTC", "sightings": 1 }, { "indicator": "http://110.37.36.23:53022/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-08 09:20:24 UTC", "last_seen": "2026-03-08 09:20:24 UTC", "sightings": 1 }, { "indicator": "https://hyper-s4mp.limbsingle.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 09:19:08 UTC", "last_seen": "2026-03-08 09:19:08 UTC", "sightings": 1 }, { "indicator": "http://60.23.239.36:40954/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 09:17:44 UTC", "last_seen": "2026-03-08 09:17:44 UTC", "sightings": 1 }, { "indicator": "https://kelfluxor.oakumsenile.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 09:16:13 UTC", "last_seen": "2026-03-08 09:16:13 UTC", "sightings": 1 }, { "indicator": "http://110.39.237.16:60003/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 09:14:29 UTC", "last_seen": "2026-03-08 09:14:29 UTC", "sightings": 1 }, { "indicator": "https://terminal-mark.oakumsenile.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 09:13:07 UTC", "last_seen": "2026-03-08 09:13:07 UTC", "sightings": 1 }, { "indicator": "https://lunarslo.oakumsenile.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 09:03:07 UTC", "last_seen": "2026-03-08 09:03:07 UTC", "sightings": 1 }, { "indicator": "https://1pqv53qc.dumbbellshower.digital/?=check&&actmn=fqKKoXttkOgYYrsq", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-08 09:02:08 UTC", "last_seen": "2026-03-08 09:02:08 UTC", "sightings": 1 }, { "indicator": "http://115.55.196.17:57865/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 08:56:26 UTC", "last_seen": "2026-03-08 08:56:26 UTC", "sightings": 1 }, { "indicator": "http://42.224.70.80:41984/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 08:56:22 UTC", "last_seen": "2026-03-08 08:56:22 UTC", "sightings": 1 }, { "indicator": "http://123.11.74.16:33094/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 08:54:21 UTC", "last_seen": "2026-03-08 08:54:21 UTC", "sightings": 1 }, { "indicator": "http://123.12.195.156:52993/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 08:51:21 UTC", "last_seen": "2026-03-08 08:51:21 UTC", "sightings": 1 }, { "indicator": "http://110.37.36.23:53022/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-08 08:50:23 UTC", "last_seen": "2026-03-08 08:50:23 UTC", "sightings": 1 }, { "indicator": "http://60.23.239.36:40954/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 08:50:22 UTC", "last_seen": "2026-03-08 08:50:22 UTC", "sightings": 1 }, { "indicator": "http://117.206.71.226:43327/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 08:49:25 UTC", "last_seen": "2026-03-08 08:49:25 UTC", "sightings": 1 }, { "indicator": "http://115.55.196.17:57865/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 08:49:20 UTC", "last_seen": "2026-03-08 08:49:20 UTC", "sightings": 1 }, { "indicator": "http://42.224.173.217:47812/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 08:47:25 UTC", "last_seen": "2026-03-08 08:47:25 UTC", "sightings": 1 }, { "indicator": "https://solcoreet3.excitfollower.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 08:40:10 UTC", "last_seen": "2026-03-08 08:40:10 UTC", "sightings": 1 }, { "indicator": "http://110.37.61.44:34207/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-08 08:39:18 UTC", "last_seen": "2026-03-08 08:39:18 UTC", "sightings": 1 }, { "indicator": "http://110.37.45.161:49884/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-08 08:38:19 UTC", "last_seen": "2026-03-08 08:38:19 UTC", "sightings": 1 }, { "indicator": "http://123.11.74.16:33094/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 08:37:19 UTC", "last_seen": "2026-03-08 08:37:19 UTC", "sightings": 1 }, { "indicator": "http://175.165.73.110:44759/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 08:34:22 UTC", "last_seen": "2026-03-08 08:34:22 UTC", "sightings": 1 }, { "indicator": "http://94.244.36.34:54432/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-08 08:30:17 UTC", "last_seen": "2026-03-08 08:30:17 UTC", "sightings": 1 }, { "indicator": "http://123.232.143.133:45022/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 08:21:21 UTC", "last_seen": "2026-03-08 08:21:21 UTC", "sightings": 1 }, { "indicator": "http://115.48.144.42:37535/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 08:19:31 UTC", "last_seen": "2026-03-08 08:19:31 UTC", "sightings": 1 }, { "indicator": "https://zx8895.navignord.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 08:17:07 UTC", "last_seen": "2026-03-08 08:17:07 UTC", "sightings": 1 }, { "indicator": "http://123.232.143.133:45022/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 08:16:21 UTC", "last_seen": "2026-03-08 08:16:21 UTC", "sightings": 1 }, { "indicator": "http://42.227.196.233:60370/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 08:11:22 UTC", "last_seen": "2026-03-08 08:11:22 UTC", "sightings": 1 }, { "indicator": "http://42.227.196.233:60370/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 08:09:21 UTC", "last_seen": "2026-03-08 08:09:21 UTC", "sightings": 1 }, { "indicator": "http://42.87.121.164:49116/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 08:03:12 UTC", "last_seen": "2026-03-08 08:03:12 UTC", "sightings": 1 }, { "indicator": "http://115.49.126.177:35214/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 08:02:12 UTC", "last_seen": "2026-03-08 08:02:12 UTC", "sightings": 1 }, { "indicator": "http://110.37.95.229:55422/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 08:01:18 UTC", "last_seen": "2026-03-08 08:01:18 UTC", "sightings": 1 }, { "indicator": "https://repaicloud.navignord.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 08:00:14 UTC", "last_seen": "2026-03-08 08:00:14 UTC", "sightings": 1 }, { "indicator": "http://116.136.4.176:50423/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-08 08:00:12 UTC", "last_seen": "2026-03-08 08:00:12 UTC", "sightings": 1 }, { "indicator": "http://105.225.239.100:60749/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-08 07:56:27 UTC", "last_seen": "2026-03-08 07:56:27 UTC", "sightings": 1 }, { "indicator": "http://115.54.109.91:37948/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 07:56:22 UTC", "last_seen": "2026-03-08 07:56:22 UTC", "sightings": 1 }, { "indicator": "https://ameyiando.com/main/ENCRYPT.Ps1", "indicator_type": "url", "source": "URLhaus", "tags": [ "AgentTesla", "ascii", "powershell", "ps1" ], "first_seen": "2026-03-08 07:56:14 UTC", "last_seen": "2026-03-08 07:56:14 UTC", "sightings": 1 }, { "indicator": "http://107.173.143.118/bgdol.png", "indicator_type": "url", "source": "URLhaus", "tags": [ "AgentTesla" ], "first_seen": "2026-03-08 07:56:13 UTC", "last_seen": "2026-03-08 07:56:13 UTC", "sightings": 1 }, { "indicator": "https://casadoserralheirosaocarlos.com.br/ENCRYPTZ.Ps1", "indicator_type": "url", "source": "URLhaus", "tags": [ "AgentTesla", "ascii", "powershell", "ps1" ], "first_seen": "2026-03-08 07:56:12 UTC", "last_seen": "2026-03-08 07:56:12 UTC", "sightings": 1 }, { "indicator": "http://107.173.143.118/actiok.png", "indicator_type": "url", "source": "URLhaus", "tags": [ "AgentTesla" ], "first_seen": "2026-03-08 07:56:09 UTC", "last_seen": "2026-03-08 07:56:09 UTC", "sightings": 1 }, { "indicator": "http://107.173.143.118/mynnepeng.png", "indicator_type": "url", "source": "URLhaus", "tags": [ "AgentTesla" ], "first_seen": "2026-03-08 07:56:09 UTC", "last_seen": "2026-03-08 07:56:09 UTC", "sightings": 1 }, { "indicator": "http://107.173.143.118/saxch.png", "indicator_type": "url", "source": "URLhaus", "tags": [ "AgentTesla" ], "first_seen": "2026-03-08 07:56:09 UTC", "last_seen": "2026-03-08 07:56:09 UTC", "sightings": 1 }, { "indicator": "http://107.173.143.118/nderu.png", "indicator_type": "url", "source": "URLhaus", "tags": [ "AgentTesla" ], "first_seen": "2026-03-08 07:55:14 UTC", "last_seen": "2026-03-08 07:55:14 UTC", "sightings": 1 }, { "indicator": "https://casadoserralheirosaocarlos.com.br/ENCRYPTS.Ps1", "indicator_type": "url", "source": "URLhaus", "tags": [ "AgentTesla", "ascii", "powershell", "ps1" ], "first_seen": "2026-03-08 07:55:11 UTC", "last_seen": "2026-03-08 07:55:11 UTC", "sightings": 1 }, { "indicator": "http://fil.ydns.eu/jhuytr/FSAmegn.txt", "indicator_type": "url", "source": "URLhaus", "tags": [ "AgentTesla", "ascii", "Encoded" ], "first_seen": "2026-03-08 07:55:11 UTC", "last_seen": "2026-03-08 07:55:11 UTC", "sightings": 1 }, { "indicator": "http://113.236.112.254:56563/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 07:48:19 UTC", "last_seen": "2026-03-08 07:48:19 UTC", "sightings": 1 }, { "indicator": "https://bafybeibqcivjhwg2msil5g62did64uhtptlf7epidbrat4gexerzfv5mmq.ipfs.dweb.link/?filename=optimized_MSI.png", "indicator_type": "url", "source": "URLhaus", "tags": [ "rat", "RemcosRAT" ], "first_seen": "2026-03-08 07:46:11 UTC", "last_seen": "2026-03-08 07:46:11 UTC", "sightings": 1 }, { "indicator": "https://pub-4c182737706e41d29aee6cc5517f834d.r2.dev/qZtvyHlFRTQ244.bin", "indicator_type": "url", "source": "URLhaus", "tags": [ "encrypted", "GuLoader", "VIPKeylogger" ], "first_seen": "2026-03-08 07:42:11 UTC", "last_seen": "2026-03-08 07:42:11 UTC", "sightings": 1 }, { "indicator": "https://pub-4c182737706e41d29aee6cc5517f834d.r2.dev/Predy.snp", "indicator_type": "url", "source": "URLhaus", "tags": [ "ascii", "Encoded", "GuLoader", "VIPKeylogger" ], "first_seen": "2026-03-08 07:42:09 UTC", "last_seen": "2026-03-08 07:42:09 UTC", "sightings": 1 }, { "indicator": "https://pub-4c182737706e41d29aee6cc5517f834d.r2.dev/cNTnCsbnyeFt134.bin", "indicator_type": "url", "source": "URLhaus", "tags": [ "encrypted", "GuLoader", "VIPKeylogger" ], "first_seen": "2026-03-08 07:42:07 UTC", "last_seen": "2026-03-08 07:42:07 UTC", "sightings": 1 }, { "indicator": "https://pub-4c182737706e41d29aee6cc5517f834d.r2.dev/Commercialized.hhk", "indicator_type": "url", "source": "URLhaus", "tags": [ "ascii", "GuLoader", "VIPKeylogger" ], "first_seen": "2026-03-08 07:42:07 UTC", "last_seen": "2026-03-08 07:42:07 UTC", "sightings": 1 }, { "indicator": "https://archive.org/download/2ndrumpp/2ndrumpp.png", "indicator_type": "url", "source": "URLhaus", "tags": [ "VIPKeylogger" ], "first_seen": "2026-03-08 07:41:21 UTC", "last_seen": "2026-03-08 07:41:21 UTC", "sightings": 1 }, { "indicator": "https://cocinanikkei.com.pe/img_085256.png", "indicator_type": "url", "source": "URLhaus", "tags": [ "VIPKeylogger" ], "first_seen": "2026-03-08 07:41:16 UTC", "last_seen": "2026-03-08 07:41:16 UTC", "sightings": 1 }, { "indicator": "https://winston.rf.gd/img_141003.png", "indicator_type": "url", "source": "URLhaus", "tags": [ "VIPKeylogger" ], "first_seen": "2026-03-08 07:41:14 UTC", "last_seen": "2026-03-08 07:41:14 UTC", "sightings": 1 }, { "indicator": "https://crypterrrrr.42web.io/img_055742.png", "indicator_type": "url", "source": "URLhaus", "tags": [ "VIPKeylogger" ], "first_seen": "2026-03-08 07:41:09 UTC", "last_seen": "2026-03-08 07:41:09 UTC", "sightings": 1 }, { "indicator": "https://pub-3bc1de741f8149f49bdbafa703067f24.r2.dev/ha3.png", "indicator_type": "url", "source": "URLhaus", "tags": [ "xworm" ], "first_seen": "2026-03-08 07:39:11 UTC", "last_seen": "2026-03-08 07:39:11 UTC", "sightings": 1 }, { "indicator": "https://openlineseguros.com.br/onedrives/img_233123.png", "indicator_type": "url", "source": "URLhaus", "tags": [ "rat", "RemcosRAT" ], "first_seen": "2026-03-08 07:38:13 UTC", "last_seen": "2026-03-08 07:38:13 UTC", "sightings": 1 }, { "indicator": "http://fil.ydns.eu/eurouhyt/dgkirar.txt", "indicator_type": "url", "source": "URLhaus", "tags": [ "ascii", "Encoded", "rat", "RemcosRAT", "rev-base64-loader" ], "first_seen": "2026-03-08 07:38:08 UTC", "last_seen": "2026-03-08 07:38:08 UTC", "sightings": 1 }, { "indicator": "https://sync-gate.modula.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 07:38:08 UTC", "last_seen": "2026-03-08 07:38:08 UTC", "sightings": 1 }, { "indicator": "https://pub-4c182737706e41d29aee6cc5517f834d.r2.dev/img_163200.png", "indicator_type": "url", "source": "URLhaus", "tags": [ "rat", "RemcosRAT" ], "first_seen": "2026-03-08 07:38:07 UTC", "last_seen": "2026-03-08 07:38:07 UTC", "sightings": 1 }, { "indicator": "https://openlineseguros.com.br/onedrives/img_131302.png", "indicator_type": "url", "source": "URLhaus", "tags": [ "xworm" ], "first_seen": "2026-03-08 07:36:11 UTC", "last_seen": "2026-03-08 07:36:11 UTC", "sightings": 1 }, { "indicator": "https://shariels.42web.io/img_210019.png", "indicator_type": "url", "source": "URLhaus", "tags": [ "xworm" ], "first_seen": "2026-03-08 07:36:07 UTC", "last_seen": "2026-03-08 07:36:07 UTC", "sightings": 1 }, { "indicator": "https://openlineseguros.com.br/onedrives/optimized_MSI.png", "indicator_type": "url", "source": "URLhaus", "tags": [ "xworm" ], "first_seen": "2026-03-08 07:35:23 UTC", "last_seen": "2026-03-08 07:35:23 UTC", "sightings": 1 }, { "indicator": "https://ia601409.us.archive.org/19/items/optimized_msi_20260303_1054/optimized_MSI.png", "indicator_type": "url", "source": "URLhaus", "tags": [ "xworm" ], "first_seen": "2026-03-08 07:35:14 UTC", "last_seen": "2026-03-08 07:35:14 UTC", "sightings": 1 }, { "indicator": "https://openlineseguros.com.br/onedrives/img_235532.png", "indicator_type": "url", "source": "URLhaus", "tags": [ "xworm" ], "first_seen": "2026-03-08 07:35:14 UTC", "last_seen": "2026-03-08 07:35:14 UTC", "sightings": 1 }, { "indicator": "https://pub-3bc1de741f8149f49bdbafa703067f24.r2.dev/la3.png", "indicator_type": "url", "source": "URLhaus", "tags": [ "xworm" ], "first_seen": "2026-03-08 07:35:11 UTC", "last_seen": "2026-03-08 07:35:11 UTC", "sightings": 1 }, { "indicator": "https://dl.dropboxusercontent.com/scl/fi/x97ra6bino9olbolx8ha8/optimized_MSI.png?rlkey=ek4gmta3ih6tg3kq3m9su1zsr&st=ao90xecu&dl=0?id=661120a4-f576-4e8f-bc6a-7b48650ac68c", "indicator_type": "url", "source": "URLhaus", "tags": [ "AsyncRAT", "rat" ], "first_seen": "2026-03-08 07:33:13 UTC", "last_seen": "2026-03-08 07:33:13 UTC", "sightings": 1 }, { "indicator": "http://fil.ydns.eu/somgftred/jigcAIp.txt", "indicator_type": "url", "source": "URLhaus", "tags": [ "ascii", "DarkCloud", "Encoded", "rev-base64-loader" ], "first_seen": "2026-03-08 07:33:09 UTC", "last_seen": "2026-03-08 07:33:09 UTC", "sightings": 1 }, { "indicator": "http://36.88.164.210:49733/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-08 07:32:17 UTC", "last_seen": "2026-03-08 07:32:17 UTC", "sightings": 1 }, { "indicator": "http://112.248.160.103:43462/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 07:30:17 UTC", "last_seen": "2026-03-08 07:30:17 UTC", "sightings": 1 }, { "indicator": "http://42.235.38.215:51474/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 07:29:16 UTC", "last_seen": "2026-03-08 07:29:16 UTC", "sightings": 1 }, { "indicator": "http://36.88.164.210:49733/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-08 07:27:12 UTC", "last_seen": "2026-03-08 07:27:12 UTC", "sightings": 1 }, { "indicator": "http://176.106.241.72:54655/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 07:23:18 UTC", "last_seen": "2026-03-08 07:23:18 UTC", "sightings": 1 }, { "indicator": "https://vol-base.volumex.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 07:23:08 UTC", "last_seen": "2026-03-08 07:23:08 UTC", "sightings": 1 }, { "indicator": "http://222.140.183.241:34439/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 07:22:10 UTC", "last_seen": "2026-03-08 07:22:10 UTC", "sightings": 1 }, { "indicator": "https://trace-net.volumex.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 07:20:11 UTC", "last_seen": "2026-03-08 07:20:11 UTC", "sightings": 1 }, { "indicator": "http://212.46.33.16/bins/x86", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-08 07:18:21 UTC", "last_seen": "2026-03-08 07:18:21 UTC", "sightings": 1 }, { "indicator": "http://212.46.33.16/bins/sh4", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-08 07:18:21 UTC", "last_seen": "2026-03-08 07:18:21 UTC", "sightings": 1 }, { "indicator": "http://212.46.33.16/bins/ppc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-08 07:17:16 UTC", "last_seen": "2026-03-08 07:17:16 UTC", "sightings": 1 }, { "indicator": "http://212.46.33.16/bins/arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-08 07:17:16 UTC", "last_seen": "2026-03-08 07:17:16 UTC", "sightings": 1 }, { "indicator": "http://212.46.33.16/bins/arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-08 07:17:16 UTC", "last_seen": "2026-03-08 07:17:16 UTC", "sightings": 1 }, { "indicator": "http://212.46.33.16/bins/arm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-08 07:17:16 UTC", "last_seen": "2026-03-08 07:17:16 UTC", "sightings": 1 }, { "indicator": "http://212.46.33.16/bins/m68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-08 07:17:16 UTC", "last_seen": "2026-03-08 07:17:16 UTC", "sightings": 1 }, { "indicator": "http://212.46.33.16/bins/mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-08 07:17:16 UTC", "last_seen": "2026-03-08 07:17:16 UTC", "sightings": 1 }, { "indicator": "http://175.165.73.110:44759/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 07:13:10 UTC", "last_seen": "2026-03-08 07:13:10 UTC", "sightings": 1 }, { "indicator": "http://112.248.160.103:43462/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 07:11:37 UTC", "last_seen": "2026-03-08 07:11:37 UTC", "sightings": 1 }, { "indicator": "http://42.235.38.215:51474/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 07:09:18 UTC", "last_seen": "2026-03-08 07:09:18 UTC", "sightings": 1 }, { "indicator": "https://vol-v19.volumex.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 07:07:09 UTC", "last_seen": "2026-03-08 07:07:09 UTC", "sightings": 1 }, { "indicator": "http://110.39.228.163:52328/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 07:06:10 UTC", "last_seen": "2026-03-08 07:06:10 UTC", "sightings": 1 }, { "indicator": "https://trace-unit.volumex.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 07:00:09 UTC", "last_seen": "2026-03-08 07:00:09 UTC", "sightings": 1 }, { "indicator": "http://105.225.239.100:60749/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-08 06:58:19 UTC", "last_seen": "2026-03-08 06:58:19 UTC", "sightings": 1 }, { "indicator": "http://222.140.183.241:34439/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 06:58:18 UTC", "last_seen": "2026-03-08 06:58:18 UTC", "sightings": 1 }, { "indicator": "https://axon-ref.axonia.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 06:54:09 UTC", "last_seen": "2026-03-08 06:54:09 UTC", "sightings": 1 }, { "indicator": "http://42.87.121.164:49116/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 06:53:07 UTC", "last_seen": "2026-03-08 06:53:07 UTC", "sightings": 1 }, { "indicator": "http://104.219.237.111:3000/files/bin", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "mirai", "Mozi" ], "first_seen": "2026-03-08 06:52:18 UTC", "last_seen": "2026-03-08 06:52:18 UTC", "sightings": 1 }, { "indicator": "https://download-version.1-45-1.com/claude", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-08 06:52:08 UTC", "last_seen": "2026-03-08 06:52:08 UTC", "sightings": 1 }, { "indicator": "http://112.248.185.73:48461/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 06:51:25 UTC", "last_seen": "2026-03-08 06:51:25 UTC", "sightings": 1 }, { "indicator": "https://main-sync.axonia.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 06:50:10 UTC", "last_seen": "2026-03-08 06:50:10 UTC", "sightings": 1 }, { "indicator": "http://115.54.109.91:37948/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 06:47:16 UTC", "last_seen": "2026-03-08 06:47:16 UTC", "sightings": 1 }, { "indicator": "http://112.248.185.73:48461/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 06:46:20 UTC", "last_seen": "2026-03-08 06:46:20 UTC", "sightings": 1 }, { "indicator": "http://110.39.228.163:52328/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 06:37:16 UTC", "last_seen": "2026-03-08 06:37:16 UTC", "sightings": 1 }, { "indicator": "http://112.253.99.65:50085/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 06:32:41 UTC", "last_seen": "2026-03-08 06:32:41 UTC", "sightings": 1 }, { "indicator": "http://112.253.99.65:50085/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 06:32:31 UTC", "last_seen": "2026-03-08 06:32:31 UTC", "sightings": 1 }, { "indicator": "https://axon-v2.axonia.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 06:28:12 UTC", "last_seen": "2026-03-08 06:28:12 UTC", "sightings": 1 }, { "indicator": "http://58.255.45.116:52268/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 06:20:20 UTC", "last_seen": "2026-03-08 06:20:20 UTC", "sightings": 1 }, { "indicator": "http://112.242.57.144:54355/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 06:14:13 UTC", "last_seen": "2026-03-08 06:14:13 UTC", "sightings": 1 }, { "indicator": "https://main-way.axonia.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 06:13:08 UTC", "last_seen": "2026-03-08 06:13:08 UTC", "sightings": 1 }, { "indicator": "http://42.227.204.96:56212/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 06:11:13 UTC", "last_seen": "2026-03-08 06:11:13 UTC", "sightings": 1 }, { "indicator": "http://116.248.130.71:47368/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-08 06:05:17 UTC", "last_seen": "2026-03-08 06:05:17 UTC", "sightings": 1 }, { "indicator": "http://110.39.229.188:41094/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 06:04:11 UTC", "last_seen": "2026-03-08 06:04:11 UTC", "sightings": 1 }, { "indicator": "http://112.242.57.144:54355/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 06:02:29 UTC", "last_seen": "2026-03-08 06:02:29 UTC", "sightings": 1 }, { "indicator": "http://110.36.1.80:60069/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 06:01:08 UTC", "last_seen": "2026-03-08 06:01:08 UTC", "sightings": 1 }, { "indicator": "http://110.36.1.80:60069/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 06:00:17 UTC", "last_seen": "2026-03-08 06:00:17 UTC", "sightings": 1 }, { "indicator": "http://219.157.64.60:51110/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 05:59:08 UTC", "last_seen": "2026-03-08 05:59:08 UTC", "sightings": 1 }, { "indicator": "https://kine-flow.kinetica.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 05:55:08 UTC", "last_seen": "2026-03-08 05:55:08 UTC", "sightings": 1 }, { "indicator": "http://58.255.45.116:52268/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 05:54:16 UTC", "last_seen": "2026-03-08 05:54:16 UTC", "sightings": 1 }, { "indicator": "http://42.227.204.96:56212/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 05:47:08 UTC", "last_seen": "2026-03-08 05:47:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/ziznem3269/NullHooks/raw/refs/heads/main/src/dependencies/utilities/console/Null_Hooks_1.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-08 05:44:09 UTC", "last_seen": "2026-03-08 05:44:09 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/ziznem3269/NullHooks/refs/heads/main/src/dependencies/utilities/console/Null_Hooks_1.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-08 05:44:06 UTC", "last_seen": "2026-03-08 05:44:06 UTC", "sightings": 1 }, { "indicator": "http://182.117.11.173:52798/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 05:42:12 UTC", "last_seen": "2026-03-08 05:42:12 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Tien18020/fullyexternal-cs2/main/questorial/cs_fullyexternal_2.9-alpha.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-08 05:40:12 UTC", "last_seen": "2026-03-08 05:40:12 UTC", "sightings": 1 }, { "indicator": "https://github.com/Tien18020/fullyexternal-cs2/raw/refs/heads/main/questorial/cs_fullyexternal_2.9-alpha.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-08 05:40:11 UTC", "last_seen": "2026-03-08 05:40:11 UTC", "sightings": 1 }, { "indicator": "http://110.39.229.188:41094/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 05:39:15 UTC", "last_seen": "2026-03-08 05:39:15 UTC", "sightings": 1 }, { "indicator": "http://116.248.130.71:47368/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-08 05:37:24 UTC", "last_seen": "2026-03-08 05:37:24 UTC", "sightings": 1 }, { "indicator": "http://115.51.37.181:49056/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 05:35:15 UTC", "last_seen": "2026-03-08 05:35:15 UTC", "sightings": 1 }, { "indicator": "http://115.55.245.242:42714/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 05:31:15 UTC", "last_seen": "2026-03-08 05:31:15 UTC", "sightings": 1 }, { "indicator": "http://61.3.19.21:49203/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 05:24:19 UTC", "last_seen": "2026-03-08 05:24:19 UTC", "sightings": 1 }, { "indicator": "https://github.com/FiberWeaverAssess/CS2-Cheat-2026-External/releases/download/new/External-2.5.1-win64.rar", "indicator_type": "url", "source": "URLhaus", "tags": [ "pw-cs2026", "rar" ], "first_seen": "2026-03-08 05:24:19 UTC", "last_seen": "2026-03-08 05:24:19 UTC", "sightings": 1 }, { "indicator": "https://sub-net.kinetica.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 05:24:07 UTC", "last_seen": "2026-03-08 05:24:07 UTC", "sightings": 1 }, { "indicator": "http://27.37.105.143:39162/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 05:20:17 UTC", "last_seen": "2026-03-08 05:20:17 UTC", "sightings": 1 }, { "indicator": "http://115.51.37.181:49056/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 05:19:12 UTC", "last_seen": "2026-03-08 05:19:12 UTC", "sightings": 1 }, { "indicator": "http://112.242.135.226:55320/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 05:16:15 UTC", "last_seen": "2026-03-08 05:16:15 UTC", "sightings": 1 }, { "indicator": "https://kine-v07.kinetica.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 05:16:06 UTC", "last_seen": "2026-03-08 05:16:06 UTC", "sightings": 1 }, { "indicator": "http://27.37.105.143:39162/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 05:15:09 UTC", "last_seen": "2026-03-08 05:15:09 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Bond004/Mutah-Gambling-Script-Hack-Cheat-Predictor-Strategies-Keydrop-csmoney-csgoskins/refs/heads/main/biceps/Hack_Predictor_Script_Keydrop_csmoney_csgoskins_Gambling_Strategies_Mutah_Cheat_3.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-08 05:15:08 UTC", "last_seen": "2026-03-08 05:15:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/Bond004/Mutah-Gambling-Script-Hack-Cheat-Predictor-Strategies-Keydrop-csmoney-csgoskins/raw/refs/heads/main/biceps/Hack_Predictor_Script_Keydrop_csmoney_csgoskins_Gambling_Strategies_Mutah_Cheat_3.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-08 05:15:08 UTC", "last_seen": "2026-03-08 05:15:08 UTC", "sightings": 1 }, { "indicator": "http://182.117.11.173:52798/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 05:13:16 UTC", "last_seen": "2026-03-08 05:13:16 UTC", "sightings": 1 }, { "indicator": "https://github.com/lezer10/cheatcode/raw/refs/heads/main/frontend/src/hooks/react-query/threads/Software_2.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-08 05:08:09 UTC", "last_seen": "2026-03-08 05:08:09 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/lezer10/cheatcode/refs/heads/main/frontend/src/hooks/react-query/threads/Software_2.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-08 05:08:07 UTC", "last_seen": "2026-03-08 05:08:07 UTC", "sightings": 1 }, { "indicator": "http://222.133.100.187:40255/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 05:07:12 UTC", "last_seen": "2026-03-08 05:07:12 UTC", "sightings": 1 }, { "indicator": "https://github.com/UMARi4u2get-cmd/encoder/raw/refs/heads/main/include/encoder1.txt", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader" ], "first_seen": "2026-03-08 05:06:07 UTC", "last_seen": "2026-03-08 05:06:07 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/UMARi4u2get-cmd/encoder/refs/heads/main/include/encoder1.txt", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader" ], "first_seen": "2026-03-08 05:06:07 UTC", "last_seen": "2026-03-08 05:06:07 UTC", "sightings": 1 }, { "indicator": "https://github.com/YelitzaMarcano79/DOOMQL/raw/refs/heads/main/data/Software_3.8-beta.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-08 05:04:08 UTC", "last_seen": "2026-03-08 05:04:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/YelitzaMarcano79/DOOMQL/main/data/Software_3.8-beta.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-08 05:04:07 UTC", "last_seen": "2026-03-08 05:04:07 UTC", "sightings": 1 }, { "indicator": "https://sub-node.kinetica.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 05:02:07 UTC", "last_seen": "2026-03-08 05:02:07 UTC", "sightings": 1 }, { "indicator": "https://tens-base.tensora.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 04:52:08 UTC", "last_seen": "2026-03-08 04:52:08 UTC", "sightings": 1 }, { "indicator": "http://112.242.135.226:55320/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 04:51:31 UTC", "last_seen": "2026-03-08 04:51:31 UTC", "sightings": 1 }, { "indicator": "http://123.190.226.13:44961/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 04:51:16 UTC", "last_seen": "2026-03-08 04:51:16 UTC", "sightings": 1 }, { "indicator": "http://116.138.30.151:50438/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 04:50:16 UTC", "last_seen": "2026-03-08 04:50:16 UTC", "sightings": 1 }, { "indicator": "http://103.160.130.104:33201/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 04:48:17 UTC", "last_seen": "2026-03-08 04:48:17 UTC", "sightings": 1 }, { "indicator": "https://ext-sync.tensora.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 04:45:10 UTC", "last_seen": "2026-03-08 04:45:10 UTC", "sightings": 1 }, { "indicator": "http://110.37.87.233:38485/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-08 04:43:07 UTC", "last_seen": "2026-03-08 04:43:07 UTC", "sightings": 1 }, { "indicator": "http://36.64.184.26:44613/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-08 04:40:17 UTC", "last_seen": "2026-03-08 04:40:17 UTC", "sightings": 1 }, { "indicator": "https://tens-v11.tensora.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 04:36:08 UTC", "last_seen": "2026-03-08 04:36:08 UTC", "sightings": 1 }, { "indicator": "http://59.94.188.121:46459/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 04:32:15 UTC", "last_seen": "2026-03-08 04:32:15 UTC", "sightings": 1 }, { "indicator": "http://113.58.39.250:40359/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-08 04:32:14 UTC", "last_seen": "2026-03-08 04:32:14 UTC", "sightings": 1 }, { "indicator": "https://ext-vault.tensora.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 04:25:09 UTC", "last_seen": "2026-03-08 04:25:09 UTC", "sightings": 1 }, { "indicator": "http://180.190.185.44:46347/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-08 04:23:17 UTC", "last_seen": "2026-03-08 04:23:17 UTC", "sightings": 1 }, { "indicator": "http://103.160.130.104:33201/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 04:23:15 UTC", "last_seen": "2026-03-08 04:23:15 UTC", "sightings": 1 }, { "indicator": "http://116.138.30.151:50438/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 04:22:16 UTC", "last_seen": "2026-03-08 04:22:16 UTC", "sightings": 1 }, { "indicator": "http://36.64.184.26:44613/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-08 04:21:13 UTC", "last_seen": "2026-03-08 04:21:13 UTC", "sightings": 1 }, { "indicator": "https://frac-run.fractalis.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 04:17:05 UTC", "last_seen": "2026-03-08 04:17:05 UTC", "sightings": 1 }, { "indicator": "http://123.7.223.5:42295/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 04:10:13 UTC", "last_seen": "2026-03-08 04:10:13 UTC", "sightings": 1 }, { "indicator": "http://118.34.109.121:59231/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 04:06:16 UTC", "last_seen": "2026-03-08 04:06:16 UTC", "sightings": 1 }, { "indicator": "http://123.8.130.177:41066/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 04:06:14 UTC", "last_seen": "2026-03-08 04:06:14 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/MasSareh/PokePath-Cheat/refs/heads/MasSareh/unhazarding/Cheat-Path-Poke-2.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-08 04:06:08 UTC", "last_seen": "2026-03-08 04:06:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/sartakayy/cardian/refs/heads/main/docs/Software-2.0.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-08 04:06:07 UTC", "last_seen": "2026-03-08 04:06:07 UTC", "sightings": 1 }, { "indicator": "https://github.com/sartakayy/cardian/raw/refs/heads/main/docs/Software-2.0.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-08 04:06:07 UTC", "last_seen": "2026-03-08 04:06:07 UTC", "sightings": 1 }, { "indicator": "https://github.com/MasSareh/PokePath-Cheat/raw/refs/heads/MasSareh/unhazarding/Cheat-Path-Poke-2.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-08 04:06:07 UTC", "last_seen": "2026-03-08 04:06:07 UTC", "sightings": 1 }, { "indicator": "http://182.126.118.136:45368/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 04:04:07 UTC", "last_seen": "2026-03-08 04:04:07 UTC", "sightings": 1 }, { "indicator": "http://123.129.128.33:53561/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 04:03:07 UTC", "last_seen": "2026-03-08 04:03:07 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Abbashussain5/Hacking-Cheatsheets/refs/heads/main/Responder/Cheatsheets_Hacking_3.4.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-08 03:59:06 UTC", "last_seen": "2026-03-08 03:59:06 UTC", "sightings": 1 }, { "indicator": "https://github.com/Abbashussain5/Hacking-Cheatsheets/raw/refs/heads/main/Responder/Cheatsheets_Hacking_3.4.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-08 03:59:06 UTC", "last_seen": "2026-03-08 03:59:06 UTC", "sightings": 1 }, { "indicator": "https://github.com/m25s5/Chibi-Clash-Crypto-Bot-Crypto-Game-Auto-Farm-Clicker-Cheat-Token-Hack-Api/raw/refs/heads/main/Chibi-Clash-Exp/ChibiApp/Hack_Auto_Clicker_Chibi_Crypto_Cheat_Clash_Token_Game_Bot_Farm_Api_v1.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-08 03:55:09 UTC", "last_seen": "2026-03-08 03:55:09 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/m25s5/Chibi-Clash-Crypto-Bot-Crypto-Game-Auto-Farm-Clicker-Cheat-Token-Hack-Api/refs/heads/main/Chibi-Clash-Exp/ChibiApp/Hack_Auto_Clicker_Chibi_Crypto_Cheat_Clash_Token_Game_Bot_Farm_Api_v1.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-08 03:55:08 UTC", "last_seen": "2026-03-08 03:55:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/jesusmiguelito/DungeonRampageCheat/raw/refs/heads/master/screenshots/Dungeon_Rampage_Cheat_1.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-08 03:54:10 UTC", "last_seen": "2026-03-08 03:54:10 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/jesusmiguelito/DungeonRampageCheat/refs/heads/master/screenshots/Dungeon_Rampage_Cheat_1.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-08 03:54:08 UTC", "last_seen": "2026-03-08 03:54:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/AkashAdhikari01/StomCheat/raw/refs/heads/main/stomcheat/src/main/java/me/athulsib/stomcheat/extension/Cheat-Stom-v1.5-beta.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-08 03:53:07 UTC", "last_seen": "2026-03-08 03:53:07 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/AkashAdhikari01/StomCheat/refs/heads/main/stomcheat/src/main/java/me/athulsib/stomcheat/extension/Cheat-Stom-v1.5-beta.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-08 03:53:06 UTC", "last_seen": "2026-03-08 03:53:06 UTC", "sightings": 1 }, { "indicator": "http://61.53.90.148:48234/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 03:52:08 UTC", "last_seen": "2026-03-08 03:52:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/yenohjio/teach-JavaScript/refs/heads/main/tanistry/Java-Script-teach-v3.9.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-08 03:52:07 UTC", "last_seen": "2026-03-08 03:52:07 UTC", "sightings": 1 }, { "indicator": "https://github.com/yenohjio/teach-JavaScript/raw/refs/heads/main/tanistry/Java-Script-teach-v3.9.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-08 03:52:07 UTC", "last_seen": "2026-03-08 03:52:07 UTC", "sightings": 1 }, { "indicator": "https://github.com/I-Krushna/typingmonkey/raw/refs/heads/main/assets/Software-1.4.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-08 03:50:08 UTC", "last_seen": "2026-03-08 03:50:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/I-Krushna/typingmonkey/refs/heads/main/assets/Software-1.4.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-08 03:50:07 UTC", "last_seen": "2026-03-08 03:50:07 UTC", "sightings": 1 }, { "indicator": "https://github.com/ryanpheonix09/Cosmo-Legacy/raw/refs/heads/main/Arctostaphylos/Cosmo-Legacy-2.0-alpha.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-08 03:48:09 UTC", "last_seen": "2026-03-08 03:48:09 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/ryanpheonix09/Cosmo-Legacy/refs/heads/main/Arctostaphylos/Cosmo-Legacy-2.0-alpha.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-08 03:48:07 UTC", "last_seen": "2026-03-08 03:48:07 UTC", "sightings": 1 }, { "indicator": "https://github.com/kripansh2006/WaryasSWHE/raw/refs/heads/main/variant/Waryas-SWHE-v2.0-beta.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-08 03:46:12 UTC", "last_seen": "2026-03-08 03:46:12 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/kripansh2006/WaryasSWHE/refs/heads/main/variant/Waryas-SWHE-v2.0-beta.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-08 03:46:12 UTC", "last_seen": "2026-03-08 03:46:12 UTC", "sightings": 1 }, { "indicator": "http://182.126.118.136:45368/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 03:45:15 UTC", "last_seen": "2026-03-08 03:45:15 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/moelekkkk/Pandas_Notes/main/mainlander/Pandas-Notes-v2.0.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-08 03:43:07 UTC", "last_seen": "2026-03-08 03:43:07 UTC", "sightings": 1 }, { "indicator": "https://github.com/moelekkkk/Pandas_Notes/raw/refs/heads/main/mainlander/Pandas-Notes-v2.0.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-08 03:43:07 UTC", "last_seen": "2026-03-08 03:43:07 UTC", "sightings": 1 }, { "indicator": "http://118.34.109.121:59231/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 03:42:16 UTC", "last_seen": "2026-03-08 03:42:16 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Coker10/Apeiron-Nft-Bot-Crypto-Cheat-Auto-Farm-Clicker-Game-Api-Hack/refs/heads/main/.vs/Apeiron-Nft-Bot/FileContentIndex/Farm-Bot-Clicker-Crypto-Cheat-Nft-Apeiron-Auto-Game-Api-Hack-v2.1-alpha.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-08 03:41:10 UTC", "last_seen": "2026-03-08 03:41:10 UTC", "sightings": 1 }, { "indicator": "https://github.com/Coker10/Apeiron-Nft-Bot-Crypto-Cheat-Auto-Farm-Clicker-Game-Api-Hack/raw/refs/heads/main/.vs/Apeiron-Nft-Bot/FileContentIndex/Farm-Bot-Clicker-Crypto-Cheat-Nft-Apeiron-Auto-Game-Api-Hack-v2.1-alpha.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-08 03:41:06 UTC", "last_seen": "2026-03-08 03:41:06 UTC", "sightings": 1 }, { "indicator": "http://182.116.115.171:35910/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 03:39:08 UTC", "last_seen": "2026-03-08 03:39:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/elroxu/Qorpo-World-Crypto-Bot-Crypto-Game-Auto-Farm-Clicker-Cheat-Token-Hack-Api/raw/refs/heads/main/.vs/Qorpo.World-Robot/Game-Cheat-Token-World-Crypto-Bot-Auto-Clicker-Qorpo-Hack-Farm-Api-v1.0.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-08 03:38:09 UTC", "last_seen": "2026-03-08 03:38:09 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/elroxu/Qorpo-World-Crypto-Bot-Crypto-Game-Auto-Farm-Clicker-Cheat-Token-Hack-Api/main/.vs/Qorpo.World-Robot/Game-Cheat-Token-World-Crypto-Bot-Auto-Clicker-Qorpo-Hack-Farm-Api-v1.0.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-08 03:38:08 UTC", "last_seen": "2026-03-08 03:38:08 UTC", "sightings": 1 }, { "indicator": "http://58.140.18.85:34491/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-08 03:37:16 UTC", "last_seen": "2026-03-08 03:37:16 UTC", "sightings": 1 }, { "indicator": "http://36.68.41.160:50106/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-08 03:36:46 UTC", "last_seen": "2026-03-08 03:36:46 UTC", "sightings": 1 }, { "indicator": "http://123.129.128.33:53561/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 03:36:24 UTC", "last_seen": "2026-03-08 03:36:24 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Toroto753/Turan-Gambling-Script-Hack-Cheat-Predictor-Strategies-Keydrop-Skinbaron-hellcase/refs/heads/main/LeapAI.Net/obj/hellcase_Script_Hack_Skinbaron_Gambling_Cheat_Keydrop_Predictor_Turan_Strategies_2.6.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-08 03:35:11 UTC", "last_seen": "2026-03-08 03:35:11 UTC", "sightings": 1 }, { "indicator": "https://github.com/Toroto753/Turan-Gambling-Script-Hack-Cheat-Predictor-Strategies-Keydrop-Skinbaron-hellcase/raw/refs/heads/main/LeapAI.Net/obj/hellcase_Script_Hack_Skinbaron_Gambling_Cheat_Keydrop_Predictor_Turan_Strategies_2.6.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-08 03:35:11 UTC", "last_seen": "2026-03-08 03:35:11 UTC", "sightings": 1 }, { "indicator": "https://dist-hub.fractalis.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 03:31:08 UTC", "last_seen": "2026-03-08 03:31:08 UTC", "sightings": 1 }, { "indicator": "http://58.140.18.85:34491/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-08 03:24:10 UTC", "last_seen": "2026-03-08 03:24:10 UTC", "sightings": 1 }, { "indicator": "http://61.53.90.148:48234/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 03:22:11 UTC", "last_seen": "2026-03-08 03:22:11 UTC", "sightings": 1 }, { "indicator": "https://github.com/albeiroval/Wild-Forest-Crypto-Bot-Crypto-Game-Auto-Farm-Clicker-Cheat-Token-Hack-Api/raw/refs/heads/main/sideboard/Bot-Crypto-Farm-Auto-Clicker-Game-Api-Token-Wild-Forest-Hack-Cheat-3.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-08 03:21:08 UTC", "last_seen": "2026-03-08 03:21:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/albeiroval/Wild-Forest-Crypto-Bot-Crypto-Game-Auto-Farm-Clicker-Cheat-Token-Hack-Api/refs/heads/main/sideboard/Bot-Crypto-Farm-Auto-Clicker-Game-Api-Token-Wild-Forest-Hack-Cheat-3.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-08 03:21:08 UTC", "last_seen": "2026-03-08 03:21:08 UTC", "sightings": 1 }, { "indicator": "https://frac-v08.fractalis.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 03:21:07 UTC", "last_seen": "2026-03-08 03:21:07 UTC", "sightings": 1 }, { "indicator": "http://123.179.232.206:46176/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-08 03:18:10 UTC", "last_seen": "2026-03-08 03:18:10 UTC", "sightings": 1 }, { "indicator": "http://123.4.193.53:39795/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 03:17:16 UTC", "last_seen": "2026-03-08 03:17:16 UTC", "sightings": 1 }, { "indicator": "https://github.com/iYagamiGTPS4/nginx-cheatsheet/raw/refs/heads/main/Advanced/cheatsheet-nginx-v1.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-08 03:14:07 UTC", "last_seen": "2026-03-08 03:14:07 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/iYagamiGTPS4/nginx-cheatsheet/main/Advanced/cheatsheet-nginx-v1.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-08 03:14:06 UTC", "last_seen": "2026-03-08 03:14:06 UTC", "sightings": 1 }, { "indicator": "http://115.59.57.156:39750/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 03:11:08 UTC", "last_seen": "2026-03-08 03:11:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/gokulakrishnan611/docker-cheatsheet/refs/heads/main/undercrest/cheatsheet-docker-1.4-beta.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-08 03:11:07 UTC", "last_seen": "2026-03-08 03:11:07 UTC", "sightings": 1 }, { "indicator": "https://github.com/gokulakrishnan611/docker-cheatsheet/raw/refs/heads/main/undercrest/cheatsheet-docker-1.4-beta.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-08 03:11:07 UTC", "last_seen": "2026-03-08 03:11:07 UTC", "sightings": 1 }, { "indicator": "http://36.68.41.160:50106/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-08 03:08:36 UTC", "last_seen": "2026-03-08 03:08:36 UTC", "sightings": 1 }, { "indicator": "https://github.com/selwanhasnaoui-max/Valorant-Plus-Cheat/raw/refs/heads/main/Valorant%20Plus/drectx/Valorant-Cheat-Plus-2.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-08 03:06:08 UTC", "last_seen": "2026-03-08 03:06:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/selwanhasnaoui-max/Valorant-Plus-Cheat/refs/heads/main/Valorant%20Plus/drectx/Valorant-Cheat-Plus-2.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-08 03:06:07 UTC", "last_seen": "2026-03-08 03:06:07 UTC", "sightings": 1 }, { "indicator": "https://dist-core.fractalis.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 03:04:08 UTC", "last_seen": "2026-03-08 03:04:08 UTC", "sightings": 1 }, { "indicator": "http://110.39.235.153:42694/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 03:02:11 UTC", "last_seen": "2026-03-08 03:02:11 UTC", "sightings": 1 }, { "indicator": "https://stab-core.stabulis.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 03:02:07 UTC", "last_seen": "2026-03-08 03:02:07 UTC", "sightings": 1 }, { "indicator": "http://124.131.187.176:36079/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 03:01:09 UTC", "last_seen": "2026-03-08 03:01:09 UTC", "sightings": 1 }, { "indicator": "http://123.179.232.206:46176/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-08 02:58:17 UTC", "last_seen": "2026-03-08 02:58:17 UTC", "sightings": 1 }, { "indicator": "http://110.36.80.169:45094/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 02:53:16 UTC", "last_seen": "2026-03-08 02:53:16 UTC", "sightings": 1 }, { "indicator": "http://110.37.67.175:54723/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 02:53:16 UTC", "last_seen": "2026-03-08 02:53:16 UTC", "sightings": 1 }, { "indicator": "https://fix-point.stabulis.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 02:50:09 UTC", "last_seen": "2026-03-08 02:50:09 UTC", "sightings": 1 }, { "indicator": "http://182.241.136.21:38439/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-08 02:47:14 UTC", "last_seen": "2026-03-08 02:47:14 UTC", "sightings": 1 }, { "indicator": "http://110.36.93.182:57821/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 02:39:18 UTC", "last_seen": "2026-03-08 02:39:18 UTC", "sightings": 1 }, { "indicator": "http://112.248.162.44:39960/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 02:39:18 UTC", "last_seen": "2026-03-08 02:39:18 UTC", "sightings": 1 }, { "indicator": "http://110.36.80.169:45094/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 02:37:12 UTC", "last_seen": "2026-03-08 02:37:12 UTC", "sightings": 1 }, { "indicator": "http://110.39.235.153:42694/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 02:36:17 UTC", "last_seen": "2026-03-08 02:36:17 UTC", "sightings": 1 }, { "indicator": "http://124.131.187.176:36079/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 02:35:21 UTC", "last_seen": "2026-03-08 02:35:21 UTC", "sightings": 1 }, { "indicator": "http://110.39.226.175:45825/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 02:29:09 UTC", "last_seen": "2026-03-08 02:29:09 UTC", "sightings": 1 }, { "indicator": "http://158.94.211.162/2", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-Phorpiex" ], "first_seen": "2026-03-08 02:29:05 UTC", "last_seen": "2026-03-08 02:29:05 UTC", "sightings": 1 }, { "indicator": "http://175.32.84.103:49219/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 02:28:15 UTC", "last_seen": "2026-03-08 02:28:15 UTC", "sightings": 1 }, { "indicator": "http://110.37.67.175:54723/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 02:28:14 UTC", "last_seen": "2026-03-08 02:28:14 UTC", "sightings": 1 }, { "indicator": "https://stab-v33.stabulis.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 02:24:07 UTC", "last_seen": "2026-03-08 02:24:07 UTC", "sightings": 1 }, { "indicator": "http://175.32.84.103:49219/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 02:22:20 UTC", "last_seen": "2026-03-08 02:22:20 UTC", "sightings": 1 }, { "indicator": "http://110.36.93.182:57821/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 02:22:20 UTC", "last_seen": "2026-03-08 02:22:20 UTC", "sightings": 1 }, { "indicator": "http://125.45.54.35:46714/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 02:20:12 UTC", "last_seen": "2026-03-08 02:20:12 UTC", "sightings": 1 }, { "indicator": "http://158.94.211.222/files/8437455245/ByDG8Kl.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543", "SalatStealer" ], "first_seen": "2026-03-08 02:03:07 UTC", "last_seen": "2026-03-08 02:03:07 UTC", "sightings": 1 }, { "indicator": "http://187.86.111.111:45555/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-08 01:54:14 UTC", "last_seen": "2026-03-08 01:54:14 UTC", "sightings": 1 }, { "indicator": "https://quan-sys.quantoris.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 01:54:06 UTC", "last_seen": "2026-03-08 01:54:06 UTC", "sightings": 1 }, { "indicator": "https://gen-flow.quantoris.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 01:50:07 UTC", "last_seen": "2026-03-08 01:50:07 UTC", "sightings": 1 }, { "indicator": "http://219.156.0.226:37277/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 01:46:16 UTC", "last_seen": "2026-03-08 01:46:16 UTC", "sightings": 1 }, { "indicator": "http://196.190.1.39:55330/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-08 01:39:07 UTC", "last_seen": "2026-03-08 01:39:07 UTC", "sightings": 1 }, { "indicator": "https://quan-v5.quantoris.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 01:38:07 UTC", "last_seen": "2026-03-08 01:38:07 UTC", "sightings": 1 }, { "indicator": "http://182.126.93.65:48715/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 01:35:13 UTC", "last_seen": "2026-03-08 01:35:13 UTC", "sightings": 1 }, { "indicator": "https://gen-unit.quantoris.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 01:35:07 UTC", "last_seen": "2026-03-08 01:35:07 UTC", "sightings": 1 }, { "indicator": "https://nimb-net.nimbura.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 01:31:08 UTC", "last_seen": "2026-03-08 01:31:08 UTC", "sightings": 1 }, { "indicator": "http://59.94.71.66:49486/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 01:29:15 UTC", "last_seen": "2026-03-08 01:29:15 UTC", "sightings": 1 }, { "indicator": "http://219.156.0.226:37277/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 01:27:11 UTC", "last_seen": "2026-03-08 01:27:11 UTC", "sightings": 1 }, { "indicator": "https://alt-logic.nimbura.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 01:18:07 UTC", "last_seen": "2026-03-08 01:18:07 UTC", "sightings": 1 }, { "indicator": "http://182.126.93.65:48715/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 01:10:16 UTC", "last_seen": "2026-03-08 01:10:16 UTC", "sightings": 1 }, { "indicator": "https://nimb-v02.nimbura.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 01:09:07 UTC", "last_seen": "2026-03-08 01:09:07 UTC", "sightings": 1 }, { "indicator": "https://alt-base.nimbura.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 01:03:08 UTC", "last_seen": "2026-03-08 01:03:08 UTC", "sightings": 1 }, { "indicator": "http://59.94.71.66:49486/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 01:02:16 UTC", "last_seen": "2026-03-08 01:02:16 UTC", "sightings": 1 }, { "indicator": "http://110.38.215.247:49502/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 01:00:16 UTC", "last_seen": "2026-03-08 01:00:16 UTC", "sightings": 1 }, { "indicator": "http://219.156.34.8:49455/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 00:57:09 UTC", "last_seen": "2026-03-08 00:57:09 UTC", "sightings": 1 }, { "indicator": "http://61.176.24.11:36571/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 00:56:08 UTC", "last_seen": "2026-03-08 00:56:08 UTC", "sightings": 1 }, { "indicator": "https://vort-data.vortexis.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 00:56:07 UTC", "last_seen": "2026-03-08 00:56:07 UTC", "sightings": 1 }, { "indicator": "https://prim-v14.vortexis.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 00:53:10 UTC", "last_seen": "2026-03-08 00:53:10 UTC", "sightings": 1 }, { "indicator": "http://110.36.29.40:33819/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 00:39:11 UTC", "last_seen": "2026-03-08 00:39:11 UTC", "sightings": 1 }, { "indicator": "https://vort-node.vortexis.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 00:38:07 UTC", "last_seen": "2026-03-08 00:38:07 UTC", "sightings": 1 }, { "indicator": "http://219.156.34.8:49455/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 00:37:16 UTC", "last_seen": "2026-03-08 00:37:16 UTC", "sightings": 1 }, { "indicator": "http://83.228.109.209:45938/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 00:36:16 UTC", "last_seen": "2026-03-08 00:36:16 UTC", "sightings": 1 }, { "indicator": "http://110.38.215.247:49502/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 00:33:17 UTC", "last_seen": "2026-03-08 00:33:17 UTC", "sightings": 1 }, { "indicator": "http://115.48.51.95:41801/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 00:29:14 UTC", "last_seen": "2026-03-08 00:29:14 UTC", "sightings": 1 }, { "indicator": "http://119.115.144.158:43028/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 00:26:13 UTC", "last_seen": "2026-03-08 00:26:13 UTC", "sightings": 1 }, { "indicator": "http://187.86.111.111:45555/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-08 00:25:25 UTC", "last_seen": "2026-03-08 00:25:25 UTC", "sightings": 1 }, { "indicator": "https://prim-sync.vortexis.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 00:24:06 UTC", "last_seen": "2026-03-08 00:24:06 UTC", "sightings": 1 }, { "indicator": "https://pgubdbmp.austeritymorg.digital/?=check&&actmn=YjFdVRNSzYRhjBug", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-08 00:18:07 UTC", "last_seen": "2026-03-08 00:18:07 UTC", "sightings": 1 }, { "indicator": "http://83.228.109.209:45938/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-08 00:11:11 UTC", "last_seen": "2026-03-08 00:11:11 UTC", "sightings": 1 }, { "indicator": "https://shad-net.shadowcreek.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 00:07:07 UTC", "last_seen": "2026-03-08 00:07:07 UTC", "sightings": 1 }, { "indicator": "http://173.28.103.46:46253/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-08 00:03:14 UTC", "last_seen": "2026-03-08 00:03:14 UTC", "sightings": 1 }, { "indicator": "https://creek-base.shadowcreek.