CYBERRAKSHAK LABS · DAILY GLOBAL THREAT INTELLIGENCE

GTI Feed — 20 September 2026

100 indicators selected from the supplied feed. IOCs are defanged for safe publication. Confidence reflects the source-provided value.

Table format: IoC · Severity · Confidence · Involved Threat Type · Malware / Family · Brief Attack Description

IoC	Severity	Confidence	Involved Threat Type	Malware / Family	Brief Attack Description
`kf1umwoy140825wz[.]cfd`	Critical	100/100	Payload Delivery	ACR Stealer	Feed-classified payload delivery associated with ACR Stealer. Source tag: abuse_ch.
`kaliop-weda[.]club`	Critical	100/100	Botnet / C2	ACR Stealer	Feed-classified botnet / c2 associated with ACR Stealer. Source tag: abuse_ch.
`kajvu140825csm[.]cfd`	Critical	100/100	Payload Delivery	ACR Stealer	Feed-classified payload delivery associated with ACR Stealer. Source tag: abuse_ch.
`k6q4eom170425c[.]cfd`	Critical	100/100	Payload Delivery	ACR