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-08 00:02:09 UTC", "last_seen": "2026-03-08 00:02:09 UTC", "sightings": 1 }, { "indicator": "http://117.198.14.69:34893/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 23:59:09 UTC", "last_seen": "2026-03-07 23:59:09 UTC", "sightings": 1 }, { "indicator": "http://115.49.194.249:41566/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 23:59:09 UTC", "last_seen": "2026-03-07 23:59:09 UTC", "sightings": 1 }, { "indicator": "http://173.28.103.46:46253/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-07 23:56:17 UTC", "last_seen": "2026-03-07 23:56:17 UTC", "sightings": 1 }, { "indicator": "https://shad-v11.shadowcreek.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-07 23:56:07 UTC", "last_seen": "2026-03-07 23:56:07 UTC", "sightings": 1 }, { "indicator": "https://creek-ref.shadowcreek.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-07 23:50:08 UTC", "last_seen": "2026-03-07 23:50:08 UTC", "sightings": 1 }, { "indicator": "http://115.49.194.249:41566/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 23:47:08 UTC", "last_seen": "2026-03-07 23:47:08 UTC", "sightings": 1 }, { "indicator": "https://cop-unit.copperhill.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-07 23:46:07 UTC", "last_seen": "2026-03-07 23:46:07 UTC", "sightings": 1 }, { "indicator": "https://hill-gate.copperhill.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-07 23:40:08 UTC", "last_seen": "2026-03-07 23:40:08 UTC", "sightings": 1 }, { "indicator": "http://39.187.82.254:33769/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 23:38:22 UTC", "last_seen": "2026-03-07 23:38:22 UTC", "sightings": 1 }, { "indicator": "http://123.4.1.7:36760/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 23:34:09 UTC", "last_seen": "2026-03-07 23:34:09 UTC", "sightings": 1 }, { "indicator": "https://cop-v09.copperhill.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-07 23:33:09 UTC", "last_seen": "2026-03-07 23:33:09 UTC", "sightings": 1 }, { "indicator": "http://117.198.14.69:34893/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 23:31:11 UTC", "last_seen": "2026-03-07 23:31:11 UTC", "sightings": 1 }, { "indicator": "http://39.187.82.254:33769/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 23:24:12 UTC", "last_seen": "2026-03-07 23:24:12 UTC", "sightings": 1 }, { "indicator": "https://hill-logic.copperhill.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-07 23:23:09 UTC", "last_seen": "2026-03-07 23:23:09 UTC", "sightings": 1 }, { "indicator": "https://mead-flow.meadowbrook.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-07 23:20:08 UTC", "last_seen": "2026-03-07 23:20:08 UTC", "sightings": 1 }, { "indicator": "http://182.114.252.207:42146/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 23:18:12 UTC", "last_seen": "2026-03-07 23:18:12 UTC", "sightings": 1 }, { "indicator": "http://42.227.178.238:51839/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 23:15:16 UTC", "last_seen": "2026-03-07 23:15:16 UTC", "sightings": 1 }, { "indicator": "http://158.94.211.222/files/909884829/5YsbmtO.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "connectwise", "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-07 23:15:11 UTC", "last_seen": "2026-03-07 23:15:11 UTC", "sightings": 1 }, { "indicator": "http://182.114.252.207:42146/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 23:12:07 UTC", "last_seen": "2026-03-07 23:12:07 UTC", "sightings": 1 }, { "indicator": "https://brook-sync.meadowbrook.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-07 23:10:06 UTC", "last_seen": "2026-03-07 23:10:06 UTC", "sightings": 1 }, { "indicator": "http://42.228.102.42:39473/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 23:05:17 UTC", "last_seen": "2026-03-07 23:05:17 UTC", "sightings": 1 }, { "indicator": "https://mead-v08.meadowbrook.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-07 23:03:07 UTC", "last_seen": "2026-03-07 23:03:07 UTC", "sightings": 1 }, { "indicator": "https://brook-way.meadowbrook.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-07 22:52:07 UTC", "last_seen": "2026-03-07 22:52:07 UTC", "sightings": 1 }, { "indicator": "http://42.232.239.144:37727/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 22:51:11 UTC", "last_seen": "2026-03-07 22:51:11 UTC", "sightings": 1 }, { "indicator": "http://110.36.0.107:36455/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 22:49:06 UTC", "last_seen": "2026-03-07 22:49:06 UTC", "sightings": 1 }, { "indicator": "https://frost-run.frostplain.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-07 22:48:07 UTC", "last_seen": "2026-03-07 22:48:07 UTC", "sightings": 1 }, { "indicator": "http://115.55.50.58:48412/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 22:47:19 UTC", "last_seen": "2026-03-07 22:47:19 UTC", "sightings": 1 }, { "indicator": "https://plain-net.frostplain.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-07 22:40:07 UTC", "last_seen": "2026-03-07 22:40:07 UTC", "sightings": 1 }, { "indicator": "http://61.52.174.192:47715/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 22:37:10 UTC", "last_seen": "2026-03-07 22:37:10 UTC", "sightings": 1 }, { "indicator": "https://frost-v77.frostplain.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-07 22:33:09 UTC", "last_seen": "2026-03-07 22:33:09 UTC", "sightings": 1 }, { "indicator": "http://42.232.239.144:37727/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 22:24:08 UTC", "last_seen": "2026-03-07 22:24:08 UTC", "sightings": 1 }, { "indicator": "https://plain-site.frostplain.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-07 22:23:06 UTC", "last_seen": "2026-03-07 22:23:06 UTC", "sightings": 1 }, { "indicator": "http://115.55.50.58:48412/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 22:22:19 UTC", "last_seen": "2026-03-07 22:22:19 UTC", "sightings": 1 }, { "indicator": "http://110.36.0.107:36455/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 22:19:11 UTC", "last_seen": "2026-03-07 22:19:11 UTC", "sightings": 1 }, { "indicator": "http://61.53.122.152:46681/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 22:15:21 UTC", "last_seen": "2026-03-07 22:15:21 UTC", "sightings": 1 }, { "indicator": "http://110.37.76.196:51671/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 22:15:17 UTC", "last_seen": "2026-03-07 22:15:17 UTC", "sightings": 1 }, { "indicator": "https://storm-base.stormridge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-07 22:15:09 UTC", "last_seen": "2026-03-07 22:15:09 UTC", "sightings": 1 }, { "indicator": "http://61.52.174.192:47715/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 22:10:25 UTC", "last_seen": "2026-03-07 22:10:25 UTC", "sightings": 1 }, { "indicator": "http://110.37.92.149:50915/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 22:06:21 UTC", "last_seen": "2026-03-07 22:06:21 UTC", "sightings": 1 }, { "indicator": "https://storm-v6.stormridge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-07 22:04:06 UTC", "last_seen": "2026-03-07 22:04:06 UTC", "sightings": 1 }, { "indicator": "https://ridge-peak.stormridge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-07 22:01:06 UTC", "last_seen": "2026-03-07 22:01:06 UTC", "sightings": 1 }, { "indicator": "https://grove-node.ashgrove.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-07 21:54:06 UTC", "last_seen": "2026-03-07 21:54:06 UTC", "sightings": 1 }, { "indicator": "http://123.13.24.6:37723/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 21:53:14 UTC", "last_seen": "2026-03-07 21:53:14 UTC", "sightings": 1 }, { "indicator": "http://110.37.76.196:51671/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 21:51:18 UTC", "last_seen": "2026-03-07 21:51:18 UTC", "sightings": 1 }, { "indicator": "http://61.53.122.152:46681/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 21:50:17 UTC", "last_seen": "2026-03-07 21:50:17 UTC", "sightings": 1 }, { "indicator": "http://110.37.92.149:50915/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 21:49:06 UTC", "last_seen": "2026-03-07 21:49:06 UTC", "sightings": 1 }, { "indicator": "https://ash-hub.ashgrove.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-07 21:43:06 UTC", "last_seen": "2026-03-07 21:43:06 UTC", "sightings": 1 }, { "indicator": "https://grove-v05.ashgrove.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-07 21:36:07 UTC", "last_seen": "2026-03-07 21:36:07 UTC", "sightings": 1 }, { "indicator": "http://123.13.24.6:37723/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 21:25:28 UTC", "last_seen": "2026-03-07 21:25:28 UTC", "sightings": 1 }, { "indicator": "https://ash-vault.ashgrove.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-07 21:25:12 UTC", "last_seen": "2026-03-07 21:25:12 UTC", "sightings": 1 }, { "indicator": "https://river-data.riverbend.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-07 21:22:09 UTC", "last_seen": "2026-03-07 21:22:09 UTC", "sightings": 1 }, { "indicator": "http://182.116.115.171:35910/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 21:19:32 UTC", "last_seen": "2026-03-07 21:19:32 UTC", "sightings": 1 }, { "indicator": "https://bend-sync.riverbend.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-07 21:15:09 UTC", "last_seen": "2026-03-07 21:15:09 UTC", "sightings": 1 }, { "indicator": "http://117.209.20.231:51489/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 21:09:25 UTC", "last_seen": "2026-03-07 21:09:25 UTC", "sightings": 1 }, { "indicator": "http://123.8.130.177:41066/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 21:08:26 UTC", "last_seen": "2026-03-07 21:08:26 UTC", "sightings": 1 }, { "indicator": "http://163.142.87.90:53171/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 21:07:22 UTC", "last_seen": "2026-03-07 21:07:22 UTC", "sightings": 1 }, { "indicator": "https://river-v44.riverbend.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-07 21:07:07 UTC", "last_seen": "2026-03-07 21:07:07 UTC", "sightings": 1 }, { "indicator": "http://202.111.130.62:49367/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 21:04:28 UTC", "last_seen": "2026-03-07 21:04:28 UTC", "sightings": 1 }, { "indicator": "http://178.16.54.109/rem.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-Phorpiex", "Smoke Loader" ], "first_seen": "2026-03-07 21:01:08 UTC", "last_seen": "2026-03-07 21:01:08 UTC", "sightings": 1 }, { "indicator": "http://178.16.54.109/twizt.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-Phorpiex", "phorpiex" ], "first_seen": "2026-03-07 21:01:07 UTC", "last_seen": "2026-03-07 21:01:07 UTC", "sightings": 1 }, { "indicator": "http://202.111.130.62:49367/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 20:58:22 UTC", "last_seen": "2026-03-07 20:58:22 UTC", "sightings": 1 }, { "indicator": "https://bend-core.riverbend.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-07 20:57:11 UTC", "last_seen": "2026-03-07 20:57:11 UTC", "sightings": 1 }, { "indicator": "https://pine-edge.pinecliff.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-07 20:50:08 UTC", "last_seen": "2026-03-07 20:50:08 UTC", "sightings": 1 }, { "indicator": "http://221.200.222.139:56916/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 20:47:25 UTC", "last_seen": "2026-03-07 20:47:25 UTC", "sightings": 1 }, { "indicator": "https://cliff-unit.pinecliff.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-07 20:47:08 UTC", "last_seen": "2026-03-07 20:47:08 UTC", "sightings": 1 }, { "indicator": "http://117.209.20.231:51489/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 20:46:27 UTC", "last_seen": "2026-03-07 20:46:27 UTC", "sightings": 1 }, { "indicator": "http://27.37.62.119:53783/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 20:41:33 UTC", "last_seen": "2026-03-07 20:41:33 UTC", "sightings": 1 }, { "indicator": "http://163.142.87.90:53171/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 20:37:23 UTC", "last_seen": "2026-03-07 20:37:23 UTC", "sightings": 1 }, { "indicator": "http://123.8.158.227:37634/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 20:37:22 UTC", "last_seen": "2026-03-07 20:37:22 UTC", "sightings": 1 }, { "indicator": "http://115.54.166.146:58818/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 20:34:20 UTC", "last_seen": "2026-03-07 20:34:20 UTC", "sightings": 1 }, { "indicator": "https://cliff-gate.pinecliff.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-07 20:32:08 UTC", "last_seen": "2026-03-07 20:32:08 UTC", "sightings": 1 }, { "indicator": "http://123.8.158.227:37634/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 20:30:24 UTC", "last_seen": "2026-03-07 20:30:24 UTC", "sightings": 1 }, { "indicator": "https://grove-flow.mistgrove.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-07 20:28:06 UTC", "last_seen": "2026-03-07 20:28:06 UTC", "sightings": 1 }, { "indicator": "http://42.225.202.95:55581/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 20:27:21 UTC", "last_seen": "2026-03-07 20:27:21 UTC", "sightings": 1 }, { "indicator": "http://42.225.202.95:55581/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 20:23:18 UTC", "last_seen": "2026-03-07 20:23:18 UTC", "sightings": 1 }, { "indicator": "http://115.50.178.28:46151/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 20:23:17 UTC", "last_seen": "2026-03-07 20:23:17 UTC", "sightings": 1 }, { "indicator": "http://182.121.8.3:33273/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 20:22:24 UTC", "last_seen": "2026-03-07 20:22:24 UTC", "sightings": 1 }, { "indicator": "http://221.200.222.139:56916/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 20:21:26 UTC", "last_seen": "2026-03-07 20:21:26 UTC", "sightings": 1 }, { "indicator": "http://115.55.231.168:34810/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 20:19:23 UTC", "last_seen": "2026-03-07 20:19:23 UTC", "sightings": 1 }, { "indicator": "https://mist-net.mistgrove.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-07 20:14:07 UTC", "last_seen": "2026-03-07 20:14:07 UTC", "sightings": 1 }, { "indicator": "http://117.198.13.201:54748/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 20:11:13 UTC", "last_seen": "2026-03-07 20:11:13 UTC", "sightings": 1 }, { "indicator": "http://117.198.13.201:54748/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 20:11:13 UTC", "last_seen": "2026-03-07 20:11:13 UTC", "sightings": 1 }, { "indicator": "http://142.248.228.197/dvr.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "geofenced", "opendir", "sh", "ua-wget", "USA" ], "first_seen": "2026-03-07 20:09:04 UTC", "last_seen": "2026-03-07 20:09:04 UTC", "sightings": 1 }, { "indicator": "https://grove-v12.mistgrove.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-07 20:08:06 UTC", "last_seen": "2026-03-07 20:08:06 UTC", "sightings": 1 }, { "indicator": "http://158.94.211.222/files/heine/random.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-03-07 20:04:09 UTC", "last_seen": "2026-03-07 20:04:09 UTC", "sightings": 1 }, { "indicator": "https://mist-base.mistgrove.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-07 20:02:05 UTC", "last_seen": "2026-03-07 20:02:05 UTC", "sightings": 1 }, { "indicator": "https://sun-path.sunvalley.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-07 19:54:06 UTC", "last_seen": "2026-03-07 19:54:06 UTC", "sightings": 1 }, { "indicator": "http://5.53.28.16:39353/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-07 19:52:25 UTC", "last_seen": "2026-03-07 19:52:25 UTC", "sightings": 1 }, { "indicator": "http://110.37.14.231:37061/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 19:52:25 UTC", "last_seen": "2026-03-07 19:52:25 UTC", "sightings": 1 }, { "indicator": "http://123.12.195.156:52993/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 19:50:20 UTC", "last_seen": "2026-03-07 19:50:20 UTC", "sightings": 1 }, { "indicator": "https://valley-sync.sunvalley.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-07 19:50:07 UTC", "last_seen": "2026-03-07 19:50:07 UTC", "sightings": 1 }, { "indicator": "http://110.39.27.117:50508/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 19:49:18 UTC", "last_seen": "2026-03-07 19:49:18 UTC", "sightings": 1 }, { "indicator": "http://115.55.231.168:34810/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 19:49:18 UTC", "last_seen": "2026-03-07 19:49:18 UTC", "sightings": 1 }, { "indicator": "https://sun-v01.sunvalley.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-07 19:46:06 UTC", "last_seen": "2026-03-07 19:46:06 UTC", "sightings": 1 }, { "indicator": "https://valley-node.sunvalley.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-07 19:41:07 UTC", "last_seen": "2026-03-07 19:41:07 UTC", "sightings": 1 }, { "indicator": "http://112.248.162.44:39960/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 19:39:30 UTC", "last_seen": "2026-03-07 19:39:30 UTC", "sightings": 1 }, { "indicator": "http://112.239.102.248:39218/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 19:39:09 UTC", "last_seen": "2026-03-07 19:39:09 UTC", "sightings": 1 }, { "indicator": "https://way-logic.clingway.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-07 19:36:07 UTC", "last_seen": "2026-03-07 19:36:07 UTC", "sightings": 1 }, { "indicator": "http://110.37.14.231:37061/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 19:32:19 UTC", "last_seen": "2026-03-07 19:32:19 UTC", "sightings": 1 }, { "indicator": "http://42.239.113.194:58431/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-07 19:26:22 UTC", "last_seen": "2026-03-07 19:26:22 UTC", "sightings": 1 }, { "indicator": "http://110.39.27.117:50508/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 19:24:22 UTC", "last_seen": "2026-03-07 19:24:22 UTC", "sightings": 1 }, { "indicator": "https://cling-05.clingway.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-07 19:24:12 UTC", "last_seen": "2026-03-07 19:24:12 UTC", "sightings": 1 }, { "indicator": "http://175.149.137.173:53936/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 19:22:21 UTC", "last_seen": "2026-03-07 19:22:21 UTC", "sightings": 1 }, { "indicator": "http://5.53.28.16:39353/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-07 19:19:14 UTC", "last_seen": "2026-03-07 19:19:14 UTC", "sightings": 1 }, { "indicator": "https://way-v1.clingway.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-07 19:19:13 UTC", "last_seen": "2026-03-07 19:19:13 UTC", "sightings": 1 }, { "indicator": "http://42.232.225.158:33480/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 19:13:17 UTC", "last_seen": "2026-03-07 19:13:17 UTC", "sightings": 1 }, { "indicator": "http://113.236.133.220:56008/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 19:11:23 UTC", "last_seen": "2026-03-07 19:11:23 UTC", "sightings": 1 }, { "indicator": "http://182.120.98.193:53181/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 19:10:24 UTC", "last_seen": "2026-03-07 19:10:24 UTC", "sightings": 1 }, { "indicator": "https://cling-way.clingway.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-07 19:10:08 UTC", "last_seen": "2026-03-07 19:10:08 UTC", "sightings": 1 }, { "indicator": "http://219.157.66.117:36839/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 19:08:19 UTC", "last_seen": "2026-03-07 19:08:19 UTC", "sightings": 1 }, { "indicator": "http://123.10.138.112:48357/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 19:02:12 UTC", "last_seen": "2026-03-07 19:02:12 UTC", "sightings": 1 }, { "indicator": "http://219.157.66.117:36839/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 19:02:12 UTC", "last_seen": "2026-03-07 19:02:12 UTC", "sightings": 1 }, { "indicator": "http://142.248.228.197/sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "geofenced", "opendir", "sh", "ua-wget", "USA" ], "first_seen": "2026-03-07 19:02:05 UTC", "last_seen": "2026-03-07 19:02:05 UTC", "sightings": 1 }, { "indicator": "http://42.238.128.168:53278/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 19:01:15 UTC", "last_seen": "2026-03-07 19:01:15 UTC", "sightings": 1 }, { "indicator": "http://123.10.138.112:48357/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 18:59:09 UTC", "last_seen": "2026-03-07 18:59:09 UTC", "sightings": 1 }, { "indicator": "http://42.232.225.158:33480/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 18:59:08 UTC", "last_seen": "2026-03-07 18:59:08 UTC", "sightings": 1 }, { "indicator": "https://par-node.parishwhale.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-07 18:58:12 UTC", "last_seen": "2026-03-07 18:58:12 UTC", "sightings": 1 }, { "indicator": "https://whale-sync.parishwhale.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-07 18:53:07 UTC", "last_seen": "2026-03-07 18:53:07 UTC", "sightings": 1 }, { "indicator": "http://182.120.98.193:53181/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 18:52:11 UTC", "last_seen": "2026-03-07 18:52:11 UTC", "sightings": 1 }, { "indicator": "http://42.231.36.251:36970/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 18:52:10 UTC", "last_seen": "2026-03-07 18:52:10 UTC", "sightings": 1 }, { "indicator": "https://ccleaner.gl", "indicator_type": "url", "source": "URLhaus", "tags": [ "ascii", "CountLoader", "ua-mshta" ], "first_seen": "2026-03-07 18:44:11 UTC", "last_seen": "2026-03-07 18:44:11 UTC", "sightings": 1 }, { "indicator": "http://219.157.64.60:51110/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 18:44:10 UTC", "last_seen": "2026-03-07 18:44:10 UTC", "sightings": 1 }, { "indicator": "https://par-v33.parishwhale.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-07 18:41:06 UTC", "last_seen": "2026-03-07 18:41:06 UTC", "sightings": 1 }, { "indicator": "http://185.38.142.156/huhu/titanjr.", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-07 18:40:31 UTC", "last_seen": "2026-03-07 18:40:31 UTC", "sightings": 1 }, { "indicator": "http://46.8.68.4/bins/sora.x86_64", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-07 18:40:30 UTC", "last_seen": "2026-03-07 18:40:30 UTC", "sightings": 1 }, { "indicator": "http://80.97.124.196:6677/main/bins/arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-07 18:40:30 UTC", "last_seen": "2026-03-07 18:40:30 UTC", "sightings": 1 }, { "indicator": "http://46.8.68.4/bins/sora.i686", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-07 18:40:29 UTC", "last_seen": "2026-03-07 18:40:29 UTC", "sightings": 1 }, { "indicator": "http://46.8.68.4/bins/sora.i468", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-07 18:40:29 UTC", "last_seen": "2026-03-07 18:40:29 UTC", "sightings": 1 }, { "indicator": "http://46.8.68.4/bins/sora.ppc440fp", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-07 18:40:21 UTC", "last_seen": "2026-03-07 18:40:21 UTC", "sightings": 1 }, { "indicator": "http://180.93.52.81/m4ng0d33w1771nnmnlove/MMaaRRiiOisecTanee.mpsl", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-07 18:40:18 UTC", "last_seen": "2026-03-07 18:40:18 UTC", "sightings": 1 }, { "indicator": "http://180.93.52.81/m4ng0d33w1771nnmnlove/MMaaRRiiOisecTanee.sh4", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-07 18:40:18 UTC", "last_seen": "2026-03-07 18:40:18 UTC", "sightings": 1 }, { "indicator": "http://180.93.52.81/m4ng0d33w1771nnmnlove/MMaaRRiiOisecTanee.arm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-07 18:40:18 UTC", "last_seen": "2026-03-07 18:40:18 UTC", "sightings": 1 }, { "indicator": "http://180.93.52.81/m4ng0d33w1771nnmnlove/MMaaRRiiOisecTanee.arc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-07 18:40:18 UTC", "last_seen": "2026-03-07 18:40:18 UTC", "sightings": 1 }, { "indicator": "http://180.93.52.81/m4ng0d33w1771nnmnlove/MMaaRRiiOisecTanee.x86_64", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-07 18:40:18 UTC", "last_seen": "2026-03-07 18:40:18 UTC", "sightings": 1 }, { "indicator": "http://180.93.52.81/m4ng0d33w1771nnmnlove/MMaaRRiiOisecTanee.m68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-07 18:40:18 UTC", "last_seen": "2026-03-07 18:40:18 UTC", "sightings": 1 }, { "indicator": "http://180.93.52.81/m4ng0d33w1771nnmnlove/MMaaRRiiOisecTanee.arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-07 18:40:18 UTC", "last_seen": "2026-03-07 18:40:18 UTC", "sightings": 1 }, { "indicator": "http://180.93.52.81/m4ng0d33w1771nnmnlove/MMaaRRiiOisecTanee.x86", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-07 18:40:18 UTC", "last_seen": "2026-03-07 18:40:18 UTC", "sightings": 1 }, { "indicator": "http://180.93.52.81/m4ng0d33w1771nnmnlove/MMaaRRiiOisecTanee.arm", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-07 18:40:18 UTC", "last_seen": "2026-03-07 18:40:18 UTC", "sightings": 1 }, { "indicator": "http://180.93.52.81/m4ng0d33w1771nnmnlove/MMaaRRiiOisecTanee.i486", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-07 18:40:18 UTC", "last_seen": "2026-03-07 18:40:18 UTC", "sightings": 1 }, { "indicator": "http://180.93.52.81/m4ng0d33w1771nnmnlove/MMaaRRiiOisecTanee.arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-07 18:40:18 UTC", "last_seen": "2026-03-07 18:40:18 UTC", "sightings": 1 }, { "indicator": "http://180.93.52.81/m4ng0d33w1771nnmnlove/MMaaRRiiOisecTanee.spc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-07 18:40:18 UTC", "last_seen": "2026-03-07 18:40:18 UTC", "sightings": 1 }, { "indicator": "http://180.93.52.81/m4ng0d33w1771nnmnlove/MMaaRRiiOisecTanee.mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-07 18:40:18 UTC", "last_seen": "2026-03-07 18:40:18 UTC", "sightings": 1 }, { "indicator": "http://180.93.52.81/m4ng0d33w1771nnmnlove/MMaaRRiiOisecTanee.ppc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-07 18:40:18 UTC", "last_seen": "2026-03-07 18:40:18 UTC", "sightings": 1 }, { "indicator": "http://180.93.52.81/m4ng0d33w1771nnmnlove/MMaaRRiiOisecTanee.i686", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-07 18:40:18 UTC", "last_seen": "2026-03-07 18:40:18 UTC", "sightings": 1 }, { "indicator": "https://fertas.com.tr/fish.txt", "indicator_type": "url", "source": "URLhaus", "tags": [ "AsyncRAT", "rat" ], "first_seen": "2026-03-07 18:37:15 UTC", "last_seen": "2026-03-07 18:37:15 UTC", "sightings": 1 }, { "indicator": "http://42.238.128.168:53278/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 18:37:08 UTC", "last_seen": "2026-03-07 18:37:08 UTC", "sightings": 1 }, { "indicator": "https://whale-port.parishwhale.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-07 18:36:09 UTC", "last_seen": "2026-03-07 18:36:09 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.45/data.aarch64", "indicator_type": "url", "source": "URLhaus", "tags": [ "arm", "elf", "geofenced", "mirai", "ua-wget", "USA" ], "first_seen": "2026-03-07 18:32:12 UTC", "last_seen": "2026-03-07 18:32:12 UTC", "sightings": 1 }, { "indicator": "http://175.165.44.171:40087/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 18:32:10 UTC", "last_seen": "2026-03-07 18:32:10 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.45/bbc", "indicator_type": "url", "source": "URLhaus", "tags": [ "geofenced", "sh", "ua-wget", "USA" ], "first_seen": "2026-03-07 18:32:07 UTC", "last_seen": "2026-03-07 18:32:07 UTC", "sightings": 1 }, { "indicator": "http://123.10.153.20:50014/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 18:31:15 UTC", "last_seen": "2026-03-07 18:31:15 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.45/data.arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "arm", "elf", "geofenced", "mirai", "ua-wget", "USA" ], "first_seen": "2026-03-07 18:31:08 UTC", "last_seen": "2026-03-07 18:31:08 UTC", "sightings": 1 }, { "indicator": "https://volup-net.antivoluptuous.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-07 18:30:09 UTC", "last_seen": "2026-03-07 18:30:09 UTC", "sightings": 1 }, { "indicator": "http://42.231.36.251:36970/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 18:27:18 UTC", "last_seen": "2026-03-07 18:27:18 UTC", "sightings": 1 }, { "indicator": "https://anti-02.antivoluptuous.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-07 18:24:10 UTC", "last_seen": "2026-03-07 18:24:10 UTC", "sightings": 1 }, { "indicator": "http://123.10.153.20:50014/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 18:23:11 UTC", "last_seen": "2026-03-07 18:23:11 UTC", "sightings": 1 }, { "indicator": "https://volup-v6.antivoluptuous.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-07 18:19:12 UTC", "last_seen": "2026-03-07 18:19:12 UTC", "sightings": 1 }, { "indicator": "https://anti-vol.antivoluptuous.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-07 18:15:09 UTC", "last_seen": "2026-03-07 18:15:09 UTC", "sightings": 1 }, { "indicator": "https://crea-sync.nightcreate.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-07 18:11:07 UTC", "last_seen": "2026-03-07 18:11:07 UTC", "sightings": 1 }, { "indicator": "http://42.227.224.154:34702/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 18:02:11 UTC", "last_seen": "2026-03-07 18:02:11 UTC", "sightings": 1 }, { "indicator": "http://188.137.245.221/2.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "CryptOne", "exe" ], "first_seen": "2026-03-07 18:00:12 UTC", "last_seen": "2026-03-07 18:00:12 UTC", "sightings": 1 }, { "indicator": "http://158.94.211.222/files/321/random.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "exe", "OffLoader" ], "first_seen": "2026-03-07 18:00:11 UTC", "last_seen": "2026-03-07 18:00:11 UTC", "sightings": 1 }, { "indicator": "https://night-gate.nightcreate.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-07 18:00:11 UTC", "last_seen": "2026-03-07 18:00:11 UTC", "sightings": 1 }, { "indicator": "http://158.94.211.222/files/bur/fast.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "exe" ], "first_seen": "2026-03-07 18:00:08 UTC", "last_seen": "2026-03-07 18:00:08 UTC", "sightings": 1 }, { "indicator": "http://158.94.211.222/files/mr/random.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "exe", "Vidar" ], "first_seen": "2026-03-07 18:00:08 UTC", "last_seen": "2026-03-07 18:00:08 UTC", "sightings": 1 }, { "indicator": "http://158.94.211.222/amka/random.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "Amadey", "exe", "Smoke Loader" ], "first_seen": "2026-03-07 18:00:08 UTC", "last_seen": "2026-03-07 18:00:08 UTC", "sightings": 1 }, { "indicator": "http://125.41.9.98:52470/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 17:58:13 UTC", "last_seen": "2026-03-07 17:58:13 UTC", "sightings": 1 }, { "indicator": "https://crea-v11.nightcreate.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-07 17:54:07 UTC", "last_seen": "2026-03-07 17:54:07 UTC", "sightings": 1 }, { "indicator": "http://93.190.19.101:37523/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-07 17:52:18 UTC", "last_seen": "2026-03-07 17:52:18 UTC", "sightings": 1 }, { "indicator": "http://175.165.44.171:40087/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 17:51:19 UTC", "last_seen": "2026-03-07 17:51:19 UTC", "sightings": 1 }, { "indicator": "http://46.149.73.60/4SLEYpfAk57hGubo/wslservice.mp3", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer" ], "first_seen": "2026-03-07 17:50:08 UTC", "last_seen": "2026-03-07 17:50:08 UTC", "sightings": 1 }, { "indicator": "http://46.149.73.60/4SLEYpfAk57hGubo/messagebus.pdf", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer" ], "first_seen": "2026-03-07 17:50:07 UTC", "last_seen": "2026-03-07 17:50:07 UTC", "sightings": 1 }, { "indicator": "http://46.149.73.60/4SLEYpfAk57hGubo/FNPLicensingService.php", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer" ], "first_seen": "2026-03-07 17:50:07 UTC", "last_seen": "2026-03-07 17:50:07 UTC", "sightings": 1 }, { "indicator": "https://acecareer.edu/wp-includes/certificates/Geany", "indicator_type": "url", "source": "URLhaus", "tags": [ "GhostSocks" ], "first_seen": "2026-03-07 17:46:10 UTC", "last_seen": "2026-03-07 17:46:10 UTC", "sightings": 1 }, { "indicator": "https://acecareer.edu/wp-includes/certificates/WindowsUpdateHelper.ps1", "indicator_type": "url", "source": "URLhaus", "tags": [ "asciii", "opendir", "powershell", "ps1" ], "first_seen": "2026-03-07 17:46:07 UTC", "last_seen": "2026-03-07 17:46:07 UTC", "sightings": 1 }, { "indicator": "https://acecareer.edu/wp-includes/certificates/Config.ps1", "indicator_type": "url", "source": "URLhaus", "tags": [ "ascii", "powershell", "ps1" ], "first_seen": "2026-03-07 17:46:07 UTC", "last_seen": "2026-03-07 17:46:07 UTC", "sightings": 1 }, { "indicator": "https://acecareer.edu/wp-includes/certificates/Host.ps1", "indicator_type": "url", "source": "URLhaus", "tags": [ "ascii", "powershell", "ps1" ], "first_seen": "2026-03-07 17:46:06 UTC", "last_seen": "2026-03-07 17:46:06 UTC", "sightings": 1 }, { "indicator": "https://acecareer.edu/wp-includes/certificates/Qtum.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "exe", "opendir", "Smoke Loader" ], "first_seen": "2026-03-07 17:45:11 UTC", "last_seen": "2026-03-07 17:45:11 UTC", "sightings": 1 }, { "indicator": "https://acecareer.edu/wp-includes/certificates/acr-karimichikstrelyaet-639081475329349420.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "exe", "opendir" ], "first_seen": "2026-03-07 17:45:11 UTC", "last_seen": "2026-03-07 17:45:11 UTC", "sightings": 1 }, { "indicator": "https://acecareer.edu/wp-includes/certificates/Ocher.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "CHStealer", "exe", "opendir" ], "first_seen": "2026-03-07 17:45:10 UTC", "last_seen": "2026-03-07 17:45:10 UTC", "sightings": 1 }, { "indicator": "https://acecareer.edu/wp-includes/certificates/hOV.hta", "indicator_type": "url", "source": "URLhaus", "tags": [ "hta", "opendir" ], "first_seen": "2026-03-07 17:45:08 UTC", "last_seen": "2026-03-07 17:45:08 UTC", "sightings": 1 }, { "indicator": "http://115.50.0.133:51189/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 17:44:17 UTC", "last_seen": "2026-03-07 17:44:17 UTC", "sightings": 1 }, { "indicator": "https://night-mode.nightcreate.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake", "EternalRocks" ], "first_seen": "2026-03-07 17:43:08 UTC", "last_seen": "2026-03-07 17:43:08 UTC", "sightings": 1 }, { "indicator": "http://185.242.3.239/kfhogts", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer" ], "first_seen": "2026-03-07 17:42:09 UTC", "last_seen": "2026-03-07 17:42:09 UTC", "sightings": 1 }, { "indicator": "http://185.242.3.239/oqqqqoa.mp3", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer" ], "first_seen": "2026-03-07 17:42:06 UTC", "last_seen": "2026-03-07 17:42:06 UTC", "sightings": 1 }, { "indicator": "https://up-flow.anyutkiup.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake", "EternalRocks" ], "first_seen": "2026-03-07 17:35:08 UTC", "last_seen": "2026-03-07 17:35:08 UTC", "sightings": 1 }, { "indicator": "https://any-08.anyutkiup.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake", "EternalRocks" ], "first_seen": "2026-03-07 17:30:10 UTC", "last_seen": "2026-03-07 17:30:10 UTC", "sightings": 1 }, { "indicator": "http://93.190.19.101:37523/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-07 17:27:17 UTC", "last_seen": "2026-03-07 17:27:17 UTC", "sightings": 1 }, { "indicator": "http://115.50.0.133:51189/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 17:26:18 UTC", "last_seen": "2026-03-07 17:26:18 UTC", "sightings": 1 }, { "indicator": "https://utki-v3.anyutkiup.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake", "EternalRocks" ], "first_seen": "2026-03-07 17:25:10 UTC", "last_seen": "2026-03-07 17:25:10 UTC", "sightings": 1 }, { "indicator": "http://42.229.161.113:58763/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 17:23:21 UTC", "last_seen": "2026-03-07 17:23:21 UTC", "sightings": 1 }, { "indicator": "http://178.205.59.12:35761/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 17:21:06 UTC", "last_seen": "2026-03-07 17:21:06 UTC", "sightings": 1 }, { "indicator": "https://any-up.anyutkiup.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake", "EternalRocks" ], "first_seen": "2026-03-07 17:18:07 UTC", "last_seen": "2026-03-07 17:18:07 UTC", "sightings": 1 }, { "indicator": "https://oral-net.cavalieroral.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake", "EternalRocks" ], "first_seen": "2026-03-07 17:14:09 UTC", "last_seen": "2026-03-07 17:14:09 UTC", "sightings": 1 }, { "indicator": "https://cav-base.cavalieroral.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake", "EternalRocks" ], "first_seen": "2026-03-07 17:13:11 UTC", "last_seen": "2026-03-07 17:13:11 UTC", "sightings": 1 }, { "indicator": "http://96.44.159.145/25/c/img_221646.png", "indicator_type": "url", "source": "URLhaus", "tags": [ "RemcosRAT" ], "first_seen": "2026-03-07 17:13:09 UTC", "last_seen": "2026-03-07 17:13:09 UTC", "sightings": 1 }, { "indicator": "http://msimasidownload.duckdns.org/optimized_MSI/optimized_MSI.png", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-07 17:12:44 UTC", "last_seen": "2026-03-07 17:12:44 UTC", "sightings": 1 }, { "indicator": "https://oral-v4.cavalieroral.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake", "EternalRocks" ], "first_seen": "2026-03-07 17:04:13 UTC", "last_seen": "2026-03-07 17:04:13 UTC", "sightings": 1 }, { "indicator": "http://182.119.58.238:39149/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 17:01:20 UTC", "last_seen": "2026-03-07 17:01:20 UTC", "sightings": 1 }, { "indicator": "http://37.55.197.206:60444/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 17:01:18 UTC", "last_seen": "2026-03-07 17:01:18 UTC", "sightings": 1 }, { "indicator": "http://110.39.246.84:47647/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 17:01:12 UTC", "last_seen": "2026-03-07 17:01:12 UTC", "sightings": 1 }, { "indicator": "https://cav-oral.cavalieroral.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake", "EternalRocks" ], "first_seen": "2026-03-07 16:59:09 UTC", "last_seen": "2026-03-07 16:59:09 UTC", "sightings": 1 }, { "indicator": "https://021.zip98d.top/acd746d7fe8b40c7b1f8-1.0.xpi", "indicator_type": "url", "source": "URLhaus", "tags": [ "extension" ], "first_seen": "2026-03-07 16:58:14 UTC", "last_seen": "2026-03-07 16:58:14 UTC", "sightings": 1 }, { "indicator": "https://www.irbis2000.com/WPS_Setup64.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "SilverFox" ], "first_seen": "2026-03-07 16:58:07 UTC", "last_seen": "2026-03-07 16:58:07 UTC", "sightings": 1 }, { "indicator": "https://github.com/adyvot/update/raw/refs/heads/main/0urkspr63xoryra2.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "SheetRAT" ], "first_seen": "2026-03-07 16:56:08 UTC", "last_seen": "2026-03-07 16:56:08 UTC", "sightings": 1 }, { "indicator": "http://104.219.237.111:3000/files/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 16:56:07 UTC", "last_seen": "2026-03-07 16:56:07 UTC", "sightings": 1 }, { "indicator": "https://kizarmenu.top/get-file.php", "indicator_type": "url", "source": "URLhaus", "tags": [ "dll", "stealer", "zip" ], "first_seen": "2026-03-07 16:56:07 UTC", "last_seen": "2026-03-07 16:56:07 UTC", "sightings": 1 }, { "indicator": "https://github.com/ademmartinez71-cmd/test/raw/refs/heads/main/XClient.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "AsyncRAT", "rat", "xworm" ], "first_seen": "2026-03-07 16:56:07 UTC", "last_seen": "2026-03-07 16:56:07 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/ademmartinez71-cmd/test/refs/heads/main/XClient.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "AsyncRAT", "Xworm Rat" ], "first_seen": "2026-03-07 16:56:07 UTC", "last_seen": "2026-03-07 16:56:07 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/adyvot/update/refs/heads/main/0urkspr63xoryra2.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "SheetRAT" ], "first_seen": "2026-03-07 16:56:07 UTC", "last_seen": "2026-03-07 16:56:07 UTC", "sightings": 1 }, { "indicator": "http://110.38.206.86:53721/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-07 16:53:16 UTC", "last_seen": "2026-03-07 16:53:16 UTC", "sightings": 1 }, { "indicator": "https://rel-sync.lamarelativ.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake", "EternalRocks" ], "first_seen": "2026-03-07 16:53:09 UTC", "last_seen": "2026-03-07 16:53:09 UTC", "sightings": 1 }, { "indicator": "http://110.38.206.86:53721/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-07 16:52:18 UTC", "last_seen": "2026-03-07 16:52:18 UTC", "sightings": 1 }, { "indicator": "http://115.51.93.196:53431/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 16:51:20 UTC", "last_seen": "2026-03-07 16:51:20 UTC", "sightings": 1 }, { "indicator": "http://113.231.83.43:53128/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 16:49:15 UTC", "last_seen": "2026-03-07 16:49:15 UTC", "sightings": 1 }, { "indicator": "http://42.86.118.136:39679/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 16:49:14 UTC", "last_seen": "2026-03-07 16:49:14 UTC", "sightings": 1 }, { "indicator": "https://lama-v5.lamarelativ.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake", "EternalRocks" ], "first_seen": "2026-03-07 16:49:08 UTC", "last_seen": "2026-03-07 16:49:08 UTC", "sightings": 1 }, { "indicator": "https://rel-node.lamarelativ.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake", "EternalRocks" ], "first_seen": "2026-03-07 16:43:09 UTC", "last_seen": "2026-03-07 16:43:09 UTC", "sightings": 1 }, { "indicator": "https://lama-rel.lamarelativ.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake", "EternalRocks" ], "first_seen": "2026-03-07 16:37:07 UTC", "last_seen": "2026-03-07 16:37:07 UTC", "sightings": 1 }, { "indicator": "https://salv-net.crucifionsalval.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake", "EternalRocks" ], "first_seen": "2026-03-07 16:35:11 UTC", "last_seen": "2026-03-07 16:35:11 UTC", "sightings": 1 }, { "indicator": "http://115.51.93.196:53431/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 16:24:16 UTC", "last_seen": "2026-03-07 16:24:16 UTC", "sightings": 1 }, { "indicator": "http://115.49.203.152:35447/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 16:23:20 UTC", "last_seen": "2026-03-07 16:23:20 UTC", "sightings": 1 }, { "indicator": "https://salv-unit.crucifionsalval.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake", "EternalRocks" ], "first_seen": "2026-03-07 16:23:12 UTC", "last_seen": "2026-03-07 16:23:12 UTC", "sightings": 1 }, { "indicator": "http://182.119.58.238:39149/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 16:20:16 UTC", "last_seen": "2026-03-07 16:20:16 UTC", "sightings": 1 }, { "indicator": "https://cruc-base.crucifionsalval.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake", "EternalRocks" ], "first_seen": "2026-03-07 16:16:13 UTC", "last_seen": "2026-03-07 16:16:13 UTC", "sightings": 1 }, { "indicator": "https://sens-track.repeatsensat.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake", "EternalRocks" ], "first_seen": "2026-03-07 16:11:06 UTC", "last_seen": "2026-03-07 16:11:06 UTC", "sightings": 1 }, { "indicator": "https://repeat-01.repeatsensat.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake", "EternalRocks" ], "first_seen": "2026-03-07 16:07:07 UTC", "last_seen": "2026-03-07 16:07:07 UTC", "sightings": 1 }, { "indicator": "https://sens-v2.repeatsensat.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake", "EternalRocks" ], "first_seen": "2026-03-07 16:04:06 UTC", "last_seen": "2026-03-07 16:04:06 UTC", "sightings": 1 }, { "indicator": "http://115.55.146.90:52964/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 16:03:18 UTC", "last_seen": "2026-03-07 16:03:18 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.42/bins/x86_64", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "geofenced", "mirai", "ua-wget", "USA" ], "first_seen": "2026-03-07 16:02:12 UTC", "last_seen": "2026-03-07 16:02:12 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.42/bins/sh4", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "geofenced", "mirai", "ua-wget", "USA" ], "first_seen": "2026-03-07 16:02:11 UTC", "last_seen": "2026-03-07 16:02:11 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.42/bins/m68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "geofenced", "mirai", "ua-wget", "USA" ], "first_seen": "2026-03-07 16:02:10 UTC", "last_seen": "2026-03-07 16:02:10 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.42/bins/mipsel", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "geofenced", "mirai", "ua-wget", "USA" ], "first_seen": "2026-03-07 16:02:10 UTC", "last_seen": "2026-03-07 16:02:10 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.42/bins/spc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "geofenced", "mirai", "ua-wget", "USA" ], "first_seen": "2026-03-07 16:02:10 UTC", "last_seen": "2026-03-07 16:02:10 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.42/bins/arm", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "geofenced", "mirai", "ua-wget", "USA" ], "first_seen": "2026-03-07 16:02:10 UTC", "last_seen": "2026-03-07 16:02:10 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.42/bins/arm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "geofenced", "mirai", "ua-wget", "USA" ], "first_seen": "2026-03-07 16:02:10 UTC", "last_seen": "2026-03-07 16:02:10 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.42/bins/x86", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "geofenced", "mirai", "ua-wget", "USA" ], "first_seen": "2026-03-07 16:02:10 UTC", "last_seen": "2026-03-07 16:02:10 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.42/bins/arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "geofenced", "mirai", "ua-wget", "USA" ], "first_seen": "2026-03-07 16:02:10 UTC", "last_seen": "2026-03-07 16:02:10 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.42/bins/ppc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "geofenced", "mirai", "ua-wget", "USA" ], "first_seen": "2026-03-07 16:02:10 UTC", "last_seen": "2026-03-07 16:02:10 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.42/bins/mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "geofenced", "mirai", "ua-wget", "USA" ], "first_seen": "2026-03-07 16:02:09 UTC", "last_seen": "2026-03-07 16:02:09 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.42/bins/arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "geofenced", "mirai", "ua-wget", "USA" ], "first_seen": "2026-03-07 16:02:09 UTC", "last_seen": "2026-03-07 16:02:09 UTC", "sightings": 1 }, { "indicator": "http://158.94.211.222/files/6624765280/0Nwzywk.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-07 15:57:10 UTC", "last_seen": "2026-03-07 15:57:10 UTC", "sightings": 1 }, { "indicator": "http://117.208.254.254:33384/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 15:54:15 UTC", "last_seen": "2026-03-07 15:54:15 UTC", "sightings": 1 }, { "indicator": "http://222.141.138.247:59937/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 15:54:14 UTC", "last_seen": "2026-03-07 15:54:14 UTC", "sightings": 1 }, { "indicator": "http://222.141.138.247:59937/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 15:53:24 UTC", "last_seen": "2026-03-07 15:53:24 UTC", "sightings": 1 }, { "indicator": "https://repeat-hub.repeatsensat.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake", "EternalRocks" ], "first_seen": "2026-03-07 15:52:07 UTC", "last_seen": "2026-03-07 15:52:07 UTC", "sightings": 1 }, { "indicator": "http://117.235.143.226:42945/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 15:44:22 UTC", "last_seen": "2026-03-07 15:44:22 UTC", "sightings": 1 }, { "indicator": "http://42.226.216.55:49977/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 15:43:31 UTC", "last_seen": "2026-03-07 15:43:31 UTC", "sightings": 1 }, { "indicator": "http://42.226.216.55:49977/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 15:43:26 UTC", "last_seen": "2026-03-07 15:43:26 UTC", "sightings": 1 }, { "indicator": "http://115.49.203.152:35447/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 15:42:12 UTC", "last_seen": "2026-03-07 15:42:12 UTC", "sightings": 1 }, { "indicator": "http://110.37.100.99:45508/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 15:38:20 UTC", "last_seen": "2026-03-07 15:38:20 UTC", "sightings": 1 }, { "indicator": "http://117.208.254.254:33384/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 15:37:28 UTC", "last_seen": "2026-03-07 15:37:28 UTC", "sightings": 1 }, { "indicator": "http://182.116.15.170:59239/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 15:34:17 UTC", "last_seen": "2026-03-07 15:34:17 UTC", "sightings": 1 }, { "indicator": "http://110.36.27.244:47526/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 15:34:16 UTC", "last_seen": "2026-03-07 15:34:16 UTC", "sightings": 1 }, { "indicator": "https://b-node.freebspirit.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake", "EternalRocks" ], "first_seen": "2026-03-07 15:34:07 UTC", "last_seen": "2026-03-07 15:34:07 UTC", "sightings": 1 }, { "indicator": "https://github.com/shura-gh0st69/peer_hire_hackhazards_25/raw/refs/heads/main/smart_contracts/contracts/utils/hire-peer-hackhazards-3.3-beta.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-07 15:33:08 UTC", "last_seen": "2026-03-07 15:33:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/shura-gh0st69/peer_hire_hackhazards_25/refs/heads/main/smart_contracts/contracts/utils/hire-peer-hackhazards-3.3-beta.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-07 15:33:08 UTC", "last_seen": "2026-03-07 15:33:08 UTC", "sightings": 1 }, { "indicator": "http://115.55.146.90:52964/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 15:32:19 UTC", "last_seen": "2026-03-07 15:32:19 UTC", "sightings": 1 }, { "indicator": "https://github.com/argadia38/LAMPA-Client/raw/refs/heads/main/Eridanid/LAMP_Client_v2.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-07 15:31:09 UTC", "last_seen": "2026-03-07 15:31:09 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/argadia38/LAMPA-Client/refs/heads/main/Eridanid/LAMP_Client_v2.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-07 15:31:09 UTC", "last_seen": "2026-03-07 15:31:09 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Thesigma10/revbshell/refs/heads/main/ko/Software-1.6-beta.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-07 15:31:08 UTC", "last_seen": "2026-03-07 15:31:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/Thesigma10/revbshell/raw/refs/heads/main/ko/Software-1.6-beta.2.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-07 15:31:08 UTC", "last_seen": "2026-03-07 15:31:08 UTC", "sightings": 1 }, { "indicator": "http://182.117.127.11:49703/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 15:29:15 UTC", "last_seen": "2026-03-07 15:29:15 UTC", "sightings": 1 }, { "indicator": "https://free-spirit.freebspirit.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake", "EternalRocks" ], "first_seen": "2026-03-07 15:26:08 UTC", "last_seen": "2026-03-07 15:26:08 UTC", "sightings": 1 }, { "indicator": "http://115.56.151.23:45971/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 15:25:22 UTC", "last_seen": "2026-03-07 15:25:22 UTC", "sightings": 1 }, { "indicator": "http://115.56.151.23:45971/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 15:24:27 UTC", "last_seen": "2026-03-07 15:24:27 UTC", "sightings": 1 }, { "indicator": "https://github.com/Skardavid86/rpc/raw/refs/heads/main/packet/1.txt", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader" ], "first_seen": "2026-03-07 15:22:08 UTC", "last_seen": "2026-03-07 15:22:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/Skardavid86/rpc/refs/heads/main/packet/1.txt", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader" ], "first_seen": "2026-03-07 15:22:08 UTC", "last_seen": "2026-03-07 15:22:08 UTC", "sightings": 1 }, { "indicator": "http://182.119.7.29:46282/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 15:18:23 UTC", "last_seen": "2026-03-07 15:18:23 UTC", "sightings": 1 }, { "indicator": "http://110.37.100.99:45508/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 15:14:08 UTC", "last_seen": "2026-03-07 15:14:08 UTC", "sightings": 1 }, { "indicator": "https://norflux0os.starfield.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake", "EternalRocks" ], "first_seen": "2026-03-07 15:14:06 UTC", "last_seen": "2026-03-07 15:14:06 UTC", "sightings": 1 }, { "indicator": "http://182.119.7.29:46282/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 14:59:22 UTC", "last_seen": "2026-03-07 14:59:22 UTC", "sightings": 1 }, { "indicator": "https://norvenen9.ironcrest.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake", "EternalRocks" ], "first_seen": "2026-03-07 14:56:09 UTC", "last_seen": "2026-03-07 14:56:09 UTC", "sightings": 1 }, { "indicator": "http://110.36.27.244:47526/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 14:53:20 UTC", "last_seen": "2026-03-07 14:53:20 UTC", "sightings": 1 }, { "indicator": "http://115.59.69.121:48815/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 14:51:17 UTC", "last_seen": "2026-03-07 14:51:17 UTC", "sightings": 1 }, { "indicator": "https://opticspower.ironcrest.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake", "EternalRocks" ], "first_seen": "2026-03-07 14:51:08 UTC", "last_seen": "2026-03-07 14:51:08 UTC", "sightings": 1 }, { "indicator": "http://110.37.95.117:44855/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 14:47:20 UTC", "last_seen": "2026-03-07 14:47:20 UTC", "sightings": 1 }, { "indicator": "https://github.com/nobo8/ROBLOX-MACRO-V3.0.0/raw/refs/heads/main/Language/MACR_ROBLO_v3.0-beta.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-07 14:44:12 UTC", "last_seen": "2026-03-07 14:44:12 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/nobo8/ROBLOX-MACRO-V3.0.0/main/Language/MACR_ROBLO_v3.0-beta.5.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-07 14:44:07 UTC", "last_seen": "2026-03-07 14:44:07 UTC", "sightings": 1 }, { "indicator": "https://github.com/AlHayaza/Codex-Roblox/raw/refs/heads/main/pietism/Roblox_Codex_v2.8-alpha.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-07 14:40:13 UTC", "last_seen": "2026-03-07 14:40:13 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/AlHayaza/Codex-Roblox/refs/heads/main/pietism/Roblox_Codex_v2.8-alpha.1.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-07 14:40:07 UTC", "last_seen": "2026-03-07 14:40:07 UTC", "sightings": 1 }, { "indicator": "http://115.63.240.15:33177/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 14:39:14 UTC", "last_seen": "2026-03-07 14:39:14 UTC", "sightings": 1 }, { "indicator": "https://ultraautumn.ironcrest.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake", "EternalRocks" ], "first_seen": "2026-03-07 14:35:08 UTC", "last_seen": "2026-03-07 14:35:08 UTC", "sightings": 1 }, { "indicator": "https://github.com/ounissi-meriem/axon/raw/refs/heads/main/src/core/Software-v1.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-07 14:33:08 UTC", "last_seen": "2026-03-07 14:33:08 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/ounissi-meriem/axon/main/src/core/Software-v1.8.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-07 14:33:07 UTC", "last_seen": "2026-03-07 14:33:07 UTC", "sightings": 1 }, { "indicator": "http://222.135.206.203:46848/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 14:30:20 UTC", "last_seen": "2026-03-07 14:30:20 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/hydrangeapaniculatabokchoi171/Basic-Injecting-code-to-roblox-process/refs/heads/main/Guarrau/roblox_code_Basic_to_process_Injecting_3.7.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-07 14:29:07 UTC", "last_seen": "2026-03-07 14:29:07 UTC", "sightings": 1 }, { "indicator": "https://bytebin.ironcrest.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake", "EternalRocks" ], "first_seen": "2026-03-07 14:29:07 UTC", "last_seen": "2026-03-07 14:29:07 UTC", "sightings": 1 }, { "indicator": "https://mora-branch.oakridge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake", "EternalRocks" ], "first_seen": "2026-03-07 14:25:11 UTC", "last_seen": "2026-03-07 14:25:11 UTC", "sightings": 1 }, { "indicator": "http://110.36.23.216:48683/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 14:24:23 UTC", "last_seen": "2026-03-07 14:24:23 UTC", "sightings": 1 }, { "indicator": "http://27.37.124.78:36801/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 14:23:19 UTC", "last_seen": "2026-03-07 14:23:19 UTC", "sightings": 1 }, { "indicator": "http://scriptsprout.oakridge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-07 14:22:22 UTC", "last_seen": "2026-03-07 14:22:22 UTC", "sightings": 1 }, { "indicator": "https://scriptsprout.oakridge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake", "EternalRocks" ], "first_seen": "2026-03-07 14:22:07 UTC", "last_seen": "2026-03-07 14:22:07 UTC", "sightings": 1 }, { "indicator": "http://115.61.104.92:47643/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 14:20:35 UTC", "last_seen": "2026-03-07 14:20:35 UTC", "sightings": 1 }, { "indicator": "http://115.50.26.184:53781/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 14:16:19 UTC", "last_seen": "2026-03-07 14:16:19 UTC", "sightings": 1 }, { "indicator": "http://115.59.69.121:48815/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 14:12:26 UTC", "last_seen": "2026-03-07 14:12:26 UTC", "sightings": 1 }, { "indicator": "http://123.11.34.32:33306/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 14:10:19 UTC", "last_seen": "2026-03-07 14:10:19 UTC", "sightings": 1 }, { "indicator": "http://182.121.158.65:46342/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 14:08:21 UTC", "last_seen": "2026-03-07 14:08:21 UTC", "sightings": 1 }, { "indicator": "https://smarttrue.oakridge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake", "EternalRocks" ], "first_seen": "2026-03-07 14:07:10 UTC", "last_seen": "2026-03-07 14:07:10 UTC", "sightings": 1 }, { "indicator": "http://182.60.12.226:49015/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 14:04:18 UTC", "last_seen": "2026-03-07 14:04:18 UTC", "sightings": 1 }, { "indicator": "http://182.114.195.249:46096/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 14:04:15 UTC", "last_seen": "2026-03-07 14:04:15 UTC", "sightings": 1 }, { "indicator": "http://222.135.206.203:46848/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 14:03:23 UTC", "last_seen": "2026-03-07 14:03:23 UTC", "sightings": 1 }, { "indicator": "http://42.230.33.18:56856/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 14:00:27 UTC", "last_seen": "2026-03-07 14:00:27 UTC", "sightings": 1 }, { "indicator": "http://158.94.211.222/files/rdx/random.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543", "Vidar" ], "first_seen": "2026-03-07 14:00:08 UTC", "last_seen": "2026-03-07 14:00:08 UTC", "sightings": 1 }, { "indicator": "http://110.36.23.216:48683/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 13:58:24 UTC", "last_seen": "2026-03-07 13:58:24 UTC", "sightings": 1 }, { "indicator": "http://115.50.26.184:53781/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 13:57:24 UTC", "last_seen": "2026-03-07 13:57:24 UTC", "sightings": 1 }, { "indicator": "https://hyper-rap1d.lakecrest.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake", "EternalRocks" ], "first_seen": "2026-03-07 13:57:07 UTC", "last_seen": "2026-03-07 13:57:07 UTC", "sightings": 1 }, { "indicator": "http://221.13.235.219:41302/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 13:56:15 UTC", "last_seen": "2026-03-07 13:56:15 UTC", "sightings": 1 }, { "indicator": "https://medi3-graph.lakecrest.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake", "EternalRocks" ], "first_seen": "2026-03-07 13:51:09 UTC", "last_seen": "2026-03-07 13:51:09 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/nasernazem/TInjector_Symbi/refs/heads/master/stub/Injector_Symbi_T_v3.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-07 13:50:09 UTC", "last_seen": "2026-03-07 13:50:09 UTC", "sightings": 1 }, { "indicator": "https://github.com/nasernazem/TInjector_Symbi/raw/refs/heads/master/stub/Injector_Symbi_T_v3.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-07 13:50:09 UTC", "last_seen": "2026-03-07 13:50:09 UTC", "sightings": 1 }, { "indicator": "http://182.114.195.249:46096/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 13:48:19 UTC", "last_seen": "2026-03-07 13:48:19 UTC", "sightings": 1 }, { "indicator": "http://110.37.20.126:52043/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-07 13:45:20 UTC", "last_seen": "2026-03-07 13:45:20 UTC", "sightings": 1 }, { "indicator": "http://115.55.195.125:46698/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 13:45:20 UTC", "last_seen": "2026-03-07 13:45:20 UTC", "sightings": 1 }, { "indicator": "https://veltideis.lakecrest.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake", "EternalRocks" ], "first_seen": "2026-03-07 13:43:08 UTC", "last_seen": "2026-03-07 13:43:08 UTC", "sightings": 1 }, { "indicator": "http://182.121.158.65:46342/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 13:42:15 UTC", "last_seen": "2026-03-07 13:42:15 UTC", "sightings": 1 }, { "indicator": "https://github.com/weedgirl08/Roblox-Scripts/raw/refs/heads/main/terrifyingly/Roblox_Scripts_2.0.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-07 13:38:11 UTC", "last_seen": "2026-03-07 13:38:11 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/weedgirl08/Roblox-Scripts/refs/heads/main/terrifyingly/Roblox_Scripts_2.0.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-07 13:38:07 UTC", "last_seen": "2026-03-07 13:38:07 UTC", "sightings": 1 }, { "indicator": "https://e66c3.lakecrest.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake", "EternalRocks" ], "first_seen": "2026-03-07 13:38:07 UTC", "last_seen": "2026-03-07 13:38:07 UTC", "sightings": 1 }, { "indicator": "https://github.com/yurism123/rbxfpsunlocker/raw/refs/heads/main/puppetman/Software_1.4-beta.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-07 13:36:12 UTC", "last_seen": "2026-03-07 13:36:12 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/yurism123/rbxfpsunlocker/main/puppetman/Software_1.4-beta.3.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SmartLoader", "zip" ], "first_seen": "2026-03-07 13:36:10 UTC", "last_seen": "2026-03-07 13:36:10 UTC", "sightings": 1 }, { "indicator": "http://42.230.33.18:56856/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 13:32:16 UTC", "last_seen": "2026-03-07 13:32:16 UTC", "sightings": 1 }, { "indicator": "https://fernsecur.windfield.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake", "EternalRocks" ], "first_seen": "2026-03-07 13:31:10 UTC", "last_seen": "2026-03-07 13:31:10 UTC", "sightings": 1 }, { "indicator": "http://182.121.84.135:39767/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 13:29:20 UTC", "last_seen": "2026-03-07 13:29:20 UTC", "sightings": 1 }, { "indicator": "http://110.37.20.126:52043/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-07 13:20:20 UTC", "last_seen": "2026-03-07 13:20:20 UTC", "sightings": 1 }, { "indicator": "https://sens0-core.windfield.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake", "EternalRocks" ], "first_seen": "2026-03-07 13:20:14 UTC", "last_seen": "2026-03-07 13:20:14 UTC", "sightings": 1 }, { "indicator": "http://220.202.64.110:37894/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 13:16:13 UTC", "last_seen": "2026-03-07 13:16:13 UTC", "sightings": 1 }, { "indicator": "https://route-spa.windfield.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake", "EternalRocks" ], "first_seen": "2026-03-07 13:16:09 UTC", "last_seen": "2026-03-07 13:16:09 UTC", "sightings": 1 }, { "indicator": "http://115.55.195.125:46698/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 13:13:17 UTC", "last_seen": "2026-03-07 13:13:17 UTC", "sightings": 1 }, { "indicator": "https://cora-clu.stonefield.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake", "EternalRocks" ], "first_seen": "2026-03-07 13:09:08 UTC", "last_seen": "2026-03-07 13:09:08 UTC", "sightings": 1 }, { "indicator": "http://123.235.242.43:53460/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 13:03:18 UTC", "last_seen": "2026-03-07 13:03:18 UTC", "sightings": 1 }, { "indicator": "https://formalcraft.stonefield.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake", "EternalRocks" ], "first_seen": "2026-03-07 13:02:07 UTC", "last_seen": "2026-03-07 13:02:07 UTC", "sightings": 1 }, { "indicator": "http://61.53.89.245:44949/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 12:56:21 UTC", "last_seen": "2026-03-07 12:56:21 UTC", "sightings": 1 }, { "indicator": "http://220.202.64.110:37894/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 12:52:21 UTC", "last_seen": "2026-03-07 12:52:21 UTC", "sightings": 1 }, { "indicator": "http://117.209.91.65:42726/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 12:50:25 UTC", "last_seen": "2026-03-07 12:50:25 UTC", "sightings": 1 }, { "indicator": "https://jqicypl.stonefield.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake", "EternalRocks" ], "first_seen": "2026-03-07 12:48:08 UTC", "last_seen": "2026-03-07 12:48:08 UTC", "sightings": 1 }, { "indicator": "https://fallshie.stonefield.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake", "EternalRocks" ], "first_seen": "2026-03-07 12:40:10 UTC", "last_seen": "2026-03-07 12:40:10 UTC", "sightings": 1 }, { "indicator": "https://azuro.pro/Launcher.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "rustystealer", "zip" ], "first_seen": "2026-03-07 12:25:20 UTC", "last_seen": "2026-03-07 12:25:20 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/bluexxim/FiveM-Spoofer/refs/heads/main/CFXBypass.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "BRAT", "exe" ], "first_seen": "2026-03-07 12:22:12 UTC", "last_seen": "2026-03-07 12:22:12 UTC", "sightings": 1 }, { "indicator": "https://github.com/bluexxim/FiveM-Spoofer/raw/refs/heads/main/CFXBypass.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "BRAT", "exe" ], "first_seen": "2026-03-07 12:22:11 UTC", "last_seen": "2026-03-07 12:22:11 UTC", "sightings": 1 }, { "indicator": "https://alt-cor3.darkridge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake", "EternalRocks" ], "first_seen": "2026-03-07 12:22:07 UTC", "last_seen": "2026-03-07 12:22:07 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/chesst1s/Silentum-Spoofer/refs/heads/main/Silentum_Spoofer.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "BRAT", "exe" ], "first_seen": "2026-03-07 12:21:12 UTC", "last_seen": "2026-03-07 12:21:12 UTC", "sightings": 1 }, { "indicator": "https://github.com/chesst1s/Silentum-Spoofer/raw/refs/heads/main/Silentum_Spoofer.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "BRAT", "exe" ], "first_seen": "2026-03-07 12:21:12 UTC", "last_seen": "2026-03-07 12:21:12 UTC", "sightings": 1 }, { "indicator": "http://61.53.89.245:44949/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 12:20:26 UTC", "last_seen": "2026-03-07 12:20:26 UTC", "sightings": 1 }, { "indicator": "https://raw.githubusercontent.com/b1tcherss/FiveM-Spoofer/refs/heads/main/CFXBypass.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "BRAT", "exe" ], "first_seen": "2026-03-07 12:20:13 UTC", "last_seen": "2026-03-07 12:20:13 UTC", "sightings": 1 }, { "indicator": "https://github.com/b1tcherss/FiveM-Spoofer/raw/refs/heads/main/CFXBypass.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "BRAT", "exe" ], "first_seen": "2026-03-07 12:19:12 UTC", "last_seen": "2026-03-07 12:19:12 UTC", "sightings": 1 }, { "indicator": "https://tintttw.darkridge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake", "EternalRocks" ], "first_seen": "2026-03-07 12:19:10 UTC", "last_seen": "2026-03-07 12:19:10 UTC", "sightings": 1 }, { "indicator": "https://min0r-stream.darkridge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake", "EternalRocks" ], "first_seen": "2026-03-07 12:15:09 UTC", "last_seen": "2026-03-07 12:15:09 UTC", "sightings": 1 }, { "indicator": "http://182.116.118.47:36264/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 12:13:10 UTC", "last_seen": "2026-03-07 12:13:10 UTC", "sightings": 1 }, { "indicator": "http://219.155.221.247:35179/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 12:11:15 UTC", "last_seen": "2026-03-07 12:11:15 UTC", "sightings": 1 }, { "indicator": "http://115.58.165.160:56849/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 12:11:14 UTC", "last_seen": "2026-03-07 12:11:14 UTC", "sightings": 1 }, { "indicator": "http://222.141.73.99:56852/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 12:10:08 UTC", "last_seen": "2026-03-07 12:10:08 UTC", "sightings": 1 }, { "indicator": "http://221.13.235.219:41302/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 12:06:09 UTC", "last_seen": "2026-03-07 12:06:09 UTC", "sightings": 1 }, { "indicator": "http://64.23.205.168/x86_64", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "geofenced", "mirai", "ua-wget", "USA", "x86" ], "first_seen": "2026-03-07 12:05:11 UTC", "last_seen": "2026-03-07 12:05:11 UTC", "sightings": 1 }, { "indicator": "https://vvest-route.darkridge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake", "EternalRocks" ], "first_seen": "2026-03-07 12:03:08 UTC", "last_seen": "2026-03-07 12:03:08 UTC", "sightings": 1 }, { "indicator": "http://117.216.69.188:59342/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 12:02:19 UTC", "last_seen": "2026-03-07 12:02:19 UTC", "sightings": 1 }, { "indicator": "https://5ync4-loop.goldridge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake", "EternalRocks" ], "first_seen": "2026-03-07 12:00:09 UTC", "last_seen": "2026-03-07 12:00:09 UTC", "sightings": 1 }, { "indicator": "https://alignion.goldridge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake", "EternalRocks" ], "first_seen": "2026-03-07 11:28:07 UTC", "last_seen": "2026-03-07 11:28:07 UTC", "sightings": 1 }, { "indicator": "https://udfu.goldridge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake", "EternalRocks" ], "first_seen": "2026-03-07 11:22:09 UTC", "last_seen": "2026-03-07 11:22:09 UTC", "sightings": 1 }, { "indicator": "http://216.126.86.57:35219/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-07 11:21:22 UTC", "last_seen": "2026-03-07 11:21:22 UTC", "sightings": 1 }, { "indicator": "http://113.231.83.43:53128/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 11:15:09 UTC", "last_seen": "2026-03-07 11:15:09 UTC", "sightings": 1 }, { "indicator": "http://115.56.148.67:50436/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 11:12:18 UTC", "last_seen": "2026-03-07 11:12:18 UTC", "sightings": 1 }, { "indicator": "https://drifstac.bluecrest.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake", "EternalRocks" ], "first_seen": "2026-03-07 11:08:12 UTC", "last_seen": "2026-03-07 11:08:12 UTC", "sightings": 1 }, { "indicator": "http://117.209.15.46:37022/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 11:06:14 UTC", "last_seen": "2026-03-07 11:06:14 UTC", "sightings": 1 }, { "indicator": "http://175.168.219.238:46688/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 10:50:21 UTC", "last_seen": "2026-03-07 10:50:21 UTC", "sightings": 1 }, { "indicator": "https://ship-spark.redcrest.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake", "EternalRocks" ], "first_seen": "2026-03-07 10:50:11 UTC", "last_seen": "2026-03-07 10:50:11 UTC", "sightings": 1 }, { "indicator": "http://182.126.110.18:39100/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 10:50:10 UTC", "last_seen": "2026-03-07 10:50:10 UTC", "sightings": 1 }, { "indicator": "http://216.126.86.57:35219/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-07 10:49:31 UTC", "last_seen": "2026-03-07 10:49:31 UTC", "sightings": 1 }, { "indicator": "http://112.252.174.127:49020/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 10:40:27 UTC", "last_seen": "2026-03-07 10:40:27 UTC", "sightings": 1 }, { "indicator": "http://117.209.15.46:37022/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 10:37:15 UTC", "last_seen": "2026-03-07 10:37:15 UTC", "sightings": 1 }, { "indicator": "http://115.63.186.54:49370/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 10:36:08 UTC", "last_seen": "2026-03-07 10:36:08 UTC", "sightings": 1 }, { "indicator": "http://115.63.37.63:37397/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 10:29:16 UTC", "last_seen": "2026-03-07 10:29:16 UTC", "sightings": 1 }, { "indicator": "http://175.173.80.65:35576/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 10:23:23 UTC", "last_seen": "2026-03-07 10:23:23 UTC", "sightings": 1 }, { "indicator": "http://175.168.219.238:46688/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 10:23:22 UTC", "last_seen": "2026-03-07 10:23:22 UTC", "sightings": 1 }, { "indicator": "http://113.221.27.36:35843/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-07 10:20:20 UTC", "last_seen": "2026-03-07 10:20:20 UTC", "sightings": 1 }, { "indicator": "http://59.184.255.231:54241/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 10:16:21 UTC", "last_seen": "2026-03-07 10:16:21 UTC", "sightings": 1 }, { "indicator": "http://120.59.129.60:51336/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 10:16:21 UTC", "last_seen": "2026-03-07 10:16:21 UTC", "sightings": 1 }, { "indicator": "https://crafshi.getreplay.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake", "EternalRocks" ], "first_seen": "2026-03-07 10:09:07 UTC", "last_seen": "2026-03-07 10:09:07 UTC", "sightings": 1 }, { "indicator": "https://geneexp.getreplay.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake", "EternalRocks" ], "first_seen": "2026-03-07 10:04:07 UTC", "last_seen": "2026-03-07 10:04:07 UTC", "sightings": 1 }, { "indicator": "http://115.63.37.63:37397/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 10:04:06 UTC", "last_seen": "2026-03-07 10:04:06 UTC", "sightings": 1 }, { "indicator": "https://73rgwdew.getreplay.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake", "EternalRocks" ], "first_seen": "2026-03-07 10:01:08 UTC", "last_seen": "2026-03-07 10:01:08 UTC", "sightings": 1 }, { "indicator": "http://27.215.109.80:35404/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 10:00:23 UTC", "last_seen": "2026-03-07 10:00:23 UTC", "sightings": 1 }, { "indicator": "http://42.5.90.78:60716/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 10:00:09 UTC", "last_seen": "2026-03-07 10:00:09 UTC", "sightings": 1 }, { "indicator": "http://175.173.80.65:35576/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 09:59:28 UTC", "last_seen": "2026-03-07 09:59:28 UTC", "sightings": 1 }, { "indicator": "http://59.184.255.231:54241/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 09:55:16 UTC", "last_seen": "2026-03-07 09:55:16 UTC", "sightings": 1 }, { "indicator": "http://120.59.129.60:51336/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 09:48:13 UTC", "last_seen": "2026-03-07 09:48:13 UTC", "sightings": 1 }, { "indicator": "http://112.93.201.229:37596/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 09:44:10 UTC", "last_seen": "2026-03-07 09:44:10 UTC", "sightings": 1 }, { "indicator": "https://neo-5ound.caseoptional.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake", "EternalRocks" ], "first_seen": "2026-03-07 09:33:08 UTC", "last_seen": "2026-03-07 09:33:08 UTC", "sightings": 1 }, { "indicator": "http://61.53.91.167:48085/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 09:33:08 UTC", "last_seen": "2026-03-07 09:33:08 UTC", "sightings": 1 }, { "indicator": "http://115.49.251.122:37620/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 09:26:19 UTC", "last_seen": "2026-03-07 09:26:19 UTC", "sightings": 1 }, { "indicator": "http://61.52.80.171:43346/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 09:23:18 UTC", "last_seen": "2026-03-07 09:23:18 UTC", "sightings": 1 }, { "indicator": "http://117.212.28.171:46653/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 09:16:22 UTC", "last_seen": "2026-03-07 09:16:22 UTC", "sightings": 1 }, { "indicator": "http://112.93.201.229:37596/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 09:15:23 UTC", "last_seen": "2026-03-07 09:15:23 UTC", "sightings": 1 }, { "indicator": "https://passiveasset.caseoptional.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake", "EternalRocks" ], "first_seen": "2026-03-07 09:15:08 UTC", "last_seen": "2026-03-07 09:15:08 UTC", "sightings": 1 }, { "indicator": "http://1.181.225.93:60263/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-07 09:14:11 UTC", "last_seen": "2026-03-07 09:14:11 UTC", "sightings": 1 }, { "indicator": "http://27.215.109.80:35404/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 09:13:12 UTC", "last_seen": "2026-03-07 09:13:12 UTC", "sightings": 1 }, { "indicator": "http://117.212.28.171:46653/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 08:54:29 UTC", "last_seen": "2026-03-07 08:54:29 UTC", "sightings": 1 }, { "indicator": "http://110.39.237.192:45496/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 08:54:26 UTC", "last_seen": "2026-03-07 08:54:26 UTC", "sightings": 1 }, { "indicator": "http://115.57.245.209:54579/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 08:53:21 UTC", "last_seen": "2026-03-07 08:53:21 UTC", "sightings": 1 }, { "indicator": "http://61.52.80.171:43346/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 08:49:17 UTC", "last_seen": "2026-03-07 08:49:17 UTC", "sightings": 1 }, { "indicator": "http://110.39.237.192:45496/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 08:48:20 UTC", "last_seen": "2026-03-07 08:48:20 UTC", "sightings": 1 }, { "indicator": "http://59.92.172.38:48594/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 08:36:20 UTC", "last_seen": "2026-03-07 08:36:20 UTC", "sightings": 1 }, { "indicator": "https://0a6nq1j0.budenowcvolt.digital/?=check&&actmn=qMoLVibgciSorqTF", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-07 08:35:08 UTC", "last_seen": "2026-03-07 08:35:08 UTC", "sightings": 1 }, { "indicator": "https://trispireum7.dancingvck.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-07 08:35:08 UTC", "last_seen": "2026-03-07 08:35:08 UTC", "sightings": 1 }, { "indicator": "http://158.94.211.222/files/8468794285/iBC1OE9.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey", "SantaStealer" ], "first_seen": "2026-03-07 08:32:07 UTC", "last_seen": "2026-03-07 08:32:07 UTC", "sightings": 1 }, { "indicator": "http://67.20.225.220:55355/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 08:30:18 UTC", "last_seen": "2026-03-07 08:30:18 UTC", "sightings": 1 }, { "indicator": "http://42.224.195.119:38772/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 08:30:18 UTC", "last_seen": "2026-03-07 08:30:18 UTC", "sightings": 1 }, { "indicator": "http://115.57.245.209:54579/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 08:29:20 UTC", "last_seen": "2026-03-07 08:29:20 UTC", "sightings": 1 }, { "indicator": "http://219.155.221.247:35179/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 08:29:20 UTC", "last_seen": "2026-03-07 08:29:20 UTC", "sightings": 1 }, { "indicator": "https://cargo9-stack.dancingvck.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-07 08:28:06 UTC", "last_seen": "2026-03-07 08:28:06 UTC", "sightings": 1 }, { "indicator": "https://stone3-lab.dancingvck.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-07 08:23:06 UTC", "last_seen": "2026-03-07 08:23:06 UTC", "sightings": 1 }, { "indicator": "http://59.92.172.38:48594/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 08:19:21 UTC", "last_seen": "2026-03-07 08:19:21 UTC", "sightings": 1 }, { "indicator": "http://110.37.112.100:35690/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-07 08:18:21 UTC", "last_seen": "2026-03-07 08:18:21 UTC", "sightings": 1 }, { "indicator": "https://pifn62.dancingvck.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-07 08:18:06 UTC", "last_seen": "2026-03-07 08:18:06 UTC", "sightings": 1 }, { "indicator": "http://182.126.93.159:49996/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 08:17:22 UTC", "last_seen": "2026-03-07 08:17:22 UTC", "sightings": 1 }, { "indicator": "http://175.165.126.17:43363/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 08:16:20 UTC", "last_seen": "2026-03-07 08:16:20 UTC", "sightings": 1 }, { "indicator": "http://117.205.172.7:59227/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 08:08:22 UTC", "last_seen": "2026-03-07 08:08:22 UTC", "sightings": 1 }, { "indicator": "http://87.121.84.18/mipsel", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-07 08:06:26 UTC", "last_seen": "2026-03-07 08:06:26 UTC", "sightings": 1 }, { "indicator": "http://87.121.84.18/arm", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-07 08:06:26 UTC", "last_seen": "2026-03-07 08:06:26 UTC", "sightings": 1 }, { "indicator": "http://45.141.148.121/bins/x86_64", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-07 08:06:26 UTC", "last_seen": "2026-03-07 08:06:26 UTC", "sightings": 1 }, { "indicator": "http://87.121.84.18/arm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-07 08:06:22 UTC", "last_seen": "2026-03-07 08:06:22 UTC", "sightings": 1 }, { "indicator": "http://45.141.148.121/bins/arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-07 08:06:22 UTC", "last_seen": "2026-03-07 08:06:22 UTC", "sightings": 1 }, { "indicator": "http://87.121.84.18/arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-07 08:06:21 UTC", "last_seen": "2026-03-07 08:06:21 UTC", "sightings": 1 }, { "indicator": "http://45.141.148.121/bins/m68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-07 08:06:15 UTC", "last_seen": "2026-03-07 08:06:15 UTC", "sightings": 1 }, { "indicator": "http://45.141.148.121/bins/mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-07 08:06:15 UTC", "last_seen": "2026-03-07 08:06:15 UTC", "sightings": 1 }, { "indicator": "http://45.141.148.121/bins/ppc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-07 08:06:15 UTC", "last_seen": "2026-03-07 08:06:15 UTC", "sightings": 1 }, { "indicator": "http://45.141.148.121/bins/arm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-07 08:06:15 UTC", "last_seen": "2026-03-07 08:06:15 UTC", "sightings": 1 }, { "indicator": "http://45.141.148.121/bins/sh4", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-07 08:06:15 UTC", "last_seen": "2026-03-07 08:06:15 UTC", "sightings": 1 }, { "indicator": "http://45.141.148.121/bins/spc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-07 08:06:15 UTC", "last_seen": "2026-03-07 08:06:15 UTC", "sightings": 1 }, { "indicator": "http://45.141.148.121/bins/arm4", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-07 08:06:15 UTC", "last_seen": "2026-03-07 08:06:15 UTC", "sightings": 1 }, { "indicator": "http://45.141.148.121/bins/arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-07 08:06:15 UTC", "last_seen": "2026-03-07 08:06:15 UTC", "sightings": 1 }, { "indicator": "http://45.141.148.121/bins/mpsl", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-07 08:06:15 UTC", "last_seen": "2026-03-07 08:06:15 UTC", "sightings": 1 }, { "indicator": "http://45.141.148.121/bins/x86", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-07 08:06:15 UTC", "last_seen": "2026-03-07 08:06:15 UTC", "sightings": 1 }, { "indicator": "http://87.121.84.18/x86_64", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-07 08:06:10 UTC", "last_seen": "2026-03-07 08:06:10 UTC", "sightings": 1 }, { "indicator": "http://87.121.84.18/arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-07 08:06:10 UTC", "last_seen": "2026-03-07 08:06:10 UTC", "sightings": 1 }, { "indicator": "http://87.121.84.18/mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-07 08:06:10 UTC", "last_seen": "2026-03-07 08:06:10 UTC", "sightings": 1 }, { "indicator": "http://196.251.107.133/bins/kla.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai", "sh", "ua-wget" ], "first_seen": "2026-03-07 08:04:22 UTC", "last_seen": "2026-03-07 08:04:22 UTC", "sightings": 1 }, { "indicator": "http://42.235.2.62:59262/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 07:59:24 UTC", "last_seen": "2026-03-07 07:59:24 UTC", "sightings": 1 }, { "indicator": "https://mh738ng0.reinsurunrock.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-07 07:56:06 UTC", "last_seen": "2026-03-07 07:56:06 UTC", "sightings": 1 }, { "indicator": "http://110.37.112.100:35690/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-07 07:55:25 UTC", "last_seen": "2026-03-07 07:55:25 UTC", "sightings": 1 }, { "indicator": "http://117.205.172.7:59227/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 07:50:33 UTC", "last_seen": "2026-03-07 07:50:33 UTC", "sightings": 1 }, { "indicator": "http://175.165.126.17:43363/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 07:49:18 UTC", "last_seen": "2026-03-07 07:49:18 UTC", "sightings": 1 }, { "indicator": "http://182.121.8.3:33273/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 07:46:16 UTC", "last_seen": "2026-03-07 07:46:16 UTC", "sightings": 1 }, { "indicator": "https://n3ural-mark.draniercismn.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-07 07:43:06 UTC", "last_seen": "2026-03-07 07:43:06 UTC", "sightings": 1 }, { "indicator": "http://110.37.118.241:46513/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-07 07:42:20 UTC", "last_seen": "2026-03-07 07:42:20 UTC", "sightings": 1 }, { "indicator": "http://60.18.107.0:42065/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 07:36:15 UTC", "last_seen": "2026-03-07 07:36:15 UTC", "sightings": 1 }, { "indicator": "http://42.235.40.2:41914/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 07:35:16 UTC", "last_seen": "2026-03-07 07:35:16 UTC", "sightings": 1 }, { "indicator": "http://115.57.233.248:46235/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 07:32:19 UTC", "last_seen": "2026-03-07 07:32:19 UTC", "sightings": 1 }, { "indicator": "https://coralwil.draniercismn.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-07 07:32:08 UTC", "last_seen": "2026-03-07 07:32:08 UTC", "sightings": 1 }, { "indicator": "http://42.235.2.62:59262/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 07:31:20 UTC", "last_seen": "2026-03-07 07:31:20 UTC", "sightings": 1 }, { "indicator": "http://125.45.11.211:57452/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 07:29:22 UTC", "last_seen": "2026-03-07 07:29:22 UTC", "sightings": 1 }, { "indicator": "http://85.12.204.206:39193/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 07:28:11 UTC", "last_seen": "2026-03-07 07:28:11 UTC", "sightings": 1 }, { "indicator": "http://60.18.107.0:42065/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 07:16:16 UTC", "last_seen": "2026-03-07 07:16:16 UTC", "sightings": 1 }, { "indicator": "http://115.57.233.248:46235/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 07:13:21 UTC", "last_seen": "2026-03-07 07:13:21 UTC", "sightings": 1 }, { "indicator": "http://182.112.224.251:55651/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 07:07:18 UTC", "last_seen": "2026-03-07 07:07:18 UTC", "sightings": 1 }, { "indicator": "http://user.keio.ac.jp/~rhotta/hellog/upload/upl/q4bRYpi9WFXyAHO4dIYG/python312x86.zip", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-07 07:07:08 UTC", "last_seen": "2026-03-07 07:07:08 UTC", "sightings": 1 }, { "indicator": "https://user.keio.ac.jp/~rhotta/hellog/upload/upload.cgi?get=00359", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-07 07:07:06 UTC", "last_seen": "2026-03-07 07:07:06 UTC", "sightings": 1 }, { "indicator": "https://pub-826b2258a9f74a40abe9ee543f2409a4.r2.dev/3.600Hnevsak.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "SilverFox" ], "first_seen": "2026-03-07 07:06:20 UTC", "last_seen": "2026-03-07 07:06:20 UTC", "sightings": 1 }, { "indicator": "https://103.27.157.144/api/download", "indicator_type": "url", "source": "URLhaus", "tags": [ "rustystealer", "Vidar" ], "first_seen": "2026-03-07 07:06:19 UTC", "last_seen": "2026-03-07 07:06:19 UTC", "sightings": 1 }, { "indicator": "http://union.macoms.la/jquery.min-4.0.2.js", "indicator_type": "url", "source": "URLhaus", "tags": [ "js" ], "first_seen": "2026-03-07 07:06:19 UTC", "last_seen": "2026-03-07 07:06:19 UTC", "sightings": 1 }, { "indicator": "http://fil.ydns.eu/jhuytr/abcknIe.txt", "indicator_type": "url", "source": "URLhaus", "tags": [ "rev-base64-loader" ], "first_seen": "2026-03-07 07:06:08 UTC", "last_seen": "2026-03-07 07:06:08 UTC", "sightings": 1 }, { "indicator": "https://91.92.243.117/TaskSvc.vbs", "indicator_type": "url", "source": "URLhaus", "tags": [ "GuLoader", "vbs" ], "first_seen": "2026-03-07 07:06:07 UTC", "last_seen": "2026-03-07 07:06:07 UTC", "sightings": 1 }, { "indicator": "http://172.94.9.250/d/xxx89413", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-07 07:06:07 UTC", "last_seen": "2026-03-07 07:06:07 UTC", "sightings": 1 }, { "indicator": "http://172.94.9.250/d/xxx59361", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-07 07:06:06 UTC", "last_seen": "2026-03-07 07:06:06 UTC", "sightings": 1 }, { "indicator": "http://pastefy.app/slc7jpkp/raw", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-07 07:06:06 UTC", "last_seen": "2026-03-07 07:06:06 UTC", "sightings": 1 }, { "indicator": "https://tb2mod.com/setup.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "exe", "NovaShadow" ], "first_seen": "2026-03-07 07:06:06 UTC", "last_seen": "2026-03-07 07:06:06 UTC", "sightings": 1 }, { "indicator": "https://baraltransportes.com/20khgc26oiwefoibfuww.php", "indicator_type": "url", "source": "URLhaus", "tags": [ "Lumma", "zgRAT" ], "first_seen": "2026-03-07 07:06:06 UTC", "last_seen": "2026-03-07 07:06:06 UTC", "sightings": 1 }, { "indicator": "https://tb2mod.com/voidrealms-1.8.9.jar", "indicator_type": "url", "source": "URLhaus", "tags": [ "jar" ], "first_seen": "2026-03-07 07:06:06 UTC", "last_seen": "2026-03-07 07:06:06 UTC", "sightings": 1 }, { "indicator": "http://158.94.211.222/files/unique2/random.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey", "gcleaner" ], "first_seen": "2026-03-07 07:06:05 UTC", "last_seen": "2026-03-07 07:06:05 UTC", "sightings": 1 }, { "indicator": "https://keitarocheats.com/api/download", "indicator_type": "url", "source": "URLhaus", "tags": [ "Vidar" ], "first_seen": "2026-03-07 07:06:05 UTC", "last_seen": "2026-03-07 07:06:05 UTC", "sightings": 1 }, { "indicator": "http://222.141.73.99:56852/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 07:04:09 UTC", "last_seen": "2026-03-07 07:04:09 UTC", "sightings": 1 }, { "indicator": "http://85.12.204.206:39193/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 07:02:06 UTC", "last_seen": "2026-03-07 07:02:06 UTC", "sightings": 1 }, { "indicator": "http://27.216.210.134:46850/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 06:49:16 UTC", "last_seen": "2026-03-07 06:49:16 UTC", "sightings": 1 }, { "indicator": "http://125.41.136.232:40455/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 06:40:18 UTC", "last_seen": "2026-03-07 06:40:18 UTC", "sightings": 1 }, { "indicator": "http://125.40.86.150:56643/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 06:39:14 UTC", "last_seen": "2026-03-07 06:39:14 UTC", "sightings": 1 }, { "indicator": "http://112.248.114.53:41153/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 06:27:19 UTC", "last_seen": "2026-03-07 06:27:19 UTC", "sightings": 1 }, { "indicator": "http://112.248.114.53:41153/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 06:26:42 UTC", "last_seen": "2026-03-07 06:26:42 UTC", "sightings": 1 }, { "indicator": "http://125.40.86.150:56643/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 06:20:18 UTC", "last_seen": "2026-03-07 06:20:18 UTC", "sightings": 1 }, { "indicator": "http://125.41.136.232:40455/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 06:17:16 UTC", "last_seen": "2026-03-07 06:17:16 UTC", "sightings": 1 }, { "indicator": "https://replay-net.putreplay.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-07 06:09:08 UTC", "last_seen": "2026-03-07 06:09:08 UTC", "sightings": 1 }, { "indicator": "https://put08.putreplay.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-07 06:02:07 UTC", "last_seen": "2026-03-07 06:02:07 UTC", "sightings": 1 }, { "indicator": "https://g70aw0re.bucketeuthan.digital/?=check&&actmn=rsVbayURMrZwROJO", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-07 06:01:10 UTC", "last_seen": "2026-03-07 06:01:10 UTC", "sightings": 1 }, { "indicator": "http://222.142.250.190:36174/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 05:50:14 UTC", "last_seen": "2026-03-07 05:50:14 UTC", "sightings": 1 }, { "indicator": "http://222.142.250.190:36174/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 05:47:19 UTC", "last_seen": "2026-03-07 05:47:19 UTC", "sightings": 1 }, { "indicator": "http://112.248.161.9:33874/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 05:32:23 UTC", "last_seen": "2026-03-07 05:32:23 UTC", "sightings": 1 }, { "indicator": "http://158.94.211.222/files/8548282130/trP9KGI.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543", "QuasarRAT" ], "first_seen": "2026-03-07 05:20:10 UTC", "last_seen": "2026-03-07 05:20:10 UTC", "sightings": 1 }, { "indicator": "https://us06web.zoom.us.chsh.us/Windows/download.php", "indicator_type": "url", "source": "URLhaus", "tags": [ "AteraAgent", "ua-wget" ], "first_seen": "2026-03-07 05:19:23 UTC", "last_seen": "2026-03-07 05:19:23 UTC", "sightings": 1 }, { "indicator": "https://mod-logic.automodcompass.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-07 05:19:07 UTC", "last_seen": "2026-03-07 05:19:07 UTC", "sightings": 1 }, { "indicator": "https://www.unique.hatumena.com/Windows/download.php", "indicator_type": "url", "source": "URLhaus", "tags": [ "GoToResolve", "ua-wget" ], "first_seen": "2026-03-07 05:18:20 UTC", "last_seen": "2026-03-07 05:18:20 UTC", "sightings": 1 }, { "indicator": "https://www.zoom.kazoodle.com/Windows/download.php", "indicator_type": "url", "source": "URLhaus", "tags": [ "ua-wget" ], "first_seen": "2026-03-07 05:18:19 UTC", "last_seen": "2026-03-07 05:18:19 UTC", "sightings": 1 }, { "indicator": "https://www.zoom.bigjaco.com/Windows/download.php", "indicator_type": "url", "source": "URLhaus", "tags": [ "ua-wget" ], "first_seen": "2026-03-07 05:18:19 UTC", "last_seen": "2026-03-07 05:18:19 UTC", "sightings": 1 }, { "indicator": "https://adobe-viewer.0lsons.com/acrobat/file/Hamstra_rmm_v2.4.0.68_oid50deea8e-904c-4277-94ad-d32f00ba0060_bidi6UKA5NamUak6hwHpuWE5w.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "ua-wget" ], "first_seen": "2026-03-07 05:18:18 UTC", "last_seen": "2026-03-07 05:18:18 UTC", "sightings": 1 }, { "indicator": "https://us06web.zoom.hiaa.us/Windows/download.php", "indicator_type": "url", "source": "URLhaus", "tags": [ "AteraAgent", "ua-wget" ], "first_seen": "2026-03-07 05:18:15 UTC", "last_seen": "2026-03-07 05:18:15 UTC", "sightings": 1 }, { "indicator": "http://110.37.52.73:42875/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 05:14:07 UTC", "last_seen": "2026-03-07 05:14:07 UTC", "sightings": 1 }, { "indicator": "http://115.55.6.14:41003/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 05:10:19 UTC", "last_seen": "2026-03-07 05:10:19 UTC", "sightings": 1 }, { "indicator": "http://158.94.211.222/files/8548282130/trP9KGI.bat", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey", "QuasarRAT" ], "first_seen": "2026-03-07 05:08:12 UTC", "last_seen": "2026-03-07 05:08:12 UTC", "sightings": 1 }, { "indicator": "http://112.248.161.9:33874/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 05:07:29 UTC", "last_seen": "2026-03-07 05:07:29 UTC", "sightings": 1 }, { "indicator": "https://us04web.zoom.us.pacl.us/Windows/download.php", "indicator_type": "url", "source": "URLhaus", "tags": [ "AteraAgent", "exe", "ua-wget" ], "first_seen": "2026-03-07 05:07:17 UTC", "last_seen": "2026-03-07 05:07:17 UTC", "sightings": 1 }, { "indicator": "https://us05web.zoom.us.vdns.us/Windows/download.php", "indicator_type": "url", "source": "URLhaus", "tags": [ "exe", "ua-wget" ], "first_seen": "2026-03-07 05:07:16 UTC", "last_seen": "2026-03-07 05:07:16 UTC", "sightings": 1 }, { "indicator": "https://us06web.zoom.patho.us/Windows/download.php", "indicator_type": "url", "source": "URLhaus", "tags": [ "connectwise", "exe", "ua-wget" ], "first_seen": "2026-03-07 05:07:12 UTC", "last_seen": "2026-03-07 05:07:12 UTC", "sightings": 1 }, { "indicator": "https://ssa.portal.tobuy.us/home/download.php", "indicator_type": "url", "source": "URLhaus", "tags": [ "exe", "ua-wget" ], "first_seen": "2026-03-07 05:07:09 UTC", "last_seen": "2026-03-07 05:07:09 UTC", "sightings": 1 }, { "indicator": "https://ssa.portal.eigenlicht.us/home/download.php", "indicator_type": "url", "source": "URLhaus", "tags": [ "exe", "ua-wget" ], "first_seen": "2026-03-07 05:07:09 UTC", "last_seen": "2026-03-07 05:07:09 UTC", "sightings": 1 }, { "indicator": "https://portal.ssa.s-w-a-t.us/home/download.php", "indicator_type": "url", "source": "URLhaus", "tags": [ "exe", "ua-wget" ], "first_seen": "2026-03-07 05:07:09 UTC", "last_seen": "2026-03-07 05:07:09 UTC", "sightings": 1 }, { "indicator": "https://ssa.portal.cogitar.us/home/download.php", "indicator_type": "url", "source": "URLhaus", "tags": [ "exe", "ua-wget" ], "first_seen": "2026-03-07 05:07:09 UTC", "last_seen": "2026-03-07 05:07:09 UTC", "sightings": 1 }, { "indicator": "http://219.154.172.178:58329/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 05:01:09 UTC", "last_seen": "2026-03-07 05:01:09 UTC", "sightings": 1 }, { "indicator": "https://mod-track.automodcompass.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-07 05:01:06 UTC", "last_seen": "2026-03-07 05:01:06 UTC", "sightings": 1 }, { "indicator": "http://110.37.52.73:42875/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 04:52:11 UTC", "last_seen": "2026-03-07 04:52:11 UTC", "sightings": 1 }, { "indicator": "https://us06web.zoom.us.ez2.us/Windows/download.php", "indicator_type": "url", "source": "URLhaus", "tags": [ "exe", "ua-wget" ], "first_seen": "2026-03-07 04:45:38 UTC", "last_seen": "2026-03-07 04:45:38 UTC", "sightings": 1 }, { "indicator": "https://us04web.zoom.us.hmail.us/Windows/download.php", "indicator_type": "url", "source": "URLhaus", "tags": [ "exe", "ua-wget" ], "first_seen": "2026-03-07 04:45:28 UTC", "last_seen": "2026-03-07 04:45:28 UTC", "sightings": 1 }, { "indicator": "https://ssa.portal.ct1.us/home/download.php", "indicator_type": "url", "source": "URLhaus", "tags": [ "exe", "ua-wget" ], "first_seen": "2026-03-07 04:45:26 UTC", "last_seen": "2026-03-07 04:45:26 UTC", "sightings": 1 }, { "indicator": "https://ssa.portal.muratov.us/home/download.php", "indicator_type": "url", "source": "URLhaus", "tags": [ "exe", "ua-wget" ], "first_seen": "2026-03-07 04:45:25 UTC", "last_seen": "2026-03-07 04:45:25 UTC", "sightings": 1 }, { "indicator": "https://adobe-viewer.mutluay.com/acrobat/file/Z-Pro_rmm_v2.4.0.68_oid2dfc226c-298e-4e3a-8120-73635d88c97e_bid6Olr7p!NCEGd-XXL4mNbJA.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "exe", "ua-wget" ], "first_seen": "2026-03-07 04:45:23 UTC", "last_seen": "2026-03-07 04:45:23 UTC", "sightings": 1 }, { "indicator": "http://123.5.144.20:58307/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 04:41:16 UTC", "last_seen": "2026-03-07 04:41:16 UTC", "sightings": 1 }, { "indicator": "https://auto-compass.automodcompass.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-07 04:34:08 UTC", "last_seen": "2026-03-07 04:34:08 UTC", "sightings": 1 }, { "indicator": "http://110.37.27.87:58362/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 04:30:13 UTC", "last_seen": "2026-03-07 04:30:13 UTC", "sightings": 1 }, { "indicator": "http://117.220.79.211:55889/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-07 04:29:14 UTC", "last_seen": "2026-03-07 04:29:14 UTC", "sightings": 1 }, { "indicator": "http://42.235.53.106:43319/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 04:29:12 UTC", "last_seen": "2026-03-07 04:29:12 UTC", "sightings": 1 }, { "indicator": "http://61.52.229.116:51863/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 04:27:18 UTC", "last_seen": "2026-03-07 04:27:18 UTC", "sightings": 1 }, { "indicator": "http://156.229.164.94/n2/mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "geofenced", "mips", "mirai", "ua-wget", "USA" ], "first_seen": "2026-03-07 04:20:09 UTC", "last_seen": "2026-03-07 04:20:09 UTC", "sightings": 1 }, { "indicator": "http://156.229.164.94/n2/x86", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "geofenced", "mirai", "ua-wget", "USA", "x86" ], "first_seen": "2026-03-07 04:20:08 UTC", "last_seen": "2026-03-07 04:20:08 UTC", "sightings": 1 }, { "indicator": "http://156.229.164.94/n2/mpsl", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "geofenced", "mips", "mirai", "ua-wget", "USA" ], "first_seen": "2026-03-07 04:20:08 UTC", "last_seen": "2026-03-07 04:20:08 UTC", "sightings": 1 }, { "indicator": "http://156.229.164.94/n2/teleport", "indicator_type": "url", "source": "URLhaus", "tags": [ "geofenced", "mirai", "sh", "ua-wget", "USA" ], "first_seen": "2026-03-07 04:20:08 UTC", "last_seen": "2026-03-07 04:20:08 UTC", "sightings": 1 }, { "indicator": "http://123.5.144.20:58307/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 04:16:24 UTC", "last_seen": "2026-03-07 04:16:24 UTC", "sightings": 1 }, { "indicator": "https://ional-sync.nasotoptional.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-07 04:15:10 UTC", "last_seen": "2026-03-07 04:15:10 UTC", "sightings": 1 }, { "indicator": "https://file-viewer.alcapps.com/acrobat/file/Pro_rmm_v2.4.0.68_oid1524eda9-e102-474d-8c72-5dc11f4d9b0a_fidwSSV8saQfEiD32U5J1fN8Q.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "exe", "ua-wget" ], "first_seen": "2026-03-07 04:11:16 UTC", "last_seen": "2026-03-07 04:11:16 UTC", "sightings": 1 }, { "indicator": "https://us06web.zoom.us.tobuy.us/Windows/download.php", "indicator_type": "url", "source": "URLhaus", "tags": [ "exe", "ua-wget" ], "first_seen": "2026-03-07 04:11:12 UTC", "last_seen": "2026-03-07 04:11:12 UTC", "sightings": 1 }, { "indicator": "https://adobe-viewer.iziliang.com/acrobat/file/zoom_rmm_v2.4.0.68_oid32c9ba59-68df-4a50-9e7c-1a07b2ac80d9_bidBqKhsPYV9E2SHdgskYRu0g.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "exe", "ua-wget" ], "first_seen": "2026-03-07 04:11:11 UTC", "last_seen": "2026-03-07 04:11:11 UTC", "sightings": 1 }, { "indicator": "http://117.222.167.244:50327/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 04:08:20 UTC", "last_seen": "2026-03-07 04:08:20 UTC", "sightings": 1 }, { "indicator": "http://115.50.230.99:49584/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 04:01:17 UTC", "last_seen": "2026-03-07 04:01:17 UTC", "sightings": 1 }, { "indicator": "http://39.90.185.17:53039/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 03:58:18 UTC", "last_seen": "2026-03-07 03:58:18 UTC", "sightings": 1 }, { "indicator": "https://us05web.zoom.us.1ax.us/Windows/download.php", "indicator_type": "url", "source": "URLhaus", "tags": [ "exe", "ua-wget" ], "first_seen": "2026-03-07 03:55:16 UTC", "last_seen": "2026-03-07 03:55:16 UTC", "sightings": 1 }, { "indicator": "https://adobe-viewer.parallelsw.com/acrobat/file/Pro_rmm_v2.4.0.68_oidf2c0c91d-dfcd-4480-ab33-273bdee33c5f_fidhwkNyISt4EK3ZdGQHkGtMQ.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "exe", "ua-wget" ], "first_seen": "2026-03-07 03:54:12 UTC", "last_seen": "2026-03-07 03:54:12 UTC", "sightings": 1 }, { "indicator": "https://us04web.zoom.us.3cm.us/Windows/download.php", "indicator_type": "url", "source": "URLhaus", "tags": [ "exe", "ua-wget" ], "first_seen": "2026-03-07 03:49:19 UTC", "last_seen": "2026-03-07 03:49:19 UTC", "sightings": 1 }, { "indicator": "http://115.55.6.14:41003/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 03:47:14 UTC", "last_seen": "2026-03-07 03:47:14 UTC", "sightings": 1 }, { "indicator": "http://117.222.167.244:50327/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 03:47:14 UTC", "last_seen": "2026-03-07 03:47:14 UTC", "sightings": 1 }, { "indicator": "http://123.11.14.88:45615/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 03:46:10 UTC", "last_seen": "2026-03-07 03:46:10 UTC", "sightings": 1 }, { "indicator": "http://188.124.133.173:57341/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-07 03:46:10 UTC", "last_seen": "2026-03-07 03:46:10 UTC", "sightings": 1 }, { "indicator": "http://123.11.14.88:45615/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 03:42:18 UTC", "last_seen": "2026-03-07 03:42:18 UTC", "sightings": 1 }, { "indicator": "https://file-viewer.detprod.com/acrobat/file/start_rmm_v2.4.0.68_oida1ecb191-39b6-4334-8f63-2cb6c5385be6_bidQ2uaAqj91kmIakbIMDyJmw.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "exe", "ua-wget" ], "first_seen": "2026-03-07 03:41:20 UTC", "last_seen": "2026-03-07 03:41:20 UTC", "sightings": 1 }, { "indicator": "https://ional-hub.nasotoptional.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-07 03:41:07 UTC", "last_seen": "2026-03-07 03:41:07 UTC", "sightings": 1 }, { "indicator": "https://lent-net.chopexcellent.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-07 03:31:08 UTC", "last_seen": "2026-03-07 03:31:08 UTC", "sightings": 1 }, { "indicator": "http://115.51.31.86:54913/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 03:20:19 UTC", "last_seen": "2026-03-07 03:20:19 UTC", "sightings": 1 }, { "indicator": "http://188.124.133.173:57341/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-07 03:20:18 UTC", "last_seen": "2026-03-07 03:20:18 UTC", "sightings": 1 }, { "indicator": "http://1.181.225.93:60263/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-07 03:13:13 UTC", "last_seen": "2026-03-07 03:13:13 UTC", "sightings": 1 }, { "indicator": "http://115.57.233.214:48305/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 03:06:21 UTC", "last_seen": "2026-03-07 03:06:21 UTC", "sightings": 1 }, { "indicator": "http://110.36.80.171:60885/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 03:00:21 UTC", "last_seen": "2026-03-07 03:00:21 UTC", "sightings": 1 }, { "indicator": "http://158.94.211.222/files/8468794285/5vroDFE.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey", "OffLoader", "SantaStealer" ], "first_seen": "2026-03-07 02:53:09 UTC", "last_seen": "2026-03-07 02:53:09 UTC", "sightings": 1 }, { "indicator": "http://115.50.47.213:50338/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 02:51:26 UTC", "last_seen": "2026-03-07 02:51:26 UTC", "sightings": 1 }, { "indicator": "http://182.121.84.135:39767/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 02:41:21 UTC", "last_seen": "2026-03-07 02:41:21 UTC", "sightings": 1 }, { "indicator": "https://dance-v9.dancingvcr.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-07 02:39:07 UTC", "last_seen": "2026-03-07 02:39:07 UTC", "sightings": 1 }, { "indicator": "https://vcr-logic.dancingvcr.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-07 02:36:07 UTC", "last_seen": "2026-03-07 02:36:07 UTC", "sightings": 1 }, { "indicator": "http://115.57.233.214:48305/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 02:35:21 UTC", "last_seen": "2026-03-07 02:35:21 UTC", "sightings": 1 }, { "indicator": "https://move-node.dancingvcr.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-07 02:33:10 UTC", "last_seen": "2026-03-07 02:33:10 UTC", "sightings": 1 }, { "indicator": "http://115.50.47.213:50338/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 02:30:29 UTC", "last_seen": "2026-03-07 02:30:29 UTC", "sightings": 1 }, { "indicator": "http://115.52.29.206:48762/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 02:30:23 UTC", "last_seen": "2026-03-07 02:30:23 UTC", "sightings": 1 }, { "indicator": "http://115.52.29.206:48762/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 02:28:16 UTC", "last_seen": "2026-03-07 02:28:16 UTC", "sightings": 1 }, { "indicator": "http://115.58.165.160:56849/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 02:27:24 UTC", "last_seen": "2026-03-07 02:27:24 UTC", "sightings": 1 }, { "indicator": "http://182.116.86.221:60894/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 02:23:23 UTC", "last_seen": "2026-03-07 02:23:23 UTC", "sightings": 1 }, { "indicator": "https://dance-vcr.dancingvcr.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-07 02:12:06 UTC", "last_seen": "2026-03-07 02:12:06 UTC", "sightings": 1 }, { "indicator": "http://42.86.164.225:50559/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 02:11:23 UTC", "last_seen": "2026-03-07 02:11:23 UTC", "sightings": 1 }, { "indicator": "http://42.232.227.79:32981/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 02:10:20 UTC", "last_seen": "2026-03-07 02:10:20 UTC", "sightings": 1 }, { "indicator": "https://sur-sync.reinsurundock.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-07 02:02:09 UTC", "last_seen": "2026-03-07 02:02:09 UTC", "sightings": 1 }, { "indicator": "http://113.239.127.20:40270/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 02:00:29 UTC", "last_seen": "2026-03-07 02:00:29 UTC", "sightings": 1 }, { "indicator": "http://182.116.15.170:59239/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 01:53:27 UTC", "last_seen": "2026-03-07 01:53:27 UTC", "sightings": 1 }, { "indicator": "https://rein-v44.reinsurundock.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-07 01:53:08 UTC", "last_seen": "2026-03-07 01:53:08 UTC", "sightings": 1 }, { "indicator": "https://sur-vault.reinsurundock.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-07 01:45:08 UTC", "last_seen": "2026-03-07 01:45:08 UTC", "sightings": 1 }, { "indicator": "http://42.86.164.225:50559/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 01:43:18 UTC", "last_seen": "2026-03-07 01:43:18 UTC", "sightings": 1 }, { "indicator": "https://rein-dock.reinsurundock.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-07 01:40:08 UTC", "last_seen": "2026-03-07 01:40:08 UTC", "sightings": 1 }, { "indicator": "http://42.232.227.79:32981/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 01:39:14 UTC", "last_seen": "2026-03-07 01:39:14 UTC", "sightings": 1 }, { "indicator": "http://123.11.10.195:44098/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 01:38:11 UTC", "last_seen": "2026-03-07 01:38:11 UTC", "sightings": 1 }, { "indicator": "https://cism-flow.draniercism.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-07 01:37:07 UTC", "last_seen": "2026-03-07 01:37:07 UTC", "sightings": 1 }, { "indicator": "https://dran02.draniercism.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-07 01:33:09 UTC", "last_seen": "2026-03-07 01:33:09 UTC", "sightings": 1 }, { "indicator": "https://cism-base.draniercism.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-07 01:23:11 UTC", "last_seen": "2026-03-07 01:23:11 UTC", "sightings": 1 }, { "indicator": "https://dran-optic.draniercism.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-07 01:20:09 UTC", "last_seen": "2026-03-07 01:20:09 UTC", "sightings": 1 }, { "indicator": "http://123.11.10.195:44098/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 01:08:15 UTC", "last_seen": "2026-03-07 01:08:15 UTC", "sightings": 1 }, { "indicator": "http://175.173.93.137:47108/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 01:05:18 UTC", "last_seen": "2026-03-07 01:05:18 UTC", "sightings": 1 }, { "indicator": "http://42.235.53.106:43319/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 00:56:15 UTC", "last_seen": "2026-03-07 00:56:15 UTC", "sightings": 1 }, { "indicator": "http://175.173.93.137:47108/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 00:55:10 UTC", "last_seen": "2026-03-07 00:55:10 UTC", "sightings": 1 }, { "indicator": "https://petun-data.albanianpetun.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-07 00:54:07 UTC", "last_seen": "2026-03-07 00:54:07 UTC", "sightings": 1 }, { "indicator": "https://petun-sys.albanianpetun.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-07 00:41:07 UTC", "last_seen": "2026-03-07 00:41:07 UTC", "sightings": 1 }, { "indicator": "http://125.41.0.56:39690/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 00:38:16 UTC", "last_seen": "2026-03-07 00:38:16 UTC", "sightings": 1 }, { "indicator": "http://125.41.0.56:39690/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 00:26:31 UTC", "last_seen": "2026-03-07 00:26:31 UTC", "sightings": 1 }, { "indicator": "http://61.3.30.2:33217/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 00:21:19 UTC", "last_seen": "2026-03-07 00:21:19 UTC", "sightings": 1 }, { "indicator": "http://124.94.78.2:40299/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 00:16:23 UTC", "last_seen": "2026-03-07 00:16:23 UTC", "sightings": 1 }, { "indicator": "https://pres-mode.horspresence.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-07 00:15:08 UTC", "last_seen": "2026-03-07 00:15:08 UTC", "sightings": 1 }, { "indicator": "http://110.37.118.241:46513/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-07 00:13:18 UTC", "last_seen": "2026-03-07 00:13:18 UTC", "sightings": 1 }, { "indicator": "http://123.14.41.188:52683/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-07 00:09:17 UTC", "last_seen": "2026-03-07 00:09:17 UTC", "sightings": 1 }, { "indicator": "http://158.94.211.222/files/6902778688/uxQfUNw.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543", "VenomStealer" ], "first_seen": "2026-03-07 00:05:10 UTC", "last_seen": "2026-03-07 00:05:10 UTC", "sightings": 1 }, { "indicator": "http://196.251.107.133/bins/parm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-07 00:04:24 UTC", "last_seen": "2026-03-07 00:04:24 UTC", "sightings": 1 }, { "indicator": "http://196.251.107.133/bins/pmips", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-07 00:04:24 UTC", "last_seen": "2026-03-07 00:04:24 UTC", "sightings": 1 }, { "indicator": "http://196.251.107.133/bins/parm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-07 00:03:17 UTC", "last_seen": "2026-03-07 00:03:17 UTC", "sightings": 1 }, { "indicator": "http://196.251.107.133/bins/pmpsl", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-07 00:03:17 UTC", "last_seen": "2026-03-07 00:03:17 UTC", "sightings": 1 }, { "indicator": "http://196.251.107.133/bins/pm68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-07 00:03:17 UTC", "last_seen": "2026-03-07 00:03:17 UTC", "sightings": 1 }, { "indicator": "http://196.251.107.133/bins/parm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-07 00:02:22 UTC", "last_seen": "2026-03-07 00:02:22 UTC", "sightings": 1 }, { "indicator": "http://196.251.107.133/bins/psh4", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-07 00:02:21 UTC", "last_seen": "2026-03-07 00:02:21 UTC", "sightings": 1 }, { "indicator": "http://196.251.107.133/bins/parm", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-07 00:02:21 UTC", "last_seen": "2026-03-07 00:02:21 UTC", "sightings": 1 }, { "indicator": "http://196.251.107.133/bins/px86", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-07 00:02:21 UTC", "last_seen": "2026-03-07 00:02:21 UTC", "sightings": 1 }, { "indicator": "http://182.116.48.123:48259/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 23:58:18 UTC", "last_seen": "2026-03-06 23:58:18 UTC", "sightings": 1 }, { "indicator": "https://woo-sync.gadowooing.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-06 23:58:07 UTC", "last_seen": "2026-03-06 23:58:07 UTC", "sightings": 1 }, { "indicator": "http://182.116.48.123:48259/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 23:51:18 UTC", "last_seen": "2026-03-06 23:51:18 UTC", "sightings": 1 }, { "indicator": "https://gadow-v12.gadowooing.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-06 23:48:07 UTC", "last_seen": "2026-03-06 23:48:07 UTC", "sightings": 1 }, { "indicator": "https://woo-point.gadowooing.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-06 23:41:08 UTC", "last_seen": "2026-03-06 23:41:08 UTC", "sightings": 1 }, { "indicator": "http://110.37.55.234:58860/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 23:40:22 UTC", "last_seen": "2026-03-06 23:40:22 UTC", "sightings": 1 }, { "indicator": "http://123.14.41.188:52683/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 23:37:10 UTC", "last_seen": "2026-03-06 23:37:10 UTC", "sightings": 1 }, { "indicator": "http://123.11.96.26:58428/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 23:34:09 UTC", "last_seen": "2026-03-06 23:34:09 UTC", "sightings": 1 }, { "indicator": "http://182.121.170.61:57843/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 23:21:08 UTC", "last_seen": "2026-03-06 23:21:08 UTC", "sightings": 1 }, { "indicator": "http://110.37.55.234:58860/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 23:18:09 UTC", "last_seen": "2026-03-06 23:18:09 UTC", "sightings": 1 }, { "indicator": "https://sanct-v1.sanctunputer.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-06 23:04:07 UTC", "last_seen": "2026-03-06 23:04:07 UTC", "sightings": 1 }, { "indicator": "http://123.13.1.45:37103/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 23:02:07 UTC", "last_seen": "2026-03-06 23:02:07 UTC", "sightings": 1 }, { "indicator": "http://123.13.1.45:37103/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 23:00:18 UTC", "last_seen": "2026-03-06 23:00:18 UTC", "sightings": 1 }, { "indicator": "http://182.119.13.88:57271/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 22:58:18 UTC", "last_seen": "2026-03-06 22:58:18 UTC", "sightings": 1 }, { "indicator": "http://61.53.194.94:38915/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 22:57:16 UTC", "last_seen": "2026-03-06 22:57:16 UTC", "sightings": 1 }, { "indicator": "https://put-vault.sanctunputer.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-06 22:56:07 UTC", "last_seen": "2026-03-06 22:56:07 UTC", "sightings": 1 }, { "indicator": "http://182.121.170.61:57843/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 22:54:11 UTC", "last_seen": "2026-03-06 22:54:11 UTC", "sightings": 1 }, { "indicator": "http://42.238.250.193:34470/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 22:46:18 UTC", "last_seen": "2026-03-06 22:46:18 UTC", "sightings": 1 }, { "indicator": "http://42.224.148.98:42743/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 22:45:17 UTC", "last_seen": "2026-03-06 22:45:17 UTC", "sightings": 1 }, { "indicator": "http://110.37.37.232:43552/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 22:41:18 UTC", "last_seen": "2026-03-06 22:41:18 UTC", "sightings": 1 }, { "indicator": "https://intest-v9.intesttop.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-06 22:33:11 UTC", "last_seen": "2026-03-06 22:33:11 UTC", "sightings": 1 }, { "indicator": "http://61.53.194.94:38915/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 22:32:13 UTC", "last_seen": "2026-03-06 22:32:13 UTC", "sightings": 1 }, { "indicator": "http://42.238.250.193:34470/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 22:29:20 UTC", "last_seen": "2026-03-06 22:29:20 UTC", "sightings": 1 }, { "indicator": "http://182.119.13.88:57271/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 22:28:16 UTC", "last_seen": "2026-03-06 22:28:16 UTC", "sightings": 1 }, { "indicator": "https://test-top.intesttop.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-06 22:28:07 UTC", "last_seen": "2026-03-06 22:28:07 UTC", "sightings": 1 }, { "indicator": "http://42.224.148.98:42743/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 22:24:10 UTC", "last_seen": "2026-03-06 22:24:10 UTC", "sightings": 1 }, { "indicator": "http://39.87.216.228:55349/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 22:24:09 UTC", "last_seen": "2026-03-06 22:24:09 UTC", "sightings": 1 }, { "indicator": "http://112.239.102.248:39218/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 22:17:33 UTC", "last_seen": "2026-03-06 22:17:33 UTC", "sightings": 1 }, { "indicator": "http://182.245.226.151:40151/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-06 22:17:14 UTC", "last_seen": "2026-03-06 22:17:14 UTC", "sightings": 1 }, { "indicator": "http://122.151.156.198:38219/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-06 22:17:12 UTC", "last_seen": "2026-03-06 22:17:12 UTC", "sightings": 1 }, { "indicator": "http://110.37.118.101:44745/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 22:16:11 UTC", "last_seen": "2026-03-06 22:16:11 UTC", "sightings": 1 }, { "indicator": "https://tank05.representtank.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-06 22:14:06 UTC", "last_seen": "2026-03-06 22:14:06 UTC", "sightings": 1 }, { "indicator": "http://182.116.112.39:47335/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 22:06:15 UTC", "last_seen": "2026-03-06 22:06:15 UTC", "sightings": 1 }, { "indicator": "http://110.37.118.101:44745/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 22:06:14 UTC", "last_seen": "2026-03-06 22:06:14 UTC", "sightings": 1 }, { "indicator": "https://tank-gate.representtank.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-06 21:58:07 UTC", "last_seen": "2026-03-06 21:58:07 UTC", "sightings": 1 }, { "indicator": "http://39.87.216.228:55349/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 21:56:07 UTC", "last_seen": "2026-03-06 21:56:07 UTC", "sightings": 1 }, { "indicator": "http://182.245.226.151:40151/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-06 21:52:36 UTC", "last_seen": "2026-03-06 21:52:36 UTC", "sightings": 1 }, { "indicator": "http://182.127.69.158:32861/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 21:51:16 UTC", "last_seen": "2026-03-06 21:51:16 UTC", "sightings": 1 }, { "indicator": "http://122.151.156.198:38219/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-06 21:49:22 UTC", "last_seen": "2026-03-06 21:49:22 UTC", "sightings": 1 }, { "indicator": "https://rich-flow.minenrichment.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-06 21:48:07 UTC", "last_seen": "2026-03-06 21:48:07 UTC", "sightings": 1 }, { "indicator": "http://115.49.25.150:46376/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 21:45:19 UTC", "last_seen": "2026-03-06 21:45:19 UTC", "sightings": 1 }, { "indicator": "http://182.116.112.39:47335/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 21:44:20 UTC", "last_seen": "2026-03-06 21:44:20 UTC", "sightings": 1 }, { "indicator": "http://115.49.25.150:46376/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 21:44:20 UTC", "last_seen": "2026-03-06 21:44:20 UTC", "sightings": 1 }, { "indicator": "https://mine08.minenrichment.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-06 21:42:08 UTC", "last_seen": "2026-03-06 21:42:08 UTC", "sightings": 1 }, { "indicator": "http://158.94.211.222/files/1797567872/w6UBu3m.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543", "xworm" ], "first_seen": "2026-03-06 21:35:09 UTC", "last_seen": "2026-03-06 21:35:09 UTC", "sightings": 1 }, { "indicator": "http://61.168.50.87:53655/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 21:32:30 UTC", "last_seen": "2026-03-06 21:32:30 UTC", "sightings": 1 }, { "indicator": "http://39.89.61.252:37395/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 21:30:21 UTC", "last_seen": "2026-03-06 21:30:21 UTC", "sightings": 1 }, { "indicator": "http://182.127.69.158:32861/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 21:28:24 UTC", "last_seen": "2026-03-06 21:28:24 UTC", "sightings": 1 }, { "indicator": "http://39.89.61.252:37395/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 21:28:12 UTC", "last_seen": "2026-03-06 21:28:12 UTC", "sightings": 1 }, { "indicator": "https://rich-v7.minenrichment.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-06 21:28:08 UTC", "last_seen": "2026-03-06 21:28:08 UTC", "sightings": 1 }, { "indicator": "http://124.95.22.65:55430/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 21:18:22 UTC", "last_seen": "2026-03-06 21:18:22 UTC", "sightings": 1 }, { "indicator": "http://59.93.189.169:59477/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 21:17:13 UTC", "last_seen": "2026-03-06 21:17:13 UTC", "sightings": 1 }, { "indicator": "https://double-sync.austrodouble.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake", "EternalRocks" ], "first_seen": "2026-03-06 21:15:14 UTC", "last_seen": "2026-03-06 21:15:14 UTC", "sightings": 1 }, { "indicator": "http://61.53.138.251:40025/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 21:14:23 UTC", "last_seen": "2026-03-06 21:14:23 UTC", "sightings": 1 }, { "indicator": "http://61.53.138.251:40025/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 21:12:17 UTC", "last_seen": "2026-03-06 21:12:17 UTC", "sightings": 1 }, { "indicator": "http://142.248.228.197/main.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "geofenced", "opendir", "sh", "ua-wget", "USA" ], "first_seen": "2026-03-06 21:12:05 UTC", "last_seen": "2026-03-06 21:12:05 UTC", "sightings": 1 }, { "indicator": "http://142.248.228.197/o.xml", "indicator_type": "url", "source": "URLhaus", "tags": [ "geofenced", "opendir", "sh", "ua-wget", "USA", "xml" ], "first_seen": "2026-03-06 21:12:05 UTC", "last_seen": "2026-03-06 21:12:05 UTC", "sightings": 1 }, { "indicator": "http://123.129.135.56:46233/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 21:08:10 UTC", "last_seen": "2026-03-06 21:08:10 UTC", "sightings": 1 }, { "indicator": "http://27.202.155.9:59677/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 21:07:21 UTC", "last_seen": "2026-03-06 21:07:21 UTC", "sightings": 1 }, { "indicator": "http://27.215.126.55:32969/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 21:06:09 UTC", "last_seen": "2026-03-06 21:06:09 UTC", "sightings": 1 }, { "indicator": "http://158.94.211.222/files/8733674968/jLZuxmu.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "DarkVisionRAT", "dropped-by-amadey" ], "first_seen": "2026-03-06 21:06:09 UTC", "last_seen": "2026-03-06 21:06:09 UTC", "sightings": 1 }, { "indicator": "http://110.39.226.207:42733/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 21:05:21 UTC", "last_seen": "2026-03-06 21:05:21 UTC", "sightings": 1 }, { "indicator": "http://27.202.155.9:59677/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 21:00:20 UTC", "last_seen": "2026-03-06 21:00:20 UTC", "sightings": 1 }, { "indicator": "http://110.39.226.207:42733/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 20:52:22 UTC", "last_seen": "2026-03-06 20:52:22 UTC", "sightings": 1 }, { "indicator": "http://59.93.189.169:59477/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 20:52:22 UTC", "last_seen": "2026-03-06 20:52:22 UTC", "sightings": 1 }, { "indicator": "http://124.95.22.65:55430/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 20:52:22 UTC", "last_seen": "2026-03-06 20:52:22 UTC", "sightings": 1 }, { "indicator": "http://182.119.60.238:32853/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 20:44:22 UTC", "last_seen": "2026-03-06 20:44:22 UTC", "sightings": 1 }, { "indicator": "http://27.215.126.55:32969/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 20:41:19 UTC", "last_seen": "2026-03-06 20:41:19 UTC", "sightings": 1 }, { "indicator": "http://123.129.135.56:46233/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 20:39:24 UTC", "last_seen": "2026-03-06 20:39:24 UTC", "sightings": 1 }, { "indicator": "http://219.157.17.247:51110/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 20:33:20 UTC", "last_seen": "2026-03-06 20:33:20 UTC", "sightings": 1 }, { "indicator": "http://59.98.82.61:47641/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 20:30:24 UTC", "last_seen": "2026-03-06 20:30:24 UTC", "sightings": 1 }, { "indicator": "http://182.119.60.238:32853/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 20:28:16 UTC", "last_seen": "2026-03-06 20:28:16 UTC", "sightings": 1 }, { "indicator": "http://61.52.196.118:59902/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 19:53:18 UTC", "last_seen": "2026-03-06 19:53:18 UTC", "sightings": 1 }, { "indicator": "http://110.37.102.129:60562/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-06 19:46:16 UTC", "last_seen": "2026-03-06 19:46:16 UTC", "sightings": 1 }, { "indicator": "https://austro02.austrodouble.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-06 19:46:06 UTC", "last_seen": "2026-03-06 19:46:06 UTC", "sightings": 1 }, { "indicator": "http://182.124.192.27:37472/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 19:45:23 UTC", "last_seen": "2026-03-06 19:45:23 UTC", "sightings": 1 }, { "indicator": "http://42.227.132.207:43483/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 19:43:12 UTC", "last_seen": "2026-03-06 19:43:12 UTC", "sightings": 1 }, { "indicator": "https://blood04.dialectblood.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-06 19:27:08 UTC", "last_seen": "2026-03-06 19:27:08 UTC", "sightings": 1 }, { "indicator": "http://117.235.135.23:33187/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 19:21:30 UTC", "last_seen": "2026-03-06 19:21:30 UTC", "sightings": 1 }, { "indicator": "http://182.124.192.27:37472/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 19:19:19 UTC", "last_seen": "2026-03-06 19:19:19 UTC", "sightings": 1 }, { "indicator": "https://dia-v5.dialectblood.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-06 19:17:07 UTC", "last_seen": "2026-03-06 19:17:07 UTC", "sightings": 1 }, { "indicator": "https://blood-unit.dialectblood.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-06 19:14:07 UTC", "last_seen": "2026-03-06 19:14:07 UTC", "sightings": 1 }, { "indicator": "http://173.28.103.46:59881/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-06 19:06:20 UTC", "last_seen": "2026-03-06 19:06:20 UTC", "sightings": 1 }, { "indicator": "http://39.88.187.161:51321/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 19:01:08 UTC", "last_seen": "2026-03-06 19:01:08 UTC", "sightings": 1 }, { "indicator": "http://27.206.193.16:51039/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 18:51:17 UTC", "last_seen": "2026-03-06 18:51:17 UTC", "sightings": 1 }, { "indicator": "http://219.156.35.217:37425/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 18:51:17 UTC", "last_seen": "2026-03-06 18:51:17 UTC", "sightings": 1 }, { "indicator": "http://182.126.121.10:54450/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 18:49:11 UTC", "last_seen": "2026-03-06 18:49:11 UTC", "sightings": 1 }, { "indicator": "http://123.14.78.161:48958/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 18:43:19 UTC", "last_seen": "2026-03-06 18:43:19 UTC", "sightings": 1 }, { "indicator": "http://39.88.187.161:51321/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 18:37:09 UTC", "last_seen": "2026-03-06 18:37:09 UTC", "sightings": 1 }, { "indicator": "https://svet09.moroshkasvet.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-06 18:36:09 UTC", "last_seen": "2026-03-06 18:36:09 UTC", "sightings": 1 }, { "indicator": "http://182.127.128.158:43018/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 18:26:09 UTC", "last_seen": "2026-03-06 18:26:09 UTC", "sightings": 1 }, { "indicator": "http://219.156.35.217:37425/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 18:25:16 UTC", "last_seen": "2026-03-06 18:25:16 UTC", "sightings": 1 }, { "indicator": "http://27.206.193.16:51039/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 18:23:19 UTC", "last_seen": "2026-03-06 18:23:19 UTC", "sightings": 1 }, { "indicator": "https://moro-v4.moroshkasvet.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-06 18:22:09 UTC", "last_seen": "2026-03-06 18:22:09 UTC", "sightings": 1 }, { "indicator": "http://123.14.78.161:48958/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 18:18:20 UTC", "last_seen": "2026-03-06 18:18:20 UTC", "sightings": 1 }, { "indicator": "http://123.12.230.170:50444/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 18:17:21 UTC", "last_seen": "2026-03-06 18:17:21 UTC", "sightings": 1 }, { "indicator": "http://125.41.9.166:45848/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 18:14:19 UTC", "last_seen": "2026-03-06 18:14:19 UTC", "sightings": 1 }, { "indicator": "https://woman-flow.youngwoman.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-06 18:14:07 UTC", "last_seen": "2026-03-06 18:14:07 UTC", "sightings": 1 }, { "indicator": "https://young01.youngwoman.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake" ], "first_seen": "2026-03-06 18:09:08 UTC", "last_seen": "2026-03-06 18:09:08 UTC", "sightings": 1 }, { "indicator": "http://asteriaproject.dstat.click/bins/mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "censys", "elf", "ua-wget" ], "first_seen": "2026-03-06 17:57:11 UTC", "last_seen": "2026-03-06 17:57:11 UTC", "sightings": 1 }, { "indicator": "http://asteriaproject.dstat.click/bins/mipsel", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "censys", "elf", "ua-wget" ], "first_seen": "2026-03-06 17:57:11 UTC", "last_seen": "2026-03-06 17:57:11 UTC", "sightings": 1 }, { "indicator": "http://asteriaproject.dstat.click/bins/arm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "censys", "elf", "ua-wget" ], "first_seen": "2026-03-06 17:57:10 UTC", "last_seen": "2026-03-06 17:57:10 UTC", "sightings": 1 }, { "indicator": "http://asteriaproject.dstat.click/bins/x86_64", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "censys", "elf", "ua-wget" ], "first_seen": "2026-03-06 17:57:10 UTC", "last_seen": "2026-03-06 17:57:10 UTC", "sightings": 1 }, { "indicator": "http://asteriaproject.dstat.click/bins/arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "censys", "elf", "ua-wget" ], "first_seen": "2026-03-06 17:57:10 UTC", "last_seen": "2026-03-06 17:57:10 UTC", "sightings": 1 }, { "indicator": "http://asteriaproject.dstat.click/bins/sh4", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "censys", "elf", "ua-wget" ], "first_seen": "2026-03-06 17:57:10 UTC", "last_seen": "2026-03-06 17:57:10 UTC", "sightings": 1 }, { "indicator": "http://asteriaproject.dstat.click/bins/arm", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "censys", "elf", "ua-wget" ], "first_seen": "2026-03-06 17:57:10 UTC", "last_seen": "2026-03-06 17:57:10 UTC", "sightings": 1 }, { "indicator": "http://asteriaproject.dstat.click/bins/x86", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "censys", "elf", "ua-wget" ], "first_seen": "2026-03-06 17:57:10 UTC", "last_seen": "2026-03-06 17:57:10 UTC", "sightings": 1 }, { "indicator": "http://asteriaproject.dstat.click/bins/ppc", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "censys", "elf", "ua-wget" ], "first_seen": "2026-03-06 17:57:10 UTC", "last_seen": "2026-03-06 17:57:10 UTC", "sightings": 1 }, { "indicator": "http://asteriaproject.dstat.click/bins/spc", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "censys", "elf", "ua-wget" ], "first_seen": "2026-03-06 17:57:10 UTC", "last_seen": "2026-03-06 17:57:10 UTC", "sightings": 1 }, { "indicator": "http://asteriaproject.dstat.click/bins/arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "censys", "elf", "ua-wget" ], "first_seen": "2026-03-06 17:57:10 UTC", "last_seen": "2026-03-06 17:57:10 UTC", "sightings": 1 }, { "indicator": "http://asteriaproject.dstat.click/bins/m68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "censys", "elf", "ua-wget" ], "first_seen": "2026-03-06 17:57:10 UTC", "last_seen": "2026-03-06 17:57:10 UTC", "sightings": 1 }, { "indicator": "http://123.12.230.170:50444/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 17:52:12 UTC", "last_seen": "2026-03-06 17:52:12 UTC", "sightings": 1 }, { "indicator": "http://125.41.9.166:45848/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 17:52:11 UTC", "last_seen": "2026-03-06 17:52:11 UTC", "sightings": 1 }, { "indicator": "http://110.36.77.162:47165/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 17:50:20 UTC", "last_seen": "2026-03-06 17:50:20 UTC", "sightings": 1 }, { "indicator": "http://45.128.118.48/pay", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "mirai", "sh", "ua-wget" ], "first_seen": "2026-03-06 17:49:18 UTC", "last_seen": "2026-03-06 17:49:18 UTC", "sightings": 1 }, { "indicator": "http://45.128.118.48/yarn", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "mirai", "sh", "ua-wget" ], "first_seen": "2026-03-06 17:49:18 UTC", "last_seen": "2026-03-06 17:49:18 UTC", "sightings": 1 }, { "indicator": "http://45.128.118.48:8080/pay", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "mirai", "sh", "ua-wget" ], "first_seen": "2026-03-06 17:49:18 UTC", "last_seen": "2026-03-06 17:49:18 UTC", "sightings": 1 }, { "indicator": "http://45.128.118.48/kla.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "sh", "ua-wget" ], "first_seen": "2026-03-06 17:49:18 UTC", "last_seen": "2026-03-06 17:49:18 UTC", "sightings": 1 }, { "indicator": "http://80.97.124.196/run.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "CoinMiner", "sh", "ua-wget" ], "first_seen": "2026-03-06 17:49:18 UTC", "last_seen": "2026-03-06 17:49:18 UTC", "sightings": 1 }, { "indicator": "http://45.128.118.48:8080/yarn", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "mirai", "sh", "ua-wget" ], "first_seen": "2026-03-06 17:49:17 UTC", "last_seen": "2026-03-06 17:49:17 UTC", "sightings": 1 }, { "indicator": "http://45.128.118.48:8080/bin", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "mirai", "sh", "ua-wget" ], "first_seen": "2026-03-06 17:49:17 UTC", "last_seen": "2026-03-06 17:49:17 UTC", "sightings": 1 }, { "indicator": "http://45.128.118.48:8080/kla.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "sh", "ua-wget" ], "first_seen": "2026-03-06 17:49:17 UTC", "last_seen": "2026-03-06 17:49:17 UTC", "sightings": 1 }, { "indicator": "http://45.128.118.48/bins.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "sh", "ua-wget" ], "first_seen": "2026-03-06 17:49:17 UTC", "last_seen": "2026-03-06 17:49:17 UTC", "sightings": 1 }, { "indicator": "http://45.128.118.48/bin", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "mirai", "sh", "ua-wget" ], "first_seen": "2026-03-06 17:49:17 UTC", "last_seen": "2026-03-06 17:49:17 UTC", "sightings": 1 }, { "indicator": "http://80.97.124.196/milan.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "CoinMiner", "sh", "ua-wget" ], "first_seen": "2026-03-06 17:49:17 UTC", "last_seen": "2026-03-06 17:49:17 UTC", "sightings": 1 }, { "indicator": "http://140.233.190.114/payload.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "mirai", "sh", "ua-wget" ], "first_seen": "2026-03-06 17:49:17 UTC", "last_seen": "2026-03-06 17:49:17 UTC", "sightings": 1 }, { "indicator": "http://50.247.12.209/start.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "sh", "ua-wget" ], "first_seen": "2026-03-06 17:49:16 UTC", "last_seen": "2026-03-06 17:49:16 UTC", "sightings": 1 }, { "indicator": "http://45.128.118.48:8080/bins.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "sh", "ua-wget" ], "first_seen": "2026-03-06 17:49:15 UTC", "last_seen": "2026-03-06 17:49:15 UTC", "sightings": 1 }, { "indicator": "http://140.233.190.114/x86_64-linux-musl", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:48:30 UTC", "last_seen": "2026-03-06 17:48:30 UTC", "sightings": 1 }, { "indicator": "http://140.233.190.114/bot.arm", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:48:29 UTC", "last_seen": "2026-03-06 17:48:29 UTC", "sightings": 1 }, { "indicator": "http://140.233.190.114/bot.arm64", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:48:28 UTC", "last_seen": "2026-03-06 17:48:28 UTC", "sightings": 1 }, { "indicator": "http://140.233.190.114/bot.mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:48:28 UTC", "last_seen": "2026-03-06 17:48:28 UTC", "sightings": 1 }, { "indicator": "http://140.233.190.114/bot_x64", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:48:28 UTC", "last_seen": "2026-03-06 17:48:28 UTC", "sightings": 1 }, { "indicator": "http://140.233.190.114/bot_x86", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:48:27 UTC", "last_seen": "2026-03-06 17:48:27 UTC", "sightings": 1 }, { "indicator": "http://140.233.190.114/bot_mipsle", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:48:26 UTC", "last_seen": "2026-03-06 17:48:26 UTC", "sightings": 1 }, { "indicator": "http://111.127.226.170:38830/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-06 17:44:21 UTC", "last_seen": "2026-03-06 17:44:21 UTC", "sightings": 1 }, { "indicator": "http://74.0.32.141:3001/gate.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-03-06 17:43:32 UTC", "last_seen": "2026-03-06 17:43:32 UTC", "sightings": 1 }, { "indicator": "http://46.8.68.4/sora.ppc", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:43:22 UTC", "last_seen": "2026-03-06 17:43:22 UTC", "sightings": 1 }, { "indicator": "http://46.8.68.4/sora.x86", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:43:22 UTC", "last_seen": "2026-03-06 17:43:22 UTC", "sightings": 1 }, { "indicator": "http://46.8.68.4/sora.mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:43:22 UTC", "last_seen": "2026-03-06 17:43:22 UTC", "sightings": 1 }, { "indicator": "http://46.8.68.4/sora.arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:43:22 UTC", "last_seen": "2026-03-06 17:43:22 UTC", "sightings": 1 }, { "indicator": "http://46.8.68.4/sora.m68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:43:22 UTC", "last_seen": "2026-03-06 17:43:22 UTC", "sightings": 1 }, { "indicator": "http://46.8.68.4/sora.arm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:43:22 UTC", "last_seen": "2026-03-06 17:43:22 UTC", "sightings": 1 }, { "indicator": "http://46.8.68.4/sora.sh4", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:43:22 UTC", "last_seen": "2026-03-06 17:43:22 UTC", "sightings": 1 }, { "indicator": "http://152.89.170.85/bins/violetarm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "ua-wget" ], "first_seen": "2026-03-06 17:43:22 UTC", "last_seen": "2026-03-06 17:43:22 UTC", "sightings": 1 }, { "indicator": "http://46.8.68.4/sora.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "mirai", "sh", "ua-wget" ], "first_seen": "2026-03-06 17:43:22 UTC", "last_seen": "2026-03-06 17:43:22 UTC", "sightings": 1 }, { "indicator": "http://46.8.68.4/sora.mpsl", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:43:17 UTC", "last_seen": "2026-03-06 17:43:17 UTC", "sightings": 1 }, { "indicator": "http://94.26.106.137/x86_tools.txt", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "py", "ua-wget" ], "first_seen": "2026-03-06 17:43:07 UTC", "last_seen": "2026-03-06 17:43:07 UTC", "sightings": 1 }, { "indicator": "http://94.26.106.137/bot_utils.txt", "indicator_type": "url", "source": "URLhaus", "tags": [ "c", "censys", "ua-wget" ], "first_seen": "2026-03-06 17:43:07 UTC", "last_seen": "2026-03-06 17:43:07 UTC", "sightings": 1 }, { "indicator": "http://94.26.106.137/d3_cnc_user.c.txt", "indicator_type": "url", "source": "URLhaus", "tags": [ "c", "censys", "ua-wget" ], "first_seen": "2026-03-06 17:43:06 UTC", "last_seen": "2026-03-06 17:43:06 UTC", "sightings": 1 }, { "indicator": "http://84.234.99.20/bins/arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:42:50 UTC", "last_seen": "2026-03-06 17:42:50 UTC", "sightings": 1 }, { "indicator": "http://46.8.68.4/bins/sora.arm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:41:49 UTC", "last_seen": "2026-03-06 17:41:49 UTC", "sightings": 1 }, { "indicator": "http://152.89.170.85/bins/violetarm", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:41:49 UTC", "last_seen": "2026-03-06 17:41:49 UTC", "sightings": 1 }, { "indicator": "http://152.89.170.85/bins/violetx86", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "ua-wget" ], "first_seen": "2026-03-06 17:41:49 UTC", "last_seen": "2026-03-06 17:41:49 UTC", "sightings": 1 }, { "indicator": "http://80.97.124.196/mipsle", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "ua-wget" ], "first_seen": "2026-03-06 17:41:47 UTC", "last_seen": "2026-03-06 17:41:47 UTC", "sightings": 1 }, { "indicator": "http://46.8.68.4/bins/sora.arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:41:46 UTC", "last_seen": "2026-03-06 17:41:46 UTC", "sightings": 1 }, { "indicator": "http://179.43.182.70/bins/violetmpsl", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:41:45 UTC", "last_seen": "2026-03-06 17:41:45 UTC", "sightings": 1 }, { "indicator": "http://179.43.182.70/bins/violetm68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:41:45 UTC", "last_seen": "2026-03-06 17:41:45 UTC", "sightings": 1 }, { "indicator": "http://80.97.124.196/arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:41:44 UTC", "last_seen": "2026-03-06 17:41:44 UTC", "sightings": 1 }, { "indicator": "http://84.234.99.20/bins/mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:41:44 UTC", "last_seen": "2026-03-06 17:41:44 UTC", "sightings": 1 }, { "indicator": "http://46.8.68.4/bins/sora.mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:41:44 UTC", "last_seen": "2026-03-06 17:41:44 UTC", "sightings": 1 }, { "indicator": "http://80.97.124.196/x32", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:41:44 UTC", "last_seen": "2026-03-06 17:41:44 UTC", "sightings": 1 }, { "indicator": "http://45.128.118.48/bins/ppc", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:41:44 UTC", "last_seen": "2026-03-06 17:41:44 UTC", "sightings": 1 }, { "indicator": "http://46.8.68.4/bins/sora.sh4", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:41:44 UTC", "last_seen": "2026-03-06 17:41:44 UTC", "sightings": 1 }, { "indicator": "http://45.128.118.48:8080/bins/armv5l", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:41:44 UTC", "last_seen": "2026-03-06 17:41:44 UTC", "sightings": 1 }, { "indicator": "http://179.43.182.70/bins/violetmips", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:41:44 UTC", "last_seen": "2026-03-06 17:41:44 UTC", "sightings": 1 }, { "indicator": "http://80.97.124.196/m68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:41:44 UTC", "last_seen": "2026-03-06 17:41:44 UTC", "sightings": 1 }, { "indicator": "http://45.128.118.48/bins/armv5l", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:41:44 UTC", "last_seen": "2026-03-06 17:41:44 UTC", "sightings": 1 }, { "indicator": "http://46.8.68.4/bins/sora.arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:41:44 UTC", "last_seen": "2026-03-06 17:41:44 UTC", "sightings": 1 }, { "indicator": "http://84.234.99.20/bins/arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:41:44 UTC", "last_seen": "2026-03-06 17:41:44 UTC", "sightings": 1 }, { "indicator": "http://84.234.99.20/bins/mipsel", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:41:44 UTC", "last_seen": "2026-03-06 17:41:44 UTC", "sightings": 1 }, { "indicator": "http://45.128.118.48/bins/i586", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:41:43 UTC", "last_seen": "2026-03-06 17:41:43 UTC", "sightings": 1 }, { "indicator": "http://46.8.68.4/sora.arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:41:43 UTC", "last_seen": "2026-03-06 17:41:43 UTC", "sightings": 1 }, { "indicator": "http://45.128.118.48:8080/bins/sh4", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:41:43 UTC", "last_seen": "2026-03-06 17:41:43 UTC", "sightings": 1 }, { "indicator": "http://45.128.118.48:8080/bins/ppc", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:41:43 UTC", "last_seen": "2026-03-06 17:41:43 UTC", "sightings": 1 }, { "indicator": "http://84.234.99.20/bins/m68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:41:43 UTC", "last_seen": "2026-03-06 17:41:43 UTC", "sightings": 1 }, { "indicator": "http://80.97.124.196/mipsel", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:41:43 UTC", "last_seen": "2026-03-06 17:41:43 UTC", "sightings": 1 }, { "indicator": "http://45.128.118.48/bins/armv7l", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:41:43 UTC", "last_seen": "2026-03-06 17:41:43 UTC", "sightings": 1 }, { "indicator": "http://45.128.118.48/bins/mpsl", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:41:42 UTC", "last_seen": "2026-03-06 17:41:42 UTC", "sightings": 1 }, { "indicator": "http://45.128.118.48/bins/arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:41:42 UTC", "last_seen": "2026-03-06 17:41:42 UTC", "sightings": 1 }, { "indicator": "http://45.128.118.48/bins/arm4", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:41:42 UTC", "last_seen": "2026-03-06 17:41:42 UTC", "sightings": 1 }, { "indicator": "http://45.128.118.48/bins/m68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:41:41 UTC", "last_seen": "2026-03-06 17:41:41 UTC", "sightings": 1 }, { "indicator": "http://45.128.118.48:8080/bins/armv6l", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:41:41 UTC", "last_seen": "2026-03-06 17:41:41 UTC", "sightings": 1 }, { "indicator": "http://45.128.118.48/bins/arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:41:41 UTC", "last_seen": "2026-03-06 17:41:41 UTC", "sightings": 1 }, { "indicator": "http://152.89.170.85/bins/violetspc", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "ua-wget" ], "first_seen": "2026-03-06 17:41:35 UTC", "last_seen": "2026-03-06 17:41:35 UTC", "sightings": 1 }, { "indicator": "http://46.8.68.4/bins/sora.m68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:41:35 UTC", "last_seen": "2026-03-06 17:41:35 UTC", "sightings": 1 }, { "indicator": "http://179.43.182.70/bins/violetarm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:41:35 UTC", "last_seen": "2026-03-06 17:41:35 UTC", "sightings": 1 }, { "indicator": "http://80.97.124.196/arm4", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "gafgyt", "ua-wget" ], "first_seen": "2026-03-06 17:41:35 UTC", "last_seen": "2026-03-06 17:41:35 UTC", "sightings": 1 }, { "indicator": "http://80.97.124.196/arm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:41:35 UTC", "last_seen": "2026-03-06 17:41:35 UTC", "sightings": 1 }, { "indicator": "http://80.97.124.196/arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:41:35 UTC", "last_seen": "2026-03-06 17:41:35 UTC", "sightings": 1 }, { "indicator": "http://45.128.118.48:8080/bins/x86", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:41:34 UTC", "last_seen": "2026-03-06 17:41:34 UTC", "sightings": 1 }, { "indicator": "http://45.128.118.48:8080/bins/arm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:41:34 UTC", "last_seen": "2026-03-06 17:41:34 UTC", "sightings": 1 }, { "indicator": "http://84.234.99.20/bins/sh4", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:41:32 UTC", "last_seen": "2026-03-06 17:41:32 UTC", "sightings": 1 }, { "indicator": "http://152.89.170.85/bins/violetppc", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "ua-wget" ], "first_seen": "2026-03-06 17:41:32 UTC", "last_seen": "2026-03-06 17:41:32 UTC", "sightings": 1 }, { "indicator": "http://45.128.118.48:8080/bins/m68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:41:32 UTC", "last_seen": "2026-03-06 17:41:32 UTC", "sightings": 1 }, { "indicator": "http://84.234.99.20/bins/arm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:41:32 UTC", "last_seen": "2026-03-06 17:41:32 UTC", "sightings": 1 }, { "indicator": "http://84.234.99.20/bins/arm", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:41:25 UTC", "last_seen": "2026-03-06 17:41:25 UTC", "sightings": 1 }, { "indicator": "http://179.43.182.70/bins/violetarm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:41:25 UTC", "last_seen": "2026-03-06 17:41:25 UTC", "sightings": 1 }, { "indicator": "http://84.234.99.20/bins/ppc", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:41:25 UTC", "last_seen": "2026-03-06 17:41:25 UTC", "sightings": 1 }, { "indicator": "http://84.234.99.20/bins/spc", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:41:25 UTC", "last_seen": "2026-03-06 17:41:25 UTC", "sightings": 1 }, { "indicator": "http://179.43.182.70/bins/violetarm", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:41:25 UTC", "last_seen": "2026-03-06 17:41:25 UTC", "sightings": 1 }, { "indicator": "http://46.8.68.4/bins/sora.x86", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:41:24 UTC", "last_seen": "2026-03-06 17:41:24 UTC", "sightings": 1 }, { "indicator": "http://80.97.124.196/ppc", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:41:24 UTC", "last_seen": "2026-03-06 17:41:24 UTC", "sightings": 1 }, { "indicator": "http://46.8.68.4/bins/sora.arm4", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:41:24 UTC", "last_seen": "2026-03-06 17:41:24 UTC", "sightings": 1 }, { "indicator": "http://179.43.182.70/bins/violetspc", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:41:24 UTC", "last_seen": "2026-03-06 17:41:24 UTC", "sightings": 1 }, { "indicator": "http://152.89.170.85/bins/violetsh4", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "gafgyt", "ua-wget" ], "first_seen": "2026-03-06 17:41:23 UTC", "last_seen": "2026-03-06 17:41:23 UTC", "sightings": 1 }, { "indicator": "http://152.89.170.85/bins/violetmips", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:41:23 UTC", "last_seen": "2026-03-06 17:41:23 UTC", "sightings": 1 }, { "indicator": "http://45.128.118.48:8080/bins/arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:41:23 UTC", "last_seen": "2026-03-06 17:41:23 UTC", "sightings": 1 }, { "indicator": "http://45.128.118.48/bins/armv6l", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:41:23 UTC", "last_seen": "2026-03-06 17:41:23 UTC", "sightings": 1 }, { "indicator": "http://45.128.118.48:8080/bins/mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:41:23 UTC", "last_seen": "2026-03-06 17:41:23 UTC", "sightings": 1 }, { "indicator": "http://45.128.118.48/bins/sh4", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:41:23 UTC", "last_seen": "2026-03-06 17:41:23 UTC", "sightings": 1 }, { "indicator": "http://45.128.118.48/bins/arm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:41:23 UTC", "last_seen": "2026-03-06 17:41:23 UTC", "sightings": 1 }, { "indicator": "http://45.128.118.48:8080/bins/powerpc", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:41:23 UTC", "last_seen": "2026-03-06 17:41:23 UTC", "sightings": 1 }, { "indicator": "http://45.128.118.48/bins/mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:41:23 UTC", "last_seen": "2026-03-06 17:41:23 UTC", "sightings": 1 }, { "indicator": "http://45.128.118.48/bins/powerpc", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:41:23 UTC", "last_seen": "2026-03-06 17:41:23 UTC", "sightings": 1 }, { "indicator": "http://45.128.118.48:8080/bins/mpsl", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:41:23 UTC", "last_seen": "2026-03-06 17:41:23 UTC", "sightings": 1 }, { "indicator": "http://45.128.118.48/bins/x86", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:41:23 UTC", "last_seen": "2026-03-06 17:41:23 UTC", "sightings": 1 }, { "indicator": "http://152.89.170.85/bins/violetarm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:41:23 UTC", "last_seen": "2026-03-06 17:41:23 UTC", "sightings": 1 }, { "indicator": "http://45.128.118.48:8080/bins/arm4", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:41:23 UTC", "last_seen": "2026-03-06 17:41:23 UTC", "sightings": 1 }, { "indicator": "http://179.43.182.70/bins/violetarm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:41:23 UTC", "last_seen": "2026-03-06 17:41:23 UTC", "sightings": 1 }, { "indicator": "http://45.128.118.48:8080/bins/i586", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:41:23 UTC", "last_seen": "2026-03-06 17:41:23 UTC", "sightings": 1 }, { "indicator": "http://179.43.182.70/bins/violetppc", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:41:23 UTC", "last_seen": "2026-03-06 17:41:23 UTC", "sightings": 1 }, { "indicator": "http://179.43.182.70/bins/violetx86", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:41:23 UTC", "last_seen": "2026-03-06 17:41:23 UTC", "sightings": 1 }, { "indicator": "http://179.43.182.70/bins/violetsh4", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "gafgyt", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:41:23 UTC", "last_seen": "2026-03-06 17:41:23 UTC", "sightings": 1 }, { "indicator": "http://45.128.118.48:8080/bins/arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:41:23 UTC", "last_seen": "2026-03-06 17:41:23 UTC", "sightings": 1 }, { "indicator": "http://45.128.118.48:8080/bins/armv7l", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:41:23 UTC", "last_seen": "2026-03-06 17:41:23 UTC", "sightings": 1 }, { "indicator": "http://46.8.68.4/sora.arm4", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:41:23 UTC", "last_seen": "2026-03-06 17:41:23 UTC", "sightings": 1 }, { "indicator": "http://46.8.68.4/bins/sora.ppc", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:41:23 UTC", "last_seen": "2026-03-06 17:41:23 UTC", "sightings": 1 }, { "indicator": "http://80.97.124.196/sh4", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:41:23 UTC", "last_seen": "2026-03-06 17:41:23 UTC", "sightings": 1 }, { "indicator": "http://46.8.68.4/bins/sora.mpsl", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:41:23 UTC", "last_seen": "2026-03-06 17:41:23 UTC", "sightings": 1 }, { "indicator": "http://84.234.99.20/bins/x86", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:41:23 UTC", "last_seen": "2026-03-06 17:41:23 UTC", "sightings": 1 }, { "indicator": "http://80.97.124.196/mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:41:23 UTC", "last_seen": "2026-03-06 17:41:23 UTC", "sightings": 1 }, { "indicator": "http://80.97.124.196/x86", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:41:23 UTC", "last_seen": "2026-03-06 17:41:23 UTC", "sightings": 1 }, { "indicator": "http://84.234.99.20/bins/x86_64", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:41:23 UTC", "last_seen": "2026-03-06 17:41:23 UTC", "sightings": 1 }, { "indicator": "http://152.89.170.85/bins/violetmpsl", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "ua-wget" ], "first_seen": "2026-03-06 17:41:22 UTC", "last_seen": "2026-03-06 17:41:22 UTC", "sightings": 1 }, { "indicator": "http://152.89.170.85/bins/violetarm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:41:22 UTC", "last_seen": "2026-03-06 17:41:22 UTC", "sightings": 1 }, { "indicator": "http://152.89.170.85/bins/violetm68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:41:22 UTC", "last_seen": "2026-03-06 17:41:22 UTC", "sightings": 1 }, { "indicator": "http://142.248.80.139/huhu/jawirbot.m68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:40:12 UTC", "last_seen": "2026-03-06 17:40:12 UTC", "sightings": 1 }, { "indicator": "http://142.248.80.139/huhu/debug/debug.arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:39:20 UTC", "last_seen": "2026-03-06 17:39:20 UTC", "sightings": 1 }, { "indicator": "http://142.248.80.139/huhu/jawirbot.x86_64", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:39:19 UTC", "last_seen": "2026-03-06 17:39:19 UTC", "sightings": 1 }, { "indicator": "http://142.248.80.139/huhu/debug/debug.x86_32", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:39:19 UTC", "last_seen": "2026-03-06 17:39:19 UTC", "sightings": 1 }, { "indicator": "http://142.248.80.139/huhu/debug/debug.sh4", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "gafgyt", "ua-wget" ], "first_seen": "2026-03-06 17:39:19 UTC", "last_seen": "2026-03-06 17:39:19 UTC", "sightings": 1 }, { "indicator": "http://142.248.80.139/huhu/jawirbot.arc", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:39:19 UTC", "last_seen": "2026-03-06 17:39:19 UTC", "sightings": 1 }, { "indicator": "http://142.248.80.139/huhu/jawirbot.spc", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:39:19 UTC", "last_seen": "2026-03-06 17:39:19 UTC", "sightings": 1 }, { "indicator": "http://142.248.80.139/huhu/jawirbot.arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:39:19 UTC", "last_seen": "2026-03-06 17:39:19 UTC", "sightings": 1 }, { "indicator": "http://142.248.80.139/huhu/debug/debug.ppc440", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:39:19 UTC", "last_seen": "2026-03-06 17:39:19 UTC", "sightings": 1 }, { "indicator": "http://142.248.80.139/huhu/jawirbot.sh4", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:39:19 UTC", "last_seen": "2026-03-06 17:39:19 UTC", "sightings": 1 }, { "indicator": "http://142.248.80.139/huhu/debug/debug.arc", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:39:19 UTC", "last_seen": "2026-03-06 17:39:19 UTC", "sightings": 1 }, { "indicator": "http://142.248.80.139/huhu/debug/debug.spc", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:39:19 UTC", "last_seen": "2026-03-06 17:39:19 UTC", "sightings": 1 }, { "indicator": "http://142.248.80.139/huhu/debug/debug.arm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:39:19 UTC", "last_seen": "2026-03-06 17:39:19 UTC", "sightings": 1 }, { "indicator": "http://142.248.80.139/huhu/debug/debug.ppc", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:39:19 UTC", "last_seen": "2026-03-06 17:39:19 UTC", "sightings": 1 }, { "indicator": "http://142.248.80.139/huhu/debug/debug.mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:39:19 UTC", "last_seen": "2026-03-06 17:39:19 UTC", "sightings": 1 }, { "indicator": "http://142.248.80.139/huhu/jawirbot.x86_32", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:39:13 UTC", "last_seen": "2026-03-06 17:39:13 UTC", "sightings": 1 }, { "indicator": "http://142.248.80.139/huhu/jawirbot.arm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:39:13 UTC", "last_seen": "2026-03-06 17:39:13 UTC", "sightings": 1 }, { "indicator": "http://142.248.80.139/huhu/jawirbot.mipsl", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:39:13 UTC", "last_seen": "2026-03-06 17:39:13 UTC", "sightings": 1 }, { "indicator": "http://142.248.80.139/huhu/debug/debug.m68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:39:13 UTC", "last_seen": "2026-03-06 17:39:13 UTC", "sightings": 1 }, { "indicator": "http://142.248.80.139/huhu/debug/debug.i486", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:39:13 UTC", "last_seen": "2026-03-06 17:39:13 UTC", "sightings": 1 }, { "indicator": "http://142.248.80.139/huhu/debug/debug.i686", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:39:13 UTC", "last_seen": "2026-03-06 17:39:13 UTC", "sightings": 1 }, { "indicator": "http://142.248.80.139/huhu/jawirbot.arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:39:13 UTC", "last_seen": "2026-03-06 17:39:13 UTC", "sightings": 1 }, { "indicator": "http://142.248.80.139/huhu/jawirbot.mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:39:13 UTC", "last_seen": "2026-03-06 17:39:13 UTC", "sightings": 1 }, { "indicator": "http://142.248.80.139/huhu/debug/debug.mipsl", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:39:13 UTC", "last_seen": "2026-03-06 17:39:13 UTC", "sightings": 1 }, { "indicator": "http://142.248.80.139/huhu/debug/debug.arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:39:13 UTC", "last_seen": "2026-03-06 17:39:13 UTC", "sightings": 1 }, { "indicator": "http://142.248.80.139/huhu/jawirbot.ppc440", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:39:13 UTC", "last_seen": "2026-03-06 17:39:13 UTC", "sightings": 1 }, { "indicator": "http://142.248.80.139/huhu/debug/debug.arm", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:39:13 UTC", "last_seen": "2026-03-06 17:39:13 UTC", "sightings": 1 }, { "indicator": "http://142.248.80.139/huhu/jawirbot.arm", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:39:13 UTC", "last_seen": "2026-03-06 17:39:13 UTC", "sightings": 1 }, { "indicator": "http://142.248.80.139/huhu/jawirbot.ppc", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:39:13 UTC", "last_seen": "2026-03-06 17:39:13 UTC", "sightings": 1 }, { "indicator": "http://142.248.80.139/huhu/jawirbot.i686", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:39:13 UTC", "last_seen": "2026-03-06 17:39:13 UTC", "sightings": 1 }, { "indicator": "http://142.248.80.139/huhu/jawirbot.i486", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:39:13 UTC", "last_seen": "2026-03-06 17:39:13 UTC", "sightings": 1 }, { "indicator": "http://142.248.80.139/huhu/debug/debug.x86_64", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:39:13 UTC", "last_seen": "2026-03-06 17:39:13 UTC", "sightings": 1 }, { "indicator": "http://177.76.44.91/hiddenbin/boatnet.mpsl", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:37:21 UTC", "last_seen": "2026-03-06 17:37:21 UTC", "sightings": 1 }, { "indicator": "http://177.76.44.91/hiddenbin/boatnet.ppc", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:37:21 UTC", "last_seen": "2026-03-06 17:37:21 UTC", "sightings": 1 }, { "indicator": "http://177.76.44.91/hiddenbin/boatnet.x86-DEBUG", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:37:21 UTC", "last_seen": "2026-03-06 17:37:21 UTC", "sightings": 1 }, { "indicator": "http://177.76.44.91/hiddenbin/boatnet.m68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:37:21 UTC", "last_seen": "2026-03-06 17:37:21 UTC", "sightings": 1 }, { "indicator": "http://177.76.44.91/hiddenbin/boatnet.arm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:37:21 UTC", "last_seen": "2026-03-06 17:37:21 UTC", "sightings": 1 }, { "indicator": "http://177.76.44.91/hiddenbin/boatnet.arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:37:21 UTC", "last_seen": "2026-03-06 17:37:21 UTC", "sightings": 1 }, { "indicator": "http://177.76.44.91/hiddenbin/boatnet.mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:37:21 UTC", "last_seen": "2026-03-06 17:37:21 UTC", "sightings": 1 }, { "indicator": "http://177.76.44.91/hiddenbin/boatnet.x86", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:37:20 UTC", "last_seen": "2026-03-06 17:37:20 UTC", "sightings": 1 }, { "indicator": "http://177.76.44.91/hiddenbin/boatnet.arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:37:19 UTC", "last_seen": "2026-03-06 17:37:19 UTC", "sightings": 1 }, { "indicator": "http://177.76.44.91/hiddenbin/boatnet.sh4", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:37:19 UTC", "last_seen": "2026-03-06 17:37:19 UTC", "sightings": 1 }, { "indicator": "http://177.76.44.91/hiddenbin/boatnet.x86_64", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:37:19 UTC", "last_seen": "2026-03-06 17:37:19 UTC", "sightings": 1 }, { "indicator": "http://177.76.44.91/hiddenbin/boatnet.arm", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:37:19 UTC", "last_seen": "2026-03-06 17:37:19 UTC", "sightings": 1 }, { "indicator": "http://177.76.44.91/hiddenbin/boatnet.spc", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:37:19 UTC", "last_seen": "2026-03-06 17:37:19 UTC", "sightings": 1 }, { "indicator": "http://177.76.44.91/hiddenbin/boatnet.arc", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:37:19 UTC", "last_seen": "2026-03-06 17:37:19 UTC", "sightings": 1 }, { "indicator": "http://39.90.185.17:53039/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 17:33:09 UTC", "last_seen": "2026-03-06 17:33:09 UTC", "sightings": 1 }, { "indicator": "http://110.36.77.162:47165/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 17:30:19 UTC", "last_seen": "2026-03-06 17:30:19 UTC", "sightings": 1 }, { "indicator": "https://s3.g.s4.mega.io/aileqac3yep7oqdhygjpberqqnk2zrnhck2lx/busket/2/05x06x26/01/BKRPAMCT.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543", "HijackLoader" ], "first_seen": "2026-03-06 17:30:13 UTC", "last_seen": "2026-03-06 17:30:13 UTC", "sightings": 1 }, { "indicator": "http://142.248.228.197/bins/sh4", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:29:14 UTC", "last_seen": "2026-03-06 17:29:14 UTC", "sightings": 1 }, { "indicator": "http://142.248.228.197/bins/arm", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:29:13 UTC", "last_seen": "2026-03-06 17:29:13 UTC", "sightings": 1 }, { "indicator": "http://142.248.228.197/bins/mipsel", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:29:13 UTC", "last_seen": "2026-03-06 17:29:13 UTC", "sightings": 1 }, { "indicator": "http://142.248.228.197/bins/x86_64", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:29:13 UTC", "last_seen": "2026-03-06 17:29:13 UTC", "sightings": 1 }, { "indicator": "http://142.248.228.197/bins/arm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:29:13 UTC", "last_seen": "2026-03-06 17:29:13 UTC", "sightings": 1 }, { "indicator": "http://142.248.228.197/bins/x86", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:29:13 UTC", "last_seen": "2026-03-06 17:29:13 UTC", "sightings": 1 }, { "indicator": "http://142.248.228.197/bins/arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:28:20 UTC", "last_seen": "2026-03-06 17:28:20 UTC", "sightings": 1 }, { "indicator": "http://142.248.228.197/bins/m68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:28:20 UTC", "last_seen": "2026-03-06 17:28:20 UTC", "sightings": 1 }, { "indicator": "http://142.248.228.197/bins/spc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:28:20 UTC", "last_seen": "2026-03-06 17:28:20 UTC", "sightings": 1 }, { "indicator": "http://142.248.228.197/bins/ppc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:28:20 UTC", "last_seen": "2026-03-06 17:28:20 UTC", "sightings": 1 }, { "indicator": "http://142.248.228.197/bins/mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:28:20 UTC", "last_seen": "2026-03-06 17:28:20 UTC", "sightings": 1 }, { "indicator": "http://142.248.228.197/bins/arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 17:28:20 UTC", "last_seen": "2026-03-06 17:28:20 UTC", "sightings": 1 }, { "indicator": "http://142.248.228.197/w.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "sh", "ua-wget" ], "first_seen": "2026-03-06 17:26:23 UTC", "last_seen": "2026-03-06 17:26:23 UTC", "sightings": 1 }, { "indicator": "http://142.248.228.197/wget.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "sh", "ua-wget" ], "first_seen": "2026-03-06 17:26:22 UTC", "last_seen": "2026-03-06 17:26:22 UTC", "sightings": 1 }, { "indicator": "http://27.37.231.238:40650/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 17:25:34 UTC", "last_seen": "2026-03-06 17:25:34 UTC", "sightings": 1 }, { "indicator": "http://115.63.15.129:56641/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 17:22:25 UTC", "last_seen": "2026-03-06 17:22:25 UTC", "sightings": 1 }, { "indicator": "http://42.227.178.238:51839/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 17:21:17 UTC", "last_seen": "2026-03-06 17:21:17 UTC", "sightings": 1 }, { "indicator": "http://125.41.102.42:53023/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 17:18:18 UTC", "last_seen": "2026-03-06 17:18:18 UTC", "sightings": 1 }, { "indicator": "http://115.54.166.146:58818/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 17:12:08 UTC", "last_seen": "2026-03-06 17:12:08 UTC", "sightings": 1 }, { "indicator": "http://158.94.211.222/files/2070717540/IPvJTgG.bat", "indicator_type": "url", "source": "URLhaus", "tags": [ "AsyncRAT", "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-06 17:11:07 UTC", "last_seen": "2026-03-06 17:11:07 UTC", "sightings": 1 }, { "indicator": "http://27.215.182.207:44013/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 17:08:20 UTC", "last_seen": "2026-03-06 17:08:20 UTC", "sightings": 1 }, { "indicator": "http://222.138.117.109:34226/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 17:04:20 UTC", "last_seen": "2026-03-06 17:04:20 UTC", "sightings": 1 }, { "indicator": "http://175.148.157.249:52091/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 17:01:27 UTC", "last_seen": "2026-03-06 17:01:27 UTC", "sightings": 1 }, { "indicator": "http://110.37.115.167:39090/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 17:01:24 UTC", "last_seen": "2026-03-06 17:01:24 UTC", "sightings": 1 }, { "indicator": "http://125.41.102.42:53023/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 16:57:10 UTC", "last_seen": "2026-03-06 16:57:10 UTC", "sightings": 1 }, { "indicator": "http://222.138.117.109:34226/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 16:53:18 UTC", "last_seen": "2026-03-06 16:53:18 UTC", "sightings": 1 }, { "indicator": "http://110.37.115.167:39090/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 16:51:17 UTC", "last_seen": "2026-03-06 16:51:17 UTC", "sightings": 1 }, { "indicator": "http://27.215.182.207:44013/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 16:41:11 UTC", "last_seen": "2026-03-06 16:41:11 UTC", "sightings": 1 }, { "indicator": "http://112.198.186.100:46073/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-06 16:36:18 UTC", "last_seen": "2026-03-06 16:36:18 UTC", "sightings": 1 }, { "indicator": "http://83.142.209.47/nullnet_load.x86_64", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 16:35:28 UTC", "last_seen": "2026-03-06 16:35:28 UTC", "sightings": 1 }, { "indicator": "http://83.142.209.47/nullnet_load.spc", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 16:35:27 UTC", "last_seen": "2026-03-06 16:35:27 UTC", "sightings": 1 }, { "indicator": "http://83.142.209.47/nullnet_load.sh4", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 16:35:27 UTC", "last_seen": "2026-03-06 16:35:27 UTC", "sightings": 1 }, { "indicator": "http://83.142.209.47/nullnet_load.arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 16:35:27 UTC", "last_seen": "2026-03-06 16:35:27 UTC", "sightings": 1 }, { "indicator": "http://185.38.142.156/huhu/titanjr.arm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 16:35:27 UTC", "last_seen": "2026-03-06 16:35:27 UTC", "sightings": 1 }, { "indicator": "http://125.40.121.213:42546/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 16:35:27 UTC", "last_seen": "2026-03-06 16:35:27 UTC", "sightings": 1 }, { "indicator": "http://83.142.209.47/nullnet_load.arc", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 16:35:27 UTC", "last_seen": "2026-03-06 16:35:27 UTC", "sightings": 1 }, { "indicator": "http://83.142.209.47/nullnet_load.ppc", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 16:35:27 UTC", "last_seen": "2026-03-06 16:35:27 UTC", "sightings": 1 }, { "indicator": "http://185.38.142.156/huhu/titanjr.mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 16:35:27 UTC", "last_seen": "2026-03-06 16:35:27 UTC", "sightings": 1 }, { "indicator": "http://83.142.209.47/nullnet_load.x86", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 16:35:27 UTC", "last_seen": "2026-03-06 16:35:27 UTC", "sightings": 1 }, { "indicator": "http://83.142.209.47/nullnet_load.i486", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 16:35:27 UTC", "last_seen": "2026-03-06 16:35:27 UTC", "sightings": 1 }, { "indicator": "http://185.38.142.156/huhu/titanjr.spc", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 16:35:27 UTC", "last_seen": "2026-03-06 16:35:27 UTC", "sightings": 1 }, { "indicator": "http://185.38.142.156/huhu/titanjr.ppc", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 16:35:27 UTC", "last_seen": "2026-03-06 16:35:27 UTC", "sightings": 1 }, { "indicator": "http://91.124.63.133/main_arm", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 16:35:27 UTC", "last_seen": "2026-03-06 16:35:27 UTC", "sightings": 1 }, { "indicator": "http://185.38.142.156/huhu/titanjr.m68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 16:35:27 UTC", "last_seen": "2026-03-06 16:35:27 UTC", "sightings": 1 }, { "indicator": "http://91.124.63.133/main_sh4", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 16:35:27 UTC", "last_seen": "2026-03-06 16:35:27 UTC", "sightings": 1 }, { "indicator": "http://185.38.142.156/huhu/titanjr.arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 16:35:27 UTC", "last_seen": "2026-03-06 16:35:27 UTC", "sightings": 1 }, { "indicator": "http://83.142.209.47/realtek", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "mirai", "sh", "ua-wget" ], "first_seen": "2026-03-06 16:35:27 UTC", "last_seen": "2026-03-06 16:35:27 UTC", "sightings": 1 }, { "indicator": "http://185.38.142.156/huhu/titanjr.arm", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 16:35:27 UTC", "last_seen": "2026-03-06 16:35:27 UTC", "sightings": 1 }, { "indicator": "http://91.124.63.133/main_mpsl", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 16:35:27 UTC", "last_seen": "2026-03-06 16:35:27 UTC", "sightings": 1 }, { "indicator": "http://185.38.142.156/huhu/titanjr.ppc440", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 16:35:27 UTC", "last_seen": "2026-03-06 16:35:27 UTC", "sightings": 1 }, { "indicator": "http://91.124.63.133/main_arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 16:35:27 UTC", "last_seen": "2026-03-06 16:35:27 UTC", "sightings": 1 }, { "indicator": "http://91.124.63.133/main_m68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 16:35:27 UTC", "last_seen": "2026-03-06 16:35:27 UTC", "sightings": 1 }, { "indicator": "http://185.38.142.156/huhu/titanjr.x86_32", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 16:35:27 UTC", "last_seen": "2026-03-06 16:35:27 UTC", "sightings": 1 }, { "indicator": "http://91.124.63.133/main_arm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 16:35:27 UTC", "last_seen": "2026-03-06 16:35:27 UTC", "sightings": 1 }, { "indicator": "http://185.38.142.156/huhu/titanjr.sh4", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 16:35:27 UTC", "last_seen": "2026-03-06 16:35:27 UTC", "sightings": 1 }, { "indicator": "http://185.38.142.156/huhu/titanjr.i686", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 16:35:27 UTC", "last_seen": "2026-03-06 16:35:27 UTC", "sightings": 1 }, { "indicator": "http://185.38.142.156/huhu/titanjr.arc", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 16:35:27 UTC", "last_seen": "2026-03-06 16:35:27 UTC", "sightings": 1 }, { "indicator": "http://91.124.63.133/main_ppc", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 16:35:27 UTC", "last_seen": "2026-03-06 16:35:27 UTC", "sightings": 1 }, { "indicator": "http://185.38.142.156/titanjr.x86_64", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 16:35:27 UTC", "last_seen": "2026-03-06 16:35:27 UTC", "sightings": 1 }, { "indicator": "http://83.142.209.47/nullnet_load.i686", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 16:35:27 UTC", "last_seen": "2026-03-06 16:35:27 UTC", "sightings": 1 }, { "indicator": "http://185.38.142.156/huhu/titanjr.i486", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 16:35:27 UTC", "last_seen": "2026-03-06 16:35:27 UTC", "sightings": 1 }, { "indicator": "http://91.124.63.133/main_x86_64", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 16:35:27 UTC", "last_seen": "2026-03-06 16:35:27 UTC", "sightings": 1 }, { "indicator": "http://83.142.209.47/nullnet_load.arm", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 16:35:27 UTC", "last_seen": "2026-03-06 16:35:27 UTC", "sightings": 1 }, { "indicator": "http://83.142.209.47/nullnet_load.arm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 16:35:26 UTC", "last_seen": "2026-03-06 16:35:26 UTC", "sightings": 1 }, { "indicator": "http://83.142.209.47/nullnet_load.m68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 16:35:26 UTC", "last_seen": "2026-03-06 16:35:26 UTC", "sightings": 1 }, { "indicator": "http://91.124.63.133/main_mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 16:35:14 UTC", "last_seen": "2026-03-06 16:35:14 UTC", "sightings": 1 }, { "indicator": "http://185.38.142.156/huhu/titanjr.mipsl", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 16:35:14 UTC", "last_seen": "2026-03-06 16:35:14 UTC", "sightings": 1 }, { "indicator": "http://125.40.121.213:42546/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 16:34:20 UTC", "last_seen": "2026-03-06 16:34:20 UTC", "sightings": 1 }, { "indicator": "http://83.142.209.47/x", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "mirai", "sh", "ua-wget" ], "first_seen": "2026-03-06 16:34:18 UTC", "last_seen": "2026-03-06 16:34:18 UTC", "sightings": 1 }, { "indicator": "http://117.209.28.159:58619/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 16:25:20 UTC", "last_seen": "2026-03-06 16:25:20 UTC", "sightings": 1 }, { "indicator": "http://119.115.165.56:53442/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 16:17:10 UTC", "last_seen": "2026-03-06 16:17:10 UTC", "sightings": 1 }, { "indicator": "http://158.94.211.222/files/7044575709/ABbqsJz.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543", "SalatStealer" ], "first_seen": "2026-03-06 16:17:06 UTC", "last_seen": "2026-03-06 16:17:06 UTC", "sightings": 1 }, { "indicator": "http://119.115.165.56:53442/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 16:14:22 UTC", "last_seen": "2026-03-06 16:14:22 UTC", "sightings": 1 }, { "indicator": "http://61.3.142.62:49123/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 16:05:19 UTC", "last_seen": "2026-03-06 16:05:19 UTC", "sightings": 1 }, { "indicator": "http://61.3.142.62:49123/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 16:03:19 UTC", "last_seen": "2026-03-06 16:03:19 UTC", "sightings": 1 }, { "indicator": "http://117.209.28.159:58619/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 16:02:09 UTC", "last_seen": "2026-03-06 16:02:09 UTC", "sightings": 1 }, { "indicator": "http://46.203.233.102/00101010101001/morte.x86_64", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 16:02:07 UTC", "last_seen": "2026-03-06 16:02:07 UTC", "sightings": 1 }, { "indicator": "http://182.116.86.221:60894/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 15:59:19 UTC", "last_seen": "2026-03-06 15:59:19 UTC", "sightings": 1 }, { "indicator": "http://178.215.236.81/bins/xnxnxnxnxnxnxnxnriscv32xnxn", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 15:51:16 UTC", "last_seen": "2026-03-06 15:51:16 UTC", "sightings": 1 }, { "indicator": "http://178.215.236.81/bins/xnxnxnxnxnxnxnxnmipsxnxn", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 15:50:11 UTC", "last_seen": "2026-03-06 15:50:11 UTC", "sightings": 1 }, { "indicator": "http://178.215.236.81/bins/xnxnxnxnxnxnxnxnsh2xnxn", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 15:50:11 UTC", "last_seen": "2026-03-06 15:50:11 UTC", "sightings": 1 }, { "indicator": "http://178.215.236.81/bins/xnxnxnxnxnxnxnxnor1kxnxn", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 15:50:11 UTC", "last_seen": "2026-03-06 15:50:11 UTC", "sightings": 1 }, { "indicator": "http://178.215.236.81/bins/xnxnxnxnxnxnxnxnloongarch64xnxn", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 15:50:11 UTC", "last_seen": "2026-03-06 15:50:11 UTC", "sightings": 1 }, { "indicator": "http://178.215.236.81/bins/xnxnxnxnxnxnxnxni386xnxn", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 15:49:12 UTC", "last_seen": "2026-03-06 15:49:12 UTC", "sightings": 1 }, { "indicator": "http://178.215.236.81/bins/xnxnxnxnxnxnxnxnriscv64xnxn", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 15:49:12 UTC", "last_seen": "2026-03-06 15:49:12 UTC", "sightings": 1 }, { "indicator": "http://178.215.236.81/bins/xnxnxnxnxnxnxnxnpowerpcxnxn", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 15:49:12 UTC", "last_seen": "2026-03-06 15:49:12 UTC", "sightings": 1 }, { "indicator": "http://83.142.209.47/nullnet_load.mpsl", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 15:49:12 UTC", "last_seen": "2026-03-06 15:49:12 UTC", "sightings": 1 }, { "indicator": "http://178.215.236.81/bins/xnxnxnxnxnxnxnxnm68kxnxn", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 15:49:12 UTC", "last_seen": "2026-03-06 15:49:12 UTC", "sightings": 1 }, { "indicator": "http://45.151.155.223/x86_64", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 15:49:12 UTC", "last_seen": "2026-03-06 15:49:12 UTC", "sightings": 1 }, { "indicator": "http://83.142.209.47/nullnet_load.arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 15:49:11 UTC", "last_seen": "2026-03-06 15:49:11 UTC", "sightings": 1 }, { "indicator": "http://83.142.209.47/nullnet_load.mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 15:49:11 UTC", "last_seen": "2026-03-06 15:49:11 UTC", "sightings": 1 }, { "indicator": "http://178.215.236.81/bins/xnxnxnxnxnxnxnxnmicroblazexnxn", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 15:49:11 UTC", "last_seen": "2026-03-06 15:49:11 UTC", "sightings": 1 }, { "indicator": "http://178.215.236.81/bins/xnxnxnxnxnxnxnxnsh4xnxn", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 15:49:11 UTC", "last_seen": "2026-03-06 15:49:11 UTC", "sightings": 1 }, { "indicator": "http://185.38.142.156/huhu/titanjr", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "ua-wget" ], "first_seen": "2026-03-06 15:49:08 UTC", "last_seen": "2026-03-06 15:49:08 UTC", "sightings": 1 }, { "indicator": "http://45.151.155.223/arc", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "ua-wget" ], "first_seen": "2026-03-06 15:49:08 UTC", "last_seen": "2026-03-06 15:49:08 UTC", "sightings": 1 }, { "indicator": "http://45.151.155.223/m68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "ua-wget" ], "first_seen": "2026-03-06 15:49:08 UTC", "last_seen": "2026-03-06 15:49:08 UTC", "sightings": 1 }, { "indicator": "http://45.151.155.223/arm", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 15:47:24 UTC", "last_seen": "2026-03-06 15:47:24 UTC", "sightings": 1 }, { "indicator": "http://45.151.155.223/sh4", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 15:47:24 UTC", "last_seen": "2026-03-06 15:47:24 UTC", "sightings": 1 }, { "indicator": "http://107.175.89.136/nuts/poop", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "CoinMiner", "elf", "ua-wget" ], "first_seen": "2026-03-06 15:47:24 UTC", "last_seen": "2026-03-06 15:47:24 UTC", "sightings": 1 }, { "indicator": "http://45.151.155.223/ppc", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 15:47:24 UTC", "last_seen": "2026-03-06 15:47:24 UTC", "sightings": 1 }, { "indicator": "http://45.151.155.223/arm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 15:47:24 UTC", "last_seen": "2026-03-06 15:47:24 UTC", "sightings": 1 }, { "indicator": "http://45.151.155.223/debug.dbg", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 15:47:24 UTC", "last_seen": "2026-03-06 15:47:24 UTC", "sightings": 1 }, { "indicator": "http://178.215.236.81/bins/xnxnxnxnxnxnxnxnx86_64xnxn", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 15:47:24 UTC", "last_seen": "2026-03-06 15:47:24 UTC", "sightings": 1 }, { "indicator": "http://91.124.63.133/main_x86", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 15:47:24 UTC", "last_seen": "2026-03-06 15:47:24 UTC", "sightings": 1 }, { "indicator": "http://185.198.234.189/armv7l", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 15:47:24 UTC", "last_seen": "2026-03-06 15:47:24 UTC", "sightings": 1 }, { "indicator": "http://45.151.155.223/mpsl", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 15:47:24 UTC", "last_seen": "2026-03-06 15:47:24 UTC", "sightings": 1 }, { "indicator": "http://185.38.142.156/huhu/titanjr.arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 15:47:24 UTC", "last_seen": "2026-03-06 15:47:24 UTC", "sightings": 1 }, { "indicator": "http://185.38.142.156/all.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "mirai", "sh", "ua-wget" ], "first_seen": "2026-03-06 15:47:24 UTC", "last_seen": "2026-03-06 15:47:24 UTC", "sightings": 1 }, { "indicator": "http://45.151.155.223/mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 15:47:24 UTC", "last_seen": "2026-03-06 15:47:24 UTC", "sightings": 1 }, { "indicator": "http://91.124.63.133/main_arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 15:47:24 UTC", "last_seen": "2026-03-06 15:47:24 UTC", "sightings": 1 }, { "indicator": "http://188.116.36.184/arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 15:47:24 UTC", "last_seen": "2026-03-06 15:47:24 UTC", "sightings": 1 }, { "indicator": "http://185.38.142.156/huhu/titanjr.x86_64", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 15:47:24 UTC", "last_seen": "2026-03-06 15:47:24 UTC", "sightings": 1 }, { "indicator": "http://178.215.236.81/bins/xnxnxnxnxnxnxnxnaarch64xnxn", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 15:47:24 UTC", "last_seen": "2026-03-06 15:47:24 UTC", "sightings": 1 }, { "indicator": "http://178.215.236.81/run.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "sh", "ua-wget" ], "first_seen": "2026-03-06 15:47:24 UTC", "last_seen": "2026-03-06 15:47:24 UTC", "sightings": 1 }, { "indicator": "http://45.151.155.223/arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 15:47:23 UTC", "last_seen": "2026-03-06 15:47:23 UTC", "sightings": 1 }, { "indicator": "http://45.151.155.223/x86", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 15:47:23 UTC", "last_seen": "2026-03-06 15:47:23 UTC", "sightings": 1 }, { "indicator": "http://45.151.155.223/arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 15:47:23 UTC", "last_seen": "2026-03-06 15:47:23 UTC", "sightings": 1 }, { "indicator": "http://45.151.155.223/jack5tr.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "mirai", "sh", "ua-wget" ], "first_seen": "2026-03-06 15:47:23 UTC", "last_seen": "2026-03-06 15:47:23 UTC", "sightings": 1 }, { "indicator": "http://83.142.209.47/cache", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "mirai", "sh", "ua-wget" ], "first_seen": "2026-03-06 15:47:17 UTC", "last_seen": "2026-03-06 15:47:17 UTC", "sightings": 1 }, { "indicator": "http://185.196.41.201/x86", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 15:47:17 UTC", "last_seen": "2026-03-06 15:47:17 UTC", "sightings": 1 }, { "indicator": "http://107.175.89.136/nuts/bolts", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "sh", "ua-wget" ], "first_seen": "2026-03-06 15:47:14 UTC", "last_seen": "2026-03-06 15:47:14 UTC", "sightings": 1 }, { "indicator": "http://45.151.155.223/spc", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 15:47:14 UTC", "last_seen": "2026-03-06 15:47:14 UTC", "sightings": 1 }, { "indicator": "http://83.142.209.47/a", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "mirai", "sh", "ua-wget" ], "first_seen": "2026-03-06 15:47:13 UTC", "last_seen": "2026-03-06 15:47:13 UTC", "sightings": 1 }, { "indicator": "http://102.33.47.44:39706/Mozi.m", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-06 15:43:22 UTC", "last_seen": "2026-03-06 15:43:22 UTC", "sightings": 1 }, { "indicator": "http://42.238.169.80:35050/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 15:41:20 UTC", "last_seen": "2026-03-06 15:41:20 UTC", "sightings": 1 }, { "indicator": "http://125.44.58.134:52739/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 15:38:21 UTC", "last_seen": "2026-03-06 15:38:21 UTC", "sightings": 1 }, { "indicator": "http://158.94.211.222/files/1225117411/Blr3MBe.msi", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "connectwise", "dropped-by-amadey" ], "first_seen": "2026-03-06 15:33:09 UTC", "last_seen": "2026-03-06 15:33:09 UTC", "sightings": 1 }, { "indicator": "http://123.11.223.18:54111/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 15:28:22 UTC", "last_seen": "2026-03-06 15:28:22 UTC", "sightings": 1 }, { "indicator": "http://117.254.97.14:60714/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 15:28:21 UTC", "last_seen": "2026-03-06 15:28:21 UTC", "sightings": 1 }, { "indicator": "https://young-site.youngwoman.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-06 15:26:08 UTC", "last_seen": "2026-03-06 15:26:08 UTC", "sightings": 1 }, { "indicator": "http://115.58.86.110:38376/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 15:19:21 UTC", "last_seen": "2026-03-06 15:19:21 UTC", "sightings": 1 }, { "indicator": "http://42.238.169.80:35050/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 15:14:23 UTC", "last_seen": "2026-03-06 15:14:23 UTC", "sightings": 1 }, { "indicator": "http://27.37.114.230:43810/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 15:12:31 UTC", "last_seen": "2026-03-06 15:12:31 UTC", "sightings": 1 }, { "indicator": "http://125.44.58.134:52739/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 15:09:30 UTC", "last_seen": "2026-03-06 15:09:30 UTC", "sightings": 1 }, { "indicator": "http://182.127.178.249:44949/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 15:06:20 UTC", "last_seen": "2026-03-06 15:06:20 UTC", "sightings": 1 }, { "indicator": "http://110.36.20.111:53207/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 15:05:23 UTC", "last_seen": "2026-03-06 15:05:23 UTC", "sightings": 1 }, { "indicator": "https://pigeon-v2.pigeonbreed.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-06 15:00:11 UTC", "last_seen": "2026-03-06 15:00:11 UTC", "sightings": 1 }, { "indicator": "http://158.94.211.222/files/7362035837/T3f3JTM.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-06 15:00:11 UTC", "last_seen": "2026-03-06 15:00:11 UTC", "sightings": 1 }, { "indicator": "http://158.94.211.222/files/6902778688/bQVtGjS.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-06 14:56:09 UTC", "last_seen": "2026-03-06 14:56:09 UTC", "sightings": 1 }, { "indicator": "http://117.254.97.14:60714/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 14:55:22 UTC", "last_seen": "2026-03-06 14:55:22 UTC", "sightings": 1 }, { "indicator": "http://110.36.20.111:53207/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 14:55:21 UTC", "last_seen": "2026-03-06 14:55:21 UTC", "sightings": 1 }, { "indicator": "https://bird-farm.pigeonbreed.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-06 14:55:09 UTC", "last_seen": "2026-03-06 14:55:09 UTC", "sightings": 1 }, { "indicator": "https://temp.sh/iNWtZ/client.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-06 14:55:07 UTC", "last_seen": "2026-03-06 14:55:07 UTC", "sightings": 1 }, { "indicator": "http://176.65.148.55/bins/apex.mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "DDoSAgent", "elf", "ua-wget" ], "first_seen": "2026-03-06 14:53:36 UTC", "last_seen": "2026-03-06 14:53:36 UTC", "sightings": 1 }, { "indicator": "http://176.65.148.55/bins/apex.x86", "indicator_type": "url", "source": "URLhaus", "tags": [ "DDoSAgent", "elf", "ua-wget" ], "first_seen": "2026-03-06 14:53:35 UTC", "last_seen": "2026-03-06 14:53:35 UTC", "sightings": 1 }, { "indicator": "http://176.65.148.55/bins/apex.mipsle", "indicator_type": "url", "source": "URLhaus", "tags": [ "DDoSAgent", "elf", "ua-wget" ], "first_seen": "2026-03-06 14:53:35 UTC", "last_seen": "2026-03-06 14:53:35 UTC", "sightings": 1 }, { "indicator": "http://176.65.148.55/bins/apex_cnc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-06 14:53:34 UTC", "last_seen": "2026-03-06 14:53:34 UTC", "sightings": 1 }, { "indicator": "http://176.65.148.55/bins/apex.x86_64", "indicator_type": "url", "source": "URLhaus", "tags": [ "DDoSAgent", "elf", "ua-wget" ], "first_seen": "2026-03-06 14:53:28 UTC", "last_seen": "2026-03-06 14:53:28 UTC", "sightings": 1 }, { "indicator": "http://176.65.148.55/bins/apex.arm", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-06 14:53:27 UTC", "last_seen": "2026-03-06 14:53:27 UTC", "sightings": 1 }, { "indicator": "http://123.4.193.53:39795/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 14:53:27 UTC", "last_seen": "2026-03-06 14:53:27 UTC", "sightings": 1 }, { "indicator": "http://176.65.148.55/bins/apex_cnc.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "exe" ], "first_seen": "2026-03-06 14:53:13 UTC", "last_seen": "2026-03-06 14:53:13 UTC", "sightings": 1 }, { "indicator": "http://94.156.102.255/files/Mu-lime.img", "indicator_type": "url", "source": "URLhaus", "tags": [ "img" ], "first_seen": "2026-03-06 14:51:10 UTC", "last_seen": "2026-03-06 14:51:10 UTC", "sightings": 1 }, { "indicator": "http://94.156.102.255/files/coolfile.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "exe", "njRAT" ], "first_seen": "2026-03-06 14:50:10 UTC", "last_seen": "2026-03-06 14:50:10 UTC", "sightings": 1 }, { "indicator": "http://94.156.102.255/files/mswincryptographdata.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "exe", "njRAT" ], "first_seen": "2026-03-06 14:50:10 UTC", "last_seen": "2026-03-06 14:50:10 UTC", "sightings": 1 }, { "indicator": "http://94.156.102.255/files/totallynotavirus.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "exe", "njRAT" ], "first_seen": "2026-03-06 14:50:09 UTC", "last_seen": "2026-03-06 14:50:09 UTC", "sightings": 1 }, { "indicator": "http://91.92.243.117/TaskSvc.vbs", "indicator_type": "url", "source": "URLhaus", "tags": [ "vbs" ], "first_seen": "2026-03-06 14:50:08 UTC", "last_seen": "2026-03-06 14:50:08 UTC", "sightings": 1 }, { "indicator": "http://123.5.186.68:46843/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 14:48:22 UTC", "last_seen": "2026-03-06 14:48:22 UTC", "sightings": 1 }, { "indicator": "http://158.94.211.222/files/5758620506/HjZucsF.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-06 14:47:10 UTC", "last_seen": "2026-03-06 14:47:10 UTC", "sightings": 1 }, { "indicator": "http://115.59.34.89:44710/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 14:46:19 UTC", "last_seen": "2026-03-06 14:46:19 UTC", "sightings": 1 }, { "indicator": "http://117.200.206.209:48540/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 14:44:21 UTC", "last_seen": "2026-03-06 14:44:21 UTC", "sightings": 1 }, { "indicator": "http://60.23.233.242:59675/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 14:43:14 UTC", "last_seen": "2026-03-06 14:43:14 UTC", "sightings": 1 }, { "indicator": "http://59.92.169.238:38160/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 14:40:22 UTC", "last_seen": "2026-03-06 14:40:22 UTC", "sightings": 1 }, { "indicator": "http://110.39.226.242:41514/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 14:38:18 UTC", "last_seen": "2026-03-06 14:38:18 UTC", "sightings": 1 }, { "indicator": "http://113.99.201.96:58735/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 14:38:18 UTC", "last_seen": "2026-03-06 14:38:18 UTC", "sightings": 1 }, { "indicator": "http://60.23.233.242:59675/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 14:35:21 UTC", "last_seen": "2026-03-06 14:35:21 UTC", "sightings": 1 }, { "indicator": "http://158.94.211.222/files/6149304756/t1nM7M0.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-06 14:34:08 UTC", "last_seen": "2026-03-06 14:34:08 UTC", "sightings": 1 }, { "indicator": "http://110.39.226.242:41514/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 14:23:26 UTC", "last_seen": "2026-03-06 14:23:26 UTC", "sightings": 1 }, { "indicator": "http://123.5.186.68:46843/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 14:22:21 UTC", "last_seen": "2026-03-06 14:22:21 UTC", "sightings": 1 }, { "indicator": "http://45.207.157.11/linux_arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "Kaiji", "ua-wget" ], "first_seen": "2026-03-06 14:21:32 UTC", "last_seen": "2026-03-06 14:21:32 UTC", "sightings": 1 }, { "indicator": "http://45.156.87.176/iran.armv7l", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 14:21:30 UTC", "last_seen": "2026-03-06 14:21:30 UTC", "sightings": 1 }, { "indicator": "http://45.66.228.176/linux_arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "gafgyt", "ua-wget" ], "first_seen": "2026-03-06 14:21:30 UTC", "last_seen": "2026-03-06 14:21:30 UTC", "sightings": 1 }, { "indicator": "http://45.207.157.11/linux_arm64", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "Kaiji", "ua-wget" ], "first_seen": "2026-03-06 14:21:24 UTC", "last_seen": "2026-03-06 14:21:24 UTC", "sightings": 1 }, { "indicator": "http://45.66.228.176/linux_arm64", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "gafgyt", "ua-wget" ], "first_seen": "2026-03-06 14:21:24 UTC", "last_seen": "2026-03-06 14:21:24 UTC", "sightings": 1 }, { "indicator": "http://45.207.157.11/linux_amd64", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "Kaiji", "ua-wget" ], "first_seen": "2026-03-06 14:21:24 UTC", "last_seen": "2026-03-06 14:21:24 UTC", "sightings": 1 }, { "indicator": "http://45.156.87.176/iran.x86_64", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 14:21:23 UTC", "last_seen": "2026-03-06 14:21:23 UTC", "sightings": 1 }, { "indicator": "http://178.16.52.217/a", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 14:21:23 UTC", "last_seen": "2026-03-06 14:21:23 UTC", "sightings": 1 }, { "indicator": "http://45.66.228.176/linux_amd64", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-06 14:21:23 UTC", "last_seen": "2026-03-06 14:21:23 UTC", "sightings": 1 }, { "indicator": "http://115.59.34.89:44710/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 14:19:26 UTC", "last_seen": "2026-03-06 14:19:26 UTC", "sightings": 1 }, { "indicator": "http://178.16.53.82/", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "CoinMiner", "elf", "ua-wget", "xmrig" ], "first_seen": "2026-03-06 14:18:20 UTC", "last_seen": "2026-03-06 14:18:20 UTC", "sightings": 1 }, { "indicator": "http://91.92.241.109/", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "CoinMiner", "elf", "ua-wget", "xmrig" ], "first_seen": "2026-03-06 14:18:20 UTC", "last_seen": "2026-03-06 14:18:20 UTC", "sightings": 1 }, { "indicator": "http://178.16.55.63/", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "CoinMiner", "elf", "ua-wget", "xmrig" ], "first_seen": "2026-03-06 14:18:20 UTC", "last_seen": "2026-03-06 14:18:20 UTC", "sightings": 1 }, { "indicator": "http://158.94.211.104/", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "CoinMiner", "elf", "ua-wget", "xmrig" ], "first_seen": "2026-03-06 14:18:20 UTC", "last_seen": "2026-03-06 14:18:20 UTC", "sightings": 1 }, { "indicator": "http://158.94.211.103/", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "CoinMiner", "elf", "ua-wget", "xmrig" ], "first_seen": "2026-03-06 14:18:20 UTC", "last_seen": "2026-03-06 14:18:20 UTC", "sightings": 1 }, { "indicator": "http://91.92.241.152/", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "CoinMiner", "elf", "ua-wget", "xmrig" ], "first_seen": "2026-03-06 14:18:20 UTC", "last_seen": "2026-03-06 14:18:20 UTC", "sightings": 1 }, { "indicator": "http://158.94.211.100/", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "CoinMiner", "elf", "ua-wget", "xmrig" ], "first_seen": "2026-03-06 14:18:20 UTC", "last_seen": "2026-03-06 14:18:20 UTC", "sightings": 1 }, { "indicator": "http://91.92.240.222/", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "CoinMiner", "elf", "ua-wget", "xmrig" ], "first_seen": "2026-03-06 14:18:20 UTC", "last_seen": "2026-03-06 14:18:20 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.174/", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "CoinMiner", "elf", "ua-wget", "xmrig" ], "first_seen": "2026-03-06 14:18:20 UTC", "last_seen": "2026-03-06 14:18:20 UTC", "sightings": 1 }, { "indicator": "http://178.16.52.44/", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "CoinMiner", "elf", "ua-wget", "xmrig" ], "first_seen": "2026-03-06 14:18:20 UTC", "last_seen": "2026-03-06 14:18:20 UTC", "sightings": 1 }, { "indicator": "http://158.94.211.102/", "indicator_type": "url", "source": "URLhaus", "tags": [ "censys", "CoinMiner", "elf", "ua-wget", "xmrig" ], "first_seen": "2026-03-06 14:18:17 UTC", "last_seen": "2026-03-06 14:18:17 UTC", "sightings": 1 }, { "indicator": "http://110.36.28.45:55414/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 14:09:22 UTC", "last_seen": "2026-03-06 14:09:22 UTC", "sightings": 1 }, { "indicator": "http://173.28.103.46:59881/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-06 14:07:18 UTC", "last_seen": "2026-03-06 14:07:18 UTC", "sightings": 1 }, { "indicator": "http://115.51.31.86:54913/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 14:04:22 UTC", "last_seen": "2026-03-06 14:04:22 UTC", "sightings": 1 }, { "indicator": "http://115.58.133.221:36494/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 13:56:19 UTC", "last_seen": "2026-03-06 13:56:19 UTC", "sightings": 1 }, { "indicator": "http://112.242.24.137:54688/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 13:54:23 UTC", "last_seen": "2026-03-06 13:54:23 UTC", "sightings": 1 }, { "indicator": "http://158.94.210.93/", "indicator_type": "url", "source": "URLhaus", "tags": [ "CoinMiner", "elf", "ua-wget", "xmrig" ], "first_seen": "2026-03-06 13:45:21 UTC", "last_seen": "2026-03-06 13:45:21 UTC", "sightings": 1 }, { "indicator": "http://158.94.208.52/", "indicator_type": "url", "source": "URLhaus", "tags": [ "CoinMiner", "elf", "ua-wget", "xmrig" ], "first_seen": "2026-03-06 13:45:21 UTC", "last_seen": "2026-03-06 13:45:21 UTC", "sightings": 1 }, { "indicator": "http://178.16.52.18/", "indicator_type": "url", "source": "URLhaus", "tags": [ "CoinMiner", "elf", "ua-wget", "xmrig" ], "first_seen": "2026-03-06 13:44:17 UTC", "last_seen": "2026-03-06 13:44:17 UTC", "sightings": 1 }, { "indicator": "http://158.94.211.101/", "indicator_type": "url", "source": "URLhaus", "tags": [ "CoinMiner", "elf", "ua-wget", "xmrig" ], "first_seen": "2026-03-06 13:44:16 UTC", "last_seen": "2026-03-06 13:44:16 UTC", "sightings": 1 }, { "indicator": "http://42.224.195.119:38772/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 13:37:17 UTC", "last_seen": "2026-03-06 13:37:17 UTC", "sightings": 1 }, { "indicator": "http://158.94.211.222/files/7309295924/SpdWqa6.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey", "xworm" ], "first_seen": "2026-03-06 13:37:07 UTC", "last_seen": "2026-03-06 13:37:07 UTC", "sightings": 1 }, { "indicator": "http://219.157.183.59:54993/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 13:21:14 UTC", "last_seen": "2026-03-06 13:21:14 UTC", "sightings": 1 }, { "indicator": "http://112.242.24.137:54688/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 13:18:34 UTC", "last_seen": "2026-03-06 13:18:34 UTC", "sightings": 1 }, { "indicator": "http://182.119.163.220:47170/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 13:08:08 UTC", "last_seen": "2026-03-06 13:08:08 UTC", "sightings": 1 }, { "indicator": "http://178.206.144.30:59164/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 13:03:18 UTC", "last_seen": "2026-03-06 13:03:18 UTC", "sightings": 1 }, { "indicator": "http://115.63.231.252:47275/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 13:02:10 UTC", "last_seen": "2026-03-06 13:02:10 UTC", "sightings": 1 }, { "indicator": "http://158.94.211.222/files/8468794285/sBC01fa.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543", "SantaStealer" ], "first_seen": "2026-03-06 12:58:09 UTC", "last_seen": "2026-03-06 12:58:09 UTC", "sightings": 1 }, { "indicator": "http://219.157.183.59:54993/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 12:54:15 UTC", "last_seen": "2026-03-06 12:54:15 UTC", "sightings": 1 }, { "indicator": "http://158.94.211.222/final/random.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543", "NirCmd" ], "first_seen": "2026-03-06 12:52:09 UTC", "last_seen": "2026-03-06 12:52:09 UTC", "sightings": 1 }, { "indicator": "http://178.206.144.30:59164/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 12:37:20 UTC", "last_seen": "2026-03-06 12:37:20 UTC", "sightings": 1 }, { "indicator": "http://42.225.241.53:44423/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 12:35:25 UTC", "last_seen": "2026-03-06 12:35:25 UTC", "sightings": 1 }, { "indicator": "http://42.234.234.143:34579/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 12:34:11 UTC", "last_seen": "2026-03-06 12:34:11 UTC", "sightings": 1 }, { "indicator": "http://158.94.211.222/files/1660459253/W3Trdgs.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-06 12:29:07 UTC", "last_seen": "2026-03-06 12:29:07 UTC", "sightings": 1 }, { "indicator": "http://158.94.211.222/files/6961337700/4p8oGAO.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey", "Vidar" ], "first_seen": "2026-03-06 12:15:10 UTC", "last_seen": "2026-03-06 12:15:10 UTC", "sightings": 1 }, { "indicator": "https://sqddakti.awakepathog.digital/?=check&&actmn=FhKBGAbPdxMGLMmf", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-06 12:12:08 UTC", "last_seen": "2026-03-06 12:12:08 UTC", "sightings": 1 }, { "indicator": "http://117.208.234.225:41452/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 12:10:24 UTC", "last_seen": "2026-03-06 12:10:24 UTC", "sightings": 1 }, { "indicator": "https://exitroute.dropout.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-06 12:10:09 UTC", "last_seen": "2026-03-06 12:10:09 UTC", "sightings": 1 }, { "indicator": "http://158.94.211.222/files/gop/random.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey", "Vidar" ], "first_seen": "2026-03-06 12:10:08 UTC", "last_seen": "2026-03-06 12:10:08 UTC", "sightings": 1 }, { "indicator": "http://158.94.211.222/files/6608710704/1r6sQRc.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey", "Vidar" ], "first_seen": "2026-03-06 12:10:08 UTC", "last_seen": "2026-03-06 12:10:08 UTC", "sightings": 1 }, { "indicator": "http://158.94.211.222/files/7725193537/jdVAN80.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey", "rustystealer" ], "first_seen": "2026-03-06 12:09:13 UTC", "last_seen": "2026-03-06 12:09:13 UTC", "sightings": 1 }, { "indicator": "http://158.94.211.222/files/5908119101/gkmdY2O.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-03-06 12:09:11 UTC", "last_seen": "2026-03-06 12:09:11 UTC", "sightings": 1 }, { "indicator": "http://158.94.211.222/files/7260582679/YOaxz85.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-03-06 12:09:08 UTC", "last_seen": "2026-03-06 12:09:08 UTC", "sightings": 1 }, { "indicator": "http://158.94.211.222/files/8243287745/p9ulf8e.msi", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-03-06 12:09:08 UTC", "last_seen": "2026-03-06 12:09:08 UTC", "sightings": 1 }, { "indicator": "http://158.94.211.222/files/7782139129/PKenO2z.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey", "SalatStealer" ], "first_seen": "2026-03-06 12:07:08 UTC", "last_seen": "2026-03-06 12:07:08 UTC", "sightings": 1 }, { "indicator": "http://158.94.211.222/files/5900855435/eNLe4nm.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey", "Vidar" ], "first_seen": "2026-03-06 12:07:07 UTC", "last_seen": "2026-03-06 12:07:07 UTC", "sightings": 1 }, { "indicator": "http://158.94.211.222/files/8499672124/b1JNsvy.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey", "Fuery" ], "first_seen": "2026-03-06 12:07:07 UTC", "last_seen": "2026-03-06 12:07:07 UTC", "sightings": 1 }, { "indicator": "http://115.50.28.157:56782/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 12:06:18 UTC", "last_seen": "2026-03-06 12:06:18 UTC", "sightings": 1 }, { "indicator": "http://158.94.211.222/test/random.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-06 12:06:07 UTC", "last_seen": "2026-03-06 12:06:07 UTC", "sightings": 1 }, { "indicator": "http://158.94.211.222/files/7453936223/5GFpJxh.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey", "Vidar" ], "first_seen": "2026-03-06 12:06:07 UTC", "last_seen": "2026-03-06 12:06:07 UTC", "sightings": 1 }, { "indicator": "http://158.94.211.222/files/7290860719/OTcX1Qs.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey", "Vidar" ], "first_seen": "2026-03-06 12:05:10 UTC", "last_seen": "2026-03-06 12:05:10 UTC", "sightings": 1 }, { "indicator": "http://158.94.211.222/files/7411337060/ZCGm9Ky.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey", "njRAT", "Vidar" ], "first_seen": "2026-03-06 12:05:09 UTC", "last_seen": "2026-03-06 12:05:09 UTC", "sightings": 1 }, { "indicator": "https://m2q9x.dropout.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-06 12:04:06 UTC", "last_seen": "2026-03-06 12:04:06 UTC", "sightings": 1 }, { "indicator": "http://158.94.211.222/files/6149304756/9MVYpgf.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-03-06 12:01:07 UTC", "last_seen": "2026-03-06 12:01:07 UTC", "sightings": 1 }, { "indicator": "https://piit-tabvector.piittablet.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-06 11:59:09 UTC", "last_seen": "2026-03-06 11:59:09 UTC", "sightings": 1 }, { "indicator": "http://42.231.93.131:41073/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 11:58:20 UTC", "last_seen": "2026-03-06 11:58:20 UTC", "sightings": 1 }, { "indicator": "http://115.51.127.82:53431/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 11:55:21 UTC", "last_seen": "2026-03-06 11:55:21 UTC", "sightings": 1 }, { "indicator": "http://115.55.199.53:57865/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 11:55:21 UTC", "last_seen": "2026-03-06 11:55:21 UTC", "sightings": 1 }, { "indicator": "http://219.156.57.37:40096/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 11:55:20 UTC", "last_seen": "2026-03-06 11:55:20 UTC", "sightings": 1 }, { "indicator": "http://219.156.57.37:40096/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 11:54:13 UTC", "last_seen": "2026-03-06 11:54:13 UTC", "sightings": 1 }, { "indicator": "https://dataplate.piittablet.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-06 11:52:07 UTC", "last_seen": "2026-03-06 11:52:07 UTC", "sightings": 1 }, { "indicator": "http://115.50.178.28:46151/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 11:51:13 UTC", "last_seen": "2026-03-06 11:51:13 UTC", "sightings": 1 }, { "indicator": "http://42.178.99.250:43582/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 11:50:24 UTC", "last_seen": "2026-03-06 11:50:24 UTC", "sightings": 1 }, { "indicator": "http://115.63.15.129:56641/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 11:47:09 UTC", "last_seen": "2026-03-06 11:47:09 UTC", "sightings": 1 }, { "indicator": "https://t5zw3.piittablet.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-06 11:46:08 UTC", "last_seen": "2026-03-06 11:46:08 UTC", "sightings": 1 }, { "indicator": "https://esvpotfvg0.ufs.sh/f/okyTib8Lmo0CigHpqVz5lMqT3DwY8G1OtbPRQgF6v0U2oBhj", "indicator_type": "url", "source": "URLhaus", "tags": [ "ascii", "Encoded" ], "first_seen": "2026-03-06 11:40:10 UTC", "last_seen": "2026-03-06 11:40:10 UTC", "sightings": 1 }, { "indicator": "https://rantier-loopnode.rantiercling.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ACRStealer", "ClearFake", "EternalRocks" ], "first_seen": "2026-03-06 11:40:09 UTC", "last_seen": "2026-03-06 11:40:09 UTC", "sightings": 1 }, { "indicator": "https://zifg62sw71.ufs.sh/f/WD5aU82s08Cwa6RXv8N4EY2hVBsoUwGM6XuAeWibTC9DNZnl", "indicator_type": "url", "source": "URLhaus", "tags": [ "ascii", "Encoded", "rev-base64-loader" ], "first_seen": "2026-03-06 11:40:09 UTC", "last_seen": "2026-03-06 11:40:09 UTC", "sightings": 1 }, { "indicator": "http://158.94.211.222/vidar/random.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "Amadey", "c2-monitor-auto", "connectwise", "dropped-by-amadey", "unknown" ], "first_seen": "2026-03-06 11:40:08 UTC", "last_seen": "2026-03-06 11:40:08 UTC", "sightings": 1 }, { "indicator": "https://esvpotfvg0.ufs.sh/f/okyTib8Lmo0CnucuMLoxD2RvxUO3ZhpN7awT5A9VJfbLuQ4K", "indicator_type": "url", "source": "URLhaus", "tags": [ "ascii", "Encoded" ], "first_seen": "2026-03-06 11:39:09 UTC", "last_seen": "2026-03-06 11:39:09 UTC", "sightings": 1 }, { "indicator": "https://esvpotfvg0.ufs.sh/f/okyTib8Lmo0C3woZNTCOME9sySIDUnBdqjNx6cQ7ZV4Plviz", "indicator_type": "url", "source": "URLhaus", "tags": [ "ascii", "vbs" ], "first_seen": "2026-03-06 11:39:08 UTC", "last_seen": "2026-03-06 11:39:08 UTC", "sightings": 1 }, { "indicator": "https://esvpotfvg0.ufs.sh/f/okyTib8Lmo0CkkKwp433KzJrq5ANjPuyeWihp21ZQsTDklSf", "indicator_type": "url", "source": "URLhaus", "tags": [ "ascii", "Encoded" ], "first_seen": "2026-03-06 11:39:07 UTC", "last_seen": "2026-03-06 11:39:07 UTC", "sightings": 1 }, { "indicator": "https://esvpotfvg0.ufs.sh/f/okyTib8Lmo0CqK3eVDlBZJflCVTk6c3Evo0xYW49redmB8Xu", "indicator_type": "url", "source": "URLhaus", "tags": [ "ascii", "vbs" ], "first_seen": "2026-03-06 11:38:07 UTC", "last_seen": "2026-03-06 11:38:07 UTC", "sightings": 1 }, { "indicator": "https://circleforge.rantiercling.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-06 11:34:07 UTC", "last_seen": "2026-03-06 11:34:07 UTC", "sightings": 1 }, { "indicator": "http://61.52.229.116:51863/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 11:29:18 UTC", "last_seen": "2026-03-06 11:29:18 UTC", "sightings": 1 }, { "indicator": "https://r8kqm.rantiercling.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-06 11:28:09 UTC", "last_seen": "2026-03-06 11:28:09 UTC", "sightings": 1 }, { "indicator": "http://115.58.86.110:38376/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 11:27:10 UTC", "last_seen": "2026-03-06 11:27:10 UTC", "sightings": 1 }, { "indicator": "https://ochech-lockframe.ochechstop.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-06 11:22:06 UTC", "last_seen": "2026-03-06 11:22:06 UTC", "sightings": 1 }, { "indicator": "http://182.117.150.249:59901/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 11:14:19 UTC", "last_seen": "2026-03-06 11:14:19 UTC", "sightings": 1 }, { "indicator": "http://115.48.131.89:34342/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 11:13:18 UTC", "last_seen": "2026-03-06 11:13:18 UTC", "sightings": 1 }, { "indicator": "https://x4qzt.ochechstop.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-06 11:09:08 UTC", "last_seen": "2026-03-06 11:09:08 UTC", "sightings": 1 }, { "indicator": "http://115.56.152.7:51642/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 11:07:15 UTC", "last_seen": "2026-03-06 11:07:15 UTC", "sightings": 1 }, { "indicator": "http://117.196.190.19:42873/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 11:06:21 UTC", "last_seen": "2026-03-06 11:06:21 UTC", "sightings": 1 }, { "indicator": "https://proof-anchorgrid.proofsurvivor.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-06 11:03:10 UTC", "last_seen": "2026-03-06 11:03:10 UTC", "sightings": 1 }, { "indicator": "https://lifeline.proofsurvivor.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-06 10:59:09 UTC", "last_seen": "2026-03-06 10:59:09 UTC", "sightings": 1 }, { "indicator": "http://42.230.44.101:53800/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 10:51:14 UTC", "last_seen": "2026-03-06 10:51:14 UTC", "sightings": 1 }, { "indicator": "https://v9k2p.proofsurvivor.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-06 10:50:09 UTC", "last_seen": "2026-03-06 10:50:09 UTC", "sightings": 1 }, { "indicator": "http://182.117.150.249:59901/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 10:49:20 UTC", "last_seen": "2026-03-06 10:49:20 UTC", "sightings": 1 }, { "indicator": "http://182.119.163.220:47170/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 10:48:08 UTC", "last_seen": "2026-03-06 10:48:08 UTC", "sightings": 1 }, { "indicator": "http://115.48.131.89:34342/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 10:45:17 UTC", "last_seen": "2026-03-06 10:45:17 UTC", "sightings": 1 }, { "indicator": "http://115.50.157.88:38072/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 10:45:16 UTC", "last_seen": "2026-03-06 10:45:16 UTC", "sightings": 1 }, { "indicator": "http://115.55.63.100:59468/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 10:45:16 UTC", "last_seen": "2026-03-06 10:45:16 UTC", "sightings": 1 }, { "indicator": "https://addict-veilcore.addictfear.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-06 10:44:07 UTC", "last_seen": "2026-03-06 10:44:07 UTC", "sightings": 1 }, { "indicator": "http://182.126.117.96:47785/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 10:39:19 UTC", "last_seen": "2026-03-06 10:39:19 UTC", "sightings": 1 }, { "indicator": "https://q7mxr.addictfear.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-06 10:37:07 UTC", "last_seen": "2026-03-06 10:37:07 UTC", "sightings": 1 }, { "indicator": "http://117.196.190.19:42873/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 10:35:18 UTC", "last_seen": "2026-03-06 10:35:18 UTC", "sightings": 1 }, { "indicator": "http://219.157.17.247:51110/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 10:32:09 UTC", "last_seen": "2026-03-06 10:32:09 UTC", "sightings": 1 }, { "indicator": "https://kvid5obz.awakepathog.digital/?=check&&actmn=PMmxemMLVOJZPEko", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-06 10:30:09 UTC", "last_seen": "2026-03-06 10:30:09 UTC", "sightings": 1 }, { "indicator": "http://115.50.157.88:38072/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 10:29:20 UTC", "last_seen": "2026-03-06 10:29:20 UTC", "sightings": 1 }, { "indicator": "http://110.36.89.45:38390/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-06 10:29:19 UTC", "last_seen": "2026-03-06 10:29:19 UTC", "sightings": 1 }, { "indicator": "https://amp-winvector.amperewin.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-06 10:27:07 UTC", "last_seen": "2026-03-06 10:27:07 UTC", "sightings": 1 }, { "indicator": "https://currentflow.amperewin.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-06 10:22:06 UTC", "last_seen": "2026-03-06 10:22:06 UTC", "sightings": 1 }, { "indicator": "http://42.239.188.252:60403/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 10:21:20 UTC", "last_seen": "2026-03-06 10:21:20 UTC", "sightings": 1 }, { "indicator": "https://y7qz2.amperewin.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-06 10:20:12 UTC", "last_seen": "2026-03-06 10:20:12 UTC", "sightings": 1 }, { "indicator": "http://110.36.2.23:58437/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 10:19:11 UTC", "last_seen": "2026-03-06 10:19:11 UTC", "sightings": 1 }, { "indicator": "http://115.55.63.100:59468/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 10:19:10 UTC", "last_seen": "2026-03-06 10:19:10 UTC", "sightings": 1 }, { "indicator": "http://110.36.89.45:38390/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-06 10:12:18 UTC", "last_seen": "2026-03-06 10:12:18 UTC", "sightings": 1 }, { "indicator": "http://110.37.11.215:38338/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 10:11:21 UTC", "last_seen": "2026-03-06 10:11:21 UTC", "sightings": 1 }, { "indicator": "https://scene4-render.fourscene.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-06 10:09:07 UTC", "last_seen": "2026-03-06 10:09:07 UTC", "sightings": 1 }, { "indicator": "https://visualstage.fourscene.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-06 10:06:09 UTC", "last_seen": "2026-03-06 10:06:09 UTC", "sightings": 1 }, { "indicator": "http://125.41.168.201:49333/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 09:57:17 UTC", "last_seen": "2026-03-06 09:57:17 UTC", "sightings": 1 }, { "indicator": "http://27.37.121.20:48844/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 09:53:19 UTC", "last_seen": "2026-03-06 09:53:19 UTC", "sightings": 1 }, { "indicator": "https://denny-holdgrid.dennyportfol.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-06 09:53:07 UTC", "last_seen": "2026-03-06 09:53:07 UTC", "sightings": 1 }, { "indicator": "http://46.226.162.217/997dfa4c91?force=1", "indicator_type": "url", "source": "URLhaus", "tags": [ "macOS" ], "first_seen": "2026-03-06 09:50:27 UTC", "last_seen": "2026-03-06 09:50:27 UTC", "sightings": 1 }, { "indicator": "https://stylemansisforeal.com/3/abroadeez/vendor.chunk.rlk9qg.js", "indicator_type": "url", "source": "URLhaus", "tags": [ "skimmer" ], "first_seen": "2026-03-06 09:50:09 UTC", "last_seen": "2026-03-06 09:50:09 UTC", "sightings": 1 }, { "indicator": "https://lsvvpb8t.drinktide.digital/?=check&&actmn=ELXlcEnNyuHDptpw", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-06 09:50:09 UTC", "last_seen": "2026-03-06 09:50:09 UTC", "sightings": 1 }, { "indicator": "https://w3x9m.dennyportfol.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-06 09:37:08 UTC", "last_seen": "2026-03-06 09:37:08 UTC", "sightings": 1 }, { "indicator": "http://27.37.121.20:48844/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 09:34:23 UTC", "last_seen": "2026-03-06 09:34:23 UTC", "sightings": 1 }, { "indicator": "http://39.74.33.196:54757/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 09:34:22 UTC", "last_seen": "2026-03-06 09:34:22 UTC", "sightings": 1 }, { "indicator": "http://123.11.77.184:54447/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 09:30:26 UTC", "last_seen": "2026-03-06 09:30:26 UTC", "sightings": 1 }, { "indicator": "http://125.41.168.201:49333/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 09:29:21 UTC", "last_seen": "2026-03-06 09:29:21 UTC", "sightings": 1 }, { "indicator": "http://46.203.233.102/00101010101001/morte.x86", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 09:19:23 UTC", "last_seen": "2026-03-06 09:19:23 UTC", "sightings": 1 }, { "indicator": "http://46.203.233.102/00101010101001/morte.mpsl", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 09:19:23 UTC", "last_seen": "2026-03-06 09:19:23 UTC", "sightings": 1 }, { "indicator": "http://46.203.233.102/00101010101001/morte.m68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 09:19:23 UTC", "last_seen": "2026-03-06 09:19:23 UTC", "sightings": 1 }, { "indicator": "http://46.203.233.102/00101010101001/morte.sh4", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 09:19:23 UTC", "last_seen": "2026-03-06 09:19:23 UTC", "sightings": 1 }, { "indicator": "http://46.203.233.102/00101010101001/morte.arm", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 09:19:23 UTC", "last_seen": "2026-03-06 09:19:23 UTC", "sightings": 1 }, { "indicator": "http://46.203.233.102/00101010101001/morte.ppc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 09:19:22 UTC", "last_seen": "2026-03-06 09:19:22 UTC", "sightings": 1 }, { "indicator": "http://46.203.233.102/00101010101001/morte.mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 09:19:22 UTC", "last_seen": "2026-03-06 09:19:22 UTC", "sightings": 1 }, { "indicator": "http://46.203.233.102/00101010101001/morte.arc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 09:19:22 UTC", "last_seen": "2026-03-06 09:19:22 UTC", "sightings": 1 }, { "indicator": "http://46.203.233.102/00101010101001/morte.arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 09:19:22 UTC", "last_seen": "2026-03-06 09:19:22 UTC", "sightings": 1 }, { "indicator": "http://46.203.233.102/00101010101001/morte.arm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 09:19:22 UTC", "last_seen": "2026-03-06 09:19:22 UTC", "sightings": 1 }, { "indicator": "http://46.203.233.102/00101010101001/morte.arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 09:19:22 UTC", "last_seen": "2026-03-06 09:19:22 UTC", "sightings": 1 }, { "indicator": "http://46.203.233.102/00101010101001/morte.i686", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 09:19:22 UTC", "last_seen": "2026-03-06 09:19:22 UTC", "sightings": 1 }, { "indicator": "http://46.203.233.102/00101010101001/debug", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 09:19:22 UTC", "last_seen": "2026-03-06 09:19:22 UTC", "sightings": 1 }, { "indicator": "http://46.203.233.102/00101010101001/morte.spc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 09:19:20 UTC", "last_seen": "2026-03-06 09:19:20 UTC", "sightings": 1 }, { "indicator": "https://corvetx-stream.corvetfordata.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-06 09:18:07 UTC", "last_seen": "2026-03-06 09:18:07 UTC", "sightings": 1 }, { "indicator": "https://datadrive.corvetfordata.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-06 09:13:12 UTC", "last_seen": "2026-03-06 09:13:12 UTC", "sightings": 1 }, { "indicator": "http://59.182.87.140:36353/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 09:08:17 UTC", "last_seen": "2026-03-06 09:08:17 UTC", "sightings": 1 }, { "indicator": "http://166.48.94.241:50758/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 09:08:16 UTC", "last_seen": "2026-03-06 09:08:16 UTC", "sightings": 1 }, { "indicator": "http://61.137.153.168:57232/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 09:07:21 UTC", "last_seen": "2026-03-06 09:07:21 UTC", "sightings": 1 }, { "indicator": "https://z5qtr.corvetfordata.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-06 09:06:08 UTC", "last_seen": "2026-03-06 09:06:08 UTC", "sightings": 1 }, { "indicator": "http://123.11.77.184:54447/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 09:03:19 UTC", "last_seen": "2026-03-06 09:03:19 UTC", "sightings": 1 }, { "indicator": "http://41.216.225.41:38879/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 08:58:32 UTC", "last_seen": "2026-03-06 08:58:32 UTC", "sightings": 1 }, { "indicator": "http://115.57.244.214:49455/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 08:58:31 UTC", "last_seen": "2026-03-06 08:58:31 UTC", "sightings": 1 }, { "indicator": "http://115.57.244.214:49455/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 08:56:23 UTC", "last_seen": "2026-03-06 08:56:23 UTC", "sightings": 1 }, { "indicator": "https://ygzulpfl.floatmurta.digital/?=check&&actmn=vtRMqiYITFEuxxIu", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-06 08:48:08 UTC", "last_seen": "2026-03-06 08:48:08 UTC", "sightings": 1 }, { "indicator": "http://115.48.149.65:51051/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 08:44:29 UTC", "last_seen": "2026-03-06 08:44:29 UTC", "sightings": 1 }, { "indicator": "http://61.137.153.168:57232/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 08:40:37 UTC", "last_seen": "2026-03-06 08:40:37 UTC", "sightings": 1 }, { "indicator": "http://59.88.37.213:39475/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 08:40:24 UTC", "last_seen": "2026-03-06 08:40:24 UTC", "sightings": 1 }, { "indicator": "https://cellculture.sdflkmicrobiol.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-06 08:39:08 UTC", "last_seen": "2026-03-06 08:39:08 UTC", "sightings": 1 }, { "indicator": "https://n4qx7.sdflkmicrobiol.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-06 08:36:09 UTC", "last_seen": "2026-03-06 08:36:09 UTC", "sightings": 1 }, { "indicator": "http://115.49.127.214:44571/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 08:33:32 UTC", "last_seen": "2026-03-06 08:33:32 UTC", "sightings": 1 }, { "indicator": "https://birdfract-sky.breaknbird.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-06 08:28:07 UTC", "last_seen": "2026-03-06 08:28:07 UTC", "sightings": 1 }, { "indicator": "https://wingflight.breaknbird.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-06 08:20:13 UTC", "last_seen": "2026-03-06 08:20:13 UTC", "sightings": 1 }, { "indicator": "http://110.246.85.231:60211/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-06 08:19:29 UTC", "last_seen": "2026-03-06 08:19:29 UTC", "sightings": 1 }, { "indicator": "http://222.139.47.247:38761/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 08:18:26 UTC", "last_seen": "2026-03-06 08:18:26 UTC", "sightings": 1 }, { "indicator": "http://182.126.119.24:56530/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 08:17:24 UTC", "last_seen": "2026-03-06 08:17:24 UTC", "sightings": 1 }, { "indicator": "https://t6pzr.breaknbird.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-06 08:17:07 UTC", "last_seen": "2026-03-06 08:17:07 UTC", "sightings": 1 }, { "indicator": "http://112.252.174.127:49020/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 08:16:44 UTC", "last_seen": "2026-03-06 08:16:44 UTC", "sightings": 1 }, { "indicator": "http://59.88.37.213:39475/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 08:10:26 UTC", "last_seen": "2026-03-06 08:10:26 UTC", "sightings": 1 }, { "indicator": "https://constell-1node.constellupd.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-06 08:09:07 UTC", "last_seen": "2026-03-06 08:09:07 UTC", "sightings": 1 }, { "indicator": "http://59.96.141.174:44973/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 08:08:23 UTC", "last_seen": "2026-03-06 08:08:23 UTC", "sightings": 1 }, { "indicator": "http://115.48.149.65:51051/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 08:05:30 UTC", "last_seen": "2026-03-06 08:05:30 UTC", "sightings": 1 }, { "indicator": "https://starvector.constellupd.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-06 07:59:07 UTC", "last_seen": "2026-03-06 07:59:07 UTC", "sightings": 1 }, { "indicator": "https://q9wm4.constellupd.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-06 07:54:09 UTC", "last_seen": "2026-03-06 07:54:09 UTC", "sightings": 1 }, { "indicator": "http://117.206.22.39:47093/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 07:52:17 UTC", "last_seen": "2026-03-06 07:52:17 UTC", "sightings": 1 }, { "indicator": "http://115.48.161.5:60384/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 07:51:17 UTC", "last_seen": "2026-03-06 07:51:17 UTC", "sightings": 1 }, { "indicator": "http://182.126.119.24:56530/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 07:50:33 UTC", "last_seen": "2026-03-06 07:50:33 UTC", "sightings": 1 }, { "indicator": "http://182.124.22.38:52297/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 07:48:29 UTC", "last_seen": "2026-03-06 07:48:29 UTC", "sightings": 1 }, { "indicator": "https://coachburn-edge.coachcoal.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-06 07:48:10 UTC", "last_seen": "2026-03-06 07:48:10 UTC", "sightings": 1 }, { "indicator": "http://115.50.0.133:45021/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 07:38:23 UTC", "last_seen": "2026-03-06 07:38:23 UTC", "sightings": 1 }, { "indicator": "http://115.48.152.36:53070/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 07:35:21 UTC", "last_seen": "2026-03-06 07:35:21 UTC", "sightings": 1 }, { "indicator": "http://61.53.202.17:57864/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 07:34:23 UTC", "last_seen": "2026-03-06 07:34:23 UTC", "sightings": 1 }, { "indicator": "http://61.53.202.17:57864/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 07:34:23 UTC", "last_seen": "2026-03-06 07:34:23 UTC", "sightings": 1 }, { "indicator": "https://teamforge.coachcoal.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-06 07:32:09 UTC", "last_seen": "2026-03-06 07:32:09 UTC", "sightings": 1 }, { "indicator": "https://post-host.screenconnect.com/Bin/ScreenConnect.ClientSetup.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "connectwise" ], "first_seen": "2026-03-06 07:29:15 UTC", "last_seen": "2026-03-06 07:29:15 UTC", "sightings": 1 }, { "indicator": "https://gacorportbet88.space/aplikasi/Portbet88.apk", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-06 07:29:12 UTC", "last_seen": "2026-03-06 07:29:12 UTC", "sightings": 1 }, { "indicator": "https://lmconnectuserappaccesscontrol.online/LAKE%20MICHIGAN%20CU.zip", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-06 07:29:12 UTC", "last_seen": "2026-03-06 07:29:12 UTC", "sightings": 1 }, { "indicator": "https://gacorportbet88.store/aplikasi/Portbet88.apk", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-06 07:29:12 UTC", "last_seen": "2026-03-06 07:29:12 UTC", "sightings": 1 }, { "indicator": "https://ztscym.pages.dev/apk/iApp%E6%89%8B%E5%86%8C_1.0.apk", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-06 07:29:12 UTC", "last_seen": "2026-03-06 07:29:12 UTC", "sightings": 1 }, { "indicator": "https://coloradoskitowns.com/spankki-zi/spankki.zip", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-06 07:29:08 UTC", "last_seen": "2026-03-06 07:29:08 UTC", "sightings": 1 }, { "indicator": "https://admin.hggg.store/Bin/ScreenConnect.ClientSetup.msi", "indicator_type": "url", "source": "URLhaus", "tags": [ "connectwise" ], "first_seen": "2026-03-06 07:28:22 UTC", "last_seen": "2026-03-06 07:28:22 UTC", "sightings": 1 }, { "indicator": "http://182.124.22.38:52297/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 07:28:17 UTC", "last_seen": "2026-03-06 07:28:17 UTC", "sightings": 1 }, { "indicator": "https://176.190.153.160.host.secureserver.net/w1/lib/AutoIt3.exe", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-06 07:28:16 UTC", "last_seen": "2026-03-06 07:28:16 UTC", "sightings": 1 }, { "indicator": "http://193.46.217.187/tul.arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-06 07:28:11 UTC", "last_seen": "2026-03-06 07:28:11 UTC", "sightings": 1 }, { "indicator": "http://193.46.217.187/v.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-06 07:28:11 UTC", "last_seen": "2026-03-06 07:28:11 UTC", "sightings": 1 }, { "indicator": "http://115.61.17.68:39170/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 07:27:24 UTC", "last_seen": "2026-03-06 07:27:24 UTC", "sightings": 1 }, { "indicator": "http://182.114.197.145:33649/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 07:18:25 UTC", "last_seen": "2026-03-06 07:18:25 UTC", "sightings": 1 }, { "indicator": "http://176.226.183.136:47993/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 07:18:24 UTC", "last_seen": "2026-03-06 07:18:24 UTC", "sightings": 1 }, { "indicator": "http://125.46.228.209:59864/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 07:17:21 UTC", "last_seen": "2026-03-06 07:17:21 UTC", "sightings": 1 }, { "indicator": "http://119.179.75.139:59942/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 07:16:19 UTC", "last_seen": "2026-03-06 07:16:19 UTC", "sightings": 1 }, { "indicator": "http://221.13.221.126:56865/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 07:14:27 UTC", "last_seen": "2026-03-06 07:14:27 UTC", "sightings": 1 }, { "indicator": "https://anondrop.net/1479090540531421216/1.png", "indicator_type": "url", "source": "URLhaus", "tags": [ "payload", "stealer" ], "first_seen": "2026-03-06 07:12:10 UTC", "last_seen": "2026-03-06 07:12:10 UTC", "sightings": 1 }, { "indicator": "http://115.50.0.133:45021/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 07:11:23 UTC", "last_seen": "2026-03-06 07:11:23 UTC", "sightings": 1 }, { "indicator": "http://115.48.152.36:53070/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 07:11:18 UTC", "last_seen": "2026-03-06 07:11:18 UTC", "sightings": 1 }, { "indicator": "https://kz7v2.coachcoal.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-06 07:11:07 UTC", "last_seen": "2026-03-06 07:11:07 UTC", "sightings": 1 }, { "indicator": "http://41.216.225.41:38879/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 07:08:31 UTC", "last_seen": "2026-03-06 07:08:31 UTC", "sightings": 1 }, { "indicator": "http://115.55.35.35:41670/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 07:08:25 UTC", "last_seen": "2026-03-06 07:08:25 UTC", "sightings": 1 }, { "indicator": "http://182.115.186.24:50330/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 07:05:23 UTC", "last_seen": "2026-03-06 07:05:23 UTC", "sightings": 1 }, { "indicator": "http://42.231.254.48:52201/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 07:02:10 UTC", "last_seen": "2026-03-06 07:02:10 UTC", "sightings": 1 }, { "indicator": "https://abcgrid-0form.abcdesign.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-06 07:00:10 UTC", "last_seen": "2026-03-06 07:00:10 UTC", "sightings": 1 }, { "indicator": "http://59.182.66.226:33954/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 06:52:17 UTC", "last_seen": "2026-03-06 06:52:17 UTC", "sightings": 1 }, { "indicator": "http://182.114.197.145:33649/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 06:52:12 UTC", "last_seen": "2026-03-06 06:52:12 UTC", "sightings": 1 }, { "indicator": "http://176.226.183.136:47993/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 06:51:09 UTC", "last_seen": "2026-03-06 06:51:09 UTC", "sightings": 1 }, { "indicator": "http://119.179.75.139:59942/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 06:49:25 UTC", "last_seen": "2026-03-06 06:49:25 UTC", "sightings": 1 }, { "indicator": "http://115.63.231.252:47275/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 06:49:16 UTC", "last_seen": "2026-03-06 06:49:16 UTC", "sightings": 1 }, { "indicator": "https://pixelcraft.abcdesign.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-06 06:45:09 UTC", "last_seen": "2026-03-06 06:45:09 UTC", "sightings": 1 }, { "indicator": "http://115.55.219.213:47828/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 06:44:23 UTC", "last_seen": "2026-03-06 06:44:23 UTC", "sightings": 1 }, { "indicator": "http://115.56.152.7:51642/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 06:41:16 UTC", "last_seen": "2026-03-06 06:41:16 UTC", "sightings": 1 }, { "indicator": "http://182.127.178.249:44949/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 06:41:16 UTC", "last_seen": "2026-03-06 06:41:16 UTC", "sightings": 1 }, { "indicator": "http://182.116.123.246:39712/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 06:40:19 UTC", "last_seen": "2026-03-06 06:40:19 UTC", "sightings": 1 }, { "indicator": "http://95.214.40.65:30161/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 06:34:07 UTC", "last_seen": "2026-03-06 06:34:07 UTC", "sightings": 1 }, { "indicator": "http://110.37.53.25:38678/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 06:30:19 UTC", "last_seen": "2026-03-06 06:30:19 UTC", "sightings": 1 }, { "indicator": "http://123.188.223.114:60893/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 06:22:29 UTC", "last_seen": "2026-03-06 06:22:29 UTC", "sightings": 1 }, { "indicator": "http://221.15.14.226:58878/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 06:21:14 UTC", "last_seen": "2026-03-06 06:21:14 UTC", "sightings": 1 }, { "indicator": "https://rx8qk.abcdesign.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-06 06:21:09 UTC", "last_seen": "2026-03-06 06:21:09 UTC", "sightings": 1 }, { "indicator": "http://109.72.124.157/vxs/mipsel", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "geofenced", "mips", "mirai", "ua-wget", "USA" ], "first_seen": "2026-03-06 06:17:08 UTC", "last_seen": "2026-03-06 06:17:08 UTC", "sightings": 1 }, { "indicator": "http://182.116.123.246:39712/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 06:11:22 UTC", "last_seen": "2026-03-06 06:11:22 UTC", "sightings": 1 }, { "indicator": "http://95.214.40.65:30161/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 06:08:07 UTC", "last_seen": "2026-03-06 06:08:07 UTC", "sightings": 1 }, { "indicator": "http://59.177.103.76:56723/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 06:07:28 UTC", "last_seen": "2026-03-06 06:07:28 UTC", "sightings": 1 }, { "indicator": "http://115.55.35.35:41670/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 06:04:19 UTC", "last_seen": "2026-03-06 06:04:19 UTC", "sightings": 1 }, { "indicator": "https://stre06.aquastream.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-06 06:04:08 UTC", "last_seen": "2026-03-06 06:04:08 UTC", "sightings": 1 }, { "indicator": "http://39.74.33.196:54757/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 05:57:23 UTC", "last_seen": "2026-03-06 05:57:23 UTC", "sightings": 1 }, { "indicator": "http://42.238.142.216:44279/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 05:57:22 UTC", "last_seen": "2026-03-06 05:57:22 UTC", "sightings": 1 }, { "indicator": "http://42.238.142.216:44279/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 05:52:19 UTC", "last_seen": "2026-03-06 05:52:19 UTC", "sightings": 1 }, { "indicator": "https://f7ozu1t9.flogginquisit.digital/?=check&&actmn=YVIBwWnnTOgWtApP", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-06 05:52:08 UTC", "last_seen": "2026-03-06 05:52:08 UTC", "sightings": 1 }, { "indicator": "http://42.239.171.246:40751/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 05:50:19 UTC", "last_seen": "2026-03-06 05:50:19 UTC", "sightings": 1 }, { "indicator": "http://113.236.150.202:60629/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 05:44:22 UTC", "last_seen": "2026-03-06 05:44:22 UTC", "sightings": 1 }, { "indicator": "http://112.248.160.26:34841/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 05:43:36 UTC", "last_seen": "2026-03-06 05:43:36 UTC", "sightings": 1 }, { "indicator": "http://115.56.156.197:49040/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 05:42:16 UTC", "last_seen": "2026-03-06 05:42:16 UTC", "sightings": 1 }, { "indicator": "http://182.115.186.24:50330/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 05:40:16 UTC", "last_seen": "2026-03-06 05:40:16 UTC", "sightings": 1 }, { "indicator": "http://117.209.92.160:36673/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 05:36:17 UTC", "last_seen": "2026-03-06 05:36:17 UTC", "sightings": 1 }, { "indicator": "http://110.36.80.163:33806/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 05:33:18 UTC", "last_seen": "2026-03-06 05:33:18 UTC", "sightings": 1 }, { "indicator": "http://182.113.36.132:51770/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 05:30:25 UTC", "last_seen": "2026-03-06 05:30:25 UTC", "sightings": 1 }, { "indicator": "http://182.116.115.167:52769/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 05:29:18 UTC", "last_seen": "2026-03-06 05:29:18 UTC", "sightings": 1 }, { "indicator": "http://110.36.80.163:33806/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 05:26:16 UTC", "last_seen": "2026-03-06 05:26:16 UTC", "sightings": 1 }, { "indicator": "http://123.8.5.188:46066/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 05:25:20 UTC", "last_seen": "2026-03-06 05:25:20 UTC", "sightings": 1 }, { "indicator": "http://ip-2422.proline.net.ua:45514/Mozi.m", "indicator_type": "url", "source": "URLhaus", "tags": [ "arm", "elf", "geofenced", "mirai", "Mozi", "ua-wget", "USA" ], "first_seen": "2026-03-06 05:24:18 UTC", "last_seen": "2026-03-06 05:24:18 UTC", "sightings": 1 }, { "indicator": "http://ip-2422.proline.net.ua:45514/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "arm", "elf", "geofenced", "mirai", "Mozi", "ua-wget", "USA" ], "first_seen": "2026-03-06 05:24:09 UTC", "last_seen": "2026-03-06 05:24:09 UTC", "sightings": 1 }, { "indicator": "http://ip-2422.proline.net.ua:45514/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "arm", "elf", "geofenced", "mirai", "Mozi", "ua-wget", "USA" ], "first_seen": "2026-03-06 05:24:09 UTC", "last_seen": "2026-03-06 05:24:09 UTC", "sightings": 1 }, { "indicator": "http://94.244.36.34:45514/Mozi.m", "indicator_type": "url", "source": "URLhaus", "tags": [ "arm", "elf", "geofenced", "mirai", "Mozi", "ua-wget", "USA" ], "first_seen": "2026-03-06 05:24:08 UTC", "last_seen": "2026-03-06 05:24:08 UTC", "sightings": 1 }, { "indicator": "https://aqua-sync.aquastream.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-06 05:24:08 UTC", "last_seen": "2026-03-06 05:24:08 UTC", "sightings": 1 }, { "indicator": "http://ip-2422.proline.net.ua:45514/Mozi.a", "indicator_type": "url", "source": "URLhaus", "tags": [ "arm", "elf", "geofenced", "mirai", "Mozi", "ua-wget", "USA" ], "first_seen": "2026-03-06 05:24:08 UTC", "last_seen": "2026-03-06 05:24:08 UTC", "sightings": 1 }, { "indicator": "http://125.42.33.186:60716/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 05:18:27 UTC", "last_seen": "2026-03-06 05:18:27 UTC", "sightings": 1 }, { "indicator": "http://125.42.33.186:60716/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 05:17:10 UTC", "last_seen": "2026-03-06 05:17:10 UTC", "sightings": 1 }, { "indicator": "http://117.209.87.184:52274/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 05:15:11 UTC", "last_seen": "2026-03-06 05:15:11 UTC", "sightings": 1 }, { "indicator": "http://182.116.115.167:52769/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 05:08:17 UTC", "last_seen": "2026-03-06 05:08:17 UTC", "sightings": 1 }, { "indicator": "http://42.239.171.246:40751/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 05:07:20 UTC", "last_seen": "2026-03-06 05:07:20 UTC", "sightings": 1 }, { "indicator": "http://123.8.5.188:46066/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 05:05:13 UTC", "last_seen": "2026-03-06 05:05:13 UTC", "sightings": 1 }, { "indicator": "https://stre-v9.aquastream.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-06 05:05:07 UTC", "last_seen": "2026-03-06 05:05:07 UTC", "sightings": 1 }, { "indicator": "http://190.55.22.176:45197/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 05:04:24 UTC", "last_seen": "2026-03-06 05:04:24 UTC", "sightings": 1 }, { "indicator": "http://190.55.22.176:45197/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 05:02:23 UTC", "last_seen": "2026-03-06 05:02:23 UTC", "sightings": 1 }, { "indicator": "http://110.37.103.207:34864/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-06 04:59:07 UTC", "last_seen": "2026-03-06 04:59:07 UTC", "sightings": 1 }, { "indicator": "http://123.8.51.229:34208/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 04:58:18 UTC", "last_seen": "2026-03-06 04:58:18 UTC", "sightings": 1 }, { "indicator": "http://110.37.3.251:42121/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-06 04:56:11 UTC", "last_seen": "2026-03-06 04:56:11 UTC", "sightings": 1 }, { "indicator": "http://110.37.103.207:34864/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-06 04:56:11 UTC", "last_seen": "2026-03-06 04:56:11 UTC", "sightings": 1 }, { "indicator": "http://110.37.61.34:51769/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 04:55:14 UTC", "last_seen": "2026-03-06 04:55:14 UTC", "sightings": 1 }, { "indicator": "http://123.10.239.244:43759/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 04:42:19 UTC", "last_seen": "2026-03-06 04:42:19 UTC", "sightings": 1 }, { "indicator": "http://182.117.1.34:52798/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 04:39:10 UTC", "last_seen": "2026-03-06 04:39:10 UTC", "sightings": 1 }, { "indicator": "http://42.7.237.153:39645/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 04:38:17 UTC", "last_seen": "2026-03-06 04:38:17 UTC", "sightings": 1 }, { "indicator": "https://hydro-run.aquastream.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-06 04:38:08 UTC", "last_seen": "2026-03-06 04:38:08 UTC", "sightings": 1 }, { "indicator": "http://60.23.239.36:36176/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 04:35:15 UTC", "last_seen": "2026-03-06 04:35:15 UTC", "sightings": 1 }, { "indicator": "http://182.117.1.34:52798/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 04:29:12 UTC", "last_seen": "2026-03-06 04:29:12 UTC", "sightings": 1 }, { "indicator": "http://115.55.229.93:57964/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 04:19:09 UTC", "last_seen": "2026-03-06 04:19:09 UTC", "sightings": 1 }, { "indicator": "https://vant05.trailvantage.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-06 04:19:07 UTC", "last_seen": "2026-03-06 04:19:07 UTC", "sightings": 1 }, { "indicator": "http://123.4.146.132:43654/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 04:03:07 UTC", "last_seen": "2026-03-06 04:03:07 UTC", "sightings": 1 }, { "indicator": "http://123.4.146.132:43654/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 04:01:26 UTC", "last_seen": "2026-03-06 04:01:26 UTC", "sightings": 1 }, { "indicator": "http://59.88.0.32:51057/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 03:40:13 UTC", "last_seen": "2026-03-06 03:40:13 UTC", "sightings": 1 }, { "indicator": "http://42.7.237.153:39645/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 03:39:19 UTC", "last_seen": "2026-03-06 03:39:19 UTC", "sightings": 1 }, { "indicator": "http://182.121.166.54:55661/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 03:37:20 UTC", "last_seen": "2026-03-06 03:37:20 UTC", "sightings": 1 }, { "indicator": "http://110.39.246.84:33799/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 03:36:16 UTC", "last_seen": "2026-03-06 03:36:16 UTC", "sightings": 1 }, { "indicator": "http://110.36.30.247:55555/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 03:35:12 UTC", "last_seen": "2026-03-06 03:35:12 UTC", "sightings": 1 }, { "indicator": "https://trail-net.trailvantage.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-06 03:34:07 UTC", "last_seen": "2026-03-06 03:34:07 UTC", "sightings": 1 }, { "indicator": "http://42.231.254.48:52201/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 03:33:18 UTC", "last_seen": "2026-03-06 03:33:18 UTC", "sightings": 1 }, { "indicator": "http://119.109.200.52:55661/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 03:32:33 UTC", "last_seen": "2026-03-06 03:32:33 UTC", "sightings": 1 }, { "indicator": "http://110.36.30.247:55555/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 03:23:19 UTC", "last_seen": "2026-03-06 03:23:19 UTC", "sightings": 1 }, { "indicator": "http://110.39.246.84:33799/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 03:12:18 UTC", "last_seen": "2026-03-06 03:12:18 UTC", "sightings": 1 }, { "indicator": "http://117.209.122.172:36095/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 03:10:18 UTC", "last_seen": "2026-03-06 03:10:18 UTC", "sightings": 1 }, { "indicator": "http://113.236.150.202:60629/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 03:01:33 UTC", "last_seen": "2026-03-06 03:01:33 UTC", "sightings": 1 }, { "indicator": "http://110.37.35.199:39186/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 02:47:23 UTC", "last_seen": "2026-03-06 02:47:23 UTC", "sightings": 1 }, { "indicator": "http://123.4.1.45:50565/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 02:41:21 UTC", "last_seen": "2026-03-06 02:41:21 UTC", "sightings": 1 }, { "indicator": "http://115.56.175.128:38295/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 02:40:18 UTC", "last_seen": "2026-03-06 02:40:18 UTC", "sightings": 1 }, { "indicator": "http://124.6.168.74:37678/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-06 02:38:19 UTC", "last_seen": "2026-03-06 02:38:19 UTC", "sightings": 1 }, { "indicator": "http://115.63.49.179:52589/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 02:37:20 UTC", "last_seen": "2026-03-06 02:37:20 UTC", "sightings": 1 }, { "indicator": "http://119.116.172.193:44948/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 02:37:20 UTC", "last_seen": "2026-03-06 02:37:20 UTC", "sightings": 1 }, { "indicator": "http://116.136.4.176:50423/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-06 02:37:20 UTC", "last_seen": "2026-03-06 02:37:20 UTC", "sightings": 1 }, { "indicator": "http://115.56.175.128:38295/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 02:18:22 UTC", "last_seen": "2026-03-06 02:18:22 UTC", "sightings": 1 }, { "indicator": "http://123.4.1.45:50565/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 02:16:21 UTC", "last_seen": "2026-03-06 02:16:21 UTC", "sightings": 1 }, { "indicator": "http://59.99.204.180:40353/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 02:08:21 UTC", "last_seen": "2026-03-06 02:08:21 UTC", "sightings": 1 }, { "indicator": "http://115.63.49.179:52589/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 02:01:19 UTC", "last_seen": "2026-03-06 02:01:19 UTC", "sightings": 1 }, { "indicator": "http://115.56.183.216:54318/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 02:00:20 UTC", "last_seen": "2026-03-06 02:00:20 UTC", "sightings": 1 }, { "indicator": "http://42.239.166.109:46831/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 01:58:22 UTC", "last_seen": "2026-03-06 01:58:22 UTC", "sightings": 1 }, { "indicator": "http://42.231.92.76:35811/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 01:42:14 UTC", "last_seen": "2026-03-06 01:42:14 UTC", "sightings": 1 }, { "indicator": "http://42.239.166.109:46831/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 01:32:18 UTC", "last_seen": "2026-03-06 01:32:18 UTC", "sightings": 1 }, { "indicator": "https://vant-v8.trailvantage.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-06 01:31:10 UTC", "last_seen": "2026-03-06 01:31:10 UTC", "sightings": 1 }, { "indicator": "http://115.56.183.216:54318/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 01:28:14 UTC", "last_seen": "2026-03-06 01:28:14 UTC", "sightings": 1 }, { "indicator": "http://115.63.186.54:49370/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 01:18:19 UTC", "last_seen": "2026-03-06 01:18:19 UTC", "sightings": 1 }, { "indicator": "http://45.141.58.44/main_mpsl", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-06 01:18:18 UTC", "last_seen": "2026-03-06 01:18:18 UTC", "sightings": 1 }, { "indicator": "https://logi-base.trailvantage.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-06 01:18:06 UTC", "last_seen": "2026-03-06 01:18:06 UTC", "sightings": 1 }, { "indicator": "http://42.231.92.76:35811/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 01:16:18 UTC", "last_seen": "2026-03-06 01:16:18 UTC", "sightings": 1 }, { "indicator": "https://sent03.skysentry.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-06 01:12:06 UTC", "last_seen": "2026-03-06 01:12:06 UTC", "sightings": 1 }, { "indicator": "https://31.57.216.121/aarch64", "indicator_type": "url", "source": "URLhaus", "tags": [ "CoinMiner", "elf", "geofenced", "redtail", "ua-wget", "USA" ], "first_seen": "2026-03-06 01:10:15 UTC", "last_seen": "2026-03-06 01:10:15 UTC", "sightings": 1 }, { "indicator": "https://31.57.216.121/i686", "indicator_type": "url", "source": "URLhaus", "tags": [ "CoinMiner", "elf", "geofenced", "mirai", "redtail", "ua-wget", "USA" ], "first_seen": "2026-03-06 01:10:12 UTC", "last_seen": "2026-03-06 01:10:12 UTC", "sightings": 1 }, { "indicator": "https://31.57.216.121/arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "CoinMiner", "elf", "geofenced", "redtail", "ua-wget", "USA" ], "first_seen": "2026-03-06 01:10:12 UTC", "last_seen": "2026-03-06 01:10:12 UTC", "sightings": 1 }, { "indicator": "https://31.57.216.121/x86_64", "indicator_type": "url", "source": "URLhaus", "tags": [ "CoinMiner", "elf", "geofenced", "redtail", "ua-wget", "USA" ], "first_seen": "2026-03-06 01:10:12 UTC", "last_seen": "2026-03-06 01:10:12 UTC", "sightings": 1 }, { "indicator": "https://31.57.216.121/clean", "indicator_type": "url", "source": "URLhaus", "tags": [ "CoinMiner", "geofenced", "redtail", "sh", "ua-wget", "USA" ], "first_seen": "2026-03-06 01:10:09 UTC", "last_seen": "2026-03-06 01:10:09 UTC", "sightings": 1 }, { "indicator": "http://59.97.254.62:55868/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 01:07:14 UTC", "last_seen": "2026-03-06 01:07:14 UTC", "sightings": 1 }, { "indicator": "http://42.227.177.112:48474/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 01:06:08 UTC", "last_seen": "2026-03-06 01:06:08 UTC", "sightings": 1 }, { "indicator": "https://sky-gate.skysentry.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-06 00:53:07 UTC", "last_seen": "2026-03-06 00:53:07 UTC", "sightings": 1 }, { "indicator": "http://219.157.52.35:55385/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 00:44:09 UTC", "last_seen": "2026-03-06 00:44:09 UTC", "sightings": 1 }, { "indicator": "http://59.97.254.62:55868/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 00:40:15 UTC", "last_seen": "2026-03-06 00:40:15 UTC", "sightings": 1 }, { "indicator": "http://222.141.235.153:55382/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 00:39:10 UTC", "last_seen": "2026-03-06 00:39:10 UTC", "sightings": 1 }, { "indicator": "https://sent-v7.skysentry.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-06 00:39:06 UTC", "last_seen": "2026-03-06 00:39:06 UTC", "sightings": 1 }, { "indicator": "http://110.37.2.60:57359/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 00:29:13 UTC", "last_seen": "2026-03-06 00:29:13 UTC", "sightings": 1 }, { "indicator": "http://115.55.237.253:49633/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 00:27:17 UTC", "last_seen": "2026-03-06 00:27:17 UTC", "sightings": 1 }, { "indicator": "https://aero-hub.skysentry.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-06 00:26:06 UTC", "last_seen": "2026-03-06 00:26:06 UTC", "sightings": 1 }, { "indicator": "http://115.48.161.5:60384/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 00:23:20 UTC", "last_seen": "2026-03-06 00:23:20 UTC", "sightings": 1 }, { "indicator": "http://219.157.52.35:55385/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 00:22:14 UTC", "last_seen": "2026-03-06 00:22:14 UTC", "sightings": 1 }, { "indicator": "http://110.37.2.60:57359/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 00:18:17 UTC", "last_seen": "2026-03-06 00:18:17 UTC", "sightings": 1 }, { "indicator": "http://182.122.208.241:56075/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 00:17:20 UTC", "last_seen": "2026-03-06 00:17:20 UTC", "sightings": 1 }, { "indicator": "https://link08.organiclink.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-06 00:17:06 UTC", "last_seen": "2026-03-06 00:17:06 UTC", "sightings": 1 }, { "indicator": "https://orga-sync.organiclink.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-06 00:04:08 UTC", "last_seen": "2026-03-06 00:04:08 UTC", "sightings": 1 }, { "indicator": "http://222.138.104.16:35625/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 00:04:08 UTC", "last_seen": "2026-03-06 00:04:08 UTC", "sightings": 1 }, { "indicator": "http://222.141.235.153:55382/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-06 00:00:17 UTC", "last_seen": "2026-03-06 00:00:17 UTC", "sightings": 1 }, { "indicator": "http://182.122.208.241:56075/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 23:58:14 UTC", "last_seen": "2026-03-05 23:58:14 UTC", "sightings": 1 }, { "indicator": "https://link-v6.organiclink.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-05 23:54:09 UTC", "last_seen": "2026-03-05 23:54:09 UTC", "sightings": 1 }, { "indicator": "http://182.127.64.192:56687/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 23:50:16 UTC", "last_seen": "2026-03-05 23:50:16 UTC", "sightings": 1 }, { "indicator": "https://bio-trace.organiclink.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-05 23:50:09 UTC", "last_seen": "2026-03-05 23:50:09 UTC", "sightings": 1 }, { "indicator": "http://222.136.32.200:34312/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 23:49:16 UTC", "last_seen": "2026-03-05 23:49:16 UTC", "sightings": 1 }, { "indicator": "http://115.54.152.231:37948/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 23:47:17 UTC", "last_seen": "2026-03-05 23:47:17 UTC", "sightings": 1 }, { "indicator": "http://125.40.68.213:37102/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 23:42:11 UTC", "last_seen": "2026-03-05 23:42:11 UTC", "sightings": 1 }, { "indicator": "https://pulse02.metropulse.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-05 23:41:09 UTC", "last_seen": "2026-03-05 23:41:09 UTC", "sightings": 1 }, { "indicator": "http://119.179.35.62:44386/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 23:36:18 UTC", "last_seen": "2026-03-05 23:36:18 UTC", "sightings": 1 }, { "indicator": "http://42.227.177.112:48474/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 23:33:19 UTC", "last_seen": "2026-03-05 23:33:19 UTC", "sightings": 1 }, { "indicator": "http://182.127.64.192:56687/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 23:32:18 UTC", "last_seen": "2026-03-05 23:32:18 UTC", "sightings": 1 }, { "indicator": "https://metro-net.metropulse.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-05 23:31:09 UTC", "last_seen": "2026-03-05 23:31:09 UTC", "sightings": 1 }, { "indicator": "http://115.55.62.149:48412/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 23:25:14 UTC", "last_seen": "2026-03-05 23:25:14 UTC", "sightings": 1 }, { "indicator": "https://pulse-v5.metropulse.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-05 23:25:09 UTC", "last_seen": "2026-03-05 23:25:09 UTC", "sightings": 1 }, { "indicator": "http://110.37.81.165:50237/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 23:23:19 UTC", "last_seen": "2026-03-05 23:23:19 UTC", "sightings": 1 }, { "indicator": "http://115.54.152.231:37948/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 23:22:10 UTC", "last_seen": "2026-03-05 23:22:10 UTC", "sightings": 1 }, { "indicator": "http://222.142.241.108:59820/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 23:16:18 UTC", "last_seen": "2026-03-05 23:16:18 UTC", "sightings": 1 }, { "indicator": "https://urban-sys.metropulse.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-05 23:14:07 UTC", "last_seen": "2026-03-05 23:14:07 UTC", "sightings": 1 }, { "indicator": "https://31.57.216.121/sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "CoinMiner", "geofenced", "redtail", "sh", "ua-wget", "USA" ], "first_seen": "2026-03-05 23:12:05 UTC", "last_seen": "2026-03-05 23:12:05 UTC", "sightings": 1 }, { "indicator": "http://117.209.80.76:56416/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 23:06:16 UTC", "last_seen": "2026-03-05 23:06:16 UTC", "sightings": 1 }, { "indicator": "http://222.142.241.108:59820/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 23:05:17 UTC", "last_seen": "2026-03-05 23:05:17 UTC", "sightings": 1 }, { "indicator": "https://nest09.cryptonest.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-05 23:04:06 UTC", "last_seen": "2026-03-05 23:04:06 UTC", "sightings": 1 }, { "indicator": "http://42.226.210.41:53181/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 22:59:17 UTC", "last_seen": "2026-03-05 22:59:17 UTC", "sightings": 1 }, { "indicator": "http://182.127.5.73:36273/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 22:57:10 UTC", "last_seen": "2026-03-05 22:57:10 UTC", "sightings": 1 }, { "indicator": "https://cryp-sync.cryptonest.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-05 22:54:07 UTC", "last_seen": "2026-03-05 22:54:07 UTC", "sightings": 1 }, { "indicator": "http://125.40.68.213:37102/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 22:53:19 UTC", "last_seen": "2026-03-05 22:53:19 UTC", "sightings": 1 }, { "indicator": "https://nest-v4.cryptonest.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-05 22:45:10 UTC", "last_seen": "2026-03-05 22:45:10 UTC", "sightings": 1 }, { "indicator": "http://117.209.80.76:56416/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 22:38:17 UTC", "last_seen": "2026-03-05 22:38:17 UTC", "sightings": 1 }, { "indicator": "http://110.37.1.254:44678/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 22:34:19 UTC", "last_seen": "2026-03-05 22:34:19 UTC", "sightings": 1 }, { "indicator": "http://42.226.195.71:50592/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 22:33:17 UTC", "last_seen": "2026-03-05 22:33:17 UTC", "sightings": 1 }, { "indicator": "http://117.219.147.18:44940/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 22:30:18 UTC", "last_seen": "2026-03-05 22:30:18 UTC", "sightings": 1 }, { "indicator": "https://data-vault.cryptonest.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-05 22:26:06 UTC", "last_seen": "2026-03-05 22:26:06 UTC", "sightings": 1 }, { "indicator": "http://112.239.122.111:34178/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 22:22:21 UTC", "last_seen": "2026-03-05 22:22:21 UTC", "sightings": 1 }, { "indicator": "http://119.163.91.73:43909/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 22:21:23 UTC", "last_seen": "2026-03-05 22:21:23 UTC", "sightings": 1 }, { "indicator": "https://brid01.fluxbridge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-05 22:20:08 UTC", "last_seen": "2026-03-05 22:20:08 UTC", "sightings": 1 }, { "indicator": "http://110.38.197.49:36383/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 22:17:18 UTC", "last_seen": "2026-03-05 22:17:18 UTC", "sightings": 1 }, { "indicator": "http://95.78.237.167:58035/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 22:17:18 UTC", "last_seen": "2026-03-05 22:17:18 UTC", "sightings": 1 }, { "indicator": "http://213.65.123.45:39738/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 22:16:16 UTC", "last_seen": "2026-03-05 22:16:16 UTC", "sightings": 1 }, { "indicator": "http://213.65.123.45:39738/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 22:12:17 UTC", "last_seen": "2026-03-05 22:12:17 UTC", "sightings": 1 }, { "indicator": "https://flux-net.fluxbridge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-05 22:08:06 UTC", "last_seen": "2026-03-05 22:08:06 UTC", "sightings": 1 }, { "indicator": "http://193.24.210.250/bot_x86", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mirai", "x86-32" ], "first_seen": "2026-03-05 22:06:28 UTC", "last_seen": "2026-03-05 22:06:28 UTC", "sightings": 1 }, { "indicator": "https://brid-v3.fluxbridge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-05 22:02:06 UTC", "last_seen": "2026-03-05 22:02:06 UTC", "sightings": 1 }, { "indicator": "http://112.239.122.111:34178/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 21:58:32 UTC", "last_seen": "2026-03-05 21:58:32 UTC", "sightings": 1 }, { "indicator": "https://flow-core.fluxbridge.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-05 21:57:06 UTC", "last_seen": "2026-03-05 21:57:06 UTC", "sightings": 1 }, { "indicator": "http://222.139.47.247:38761/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 21:53:09 UTC", "last_seen": "2026-03-05 21:53:09 UTC", "sightings": 1 }, { "indicator": "http://110.38.197.49:36383/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 21:53:08 UTC", "last_seen": "2026-03-05 21:53:08 UTC", "sightings": 1 }, { "indicator": "https://matr07.fieldmatrix.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-05 21:50:08 UTC", "last_seen": "2026-03-05 21:50:08 UTC", "sightings": 1 }, { "indicator": "http://182.121.40.60:59284/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 21:49:17 UTC", "last_seen": "2026-03-05 21:49:17 UTC", "sightings": 1 }, { "indicator": "https://field-sync.fieldmatrix.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-05 21:39:09 UTC", "last_seen": "2026-03-05 21:39:09 UTC", "sightings": 1 }, { "indicator": "http://123.188.72.146:57425/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 21:37:19 UTC", "last_seen": "2026-03-05 21:37:19 UTC", "sightings": 1 }, { "indicator": "http://110.39.235.170:57424/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 21:37:18 UTC", "last_seen": "2026-03-05 21:37:18 UTC", "sightings": 1 }, { "indicator": "https://matr-v2.fieldmatrix.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-05 21:34:06 UTC", "last_seen": "2026-03-05 21:34:06 UTC", "sightings": 1 }, { "indicator": "http://110.39.235.170:57424/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 21:32:19 UTC", "last_seen": "2026-03-05 21:32:19 UTC", "sightings": 1 }, { "indicator": "https://agro-unit.fieldmatrix.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-05 21:28:06 UTC", "last_seen": "2026-03-05 21:28:06 UTC", "sightings": 1 }, { "indicator": "http://182.121.40.60:59284/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 21:20:10 UTC", "last_seen": "2026-03-05 21:20:10 UTC", "sightings": 1 }, { "indicator": "http://110.36.14.229:42324/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 21:14:15 UTC", "last_seen": "2026-03-05 21:14:15 UTC", "sightings": 1 }, { "indicator": "https://view04.tectoniview.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-05 21:11:07 UTC", "last_seen": "2026-03-05 21:11:07 UTC", "sightings": 1 }, { "indicator": "http://110.36.14.229:42324/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 21:08:24 UTC", "last_seen": "2026-03-05 21:08:24 UTC", "sightings": 1 }, { "indicator": "https://tecto-sync.tectoniview.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-05 21:04:09 UTC", "last_seen": "2026-03-05 21:04:09 UTC", "sightings": 1 }, { "indicator": "https://view-v1.tectoniview.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-05 20:58:06 UTC", "last_seen": "2026-03-05 20:58:06 UTC", "sightings": 1 }, { "indicator": "http://110.39.228.163:45802/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 20:57:14 UTC", "last_seen": "2026-03-05 20:57:14 UTC", "sightings": 1 }, { "indicator": "http://115.55.229.93:57964/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 20:55:20 UTC", "last_seen": "2026-03-05 20:55:20 UTC", "sightings": 1 }, { "indicator": "http://42.231.209.220:33223/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 20:52:22 UTC", "last_seen": "2026-03-05 20:52:22 UTC", "sightings": 1 }, { "indicator": "http://220.161.100.220:52208/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-05 20:51:28 UTC", "last_seen": "2026-03-05 20:51:28 UTC", "sightings": 1 }, { "indicator": "http://110.39.228.163:45802/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 20:50:22 UTC", "last_seen": "2026-03-05 20:50:22 UTC", "sightings": 1 }, { "indicator": "https://cyber-node.tectoniview.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-05 20:45:10 UTC", "last_seen": "2026-03-05 20:45:10 UTC", "sightings": 1 }, { "indicator": "https://lose06.amperelose.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-05 20:42:07 UTC", "last_seen": "2026-03-05 20:42:07 UTC", "sightings": 1 }, { "indicator": "http://182.127.5.73:36273/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 20:40:20 UTC", "last_seen": "2026-03-05 20:40:20 UTC", "sightings": 1 }, { "indicator": "https://amp-v1.amperelose.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-05 20:30:08 UTC", "last_seen": "2026-03-05 20:30:08 UTC", "sightings": 1 }, { "indicator": "http://59.89.18.131:53368/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-05 20:29:24 UTC", "last_seen": "2026-03-05 20:29:24 UTC", "sightings": 1 }, { "indicator": "https://volt-sync.amperelose.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-05 20:24:08 UTC", "last_seen": "2026-03-05 20:24:08 UTC", "sightings": 1 }, { "indicator": "http://110.36.1.80:33962/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 20:18:22 UTC", "last_seen": "2026-03-05 20:18:22 UTC", "sightings": 1 }, { "indicator": "https://amp-lose.amperelose.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-05 20:17:08 UTC", "last_seen": "2026-03-05 20:17:08 UTC", "sightings": 1 }, { "indicator": "https://kero01.avonkerosene.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-05 20:11:07 UTC", "last_seen": "2026-03-05 20:11:07 UTC", "sightings": 1 }, { "indicator": "https://avon-v9.avonkerosene.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-05 20:02:07 UTC", "last_seen": "2026-03-05 20:02:07 UTC", "sightings": 1 }, { "indicator": "http://42.226.88.129:49296/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 19:57:11 UTC", "last_seen": "2026-03-05 19:57:11 UTC", "sightings": 1 }, { "indicator": "https://kero-net.avonkerosene.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-05 19:55:07 UTC", "last_seen": "2026-03-05 19:55:07 UTC", "sightings": 1 }, { "indicator": "https://avon-core.avonkerosene.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-05 19:47:10 UTC", "last_seen": "2026-03-05 19:47:10 UTC", "sightings": 1 }, { "indicator": "https://maku07.makuhaportfol.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-05 19:43:07 UTC", "last_seen": "2026-03-05 19:43:07 UTC", "sightings": 1 }, { "indicator": "https://port-v8.makuhaportfol.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-05 19:36:07 UTC", "last_seen": "2026-03-05 19:36:07 UTC", "sightings": 1 }, { "indicator": "https://maku-base.makuhaportfol.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-05 19:29:07 UTC", "last_seen": "2026-03-05 19:29:07 UTC", "sightings": 1 }, { "indicator": "http://42.232.84.165:43244/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 19:24:20 UTC", "last_seen": "2026-03-05 19:24:20 UTC", "sightings": 1 }, { "indicator": "http://182.126.125.215:36956/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 19:24:14 UTC", "last_seen": "2026-03-05 19:24:14 UTC", "sightings": 1 }, { "indicator": "https://port-fol.makuhaportfol.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-05 19:23:07 UTC", "last_seen": "2026-03-05 19:23:07 UTC", "sightings": 1 }, { "indicator": "http://42.232.84.165:43244/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 19:20:24 UTC", "last_seen": "2026-03-05 19:20:24 UTC", "sightings": 1 }, { "indicator": "http://219.156.61.172:43744/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 19:19:10 UTC", "last_seen": "2026-03-05 19:19:10 UTC", "sightings": 1 }, { "indicator": "http://219.157.61.200:32833/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 19:16:14 UTC", "last_seen": "2026-03-05 19:16:14 UTC", "sightings": 1 }, { "indicator": "https://synch03.corvetsynchron.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-05 19:15:08 UTC", "last_seen": "2026-03-05 19:15:08 UTC", "sightings": 1 }, { "indicator": "http://222.138.181.107:33696/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 19:14:19 UTC", "last_seen": "2026-03-05 19:14:19 UTC", "sightings": 1 }, { "indicator": "http://110.37.10.237:36591/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 19:06:11 UTC", "last_seen": "2026-03-05 19:06:11 UTC", "sightings": 1 }, { "indicator": "http://182.126.125.215:36956/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 19:03:09 UTC", "last_seen": "2026-03-05 19:03:09 UTC", "sightings": 1 }, { "indicator": "https://corvet-v7.corvetsynchron.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-05 18:59:06 UTC", "last_seen": "2026-03-05 18:59:06 UTC", "sightings": 1 }, { "indicator": "http://222.138.104.16:35625/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 18:51:15 UTC", "last_seen": "2026-03-05 18:51:15 UTC", "sightings": 1 }, { "indicator": "http://219.157.61.200:32833/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 18:51:14 UTC", "last_seen": "2026-03-05 18:51:14 UTC", "sightings": 1 }, { "indicator": "https://synch-node.corvetsynchron.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-05 18:51:07 UTC", "last_seen": "2026-03-05 18:51:07 UTC", "sightings": 1 }, { "indicator": "http://221.203.134.211:49201/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 18:47:20 UTC", "last_seen": "2026-03-05 18:47:20 UTC", "sightings": 1 }, { "indicator": "https://corvet-sync.corvetsynchron.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-05 18:46:13 UTC", "last_seen": "2026-03-05 18:46:13 UTC", "sightings": 1 }, { "indicator": "http://105.157.196.94:38805/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 18:43:28 UTC", "last_seen": "2026-03-05 18:43:28 UTC", "sightings": 1 }, { "indicator": "http://222.138.181.107:33696/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 18:42:15 UTC", "last_seen": "2026-03-05 18:42:15 UTC", "sightings": 1 }, { "indicator": "https://big02.bigamyprogramm.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-05 18:41:05 UTC", "last_seen": "2026-03-05 18:41:05 UTC", "sightings": 1 }, { "indicator": "http://175.175.129.238:49051/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 18:34:18 UTC", "last_seen": "2026-03-05 18:34:18 UTC", "sightings": 1 }, { "indicator": "https://prog-v6.bigamyprogramm.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-05 18:33:07 UTC", "last_seen": "2026-03-05 18:33:07 UTC", "sightings": 1 }, { "indicator": "https://sys-node.bigamyprogramm.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-05 18:28:11 UTC", "last_seen": "2026-03-05 18:28:11 UTC", "sightings": 1 }, { "indicator": "http://117.254.101.190:56133/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 18:27:19 UTC", "last_seen": "2026-03-05 18:27:19 UTC", "sightings": 1 }, { "indicator": "http://182.121.166.54:55661/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 18:24:12 UTC", "last_seen": "2026-03-05 18:24:12 UTC", "sightings": 1 }, { "indicator": "https://big-prog.bigamyprogramm.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-05 18:23:07 UTC", "last_seen": "2026-03-05 18:23:07 UTC", "sightings": 1 }, { "indicator": "http://45.13.238.231/release/arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai" ], "first_seen": "2026-03-05 18:21:13 UTC", "last_seen": "2026-03-05 18:21:13 UTC", "sightings": 1 }, { "indicator": "http://130.12.180.171/sparc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 18:19:17 UTC", "last_seen": "2026-03-05 18:19:17 UTC", "sightings": 1 }, { "indicator": "http://130.12.180.171/powerpc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-05 18:19:17 UTC", "last_seen": "2026-03-05 18:19:17 UTC", "sightings": 1 }, { "indicator": "http://130.12.180.171/arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 18:19:17 UTC", "last_seen": "2026-03-05 18:19:17 UTC", "sightings": 1 }, { "indicator": "http://130.12.180.171/mipsel", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 18:18:18 UTC", "last_seen": "2026-03-05 18:18:18 UTC", "sightings": 1 }, { "indicator": "http://130.12.180.171/x86_64", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 18:18:18 UTC", "last_seen": "2026-03-05 18:18:18 UTC", "sightings": 1 }, { "indicator": "http://45.141.58.44/main_mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 18:17:18 UTC", "last_seen": "2026-03-05 18:17:18 UTC", "sightings": 1 }, { "indicator": "http://130.12.180.171/arm", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 18:17:18 UTC", "last_seen": "2026-03-05 18:17:18 UTC", "sightings": 1 }, { "indicator": "http://130.12.180.171/arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 18:17:18 UTC", "last_seen": "2026-03-05 18:17:18 UTC", "sightings": 1 }, { "indicator": "http://130.12.180.171/m68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-05 18:16:21 UTC", "last_seen": "2026-03-05 18:16:21 UTC", "sightings": 1 }, { "indicator": "http://130.12.180.171/sh4", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-05 18:16:21 UTC", "last_seen": "2026-03-05 18:16:21 UTC", "sightings": 1 }, { "indicator": "http://130.12.180.171/i686", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 18:16:21 UTC", "last_seen": "2026-03-05 18:16:21 UTC", "sightings": 1 }, { "indicator": "http://130.12.180.171/mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-05 18:16:21 UTC", "last_seen": "2026-03-05 18:16:21 UTC", "sightings": 1 }, { "indicator": "https://hryv08.hryvmicrobiol.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-05 18:15:07 UTC", "last_seen": "2026-03-05 18:15:07 UTC", "sightings": 1 }, { "indicator": "http://175.175.129.238:49051/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 18:13:19 UTC", "last_seen": "2026-03-05 18:13:19 UTC", "sightings": 1 }, { "indicator": "http://124.95.124.97:39702/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 18:10:14 UTC", "last_seen": "2026-03-05 18:10:14 UTC", "sightings": 1 }, { "indicator": "https://micro-v5.hryvmicrobiol.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-05 18:09:07 UTC", "last_seen": "2026-03-05 18:09:07 UTC", "sightings": 1 }, { "indicator": "http://124.95.124.97:39702/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 18:05:21 UTC", "last_seen": "2026-03-05 18:05:21 UTC", "sightings": 1 }, { "indicator": "https://hryv-node.hryvmicrobiol.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-05 18:04:07 UTC", "last_seen": "2026-03-05 18:04:07 UTC", "sightings": 1 }, { "indicator": "https://micro-bio.hryvmicrobiol.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-05 17:57:08 UTC", "last_seen": "2026-03-05 17:57:08 UTC", "sightings": 1 }, { "indicator": "http://222.140.199.147:38237/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 17:51:11 UTC", "last_seen": "2026-03-05 17:51:11 UTC", "sightings": 1 }, { "indicator": "https://skird05.breakskird.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-05 17:48:08 UTC", "last_seen": "2026-03-05 17:48:08 UTC", "sightings": 1 }, { "indicator": "http://158.94.211.162/blof", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-Phorpiex" ], "first_seen": "2026-03-05 17:41:08 UTC", "last_seen": "2026-03-05 17:41:08 UTC", "sightings": 1 }, { "indicator": "http://27.215.176.104:37284/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 17:38:18 UTC", "last_seen": "2026-03-05 17:38:18 UTC", "sightings": 1 }, { "indicator": "https://break-v4.breakskird.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-05 17:36:08 UTC", "last_seen": "2026-03-05 17:36:08 UTC", "sightings": 1 }, { "indicator": "https://skird-net.breakskird.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-05 17:25:10 UTC", "last_seen": "2026-03-05 17:25:10 UTC", "sightings": 1 }, { "indicator": "http://222.140.199.147:38237/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 17:18:09 UTC", "last_seen": "2026-03-05 17:18:09 UTC", "sightings": 1 }, { "indicator": "https://break-unit.breakskird.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-05 17:14:08 UTC", "last_seen": "2026-03-05 17:14:08 UTC", "sightings": 1 }, { "indicator": "http://59.97.181.97:51396/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 17:07:19 UTC", "last_seen": "2026-03-05 17:07:19 UTC", "sightings": 1 }, { "indicator": "https://trav01.constelluntrav.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-05 17:03:07 UTC", "last_seen": "2026-03-05 17:03:07 UTC", "sightings": 1 }, { "indicator": "https://const-v3.constelluntrav.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-05 16:58:08 UTC", "last_seen": "2026-03-05 16:58:08 UTC", "sightings": 1 }, { "indicator": "http://39.74.91.194:41047/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 16:52:20 UTC", "last_seen": "2026-03-05 16:52:20 UTC", "sightings": 1 }, { "indicator": "https://trav-base.constelluntrav.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-05 16:52:08 UTC", "last_seen": "2026-03-05 16:52:08 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.20/arc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 16:46:17 UTC", "last_seen": "2026-03-05 16:46:17 UTC", "sightings": 1 }, { "indicator": "https://const-gate.constelluntrav.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-05 16:46:09 UTC", "last_seen": "2026-03-05 16:46:09 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.20/i686", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 16:45:22 UTC", "last_seen": "2026-03-05 16:45:22 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.20/arm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-05 16:45:20 UTC", "last_seen": "2026-03-05 16:45:20 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.20/arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-05 16:45:20 UTC", "last_seen": "2026-03-05 16:45:20 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.20/sparc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-05 16:45:20 UTC", "last_seen": "2026-03-05 16:45:20 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.20/arm", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-05 16:45:20 UTC", "last_seen": "2026-03-05 16:45:20 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.20/arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-05 16:45:20 UTC", "last_seen": "2026-03-05 16:45:20 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.20/mips64", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-05 16:45:20 UTC", "last_seen": "2026-03-05 16:45:20 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.20/mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 16:44:15 UTC", "last_seen": "2026-03-05 16:44:15 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.20/ohshit.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "sh", "ua-wget" ], "first_seen": "2026-03-05 16:44:15 UTC", "last_seen": "2026-03-05 16:44:15 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.20/ppc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 16:43:10 UTC", "last_seen": "2026-03-05 16:43:10 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.20/sh4", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 16:43:10 UTC", "last_seen": "2026-03-05 16:43:10 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.20/m68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 16:43:10 UTC", "last_seen": "2026-03-05 16:43:10 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.20/x86_64", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 16:43:10 UTC", "last_seen": "2026-03-05 16:43:10 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.20/mpsl", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 16:43:10 UTC", "last_seen": "2026-03-05 16:43:10 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.20/arm4", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 16:43:10 UTC", "last_seen": "2026-03-05 16:43:10 UTC", "sightings": 1 }, { "indicator": "http://176.65.139.20/spc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 16:43:10 UTC", "last_seen": "2026-03-05 16:43:10 UTC", "sightings": 1 }, { "indicator": "http://59.97.181.97:51396/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 16:41:20 UTC", "last_seen": "2026-03-05 16:41:20 UTC", "sightings": 1 }, { "indicator": "https://soup09.coachsoup.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-05 16:39:06 UTC", "last_seen": "2026-03-05 16:39:06 UTC", "sightings": 1 }, { "indicator": "http://182.113.207.69:35447/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 16:35:23 UTC", "last_seen": "2026-03-05 16:35:23 UTC", "sightings": 1 }, { "indicator": "http://115.51.17.29:56048/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 16:28:17 UTC", "last_seen": "2026-03-05 16:28:17 UTC", "sightings": 1 }, { "indicator": "https://coach-v2.coachsoup.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-05 16:27:06 UTC", "last_seen": "2026-03-05 16:27:06 UTC", "sightings": 1 }, { "indicator": "http://115.51.17.29:56048/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 16:26:24 UTC", "last_seen": "2026-03-05 16:26:24 UTC", "sightings": 1 }, { "indicator": "https://soup-node.coachsoup.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-05 16:22:07 UTC", "last_seen": "2026-03-05 16:22:07 UTC", "sightings": 1 }, { "indicator": "http://110.37.53.25:38678/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 16:21:18 UTC", "last_seen": "2026-03-05 16:21:18 UTC", "sightings": 1 }, { "indicator": "http://182.113.207.69:35447/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 16:21:18 UTC", "last_seen": "2026-03-05 16:21:18 UTC", "sightings": 1 }, { "indicator": "http://223.151.73.164:58525/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-05 16:17:17 UTC", "last_seen": "2026-03-05 16:17:17 UTC", "sightings": 1 }, { "indicator": "https://coach-sync.coachsoup.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-05 16:11:07 UTC", "last_seen": "2026-03-05 16:11:07 UTC", "sightings": 1 }, { "indicator": "https://com04.commundesign.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-05 16:07:07 UTC", "last_seen": "2026-03-05 16:07:07 UTC", "sightings": 1 }, { "indicator": "https://design-v1.commundesign.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-05 16:04:10 UTC", "last_seen": "2026-03-05 16:04:10 UTC", "sightings": 1 }, { "indicator": "http://70.36.97.24/m4ng0d33w1771nnmnlove/MMaaRRiiOisecTanee.mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 16:03:15 UTC", "last_seen": "2026-03-05 16:03:15 UTC", "sightings": 1 }, { "indicator": "http://70.36.97.24/m4ng0d33w1771nnmnlove/MMaaRRiiOisecTanee.arm", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 16:03:15 UTC", "last_seen": "2026-03-05 16:03:15 UTC", "sightings": 1 }, { "indicator": "http://70.36.97.24/m4ng0d33w1771nnmnlove/MMaaRRiiOisecTanee.i686", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 16:03:14 UTC", "last_seen": "2026-03-05 16:03:14 UTC", "sightings": 1 }, { "indicator": "http://70.36.97.24/m4ng0d33w1771nnmnlove/MMaaRRiiOisecTanee.arm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 16:03:14 UTC", "last_seen": "2026-03-05 16:03:14 UTC", "sightings": 1 }, { "indicator": "http://70.36.97.24/m4ng0d33w1771nnmnlove/MMaaRRiiOisecTanee.m68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 16:03:14 UTC", "last_seen": "2026-03-05 16:03:14 UTC", "sightings": 1 }, { "indicator": "http://70.36.97.24/m4ng0d33w1771nnmnlove/MMaaRRiiOisecTanee.ppc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 16:03:14 UTC", "last_seen": "2026-03-05 16:03:14 UTC", "sightings": 1 }, { "indicator": "http://70.36.97.24/m4ng0d33w1771nnmnlove/MMaaRRiiOisecTanee.arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 16:03:14 UTC", "last_seen": "2026-03-05 16:03:14 UTC", "sightings": 1 }, { "indicator": "http://70.36.97.24/m4ng0d33w1771nnmnlove/MMaaRRiiOisecTanee.sh4", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 16:03:13 UTC", "last_seen": "2026-03-05 16:03:13 UTC", "sightings": 1 }, { "indicator": "http://70.36.97.24/m4ng0d33w1771nnmnlove/MMaaRRiiOisecTanee.arc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 16:03:13 UTC", "last_seen": "2026-03-05 16:03:13 UTC", "sightings": 1 }, { "indicator": "http://70.36.97.24/m4ng0d33w1771nnmnlove/MMaaRRiiOisecTanee.arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 16:03:13 UTC", "last_seen": "2026-03-05 16:03:13 UTC", "sightings": 1 }, { "indicator": "http://70.36.97.24/m4ng0d33w1771nnmnlove/MMaaRRiiOisecTanee.spc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 16:03:13 UTC", "last_seen": "2026-03-05 16:03:13 UTC", "sightings": 1 }, { "indicator": "http://70.36.97.24/m4ng0d33w1771nnmnlove/MMaaRRiiOisecTanee.i486", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 16:03:13 UTC", "last_seen": "2026-03-05 16:03:13 UTC", "sightings": 1 }, { "indicator": "http://70.36.97.24/m4ng0d33w1771nnmnlove/MMaaRRiiOisecTanee.x86_64", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 16:03:13 UTC", "last_seen": "2026-03-05 16:03:13 UTC", "sightings": 1 }, { "indicator": "http://70.36.97.24/m4ng0d33w1771nnmnlove/MMaaRRiiOisecTanee.mpsl", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 16:03:13 UTC", "last_seen": "2026-03-05 16:03:13 UTC", "sightings": 1 }, { "indicator": "http://70.36.97.24/m4ng0d33w1771nnmnlove/MMaaRRiiOisecTanee.x86", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 16:03:13 UTC", "last_seen": "2026-03-05 16:03:13 UTC", "sightings": 1 }, { "indicator": "http://27.215.183.133:50401/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 16:02:09 UTC", "last_seen": "2026-03-05 16:02:09 UTC", "sightings": 1 }, { "indicator": "http://130.12.180.43/files/8499672124/b1JNsvy.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543", "Fuery" ], "first_seen": "2026-03-05 15:57:07 UTC", "last_seen": "2026-03-05 15:57:07 UTC", "sightings": 1 }, { "indicator": "https://celi-rom.ro/js/CCCleaner.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "SimpleHelp" ], "first_seen": "2026-03-05 15:53:10 UTC", "last_seen": "2026-03-05 15:53:10 UTC", "sightings": 1 }, { "indicator": "https://drive.google.com/uc?id=1pyyQRpUmH0YtPG-VqvMNzKUo9i8-RZ7L&export=download", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-05 15:53:08 UTC", "last_seen": "2026-03-05 15:53:08 UTC", "sightings": 1 }, { "indicator": "https://net-hub.commundesign.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-05 15:53:08 UTC", "last_seen": "2026-03-05 15:53:08 UTC", "sightings": 1 }, { "indicator": "http://223.151.73.164:58525/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-05 15:48:21 UTC", "last_seen": "2026-03-05 15:48:21 UTC", "sightings": 1 }, { "indicator": "https://com-design.commundesign.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-05 15:48:07 UTC", "last_seen": "2026-03-05 15:48:07 UTC", "sightings": 1 }, { "indicator": "http://130.12.180.43/files/7311893838/0fm7Hns.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543", "Stealc" ], "first_seen": "2026-03-05 15:44:08 UTC", "last_seen": "2026-03-05 15:44:08 UTC", "sightings": 1 }, { "indicator": "https://mimi-knotline.mimisttie.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-05 15:41:07 UTC", "last_seen": "2026-03-05 15:41:07 UTC", "sightings": 1 }, { "indicator": "https://tinythread.mimisttie.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-05 15:35:08 UTC", "last_seen": "2026-03-05 15:35:08 UTC", "sightings": 1 }, { "indicator": "http://27.215.183.133:50401/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 15:32:18 UTC", "last_seen": "2026-03-05 15:32:18 UTC", "sightings": 1 }, { "indicator": "https://blankeyeo.com/Taffy/Esta/Eleonore/Malissia/Elle/Annadiana/Kania/Wrennie/Fern?Fiona=Adrianna", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-05 15:31:09 UTC", "last_seen": "2026-03-05 15:31:09 UTC", "sightings": 1 }, { "indicator": "https://un1rw11q4u.com/Eugenia/Eddy/Gaylene/Marji/Sile/Christean/Carmon?Crista=Kristine_rp", "indicator_type": "url", "source": "URLhaus", "tags": [ "ascii", "powershell", "ps1", "Stealc" ], "first_seen": "2026-03-05 15:30:10 UTC", "last_seen": "2026-03-05 15:30:10 UTC", "sightings": 1 }, { "indicator": "https://zk8q4.mimisttie.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-05 15:29:07 UTC", "last_seen": "2026-03-05 15:29:07 UTC", "sightings": 1 }, { "indicator": "http://123.5.23.167:59000/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 15:25:26 UTC", "last_seen": "2026-03-05 15:25:26 UTC", "sightings": 1 }, { "indicator": "https://geo-p1levector.geodesistpile.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-05 15:24:08 UTC", "last_seen": "2026-03-05 15:24:08 UTC", "sightings": 1 }, { "indicator": "http://175.146.210.103:46890/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 15:17:20 UTC", "last_seen": "2026-03-05 15:17:20 UTC", "sightings": 1 }, { "indicator": "https://surveyrock.geodesistpile.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-05 15:16:07 UTC", "last_seen": "2026-03-05 15:16:07 UTC", "sightings": 1 }, { "indicator": "https://blankeyeo.com/Hinda/Arabelle/Mirabella/Dinah/Staci?Theresa=Benni_rp", "indicator_type": "url", "source": "URLhaus", "tags": [ "ascii", "powershell", "ps1" ], "first_seen": "2026-03-05 15:15:11 UTC", "last_seen": "2026-03-05 15:15:11 UTC", "sightings": 1 }, { "indicator": "http://130.12.180.43/files/7362035837/FTWxQSW.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-03-05 15:14:08 UTC", "last_seen": "2026-03-05 15:14:08 UTC", "sightings": 1 }, { "indicator": "http://119.189.157.22:40117/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 15:12:16 UTC", "last_seen": "2026-03-05 15:12:16 UTC", "sightings": 1 }, { "indicator": "https://q7wz3.geodesistpile.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-05 15:12:08 UTC", "last_seen": "2026-03-05 15:12:08 UTC", "sightings": 1 }, { "indicator": "http://110.39.226.207:39091/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 15:11:18 UTC", "last_seen": "2026-03-05 15:11:18 UTC", "sightings": 1 }, { "indicator": "http://45.83.140.55:1244/bro/gold1", "indicator_type": "url", "source": "URLhaus", "tags": [ "python", "ua-wget" ], "first_seen": "2026-03-05 15:10:09 UTC", "last_seen": "2026-03-05 15:10:09 UTC", "sightings": 1 }, { "indicator": "http://fil.ydns.eu/emAAbmj/emAAbmj.txt", "indicator_type": "url", "source": "URLhaus", "tags": [ "Formbook", "rev-base64-loader" ], "first_seen": "2026-03-05 15:08:08 UTC", "last_seen": "2026-03-05 15:08:08 UTC", "sightings": 1 }, { "indicator": "https://tenyunat-99viplawt.com/QQGSYLX", "indicator_type": "url", "source": "URLhaus", "tags": [ "SilverFox" ], "first_seen": "2026-03-05 15:07:07 UTC", "last_seen": "2026-03-05 15:07:07 UTC", "sightings": 1 }, { "indicator": "https://engrave-vel0ur.engravevelvet.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-05 15:04:07 UTC", "last_seen": "2026-03-05 15:04:07 UTC", "sightings": 1 }, { "indicator": "https://softcarve.engravevelvet.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-05 15:00:10 UTC", "last_seen": "2026-03-05 15:00:10 UTC", "sightings": 1 }, { "indicator": "http://175.146.210.103:46890/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 14:58:27 UTC", "last_seen": "2026-03-05 14:58:27 UTC", "sightings": 1 }, { "indicator": "https://y6xq9.engravevelvet.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-05 14:56:08 UTC", "last_seen": "2026-03-05 14:56:08 UTC", "sightings": 1 }, { "indicator": "http://123.5.23.167:59000/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 14:53:27 UTC", "last_seen": "2026-03-05 14:53:27 UTC", "sightings": 1 }, { "indicator": "http://119.189.157.22:40117/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 14:49:25 UTC", "last_seen": "2026-03-05 14:49:25 UTC", "sightings": 1 }, { "indicator": "https://esaul-frostline.esaulsnow.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-05 14:46:08 UTC", "last_seen": "2026-03-05 14:46:08 UTC", "sightings": 1 }, { "indicator": "http://90.231.188.116:54979/.i", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "hajime", "ua-wget" ], "first_seen": "2026-03-05 14:32:30 UTC", "last_seen": "2026-03-05 14:32:30 UTC", "sightings": 1 }, { "indicator": "https://wintertrail.esaulsnow.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-05 14:32:08 UTC", "last_seen": "2026-03-05 14:32:08 UTC", "sightings": 1 }, { "indicator": "http://42.230.213.188:56883/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 14:28:19 UTC", "last_seen": "2026-03-05 14:28:19 UTC", "sightings": 1 }, { "indicator": "http://59.184.213.30:39280/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 14:24:28 UTC", "last_seen": "2026-03-05 14:24:28 UTC", "sightings": 1 }, { "indicator": "http://110.39.226.207:39091/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 14:23:23 UTC", "last_seen": "2026-03-05 14:23:23 UTC", "sightings": 1 }, { "indicator": "http://182.112.28.57:50917/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 14:18:22 UTC", "last_seen": "2026-03-05 14:18:22 UTC", "sightings": 1 }, { "indicator": "https://v8q2r.esaulsnow.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-05 14:11:06 UTC", "last_seen": "2026-03-05 14:11:06 UTC", "sightings": 1 }, { "indicator": "https://infant-woodgrid.infantwoodman.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-05 14:05:07 UTC", "last_seen": "2026-03-05 14:05:07 UTC", "sightings": 1 }, { "indicator": "http://188.137.245.221/1.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey", "Vidar" ], "first_seen": "2026-03-05 14:02:16 UTC", "last_seen": "2026-03-05 14:02:16 UTC", "sightings": 1 }, { "indicator": "http://178.16.54.109/3", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-Phorpiex" ], "first_seen": "2026-03-05 14:02:06 UTC", "last_seen": "2026-03-05 14:02:06 UTC", "sightings": 1 }, { "indicator": "https://youngtimber.infantwoodman.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-05 13:56:07 UTC", "last_seen": "2026-03-05 13:56:07 UTC", "sightings": 1 }, { "indicator": "https://xk39q.infantwoodman.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-05 13:51:06 UTC", "last_seen": "2026-03-05 13:51:06 UTC", "sightings": 1 }, { "indicator": "http://coolcams.duckdns.org/bins/mipsel", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 13:46:43 UTC", "last_seen": "2026-03-05 13:46:43 UTC", "sightings": 1 }, { "indicator": "http://r34fa352.duckdns.org/bins/x86", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 13:46:32 UTC", "last_seen": "2026-03-05 13:46:32 UTC", "sightings": 1 }, { "indicator": "http://s8.vizja.cc/bins/sh4", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 13:46:31 UTC", "last_seen": "2026-03-05 13:46:31 UTC", "sightings": 1 }, { "indicator": "http://r34fa352.duckdns.org/bins/arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 13:46:31 UTC", "last_seen": "2026-03-05 13:46:31 UTC", "sightings": 1 }, { "indicator": "https://4enjfmcl.wallnapalm.digital/?=check&&actmn=vIVMUIeOtSteSoaQ", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-05 13:46:22 UTC", "last_seen": "2026-03-05 13:46:22 UTC", "sightings": 1 }, { "indicator": "http://s8.vizja.cc/bins/arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "ua-wget" ], "first_seen": "2026-03-05 13:46:21 UTC", "last_seen": "2026-03-05 13:46:21 UTC", "sightings": 1 }, { "indicator": "http://s8.vizja.cc/bins/x86_64", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 13:46:21 UTC", "last_seen": "2026-03-05 13:46:21 UTC", "sightings": 1 }, { "indicator": "http://r34fa352.duckdns.org/bins/arm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 13:46:21 UTC", "last_seen": "2026-03-05 13:46:21 UTC", "sightings": 1 }, { "indicator": "http://www.coolcams.duckdns.org/bins/mipsel", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 13:46:21 UTC", "last_seen": "2026-03-05 13:46:21 UTC", "sightings": 1 }, { "indicator": "http://coolcams.duckdns.org/bins/mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 13:46:21 UTC", "last_seen": "2026-03-05 13:46:21 UTC", "sightings": 1 }, { "indicator": "http://coolcams.duckdns.org/bins/x86_64", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 13:46:21 UTC", "last_seen": "2026-03-05 13:46:21 UTC", "sightings": 1 }, { "indicator": "http://r34fa352.duckdns.org/bins/spc", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 13:46:21 UTC", "last_seen": "2026-03-05 13:46:21 UTC", "sightings": 1 }, { "indicator": "http://coolcams.duckdns.org/bins/m68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 13:46:17 UTC", "last_seen": "2026-03-05 13:46:17 UTC", "sightings": 1 }, { "indicator": "http://r34fa352.duckdns.org/bins/mipsel", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 13:46:16 UTC", "last_seen": "2026-03-05 13:46:16 UTC", "sightings": 1 }, { "indicator": "http://r34fa352.duckdns.org/bins/sh4", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 13:46:16 UTC", "last_seen": "2026-03-05 13:46:16 UTC", "sightings": 1 }, { "indicator": "http://r34fa352.duckdns.org/bins/mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 13:46:16 UTC", "last_seen": "2026-03-05 13:46:16 UTC", "sightings": 1 }, { "indicator": "http://r34fa352.duckdns.org/bins/arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 13:46:16 UTC", "last_seen": "2026-03-05 13:46:16 UTC", "sightings": 1 }, { "indicator": "http://r34fa352.duckdns.org/bins/m68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 13:46:16 UTC", "last_seen": "2026-03-05 13:46:16 UTC", "sightings": 1 }, { "indicator": "http://coolcams.duckdns.org/bins/arm", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 13:46:16 UTC", "last_seen": "2026-03-05 13:46:16 UTC", "sightings": 1 }, { "indicator": "http://www.coolcams.duckdns.org/bins/ppc", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 13:46:16 UTC", "last_seen": "2026-03-05 13:46:16 UTC", "sightings": 1 }, { "indicator": "http://125.46.228.209:59864/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 13:46:12 UTC", "last_seen": "2026-03-05 13:46:12 UTC", "sightings": 1 }, { "indicator": "http://125.42.233.130:44433/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 13:46:11 UTC", "last_seen": "2026-03-05 13:46:11 UTC", "sightings": 1 }, { "indicator": "http://42.224.194.234:59176/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 13:46:11 UTC", "last_seen": "2026-03-05 13:46:11 UTC", "sightings": 1 }, { "indicator": "https://sabbathforge.magnesshabas.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-05 13:46:10 UTC", "last_seen": "2026-03-05 13:46:10 UTC", "sightings": 1 }, { "indicator": "https://magnes-core.magnesshabas.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-05 13:46:08 UTC", "last_seen": "2026-03-05 13:46:08 UTC", "sightings": 1 }, { "indicator": "http://www.r34fa352.duckdns.org/bins/mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 13:30:35 UTC", "last_seen": "2026-03-05 13:30:35 UTC", "sightings": 1 }, { "indicator": "http://r34fa352.duckdns.org/bins/arm", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 13:30:35 UTC", "last_seen": "2026-03-05 13:30:35 UTC", "sightings": 1 }, { "indicator": "http://www.r34fa352.duckdns.org/bins/arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 13:30:35 UTC", "last_seen": "2026-03-05 13:30:35 UTC", "sightings": 1 }, { "indicator": "http://www.coolcams.duckdns.org/bins/arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 13:30:35 UTC", "last_seen": "2026-03-05 13:30:35 UTC", "sightings": 1 }, { "indicator": "http://www.coolcams.duckdns.org/bins/sh4", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 13:30:35 UTC", "last_seen": "2026-03-05 13:30:35 UTC", "sightings": 1 }, { "indicator": "http://s8.vizja.cc/bins/arm", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 13:30:35 UTC", "last_seen": "2026-03-05 13:30:35 UTC", "sightings": 1 }, { "indicator": "http://www.r34fa352.duckdns.org/bins/m68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 13:30:35 UTC", "last_seen": "2026-03-05 13:30:35 UTC", "sightings": 1 }, { "indicator": "http://s8.vizja.cc/bins/spc", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 13:30:35 UTC", "last_seen": "2026-03-05 13:30:35 UTC", "sightings": 1 }, { "indicator": "http://coolcams.duckdns.org/bins/arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 13:30:35 UTC", "last_seen": "2026-03-05 13:30:35 UTC", "sightings": 1 }, { "indicator": "http://s8.vizja.cc/bins/mipsel", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 13:30:35 UTC", "last_seen": "2026-03-05 13:30:35 UTC", "sightings": 1 }, { "indicator": "http://s8.vizja.cc/bins/mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 13:30:35 UTC", "last_seen": "2026-03-05 13:30:35 UTC", "sightings": 1 }, { "indicator": "http://coolcams.duckdns.org/bins/arm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 13:30:35 UTC", "last_seen": "2026-03-05 13:30:35 UTC", "sightings": 1 }, { "indicator": "http://www.r34fa352.duckdns.org/bins/mipsel", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 13:30:35 UTC", "last_seen": "2026-03-05 13:30:35 UTC", "sightings": 1 }, { "indicator": "http://coolcams.duckdns.org/bins/ppc", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 13:30:35 UTC", "last_seen": "2026-03-05 13:30:35 UTC", "sightings": 1 }, { "indicator": "http://r34fa352.duckdns.org/bins/x86_64", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 13:30:35 UTC", "last_seen": "2026-03-05 13:30:35 UTC", "sightings": 1 }, { "indicator": "http://s8.vizja.cc/bins/arm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 13:30:35 UTC", "last_seen": "2026-03-05 13:30:35 UTC", "sightings": 1 }, { "indicator": "http://coolcams.duckdns.org/bins/arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 13:30:35 UTC", "last_seen": "2026-03-05 13:30:35 UTC", "sightings": 1 }, { "indicator": "http://www.coolcams.duckdns.org/bins/x86", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 13:30:31 UTC", "last_seen": "2026-03-05 13:30:31 UTC", "sightings": 1 }, { "indicator": "http://s8.vizja.cc/bins/m68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 13:30:31 UTC", "last_seen": "2026-03-05 13:30:31 UTC", "sightings": 1 }, { "indicator": "http://www.r34fa352.duckdns.org/bins/ppc", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 13:30:24 UTC", "last_seen": "2026-03-05 13:30:24 UTC", "sightings": 1 }, { "indicator": "http://www.r34fa352.duckdns.org/bins/sh4", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 13:30:24 UTC", "last_seen": "2026-03-05 13:30:24 UTC", "sightings": 1 }, { "indicator": "http://www.r34fa352.duckdns.org/bins/spc", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 13:30:24 UTC", "last_seen": "2026-03-05 13:30:24 UTC", "sightings": 1 }, { "indicator": "http://s8.vizja.cc/bins/x86", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 13:30:24 UTC", "last_seen": "2026-03-05 13:30:24 UTC", "sightings": 1 }, { "indicator": "http://www.coolcams.duckdns.org/bins/spc", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 13:30:24 UTC", "last_seen": "2026-03-05 13:30:24 UTC", "sightings": 1 }, { "indicator": "http://www.coolcams.duckdns.org/bins/arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 13:30:24 UTC", "last_seen": "2026-03-05 13:30:24 UTC", "sightings": 1 }, { "indicator": "http://www.r34fa352.duckdns.org/bins/arm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 13:30:24 UTC", "last_seen": "2026-03-05 13:30:24 UTC", "sightings": 1 }, { "indicator": "http://www.coolcams.duckdns.org/bins/mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 13:30:24 UTC", "last_seen": "2026-03-05 13:30:24 UTC", "sightings": 1 }, { "indicator": "http://www.r34fa352.duckdns.org/bins/x86", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 13:30:23 UTC", "last_seen": "2026-03-05 13:30:23 UTC", "sightings": 1 }, { "indicator": "http://s8.vizja.cc/bins/arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 13:30:23 UTC", "last_seen": "2026-03-05 13:30:23 UTC", "sightings": 1 }, { "indicator": "http://www.coolcams.duckdns.org/bins/m68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 13:30:23 UTC", "last_seen": "2026-03-05 13:30:23 UTC", "sightings": 1 }, { "indicator": "http://www.coolcams.duckdns.org/bins/x86_64", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 13:30:23 UTC", "last_seen": "2026-03-05 13:30:23 UTC", "sightings": 1 }, { "indicator": "http://www.coolcams.duckdns.org/bins/arm", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 13:30:23 UTC", "last_seen": "2026-03-05 13:30:23 UTC", "sightings": 1 }, { "indicator": "http://www.r34fa352.duckdns.org/bins/x86_64", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 13:30:23 UTC", "last_seen": "2026-03-05 13:30:23 UTC", "sightings": 1 }, { "indicator": "http://www.r34fa352.duckdns.org/bins/arm", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 13:30:23 UTC", "last_seen": "2026-03-05 13:30:23 UTC", "sightings": 1 }, { "indicator": "http://coolcams.duckdns.org/bins/x86", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 13:30:23 UTC", "last_seen": "2026-03-05 13:30:23 UTC", "sightings": 1 }, { "indicator": "http://www.r34fa352.duckdns.org/bins/arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 13:30:23 UTC", "last_seen": "2026-03-05 13:30:23 UTC", "sightings": 1 }, { "indicator": "http://www.coolcams.duckdns.org/bins/arm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 13:30:23 UTC", "last_seen": "2026-03-05 13:30:23 UTC", "sightings": 1 }, { "indicator": "http://coolcams.duckdns.org/bins/spc", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 13:30:22 UTC", "last_seen": "2026-03-05 13:30:22 UTC", "sightings": 1 }, { "indicator": "http://s8.vizja.cc/bins/ppc", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 13:30:18 UTC", "last_seen": "2026-03-05 13:30:18 UTC", "sightings": 1 }, { "indicator": "http://r34fa352.duckdns.org/bins/ppc", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 13:30:18 UTC", "last_seen": "2026-03-05 13:30:18 UTC", "sightings": 1 }, { "indicator": "http://coolcams.duckdns.org/bins/sh4", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 13:30:18 UTC", "last_seen": "2026-03-05 13:30:18 UTC", "sightings": 1 }, { "indicator": "http://130.12.180.78/bins/arm", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 13:28:16 UTC", "last_seen": "2026-03-05 13:28:16 UTC", "sightings": 1 }, { "indicator": "http://115.55.237.253:49633/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 13:27:16 UTC", "last_seen": "2026-03-05 13:27:16 UTC", "sightings": 1 }, { "indicator": "http://130.12.180.78/bins/arm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 13:27:09 UTC", "last_seen": "2026-03-05 13:27:09 UTC", "sightings": 1 }, { "indicator": "http://130.12.180.78/bins/mipsel", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 13:26:19 UTC", "last_seen": "2026-03-05 13:26:19 UTC", "sightings": 1 }, { "indicator": "http://130.12.180.78/bins/x86_64", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 13:26:19 UTC", "last_seen": "2026-03-05 13:26:19 UTC", "sightings": 1 }, { "indicator": "http://130.12.180.78/bins/spc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 13:25:20 UTC", "last_seen": "2026-03-05 13:25:20 UTC", "sightings": 1 }, { "indicator": "http://42.231.209.220:33223/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 13:24:20 UTC", "last_seen": "2026-03-05 13:24:20 UTC", "sightings": 1 }, { "indicator": "http://115.55.174.218:41775/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 13:18:28 UTC", "last_seen": "2026-03-05 13:18:28 UTC", "sightings": 1 }, { "indicator": "http://42.224.194.234:59176/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 13:18:16 UTC", "last_seen": "2026-03-05 13:18:16 UTC", "sightings": 1 }, { "indicator": "https://temp.sh/gAIih/RmiSVwS3Pt5rPe1y.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-05 13:18:06 UTC", "last_seen": "2026-03-05 13:18:06 UTC", "sightings": 1 }, { "indicator": "http://neronpidaras.it.com/main_mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 13:13:24 UTC", "last_seen": "2026-03-05 13:13:24 UTC", "sightings": 1 }, { "indicator": "http://www.neronpidaras.it.com/main_mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 13:13:21 UTC", "last_seen": "2026-03-05 13:13:21 UTC", "sightings": 1 }, { "indicator": "http://2.56.10.144/bins.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai", "sh", "ua-wget" ], "first_seen": "2026-03-05 13:13:18 UTC", "last_seen": "2026-03-05 13:13:18 UTC", "sightings": 1 }, { "indicator": "http://www.neronpidaras.it.com/main_arm", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 13:13:18 UTC", "last_seen": "2026-03-05 13:13:18 UTC", "sightings": 1 }, { "indicator": "http://www.neronpidaras.it.com/main_arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 13:13:18 UTC", "last_seen": "2026-03-05 13:13:18 UTC", "sightings": 1 }, { "indicator": "http://neronpidaras.it.com/main_m68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 13:13:16 UTC", "last_seen": "2026-03-05 13:13:16 UTC", "sightings": 1 }, { "indicator": "http://www.neronpidaras.it.com/main_m68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 13:13:16 UTC", "last_seen": "2026-03-05 13:13:16 UTC", "sightings": 1 }, { "indicator": "http://neronpidaras.it.com/bins.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "sh", "ua-wget" ], "first_seen": "2026-03-05 13:13:15 UTC", "last_seen": "2026-03-05 13:13:15 UTC", "sightings": 1 }, { "indicator": "http://www.neronpidaras.it.com/bins.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "sh", "ua-wget" ], "first_seen": "2026-03-05 13:13:15 UTC", "last_seen": "2026-03-05 13:13:15 UTC", "sightings": 1 }, { "indicator": "http://neronpidaras.it.com/main_arm", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 13:13:13 UTC", "last_seen": "2026-03-05 13:13:13 UTC", "sightings": 1 }, { "indicator": "http://www.neronpidaras.it.com/main_mpsl", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 13:12:23 UTC", "last_seen": "2026-03-05 13:12:23 UTC", "sightings": 1 }, { "indicator": "http://neronpidaras.it.com/main_x86_64", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 13:12:20 UTC", "last_seen": "2026-03-05 13:12:20 UTC", "sightings": 1 }, { "indicator": "http://neronpidaras.it.com/main_arm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 13:12:20 UTC", "last_seen": "2026-03-05 13:12:20 UTC", "sightings": 1 }, { "indicator": "http://www.neronpidaras.it.com/main_x86_64", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 13:12:20 UTC", "last_seen": "2026-03-05 13:12:20 UTC", "sightings": 1 }, { "indicator": "http://neronpidaras.it.com/main_sh4", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 13:12:20 UTC", "last_seen": "2026-03-05 13:12:20 UTC", "sightings": 1 }, { "indicator": "http://www.neronpidaras.it.com/main_arm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 13:12:15 UTC", "last_seen": "2026-03-05 13:12:15 UTC", "sightings": 1 }, { "indicator": "http://neronpidaras.it.com/main_x86", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 13:12:15 UTC", "last_seen": "2026-03-05 13:12:15 UTC", "sightings": 1 }, { "indicator": "http://www.neronpidaras.it.com/main_ppc", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 13:12:11 UTC", "last_seen": "2026-03-05 13:12:11 UTC", "sightings": 1 }, { "indicator": "http://neronpidaras.it.com/main_mpsl", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 13:12:11 UTC", "last_seen": "2026-03-05 13:12:11 UTC", "sightings": 1 }, { "indicator": "http://www.neronpidaras.it.com/main_x86", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 13:12:11 UTC", "last_seen": "2026-03-05 13:12:11 UTC", "sightings": 1 }, { "indicator": "http://www.neronpidaras.it.com/main_arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 13:12:11 UTC", "last_seen": "2026-03-05 13:12:11 UTC", "sightings": 1 }, { "indicator": "http://www.neronpidaras.it.com/main_sh4", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 13:12:11 UTC", "last_seen": "2026-03-05 13:12:11 UTC", "sightings": 1 }, { "indicator": "http://neronpidaras.it.com/main_ppc", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 13:12:11 UTC", "last_seen": "2026-03-05 13:12:11 UTC", "sightings": 1 }, { "indicator": "http://neronpidaras.it.com/main_arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 13:12:11 UTC", "last_seen": "2026-03-05 13:12:11 UTC", "sightings": 1 }, { "indicator": "http://neronpidaras.it.com/main_arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "botnetdomain", "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 13:12:11 UTC", "last_seen": "2026-03-05 13:12:11 UTC", "sightings": 1 }, { "indicator": "http://2.56.10.144/main_mpsl", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 13:11:15 UTC", "last_seen": "2026-03-05 13:11:15 UTC", "sightings": 1 }, { "indicator": "http://2.56.10.144/main_arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 13:11:15 UTC", "last_seen": "2026-03-05 13:11:15 UTC", "sightings": 1 }, { "indicator": "https://nq7w5.magnesshabas.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-05 13:11:08 UTC", "last_seen": "2026-03-05 13:11:08 UTC", "sightings": 1 }, { "indicator": "http://2.56.10.144/main_m68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 13:10:19 UTC", "last_seen": "2026-03-05 13:10:19 UTC", "sightings": 1 }, { "indicator": "http://2.56.10.144/main_x86_64", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 13:10:19 UTC", "last_seen": "2026-03-05 13:10:19 UTC", "sightings": 1 }, { "indicator": "http://2.56.10.144/main_mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 13:10:19 UTC", "last_seen": "2026-03-05 13:10:19 UTC", "sightings": 1 }, { "indicator": "http://110.37.47.9:49059/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 13:09:12 UTC", "last_seen": "2026-03-05 13:09:12 UTC", "sightings": 1 }, { "indicator": "http://115.50.99.172:46151/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 12:58:17 UTC", "last_seen": "2026-03-05 12:58:17 UTC", "sightings": 1 }, { "indicator": "http://61.53.82.131:47436/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 12:58:07 UTC", "last_seen": "2026-03-05 12:58:07 UTC", "sightings": 1 }, { "indicator": "http://61.53.82.131:47436/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 12:56:18 UTC", "last_seen": "2026-03-05 12:56:18 UTC", "sightings": 1 }, { "indicator": "http://115.51.34.167:57346/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 12:56:11 UTC", "last_seen": "2026-03-05 12:56:11 UTC", "sightings": 1 }, { "indicator": "https://pasteur0-lab.alaspasteur.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-05 12:56:07 UTC", "last_seen": "2026-03-05 12:56:07 UTC", "sightings": 1 }, { "indicator": "http://115.51.34.167:57346/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 12:51:25 UTC", "last_seen": "2026-03-05 12:51:25 UTC", "sightings": 1 }, { "indicator": "https://labculture.alaspasteur.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-05 12:50:08 UTC", "last_seen": "2026-03-05 12:50:08 UTC", "sightings": 1 }, { "indicator": "http://222.140.161.114:51200/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 12:43:11 UTC", "last_seen": "2026-03-05 12:43:11 UTC", "sightings": 1 }, { "indicator": "http://110.37.47.9:49059/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 12:43:10 UTC", "last_seen": "2026-03-05 12:43:10 UTC", "sightings": 1 }, { "indicator": "https://45.59.113.84/a.php", "indicator_type": "url", "source": "URLhaus", "tags": [ "zip" ], "first_seen": "2026-03-05 12:39:06 UTC", "last_seen": "2026-03-05 12:39:06 UTC", "sightings": 1 }, { "indicator": "http://59.88.14.115:48638/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 12:36:11 UTC", "last_seen": "2026-03-05 12:36:11 UTC", "sightings": 1 }, { "indicator": "http://222.139.47.111:40448/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 12:33:22 UTC", "last_seen": "2026-03-05 12:33:22 UTC", "sightings": 1 }, { "indicator": "https://w9m2kx.alaspasteur.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-05 12:32:08 UTC", "last_seen": "2026-03-05 12:32:08 UTC", "sightings": 1 }, { "indicator": "http://42.230.213.188:56883/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 12:30:13 UTC", "last_seen": "2026-03-05 12:30:13 UTC", "sightings": 1 }, { "indicator": "http://117.211.152.14:52210/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 12:30:09 UTC", "last_seen": "2026-03-05 12:30:09 UTC", "sightings": 1 }, { "indicator": "http://130.12.180.43/files/6962575668/1S3cMox.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "AgentTesla", "dropped-by-amadey", "fbf543" ], "first_seen": "2026-03-05 12:30:09 UTC", "last_seen": "2026-03-05 12:30:09 UTC", "sightings": 1 }, { "indicator": "http://182.119.6.60:56230/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 12:29:10 UTC", "last_seen": "2026-03-05 12:29:10 UTC", "sightings": 1 }, { "indicator": "http://117.211.152.14:52210/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 12:27:25 UTC", "last_seen": "2026-03-05 12:27:25 UTC", "sightings": 1 }, { "indicator": "http://182.119.6.60:56230/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 12:22:21 UTC", "last_seen": "2026-03-05 12:22:21 UTC", "sightings": 1 }, { "indicator": "http://220.202.89.116:46235/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 12:21:16 UTC", "last_seen": "2026-03-05 12:21:16 UTC", "sightings": 1 }, { "indicator": "http://182.52.72.221:58284/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-05 12:21:16 UTC", "last_seen": "2026-03-05 12:21:16 UTC", "sightings": 1 }, { "indicator": "http://222.140.161.114:51200/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 12:19:19 UTC", "last_seen": "2026-03-05 12:19:19 UTC", "sightings": 1 }, { "indicator": "https://gl4ss-hollow.sheetglass.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-05 12:17:06 UTC", "last_seen": "2026-03-05 12:17:06 UTC", "sightings": 1 }, { "indicator": "http://94.154.32.153/5r3fqt67ew531has4231.ppc", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai", "opendir" ], "first_seen": "2026-03-05 12:15:07 UTC", "last_seen": "2026-03-05 12:15:07 UTC", "sightings": 1 }, { "indicator": "http://94.154.32.153/5r3fqt67ew531has4231.spc", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai", "opendir" ], "first_seen": "2026-03-05 12:15:07 UTC", "last_seen": "2026-03-05 12:15:07 UTC", "sightings": 1 }, { "indicator": "https://www.metrosuitesbellavie.com/crewe/cjo/yte/MsTeams.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "TrustConnect" ], "first_seen": "2026-03-05 12:14:21 UTC", "last_seen": "2026-03-05 12:14:21 UTC", "sightings": 1 }, { "indicator": "https://dla.zhuayoukong.com/oldapk/all/zhuayoukong/btgame/2511.apk", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-05 12:14:13 UTC", "last_seen": "2026-03-05 12:14:13 UTC", "sightings": 1 }, { "indicator": "https://tktkprivate-uz.sbs/TikTok18.apk", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-05 12:14:13 UTC", "last_seen": "2026-03-05 12:14:13 UTC", "sightings": 1 }, { "indicator": "https://185.161.251.58/navy.7z", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-05 12:14:12 UTC", "last_seen": "2026-03-05 12:14:12 UTC", "sightings": 1 }, { "indicator": "http://94.154.32.153/5r3fqt67ew531has4231.mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai", "opendir" ], "first_seen": "2026-03-05 12:14:10 UTC", "last_seen": "2026-03-05 12:14:10 UTC", "sightings": 1 }, { "indicator": "http://79.110.49.146:8000/chisel", "indicator_type": "url", "source": "URLhaus", "tags": [ "opendir" ], "first_seen": "2026-03-05 12:14:10 UTC", "last_seen": "2026-03-05 12:14:10 UTC", "sightings": 1 }, { "indicator": "http://182.113.6.97:40498/Mozi.m", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-05 12:14:09 UTC", "last_seen": "2026-03-05 12:14:09 UTC", "sightings": 1 }, { "indicator": "http://110.37.0.37:37376/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-05 12:14:09 UTC", "last_seen": "2026-03-05 12:14:09 UTC", "sightings": 1 }, { "indicator": "https://doyu.digital/us05Zoom4JqpH8/Windows/download.php", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-05 12:14:09 UTC", "last_seen": "2026-03-05 12:14:09 UTC", "sightings": 1 }, { "indicator": "https://fruitsland.it/torinconstruction/mcasset3.svg", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-05 12:14:09 UTC", "last_seen": "2026-03-05 12:14:09 UTC", "sightings": 1 }, { "indicator": "http://94.154.32.153/5r3fqt67ew531has4231.sh4", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai", "opendir" ], "first_seen": "2026-03-05 12:14:09 UTC", "last_seen": "2026-03-05 12:14:09 UTC", "sightings": 1 }, { "indicator": "http://94.154.32.153/5r3fqt67ew531has4231.arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai", "opendir" ], "first_seen": "2026-03-05 12:14:09 UTC", "last_seen": "2026-03-05 12:14:09 UTC", "sightings": 1 }, { "indicator": "http://94.154.32.153/5r3fqt67ew531has4231.m68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai", "opendir" ], "first_seen": "2026-03-05 12:14:09 UTC", "last_seen": "2026-03-05 12:14:09 UTC", "sightings": 1 }, { "indicator": "http://94.154.32.153/5r3fqt67ew531has4231.mpsl", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai", "opendir" ], "first_seen": "2026-03-05 12:14:09 UTC", "last_seen": "2026-03-05 12:14:09 UTC", "sightings": 1 }, { "indicator": "http://94.154.32.153/5r3fqt67ew531has4231.arm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai", "opendir" ], "first_seen": "2026-03-05 12:14:09 UTC", "last_seen": "2026-03-05 12:14:09 UTC", "sightings": 1 }, { "indicator": "http://94.154.32.153/5r3fqt67ew531has4231.arm", "indicator_type": "url", "source": "URLhaus", "tags": [ "gafgyt", "opendir" ], "first_seen": "2026-03-05 12:14:09 UTC", "last_seen": "2026-03-05 12:14:09 UTC", "sightings": 1 }, { "indicator": "http://94.154.32.153/5r3fqt67ew531has4231.x86", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai", "opendir" ], "first_seen": "2026-03-05 12:14:09 UTC", "last_seen": "2026-03-05 12:14:09 UTC", "sightings": 1 }, { "indicator": "http://94.154.32.153/5r3fqt67ew531has4231.arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "gafgyt", "opendir" ], "first_seen": "2026-03-05 12:14:09 UTC", "last_seen": "2026-03-05 12:14:09 UTC", "sightings": 1 }, { "indicator": "https://paidinvoicefilesprojectnml.vercel.app/T4-Form9886750012046681.vbs", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-05 12:14:08 UTC", "last_seen": "2026-03-05 12:14:08 UTC", "sightings": 1 }, { "indicator": "http://79.110.49.146:8000/9242_exploit.py", "indicator_type": "url", "source": "URLhaus", "tags": [ "opendir" ], "first_seen": "2026-03-05 12:14:07 UTC", "last_seen": "2026-03-05 12:14:07 UTC", "sightings": 1 }, { "indicator": "https://store-na-phx-3.gofile.io/download/direct/f8f88a3d-e4e4-4936-8ef0-2ab40c8223b8/Zoom.setup.scr", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-05 12:14:07 UTC", "last_seen": "2026-03-05 12:14:07 UTC", "sightings": 1 }, { "indicator": "http://79.110.49.146:8000/14733_exploit.py", "indicator_type": "url", "source": "URLhaus", "tags": [ "opendir" ], "first_seen": "2026-03-05 12:14:06 UTC", "last_seen": "2026-03-05 12:14:06 UTC", "sightings": 1 }, { "indicator": "http://79.110.49.146:8000/CVE-2026-24423.py", "indicator_type": "url", "source": "URLhaus", "tags": [ "opendir" ], "first_seen": "2026-03-05 12:14:06 UTC", "last_seen": "2026-03-05 12:14:06 UTC", "sightings": 1 }, { "indicator": "http://79.110.49.146:8000/CVE-2026-21902.py", "indicator_type": "url", "source": "URLhaus", "tags": [ "opendir" ], "first_seen": "2026-03-05 12:14:06 UTC", "last_seen": "2026-03-05 12:14:06 UTC", "sightings": 1 }, { "indicator": "http://79.110.49.146:8000/CVE-2025-40554.py", "indicator_type": "url", "source": "URLhaus", "tags": [ "opendir" ], "first_seen": "2026-03-05 12:14:06 UTC", "last_seen": "2026-03-05 12:14:06 UTC", "sightings": 1 }, { "indicator": "http://79.110.49.146:8000/CVE-2025-60021.py", "indicator_type": "url", "source": "URLhaus", "tags": [ "opendir" ], "first_seen": "2026-03-05 12:14:06 UTC", "last_seen": "2026-03-05 12:14:06 UTC", "sightings": 1 }, { "indicator": "http://63.176.144.33/sliver-client_linux", "indicator_type": "url", "source": "URLhaus", "tags": [ "opendir" ], "first_seen": "2026-03-05 12:14:06 UTC", "last_seen": "2026-03-05 12:14:06 UTC", "sightings": 1 }, { "indicator": "http://79.110.49.146:8000/CVE-2026-24061.py", "indicator_type": "url", "source": "URLhaus", "tags": [ "opendir" ], "first_seen": "2026-03-05 12:14:05 UTC", "last_seen": "2026-03-05 12:14:05 UTC", "sightings": 1 }, { "indicator": "http://79.110.49.146:8000/9242_exploit1.py", "indicator_type": "url", "source": "URLhaus", "tags": [ "opendir" ], "first_seen": "2026-03-05 12:14:05 UTC", "last_seen": "2026-03-05 12:14:05 UTC", "sightings": 1 }, { "indicator": "http://112.254.185.20:60428/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 12:12:43 UTC", "last_seen": "2026-03-05 12:12:43 UTC", "sightings": 1 }, { "indicator": "http://182.52.72.221:58284/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-05 12:11:16 UTC", "last_seen": "2026-03-05 12:11:16 UTC", "sightings": 1 }, { "indicator": "http://59.88.14.115:48638/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 12:10:20 UTC", "last_seen": "2026-03-05 12:10:20 UTC", "sightings": 1 }, { "indicator": "http://182.112.28.57:50917/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 12:06:16 UTC", "last_seen": "2026-03-05 12:06:16 UTC", "sightings": 1 }, { "indicator": "http://117.196.161.175:56314/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 12:03:15 UTC", "last_seen": "2026-03-05 12:03:15 UTC", "sightings": 1 }, { "indicator": "http://182.126.121.10:54450/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 11:56:15 UTC", "last_seen": "2026-03-05 11:56:15 UTC", "sightings": 1 }, { "indicator": "http://110.37.114.13:59543/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 11:56:15 UTC", "last_seen": "2026-03-05 11:56:15 UTC", "sightings": 1 }, { "indicator": "http://125.42.233.130:44433/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 11:55:10 UTC", "last_seen": "2026-03-05 11:55:10 UTC", "sightings": 1 }, { "indicator": "https://fgwfa66x.isconizloty.digital/?=check&&actmn=YsIirxMWRWHoIxnP", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-05 11:52:09 UTC", "last_seen": "2026-03-05 11:52:09 UTC", "sightings": 1 }, { "indicator": "https://clearpane.sheetglass.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-05 11:50:09 UTC", "last_seen": "2026-03-05 11:50:09 UTC", "sightings": 1 }, { "indicator": "http://119.179.251.2:40520/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 11:48:12 UTC", "last_seen": "2026-03-05 11:48:12 UTC", "sightings": 1 }, { "indicator": "http://110.37.91.29:39865/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 11:46:12 UTC", "last_seen": "2026-03-05 11:46:12 UTC", "sightings": 1 }, { "indicator": "http://61.53.107.197:52739/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 11:44:10 UTC", "last_seen": "2026-03-05 11:44:10 UTC", "sightings": 1 }, { "indicator": "https://t8qzr.sheetglass.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-05 11:42:07 UTC", "last_seen": "2026-03-05 11:42:07 UTC", "sightings": 1 }, { "indicator": "http://110.37.114.13:59543/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 11:38:19 UTC", "last_seen": "2026-03-05 11:38:19 UTC", "sightings": 1 }, { "indicator": "http://42.177.96.103:48348/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 11:29:20 UTC", "last_seen": "2026-03-05 11:29:20 UTC", "sightings": 1 }, { "indicator": "https://vityaz1-edge.bulgarvityaz.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-05 11:26:13 UTC", "last_seen": "2026-03-05 11:26:13 UTC", "sightings": 1 }, { "indicator": "http://119.179.251.2:40520/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 11:19:26 UTC", "last_seen": "2026-03-05 11:19:26 UTC", "sightings": 1 }, { "indicator": "https://ironknight.bulgarvityaz.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-05 11:13:07 UTC", "last_seen": "2026-03-05 11:13:07 UTC", "sightings": 1 }, { "indicator": "http://125.43.126.42:58002/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 10:58:18 UTC", "last_seen": "2026-03-05 10:58:18 UTC", "sightings": 1 }, { "indicator": "http://42.177.96.103:48348/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 10:56:11 UTC", "last_seen": "2026-03-05 10:56:11 UTC", "sightings": 1 }, { "indicator": "http://110.37.70.244:42741/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-05 10:55:21 UTC", "last_seen": "2026-03-05 10:55:21 UTC", "sightings": 1 }, { "indicator": "http://115.48.161.30:34431/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 10:53:18 UTC", "last_seen": "2026-03-05 10:53:18 UTC", "sightings": 1 }, { "indicator": "http://125.40.75.125:41067/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 10:52:19 UTC", "last_seen": "2026-03-05 10:52:19 UTC", "sightings": 1 }, { "indicator": "https://k5ia90w1.beleananniver.digital/?=check&&actmn=iPefvqgZcMLjxxoZ", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-05 10:51:08 UTC", "last_seen": "2026-03-05 10:51:08 UTC", "sightings": 1 }, { "indicator": "http://110.37.111.178:46792/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-05 10:50:18 UTC", "last_seen": "2026-03-05 10:50:18 UTC", "sightings": 1 }, { "indicator": "https://qz3x8v.bulgarvityaz.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-05 10:47:08 UTC", "last_seen": "2026-03-05 10:47:08 UTC", "sightings": 1 }, { "indicator": "http://110.37.120.234:56878/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-05 10:45:23 UTC", "last_seen": "2026-03-05 10:45:23 UTC", "sightings": 1 }, { "indicator": "http://110.37.127.205:43322/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 10:37:09 UTC", "last_seen": "2026-03-05 10:37:09 UTC", "sightings": 1 }, { "indicator": "http://158.94.211.85/arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 10:30:22 UTC", "last_seen": "2026-03-05 10:30:22 UTC", "sightings": 1 }, { "indicator": "http://158.94.211.85/arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 10:30:22 UTC", "last_seen": "2026-03-05 10:30:22 UTC", "sightings": 1 }, { "indicator": "http://158.94.211.85/arm", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 10:30:22 UTC", "last_seen": "2026-03-05 10:30:22 UTC", "sightings": 1 }, { "indicator": "http://130.12.180.78/bins/sh4", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 10:30:21 UTC", "last_seen": "2026-03-05 10:30:21 UTC", "sightings": 1 }, { "indicator": "http://130.12.180.78/bins/arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 10:30:21 UTC", "last_seen": "2026-03-05 10:30:21 UTC", "sightings": 1 }, { "indicator": "http://130.12.180.78/bins/m68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 10:30:21 UTC", "last_seen": "2026-03-05 10:30:21 UTC", "sightings": 1 }, { "indicator": "http://130.12.180.78/bins/x86", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 10:30:21 UTC", "last_seen": "2026-03-05 10:30:21 UTC", "sightings": 1 }, { "indicator": "http://130.12.180.78/bins/mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 10:30:21 UTC", "last_seen": "2026-03-05 10:30:21 UTC", "sightings": 1 }, { "indicator": "http://130.12.180.78/bins/ppc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 10:30:21 UTC", "last_seen": "2026-03-05 10:30:21 UTC", "sightings": 1 }, { "indicator": "http://130.12.180.78/bins/arm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 10:30:21 UTC", "last_seen": "2026-03-05 10:30:21 UTC", "sightings": 1 }, { "indicator": "http://2.56.10.144/main_arm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 10:30:21 UTC", "last_seen": "2026-03-05 10:30:21 UTC", "sightings": 1 }, { "indicator": "http://2.56.10.144/main_arm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 10:30:21 UTC", "last_seen": "2026-03-05 10:30:21 UTC", "sightings": 1 }, { "indicator": "http://2.56.10.144/main_arm", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 10:30:21 UTC", "last_seen": "2026-03-05 10:30:21 UTC", "sightings": 1 }, { "indicator": "http://2.56.10.144/main_ppc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 10:30:21 UTC", "last_seen": "2026-03-05 10:30:21 UTC", "sightings": 1 }, { "indicator": "http://2.56.10.144/main_sh4", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 10:30:21 UTC", "last_seen": "2026-03-05 10:30:21 UTC", "sightings": 1 }, { "indicator": "http://2.56.10.144/main_x86", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 10:30:21 UTC", "last_seen": "2026-03-05 10:30:21 UTC", "sightings": 1 }, { "indicator": "http://158.94.211.85/x86_64", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "gafgyt", "mirai", "ua-wget" ], "first_seen": "2026-03-05 10:30:21 UTC", "last_seen": "2026-03-05 10:30:21 UTC", "sightings": 1 }, { "indicator": "http://158.94.211.85/mipsel", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "gafgyt", "ua-wget" ], "first_seen": "2026-03-05 10:30:21 UTC", "last_seen": "2026-03-05 10:30:21 UTC", "sightings": 1 }, { "indicator": "http://158.94.211.85/mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 10:30:21 UTC", "last_seen": "2026-03-05 10:30:21 UTC", "sightings": 1 }, { "indicator": "http://115.48.161.30:34431/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 10:29:11 UTC", "last_seen": "2026-03-05 10:29:11 UTC", "sightings": 1 }, { "indicator": "http://125.43.126.42:58002/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 10:26:23 UTC", "last_seen": "2026-03-05 10:26:23 UTC", "sightings": 1 }, { "indicator": "http://125.40.75.125:41067/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 10:26:22 UTC", "last_seen": "2026-03-05 10:26:22 UTC", "sightings": 1 }, { "indicator": "https://ecuad0r-mesh.ecuadoriangas.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-05 10:24:06 UTC", "last_seen": "2026-03-05 10:24:06 UTC", "sightings": 1 }, { "indicator": "http://110.37.70.244:42741/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-05 10:21:19 UTC", "last_seen": "2026-03-05 10:21:19 UTC", "sightings": 1 }, { "indicator": "http://110.37.120.234:56878/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-05 10:19:18 UTC", "last_seen": "2026-03-05 10:19:18 UTC", "sightings": 1 }, { "indicator": "http://130.12.180.43/files/6608710704/1r6sQRc.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey", "Vidar" ], "first_seen": "2026-03-05 10:19:06 UTC", "last_seen": "2026-03-05 10:19:06 UTC", "sightings": 1 }, { "indicator": "http://182.124.45.95:37349/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 10:10:09 UTC", "last_seen": "2026-03-05 10:10:09 UTC", "sightings": 1 }, { "indicator": "http://185.132.53.29/a-r.m-7.Sakura", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-05 10:07:23 UTC", "last_seen": "2026-03-05 10:07:23 UTC", "sightings": 1 }, { "indicator": "http://185.132.53.29/m-6.8-k.Sakura", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-05 10:07:22 UTC", "last_seen": "2026-03-05 10:07:22 UTC", "sightings": 1 }, { "indicator": "http://185.132.53.29/i-5.8-6.Sakura", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-05 10:07:22 UTC", "last_seen": "2026-03-05 10:07:22 UTC", "sightings": 1 }, { "indicator": "http://185.132.53.29/a-r.m-5.Sakura", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-05 10:07:22 UTC", "last_seen": "2026-03-05 10:07:22 UTC", "sightings": 1 }, { "indicator": "http://185.132.53.29/m-i.p-s.Sakura", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-05 10:07:22 UTC", "last_seen": "2026-03-05 10:07:22 UTC", "sightings": 1 }, { "indicator": "http://185.132.53.29/s-h.4-.Sakura", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-05 10:07:22 UTC", "last_seen": "2026-03-05 10:07:22 UTC", "sightings": 1 }, { "indicator": "http://185.132.53.29/a-r.m-6.Sakura", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-05 10:07:22 UTC", "last_seen": "2026-03-05 10:07:22 UTC", "sightings": 1 }, { "indicator": "http://185.132.53.29/x-8.6-.Sakura", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-05 10:07:22 UTC", "last_seen": "2026-03-05 10:07:22 UTC", "sightings": 1 }, { "indicator": "http://87.121.84.11/main_spc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-05 10:07:21 UTC", "last_seen": "2026-03-05 10:07:21 UTC", "sightings": 1 }, { "indicator": "http://87.121.84.11/main_mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-05 10:07:21 UTC", "last_seen": "2026-03-05 10:07:21 UTC", "sightings": 1 }, { "indicator": "http://185.132.53.29/a-r.m-4.Sakura", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-05 10:07:21 UTC", "last_seen": "2026-03-05 10:07:21 UTC", "sightings": 1 }, { "indicator": "http://185.132.53.29/m-p.s-l.Sakura", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-05 10:07:21 UTC", "last_seen": "2026-03-05 10:07:21 UTC", "sightings": 1 }, { "indicator": "http://185.132.53.29/p-p.c-.Sakura", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-05 10:07:21 UTC", "last_seen": "2026-03-05 10:07:21 UTC", "sightings": 1 }, { "indicator": "http://185.132.53.29/x-3.2-.Sakura", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-05 10:07:21 UTC", "last_seen": "2026-03-05 10:07:21 UTC", "sightings": 1 }, { "indicator": "http://115.55.63.226:56564/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 10:05:19 UTC", "last_seen": "2026-03-05 10:05:19 UTC", "sightings": 1 }, { "indicator": "http://117.209.26.193:36632/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 09:58:07 UTC", "last_seen": "2026-03-05 09:58:07 UTC", "sightings": 1 }, { "indicator": "http://125.45.58.213:51836/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 09:58:07 UTC", "last_seen": "2026-03-05 09:58:07 UTC", "sightings": 1 }, { "indicator": "https://andesfuel.ecuadoriangas.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-05 09:56:07 UTC", "last_seen": "2026-03-05 09:56:07 UTC", "sightings": 1 }, { "indicator": "http://182.124.45.95:37349/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 09:54:13 UTC", "last_seen": "2026-03-05 09:54:13 UTC", "sightings": 1 }, { "indicator": "http://222.138.176.159:43049/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 09:52:26 UTC", "last_seen": "2026-03-05 09:52:26 UTC", "sightings": 1 }, { "indicator": "http://115.55.63.226:56564/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 09:51:26 UTC", "last_seen": "2026-03-05 09:51:26 UTC", "sightings": 1 }, { "indicator": "http://182.127.124.145:37727/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 09:48:17 UTC", "last_seen": "2026-03-05 09:48:17 UTC", "sightings": 1 }, { "indicator": "http://42.57.244.48:33898/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 09:47:18 UTC", "last_seen": "2026-03-05 09:47:18 UTC", "sightings": 1 }, { "indicator": "https://shahamanatme.com/web/ENCRYPT.Ps1", "indicator_type": "url", "source": "URLhaus", "tags": [ "ascii", "PhantomStealer", "powershell", "ps1" ], "first_seen": "2026-03-05 09:40:09 UTC", "last_seen": "2026-03-05 09:40:09 UTC", "sightings": 1 }, { "indicator": "https://activegroup-bd.com/arquivo_20260304121125.txt", "indicator_type": "url", "source": "URLhaus", "tags": [ "ascii", "VIPKeylogger" ], "first_seen": "2026-03-05 09:38:07 UTC", "last_seen": "2026-03-05 09:38:07 UTC", "sightings": 1 }, { "indicator": "https://drive.google.com/uc?export=download&id=1-StTWmIC9YRVk9lpbjtwck6REjrJL3_2", "indicator_type": "url", "source": "URLhaus", "tags": [ "encrypted", "GuLoader", "VIPKeylogger" ], "first_seen": "2026-03-05 09:37:09 UTC", "last_seen": "2026-03-05 09:37:09 UTC", "sightings": 1 }, { "indicator": "https://drive.google.com/uc?export=download&id=1MVtjihhR_cTb-IbzfwYaDaair2TJO5tq", "indicator_type": "url", "source": "URLhaus", "tags": [ "ascii", "Encoded", "GuLoader", "VIPKeylogger" ], "first_seen": "2026-03-05 09:37:07 UTC", "last_seen": "2026-03-05 09:37:07 UTC", "sightings": 1 }, { "indicator": "http://219.155.200.107:60370/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 09:24:28 UTC", "last_seen": "2026-03-05 09:24:28 UTC", "sightings": 1 }, { "indicator": "http://45.155.69.85/1.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey", "Vidar" ], "first_seen": "2026-03-05 09:22:49 UTC", "last_seen": "2026-03-05 09:22:49 UTC", "sightings": 1 }, { "indicator": "http://117.209.26.193:36632/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 09:18:48 UTC", "last_seen": "2026-03-05 09:18:48 UTC", "sightings": 1 }, { "indicator": "http://61.53.127.34:45959/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 09:15:20 UTC", "last_seen": "2026-03-05 09:15:20 UTC", "sightings": 1 }, { "indicator": "https://rabbit-net.rabbitfarm.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-05 09:15:18 UTC", "last_seen": "2026-03-05 09:15:18 UTC", "sightings": 1 }, { "indicator": "http://175.175.205.156:50556/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 09:04:23 UTC", "last_seen": "2026-03-05 09:04:23 UTC", "sightings": 1 }, { "indicator": "http://120.238.189.72:56608/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-05 09:03:37 UTC", "last_seen": "2026-03-05 09:03:37 UTC", "sightings": 1 }, { "indicator": "https://farm03.rabbitfarm.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-05 09:03:10 UTC", "last_seen": "2026-03-05 09:03:10 UTC", "sightings": 1 }, { "indicator": "https://amrlb0h2.backorbit.digital/?=check&&actmn=UQXwpeSWkFzQYNmO", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-05 09:02:08 UTC", "last_seen": "2026-03-05 09:02:08 UTC", "sightings": 1 }, { "indicator": "http://123.5.184.169:57615/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 08:58:22 UTC", "last_seen": "2026-03-05 08:58:22 UTC", "sightings": 1 }, { "indicator": "http://130.12.180.43/files/7411337060/ZCGm9Ky.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "dropped-by-amadey", "fbf543", "Vidar" ], "first_seen": "2026-03-05 08:55:08 UTC", "last_seen": "2026-03-05 08:55:08 UTC", "sightings": 1 }, { "indicator": "http://110.39.235.153:59081/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 08:49:22 UTC", "last_seen": "2026-03-05 08:49:22 UTC", "sightings": 1 }, { "indicator": "http://125.43.228.185:33594/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 08:49:21 UTC", "last_seen": "2026-03-05 08:49:21 UTC", "sightings": 1 }, { "indicator": "https://rabbit-v1.rabbitfarm.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-05 08:48:08 UTC", "last_seen": "2026-03-05 08:48:08 UTC", "sightings": 1 }, { "indicator": "https://cjzsujzp.expresslabina.digital/?=check&&actmn=CWziWKlbxeTIewLI", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-05 08:47:08 UTC", "last_seen": "2026-03-05 08:47:08 UTC", "sightings": 1 }, { "indicator": "http://182.117.78.108:46702/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 08:44:23 UTC", "last_seen": "2026-03-05 08:44:23 UTC", "sightings": 1 }, { "indicator": "http://115.61.50.185:35406/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 08:43:22 UTC", "last_seen": "2026-03-05 08:43:22 UTC", "sightings": 1 }, { "indicator": "https://f2kpaub7.bullymarvel.digital/?=check&&actmn=DFDpitryOnQsppuL", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-05 08:43:07 UTC", "last_seen": "2026-03-05 08:43:07 UTC", "sightings": 1 }, { "indicator": "http://120.238.189.72:56608/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-05 08:40:23 UTC", "last_seen": "2026-03-05 08:40:23 UTC", "sightings": 1 }, { "indicator": "http://27.207.142.101:40227/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 08:39:17 UTC", "last_seen": "2026-03-05 08:39:17 UTC", "sightings": 1 }, { "indicator": "http://211.230.219.131:63343/.i", "indicator_type": "url", "source": "URLhaus", "tags": [ "hajime" ], "first_seen": "2026-03-05 08:38:08 UTC", "last_seen": "2026-03-05 08:38:08 UTC", "sightings": 1 }, { "indicator": "http://182.117.78.108:46702/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 08:26:24 UTC", "last_seen": "2026-03-05 08:26:24 UTC", "sightings": 1 }, { "indicator": "http://125.43.228.185:33594/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 08:26:24 UTC", "last_seen": "2026-03-05 08:26:24 UTC", "sightings": 1 }, { "indicator": "http://110.39.235.153:59081/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 08:26:23 UTC", "last_seen": "2026-03-05 08:26:23 UTC", "sightings": 1 }, { "indicator": "http://96.44.159.145/25/img_221038.png", "indicator_type": "url", "source": "URLhaus", "tags": [ "rat", "RemcosRAT" ], "first_seen": "2026-03-05 08:26:11 UTC", "last_seen": "2026-03-05 08:26:11 UTC", "sightings": 1 }, { "indicator": "http://89.185.84.13:19347/1/axhtymsbrkiems935.css", "indicator_type": "url", "source": "URLhaus", "tags": [ "ascii", "Encoded", "GuLoader", "rat", "RemcosRAT" ], "first_seen": "2026-03-05 08:26:07 UTC", "last_seen": "2026-03-05 08:26:07 UTC", "sightings": 1 }, { "indicator": "http://89.185.84.13:19347/1/brkiemshaeetwja612.bin", "indicator_type": "url", "source": "URLhaus", "tags": [ "encrypted", "GuLoader", "rat", "RemcosRAT" ], "first_seen": "2026-03-05 08:26:07 UTC", "last_seen": "2026-03-05 08:26:07 UTC", "sightings": 1 }, { "indicator": "https://activegroup-bd.com/MSI_204850.png", "indicator_type": "url", "source": "URLhaus", "tags": [ "VIPKeylogger" ], "first_seen": "2026-03-05 08:25:55 UTC", "last_seen": "2026-03-05 08:25:55 UTC", "sightings": 1 }, { "indicator": "https://activegroup-bd.com/arquivo_20260304151711.txt", "indicator_type": "url", "source": "URLhaus", "tags": [ "VIPKeylogger" ], "first_seen": "2026-03-05 08:22:09 UTC", "last_seen": "2026-03-05 08:22:09 UTC", "sightings": 1 }, { "indicator": "https://activegroup-bd.com/img_143846.png", "indicator_type": "url", "source": "URLhaus", "tags": [ "VIPKeylogger" ], "first_seen": "2026-03-05 08:22:09 UTC", "last_seen": "2026-03-05 08:22:09 UTC", "sightings": 1 }, { "indicator": "https://activegroup-bd.com/arquivo_20260304143946.txt", "indicator_type": "url", "source": "URLhaus", "tags": [ "ascii", "Encoded", "VIPKeylogger" ], "first_seen": "2026-03-05 08:22:09 UTC", "last_seen": "2026-03-05 08:22:09 UTC", "sightings": 1 }, { "indicator": "https://madcows.co.nz/iFIT217122/ENCRYPT.Ps1", "indicator_type": "url", "source": "URLhaus", "tags": [ "ascii", "powershell", "ps1", "VIPKeylogger" ], "first_seen": "2026-03-05 08:21:11 UTC", "last_seen": "2026-03-05 08:21:11 UTC", "sightings": 1 }, { "indicator": "http://fil.ydns.eu/oikiokjh/oikiomr.txt", "indicator_type": "url", "source": "URLhaus", "tags": [ "ascii", "Encoded", "Loki", "rev-base64-loader" ], "first_seen": "2026-03-05 08:20:10 UTC", "last_seen": "2026-03-05 08:20:10 UTC", "sightings": 1 }, { "indicator": "http://110.36.86.0:37479/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 08:19:21 UTC", "last_seen": "2026-03-05 08:19:21 UTC", "sightings": 1 }, { "indicator": "https://farm-run.rabbitfarm.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-05 08:19:09 UTC", "last_seen": "2026-03-05 08:19:09 UTC", "sightings": 1 }, { "indicator": "https://three.s3.cubbit.eu/oriv1.7.2.0-venry-1upload.txt", "indicator_type": "url", "source": "URLhaus", "tags": [ "AgentTesla" ], "first_seen": "2026-03-05 08:19:08 UTC", "last_seen": "2026-03-05 08:19:08 UTC", "sightings": 1 }, { "indicator": "http://115.61.50.185:35406/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 08:18:22 UTC", "last_seen": "2026-03-05 08:18:22 UTC", "sightings": 1 }, { "indicator": "https://three.s3.cubbit.eu/amb-Raw-fileupload.txt", "indicator_type": "url", "source": "URLhaus", "tags": [ "ascii", "Encoded", "xworm" ], "first_seen": "2026-03-05 08:15:10 UTC", "last_seen": "2026-03-05 08:15:10 UTC", "sightings": 1 }, { "indicator": "https://drive.google.com/uc?export=download&id=1a9cS0o6R-fdx3Wc7p04bhkuH1T99jKP0", "indicator_type": "url", "source": "URLhaus", "tags": [ "encrypted", "GuLoader", "xworm" ], "first_seen": "2026-03-05 08:14:09 UTC", "last_seen": "2026-03-05 08:14:09 UTC", "sightings": 1 }, { "indicator": "https://three.s3.cubbit.eu/Raw-file-8383upload%20(3).txt", "indicator_type": "url", "source": "URLhaus", "tags": [ "ascii", "xworm" ], "first_seen": "2026-03-05 08:14:09 UTC", "last_seen": "2026-03-05 08:14:09 UTC", "sightings": 1 }, { "indicator": "https://drive.google.com/uc?export=download&id=1fK_YmZ89HiXUmZ-d3m3nyo6eIOE_UF3c", "indicator_type": "url", "source": "URLhaus", "tags": [ "ascii", "Encoded", "GuLoader", "xworm" ], "first_seen": "2026-03-05 08:14:09 UTC", "last_seen": "2026-03-05 08:14:09 UTC", "sightings": 1 }, { "indicator": "https://files.catbox.moe/6rfdc7.js", "indicator_type": "url", "source": "URLhaus", "tags": [ "ascii", "js", "rat", "vjw0rm", "wshrat" ], "first_seen": "2026-03-05 08:13:13 UTC", "last_seen": "2026-03-05 08:13:13 UTC", "sightings": 1 }, { "indicator": "http://125.41.228.211:55504/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 08:12:21 UTC", "last_seen": "2026-03-05 08:12:21 UTC", "sightings": 1 }, { "indicator": "https://talk-sync.grimasdiscuss.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-05 07:59:08 UTC", "last_seen": "2026-03-05 07:59:08 UTC", "sightings": 1 }, { "indicator": "http://123.130.207.72:36079/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 07:51:23 UTC", "last_seen": "2026-03-05 07:51:23 UTC", "sightings": 1 }, { "indicator": "https://textbin.net/raw/rc2at8o9vg", "indicator_type": "url", "source": "URLhaus", "tags": [ "ascii" ], "first_seen": "2026-03-05 07:50:19 UTC", "last_seen": "2026-03-05 07:50:19 UTC", "sightings": 1 }, { "indicator": "https://pastefy.app/xPMqlsbt/raw?part=hold.txt", "indicator_type": "url", "source": "URLhaus", "tags": [ "ascii", "Encoded", "rat", "RemcosRAT" ], "first_seen": "2026-03-05 07:48:22 UTC", "last_seen": "2026-03-05 07:48:22 UTC", "sightings": 1 }, { "indicator": "http://110.37.65.64:37824/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 07:48:21 UTC", "last_seen": "2026-03-05 07:48:21 UTC", "sightings": 1 }, { "indicator": "https://grim06.grimasdiscuss.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-05 07:48:08 UTC", "last_seen": "2026-03-05 07:48:08 UTC", "sightings": 1 }, { "indicator": "https://yaso.su/raw/NNLwEwCU", "indicator_type": "url", "source": "URLhaus", "tags": [ "ascii", "Encoded", "rat", "RemcosRAT" ], "first_seen": "2026-03-05 07:48:08 UTC", "last_seen": "2026-03-05 07:48:08 UTC", "sightings": 1 }, { "indicator": "https://gb31welb.bullymarvel.digital/?=check&&actmn=cLOzEPAbVHbBqEom", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-05 07:45:08 UTC", "last_seen": "2026-03-05 07:45:08 UTC", "sightings": 1 }, { "indicator": "http://117.203.50.80:56556/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 07:42:18 UTC", "last_seen": "2026-03-05 07:42:18 UTC", "sightings": 1 }, { "indicator": "http://112.238.21.190:60441/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 07:41:40 UTC", "last_seen": "2026-03-05 07:41:40 UTC", "sightings": 1 }, { "indicator": "https://disc-v9.grimasdiscuss.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-05 07:39:06 UTC", "last_seen": "2026-03-05 07:39:06 UTC", "sightings": 1 }, { "indicator": "https://grim-vault.grimasdiscuss.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-05 07:32:07 UTC", "last_seen": "2026-03-05 07:32:07 UTC", "sightings": 1 }, { "indicator": "http://27.207.142.101:40227/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 07:30:14 UTC", "last_seen": "2026-03-05 07:30:14 UTC", "sightings": 1 }, { "indicator": "https://filebulldogs.com/uploads/AVQB61TVOX/document.pdf", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-05 07:25:12 UTC", "last_seen": "2026-03-05 07:25:12 UTC", "sightings": 1 }, { "indicator": "http://110.37.65.64:37824/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 07:24:13 UTC", "last_seen": "2026-03-05 07:24:13 UTC", "sightings": 1 }, { "indicator": "https://down-path.falldown.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-05 07:21:10 UTC", "last_seen": "2026-03-05 07:21:10 UTC", "sightings": 1 }, { "indicator": "http://130.12.180.69/bins/c.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai", "sh", "ua-wget" ], "first_seen": "2026-03-05 07:20:21 UTC", "last_seen": "2026-03-05 07:20:21 UTC", "sightings": 1 }, { "indicator": "http://130.12.180.69/bins/kla.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai", "sh", "ua-wget" ], "first_seen": "2026-03-05 07:20:21 UTC", "last_seen": "2026-03-05 07:20:21 UTC", "sightings": 1 }, { "indicator": "http://130.12.180.69/bins/psh4", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 07:20:21 UTC", "last_seen": "2026-03-05 07:20:21 UTC", "sightings": 1 }, { "indicator": "http://130.12.180.69/bins/w.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai", "sh", "ua-wget" ], "first_seen": "2026-03-05 07:20:21 UTC", "last_seen": "2026-03-05 07:20:21 UTC", "sightings": 1 }, { "indicator": "http://130.12.180.69/bins/pm68k", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 07:19:18 UTC", "last_seen": "2026-03-05 07:19:18 UTC", "sightings": 1 }, { "indicator": "http://130.12.180.69/bins/parm7", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 07:19:18 UTC", "last_seen": "2026-03-05 07:19:18 UTC", "sightings": 1 }, { "indicator": "http://42.86.81.41:60546/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 07:18:20 UTC", "last_seen": "2026-03-05 07:18:20 UTC", "sightings": 1 }, { "indicator": "http://110.37.90.172:44059/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 07:18:20 UTC", "last_seen": "2026-03-05 07:18:20 UTC", "sightings": 1 }, { "indicator": "http://117.203.50.80:56556/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 07:15:16 UTC", "last_seen": "2026-03-05 07:15:16 UTC", "sightings": 1 }, { "indicator": "http://83.249.209.90:59554/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 07:13:16 UTC", "last_seen": "2026-03-05 07:13:16 UTC", "sightings": 1 }, { "indicator": "http://103.56.180.45:44730/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-05 07:11:19 UTC", "last_seen": "2026-03-05 07:11:19 UTC", "sightings": 1 }, { "indicator": "https://server.ayeeman.top/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "indicator_type": "url", "source": "URLhaus", "tags": [ "connectwise", "msi", "screenconnect" ], "first_seen": "2026-03-05 07:10:14 UTC", "last_seen": "2026-03-05 07:10:14 UTC", "sightings": 1 }, { "indicator": "https://bre93qhl.bullymarvel.digital/?=check&&actmn=ZBcHaGaRXAgxcZWC", "indicator_type": "url", "source": "URLhaus", "tags": [ "ClearFake" ], "first_seen": "2026-03-05 07:10:08 UTC", "last_seen": "2026-03-05 07:10:08 UTC", "sightings": 1 }, { "indicator": "https://fall05.falldown.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-05 07:10:07 UTC", "last_seen": "2026-03-05 07:10:07 UTC", "sightings": 1 }, { "indicator": "http://185.242.3.239/74896", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-05 07:10:06 UTC", "last_seen": "2026-03-05 07:10:06 UTC", "sightings": 1 }, { "indicator": "https://down-v8.falldown.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-05 07:04:07 UTC", "last_seen": "2026-03-05 07:04:07 UTC", "sightings": 1 }, { "indicator": "http://221.15.8.186:52695/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 07:00:19 UTC", "last_seen": "2026-03-05 07:00:19 UTC", "sightings": 1 }, { "indicator": "https://fall-node.falldown.in.net/verification.google", "indicator_type": "url", "source": "URLhaus", "tags": [ "AmateraStealer", "ClearFake" ], "first_seen": "2026-03-05 07:00:12 UTC", "last_seen": "2026-03-05 07:00:12 UTC", "sightings": 1 }, { "indicator": "http://182.117.95.37:41556/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 06:56:13 UTC", "last_seen": "2026-03-05 06:56:13 UTC", "sightings": 1 }, { "indicator": "http://42.239.227.33:47025/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 06:55:19 UTC", "last_seen": "2026-03-05 06:55:19 UTC", "sightings": 1 }, { "indicator": "http://110.37.90.172:44059/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 06:49:21 UTC", "last_seen": "2026-03-05 06:49:21 UTC", "sightings": 1 }, { "indicator": "http://42.86.81.41:60546/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 06:48:24 UTC", "last_seen": "2026-03-05 06:48:24 UTC", "sightings": 1 }, { "indicator": "http://115.49.79.143:42470/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 06:46:13 UTC", "last_seen": "2026-03-05 06:46:13 UTC", "sightings": 1 }, { "indicator": "http://110.37.127.205:43322/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 06:45:14 UTC", "last_seen": "2026-03-05 06:45:14 UTC", "sightings": 1 }, { "indicator": "http://115.49.79.143:42470/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 06:44:18 UTC", "last_seen": "2026-03-05 06:44:18 UTC", "sightings": 1 }, { "indicator": "http://27.207.184.209:37431/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 06:44:18 UTC", "last_seen": "2026-03-05 06:44:18 UTC", "sightings": 1 }, { "indicator": "http://197.203.183.157:59850/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 06:40:18 UTC", "last_seen": "2026-03-05 06:40:18 UTC", "sightings": 1 }, { "indicator": "http://27.215.42.37:49158/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-05 06:39:23 UTC", "last_seen": "2026-03-05 06:39:23 UTC", "sightings": 1 }, { "indicator": "http://151.243.109.93/Sakura.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-05 06:39:22 UTC", "last_seen": "2026-03-05 06:39:22 UTC", "sightings": 1 }, { "indicator": "http://59.88.62.176:34708/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-05 06:39:22 UTC", "last_seen": "2026-03-05 06:39:22 UTC", "sightings": 1 }, { "indicator": "http://115.58.166.87:53172/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-05 06:39:22 UTC", "last_seen": "2026-03-05 06:39:22 UTC", "sightings": 1 }, { "indicator": "http://115.58.166.87:53172/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-05 06:39:22 UTC", "last_seen": "2026-03-05 06:39:22 UTC", "sightings": 1 }, { "indicator": "http://115.50.111.170:38077/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-05 06:39:21 UTC", "last_seen": "2026-03-05 06:39:21 UTC", "sightings": 1 }, { "indicator": "http://203.203.81.19:14961/.i", "indicator_type": "url", "source": "URLhaus", "tags": [ "hajime" ], "first_seen": "2026-03-05 06:39:13 UTC", "last_seen": "2026-03-05 06:39:13 UTC", "sightings": 1 }, { "indicator": "http://118.251.21.71:43472/.i", "indicator_type": "url", "source": "URLhaus", "tags": [ "hajime" ], "first_seen": "2026-03-05 06:39:11 UTC", "last_seen": "2026-03-05 06:39:11 UTC", "sightings": 1 }, { "indicator": "http://80.15.136.125:22830/.i", "indicator_type": "url", "source": "URLhaus", "tags": [ "hajime" ], "first_seen": "2026-03-05 06:39:11 UTC", "last_seen": "2026-03-05 06:39:11 UTC", "sightings": 1 }, { "indicator": "http://219.157.243.227:47496/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-05 06:39:11 UTC", "last_seen": "2026-03-05 06:39:11 UTC", "sightings": 1 }, { "indicator": "http://180.254.185.241:45195/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-05 06:39:11 UTC", "last_seen": "2026-03-05 06:39:11 UTC", "sightings": 1 }, { "indicator": "http://2.84.87.230:56018/.i", "indicator_type": "url", "source": "URLhaus", "tags": [ "hajime" ], "first_seen": "2026-03-05 06:39:11 UTC", "last_seen": "2026-03-05 06:39:11 UTC", "sightings": 1 }, { "indicator": "http://219.157.243.227:47496/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-05 06:39:11 UTC", "last_seen": "2026-03-05 06:39:11 UTC", "sightings": 1 }, { "indicator": "http://101.59.79.119:61333/.i", "indicator_type": "url", "source": "URLhaus", "tags": [ "hajime" ], "first_seen": "2026-03-05 06:39:11 UTC", "last_seen": "2026-03-05 06:39:11 UTC", "sightings": 1 }, { "indicator": "http://180.254.185.241:45195/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-05 06:39:11 UTC", "last_seen": "2026-03-05 06:39:11 UTC", "sightings": 1 }, { "indicator": "http://50.100.63.232:2769/.i", "indicator_type": "url", "source": "URLhaus", "tags": [ "hajime" ], "first_seen": "2026-03-05 06:39:10 UTC", "last_seen": "2026-03-05 06:39:10 UTC", "sightings": 1 }, { "indicator": "http://69.159.155.246:58277/.i", "indicator_type": "url", "source": "URLhaus", "tags": [ "hajime" ], "first_seen": "2026-03-05 06:39:10 UTC", "last_seen": "2026-03-05 06:39:10 UTC", "sightings": 1 }, { "indicator": "http://222.140.182.227:58373/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-05 06:39:10 UTC", "last_seen": "2026-03-05 06:39:10 UTC", "sightings": 1 }, { "indicator": "http://110.37.27.87:32870/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-05 06:39:10 UTC", "last_seen": "2026-03-05 06:39:10 UTC", "sightings": 1 }, { "indicator": "http://176.12.124.6:7966/.i", "indicator_type": "url", "source": "URLhaus", "tags": [ "hajime" ], "first_seen": "2026-03-05 06:39:10 UTC", "last_seen": "2026-03-05 06:39:10 UTC", "sightings": 1 }, { "indicator": "http://222.140.182.227:58373/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-05 06:39:10 UTC", "last_seen": "2026-03-05 06:39:10 UTC", "sightings": 1 }, { "indicator": "http://112.239.96.38:51023/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "Mozi" ], "first_seen": "2026-03-05 06:39:10 UTC", "last_seen": "2026-03-05 06:39:10 UTC", "sightings": 1 }, { "indicator": "http://84.234.99.24/mips", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-05 06:39:07 UTC", "last_seen": "2026-03-05 06:39:07 UTC", "sightings": 1 }, { "indicator": "http://110.37.28.65:59604/i", "indicator_type": "url", "source": "URLhaus", "tags": [], "first_seen": "2026-03-05 06:39:07 UTC", "last_seen": "2026-03-05 06:39:07 UTC", "sightings": 1 }, { "indicator": "http://94.156.170.86/Sakura.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "mirai" ], "first_seen": "2026-03-05 06:39:07 UTC", "last_seen": "2026-03-05 06:39:07 UTC", "sightings": 1 }, { "indicator": "http://221.15.8.186:52695/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 06:34:10 UTC", "last_seen": "2026-03-05 06:34:10 UTC", "sightings": 1 }, { "indicator": "http://110.37.107.203:52640/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 06:33:19 UTC", "last_seen": "2026-03-05 06:33:19 UTC", "sightings": 1 }, { "indicator": "http://182.113.32.217:59239/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 06:30:21 UTC", "last_seen": "2026-03-05 06:30:21 UTC", "sightings": 1 }, { "indicator": "http://182.117.95.37:41556/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 06:25:17 UTC", "last_seen": "2026-03-05 06:25:17 UTC", "sightings": 1 }, { "indicator": "http://130.12.180.43/files/6608710704/LNY9PLO.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-03-05 06:22:20 UTC", "last_seen": "2026-03-05 06:22:20 UTC", "sightings": 1 }, { "indicator": "http://130.12.180.43/files/8733674968/kKH6773.exe", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-03-05 06:22:20 UTC", "last_seen": "2026-03-05 06:22:20 UTC", "sightings": 1 }, { "indicator": "http://130.12.180.43/files/8566018414/TN7p2PQ.ps1", "indicator_type": "url", "source": "URLhaus", "tags": [ "c2-monitor-auto", "dropped-by-amadey" ], "first_seen": "2026-03-05 06:22:20 UTC", "last_seen": "2026-03-05 06:22:20 UTC", "sightings": 1 }, { "indicator": "http://110.37.107.203:52640/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 06:20:09 UTC", "last_seen": "2026-03-05 06:20:09 UTC", "sightings": 1 }, { "indicator": "http://61.53.140.228:60820/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 06:19:18 UTC", "last_seen": "2026-03-05 06:19:18 UTC", "sightings": 1 }, { "indicator": "http://61.53.140.228:60820/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 06:18:12 UTC", "last_seen": "2026-03-05 06:18:12 UTC", "sightings": 1 }, { "indicator": "http://117.209.23.179:53143/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 06:17:18 UTC", "last_seen": "2026-03-05 06:17:18 UTC", "sightings": 1 }, { "indicator": "http://117.209.31.52:45377/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 06:15:12 UTC", "last_seen": "2026-03-05 06:15:12 UTC", "sightings": 1 }, { "indicator": "http://74.214.56.173:60672/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 06:04:12 UTC", "last_seen": "2026-03-05 06:04:12 UTC", "sightings": 1 }, { "indicator": "http://117.209.23.179:53143/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 06:03:25 UTC", "last_seen": "2026-03-05 06:03:25 UTC", "sightings": 1 }, { "indicator": "http://182.113.32.217:59239/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 06:00:14 UTC", "last_seen": "2026-03-05 06:00:14 UTC", "sightings": 1 }, { "indicator": "http://60.23.233.29:54765/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 06:00:13 UTC", "last_seen": "2026-03-05 06:00:13 UTC", "sightings": 1 }, { "indicator": "http://117.209.31.52:45377/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 05:56:16 UTC", "last_seen": "2026-03-05 05:56:16 UTC", "sightings": 1 }, { "indicator": "https://1poz.my/a.php", "indicator_type": "url", "source": "URLhaus", "tags": [ "ua-wget", "zip" ], "first_seen": "2026-03-05 05:54:08 UTC", "last_seen": "2026-03-05 05:54:08 UTC", "sightings": 1 }, { "indicator": "http://222.142.192.7:37723/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 05:42:17 UTC", "last_seen": "2026-03-05 05:42:17 UTC", "sightings": 1 }, { "indicator": "http://60.23.233.29:54765/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 05:35:23 UTC", "last_seen": "2026-03-05 05:35:23 UTC", "sightings": 1 }, { "indicator": "https://103.77.246.172/all.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "sh", "ua-wget" ], "first_seen": "2026-03-05 05:35:17 UTC", "last_seen": "2026-03-05 05:35:17 UTC", "sightings": 1 }, { "indicator": "https://filebulldogs.com/uploads/AVQB61TVOX/a.zip", "indicator_type": "url", "source": "URLhaus", "tags": [ "ua-wget" ], "first_seen": "2026-03-05 05:31:15 UTC", "last_seen": "2026-03-05 05:31:15 UTC", "sightings": 1 }, { "indicator": "https://filebulldogs.com/uploads/AVQB61TVOX/f.js", "indicator_type": "url", "source": "URLhaus", "tags": [ "ua-wget" ], "first_seen": "2026-03-05 05:31:08 UTC", "last_seen": "2026-03-05 05:31:08 UTC", "sightings": 1 }, { "indicator": "http://110.38.206.86:46027/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-05 05:26:14 UTC", "last_seen": "2026-03-05 05:26:14 UTC", "sightings": 1 }, { "indicator": "http://108.168.0.60:52904/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 05:24:14 UTC", "last_seen": "2026-03-05 05:24:14 UTC", "sightings": 1 }, { "indicator": "http://110.36.18.167:47421/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 05:14:09 UTC", "last_seen": "2026-03-05 05:14:09 UTC", "sightings": 1 }, { "indicator": "http://59.97.249.158:60523/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 05:06:14 UTC", "last_seen": "2026-03-05 05:06:14 UTC", "sightings": 1 }, { "indicator": "http://115.55.62.149:48412/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 05:03:10 UTC", "last_seen": "2026-03-05 05:03:10 UTC", "sightings": 1 }, { "indicator": "http://59.98.206.26:34174/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 04:54:17 UTC", "last_seen": "2026-03-05 04:54:17 UTC", "sightings": 1 }, { "indicator": "http://117.209.81.4:37167/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 04:51:16 UTC", "last_seen": "2026-03-05 04:51:16 UTC", "sightings": 1 }, { "indicator": "http://42.224.144.191:50338/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 04:50:19 UTC", "last_seen": "2026-03-05 04:50:19 UTC", "sightings": 1 }, { "indicator": "http://123.189.169.165:49578/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 04:49:16 UTC", "last_seen": "2026-03-05 04:49:16 UTC", "sightings": 1 }, { "indicator": "http://59.97.249.158:60523/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 04:47:08 UTC", "last_seen": "2026-03-05 04:47:08 UTC", "sightings": 1 }, { "indicator": "http://27.37.62.119:53783/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 04:38:16 UTC", "last_seen": "2026-03-05 04:38:16 UTC", "sightings": 1 }, { "indicator": "http://110.36.18.167:47421/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 04:37:09 UTC", "last_seen": "2026-03-05 04:37:09 UTC", "sightings": 1 }, { "indicator": "http://123.189.169.165:49578/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 04:22:16 UTC", "last_seen": "2026-03-05 04:22:16 UTC", "sightings": 1 }, { "indicator": "http://42.239.227.33:47025/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 04:19:14 UTC", "last_seen": "2026-03-05 04:19:14 UTC", "sightings": 1 }, { "indicator": "http://115.55.54.93:51402/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 04:13:14 UTC", "last_seen": "2026-03-05 04:13:14 UTC", "sightings": 1 }, { "indicator": "http://222.136.102.71:47070/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 03:59:16 UTC", "last_seen": "2026-03-05 03:59:16 UTC", "sightings": 1 }, { "indicator": "http://42.226.195.71:50592/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 03:58:13 UTC", "last_seen": "2026-03-05 03:58:13 UTC", "sightings": 1 }, { "indicator": "https://crixup.com/downloads/tryinggim.vbs", "indicator_type": "url", "source": "URLhaus", "tags": [ "ua-wget" ], "first_seen": "2026-03-05 03:50:08 UTC", "last_seen": "2026-03-05 03:50:08 UTC", "sightings": 1 }, { "indicator": "http://110.37.52.120:44960/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 03:46:12 UTC", "last_seen": "2026-03-05 03:46:12 UTC", "sightings": 1 }, { "indicator": "http://115.55.54.93:51402/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 03:45:11 UTC", "last_seen": "2026-03-05 03:45:11 UTC", "sightings": 1 }, { "indicator": "http://130.12.180.69/bins/parm5", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 03:30:14 UTC", "last_seen": "2026-03-05 03:30:14 UTC", "sightings": 1 }, { "indicator": "http://130.12.180.69/bins/px86", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 03:30:14 UTC", "last_seen": "2026-03-05 03:30:14 UTC", "sightings": 1 }, { "indicator": "http://130.12.180.69/bins/parm", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 03:30:14 UTC", "last_seen": "2026-03-05 03:30:14 UTC", "sightings": 1 }, { "indicator": "http://130.12.180.69/bins/pmips", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 03:30:14 UTC", "last_seen": "2026-03-05 03:30:14 UTC", "sightings": 1 }, { "indicator": "http://130.12.180.69/bins/pmpsl", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 03:30:14 UTC", "last_seen": "2026-03-05 03:30:14 UTC", "sightings": 1 }, { "indicator": "http://130.12.180.69/bins/parm6", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "mirai", "ua-wget" ], "first_seen": "2026-03-05 03:30:14 UTC", "last_seen": "2026-03-05 03:30:14 UTC", "sightings": 1 }, { "indicator": "http://45.141.58.44/hiddenbin/boatnet.ppc", "indicator_type": "url", "source": "URLhaus", "tags": [ "elf", "ua-wget" ], "first_seen": "2026-03-05 03:30:13 UTC", "last_seen": "2026-03-05 03:30:13 UTC", "sightings": 1 }, { "indicator": "http://182.120.130.194:41764/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 03:28:12 UTC", "last_seen": "2026-03-05 03:28:12 UTC", "sightings": 1 }, { "indicator": "http://27.215.81.86:42280/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 03:17:07 UTC", "last_seen": "2026-03-05 03:17:07 UTC", "sightings": 1 }, { "indicator": "http://182.120.130.194:41764/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 03:01:15 UTC", "last_seen": "2026-03-05 03:01:15 UTC", "sightings": 1 }, { "indicator": "http://115.50.45.157:36989/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 02:54:15 UTC", "last_seen": "2026-03-05 02:54:15 UTC", "sightings": 1 }, { "indicator": "http://27.215.81.86:42280/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 02:49:07 UTC", "last_seen": "2026-03-05 02:49:07 UTC", "sightings": 1 }, { "indicator": "http://115.56.152.7:52150/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 02:46:16 UTC", "last_seen": "2026-03-05 02:46:16 UTC", "sightings": 1 }, { "indicator": "http://110.36.76.43:54183/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 02:46:15 UTC", "last_seen": "2026-03-05 02:46:15 UTC", "sightings": 1 }, { "indicator": "http://45.163.68.86:10689/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 02:28:10 UTC", "last_seen": "2026-03-05 02:28:10 UTC", "sightings": 1 }, { "indicator": "http://222.137.146.27:55399/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 02:27:07 UTC", "last_seen": "2026-03-05 02:27:07 UTC", "sightings": 1 }, { "indicator": "http://115.50.45.157:36989/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 02:26:15 UTC", "last_seen": "2026-03-05 02:26:15 UTC", "sightings": 1 }, { "indicator": "http://182.126.182.144:54111/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 02:16:10 UTC", "last_seen": "2026-03-05 02:16:10 UTC", "sightings": 1 }, { "indicator": "http://112.239.102.165:34729/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 02:09:30 UTC", "last_seen": "2026-03-05 02:09:30 UTC", "sightings": 1 }, { "indicator": "http://220.202.89.116:46235/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 02:09:11 UTC", "last_seen": "2026-03-05 02:09:11 UTC", "sightings": 1 }, { "indicator": "http://219.156.61.172:43744/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 02:09:11 UTC", "last_seen": "2026-03-05 02:09:11 UTC", "sightings": 1 }, { "indicator": "http://45.163.68.86:10689/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 02:05:15 UTC", "last_seen": "2026-03-05 02:05:15 UTC", "sightings": 1 }, { "indicator": "http://115.63.244.21:48288/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 01:54:15 UTC", "last_seen": "2026-03-05 01:54:15 UTC", "sightings": 1 }, { "indicator": "http://110.37.66.116:46779/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 01:51:08 UTC", "last_seen": "2026-03-05 01:51:08 UTC", "sightings": 1 }, { "indicator": "http://110.37.66.116:46779/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 01:28:13 UTC", "last_seen": "2026-03-05 01:28:13 UTC", "sightings": 1 }, { "indicator": "http://115.63.244.21:48288/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 01:25:20 UTC", "last_seen": "2026-03-05 01:25:20 UTC", "sightings": 1 }, { "indicator": "http://182.126.245.190:33778/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 01:24:13 UTC", "last_seen": "2026-03-05 01:24:13 UTC", "sightings": 1 }, { "indicator": "http://110.37.18.205:39358/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 01:23:06 UTC", "last_seen": "2026-03-05 01:23:06 UTC", "sightings": 1 }, { "indicator": "http://182.126.245.190:33778/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 01:22:14 UTC", "last_seen": "2026-03-05 01:22:14 UTC", "sightings": 1 }, { "indicator": "http://182.126.182.144:54111/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 01:21:14 UTC", "last_seen": "2026-03-05 01:21:14 UTC", "sightings": 1 }, { "indicator": "http://110.37.18.205:39358/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 01:18:13 UTC", "last_seen": "2026-03-05 01:18:13 UTC", "sightings": 1 }, { "indicator": "http://115.48.51.169:44154/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 01:16:10 UTC", "last_seen": "2026-03-05 01:16:10 UTC", "sightings": 1 }, { "indicator": "http://42.233.105.228:33117/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 00:55:16 UTC", "last_seen": "2026-03-05 00:55:16 UTC", "sightings": 1 }, { "indicator": "http://125.42.29.65:41801/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 00:49:15 UTC", "last_seen": "2026-03-05 00:49:15 UTC", "sightings": 1 }, { "indicator": "http://123.14.214.54:48126/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 00:40:10 UTC", "last_seen": "2026-03-05 00:40:10 UTC", "sightings": 1 }, { "indicator": "http://59.97.252.244:55991/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 00:33:06 UTC", "last_seen": "2026-03-05 00:33:06 UTC", "sightings": 1 }, { "indicator": "http://222.136.102.71:47070/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 00:30:17 UTC", "last_seen": "2026-03-05 00:30:17 UTC", "sightings": 1 }, { "indicator": "http://123.188.223.114:60893/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 00:29:20 UTC", "last_seen": "2026-03-05 00:29:20 UTC", "sightings": 1 }, { "indicator": "http://125.41.223.166:43962/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 00:29:08 UTC", "last_seen": "2026-03-05 00:29:08 UTC", "sightings": 1 }, { "indicator": "http://110.37.55.23:58959/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 00:28:07 UTC", "last_seen": "2026-03-05 00:28:07 UTC", "sightings": 1 }, { "indicator": "http://125.42.29.65:41801/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 00:28:07 UTC", "last_seen": "2026-03-05 00:28:07 UTC", "sightings": 1 }, { "indicator": "http://42.233.105.228:33117/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 00:26:13 UTC", "last_seen": "2026-03-05 00:26:13 UTC", "sightings": 1 }, { "indicator": "http://59.42.88.39:56735/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-05 00:15:14 UTC", "last_seen": "2026-03-05 00:15:14 UTC", "sightings": 1 }, { "indicator": "http://124.230.229.205:56570/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-05 00:11:18 UTC", "last_seen": "2026-03-05 00:11:18 UTC", "sightings": 1 }, { "indicator": "http://110.38.215.152:50771/i", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "elf", "mips", "Mozi" ], "first_seen": "2026-03-05 00:09:17 UTC", "last_seen": "2026-03-05 00:09:17 UTC", "sightings": 1 }, { "indicator": "http://59.42.88.39:56735/bin.sh", "indicator_type": "url", "source": "URLhaus", "tags": [ "32-bit", "arm", "elf", "mirai", "Mozi" ], "first_seen": "2026-03-05 00:07:24 UTC", "last_seen": "2026-03-05 00:07:24 UTC", "sightings": 1 }, { "indicator": "1.2.3.4", "indicator_type": "ip", "source": "AbuseIPDB", "tags": [ "bruteforce", "mock" ], "first_seen": "2026-01-28", "last_seen": "2026-01-28", "sightings": 1 }, { "indicator": "malicious-example.com", "indicator_type": "domain", "source": "OTX", "tags": [ "phishing", "mock" ], "first_seen": "2025-12-12", "last_seen": "2025-12-12", "sightings": 1 }, { "indicator": "192.168.1.100", "indicator_type": "ip", "source": "OTX", "tags": [ "scanner", "mock" ], "first_seen": "2025-12-12", "last_seen": "2025-12-12", "sightings": 1 } ]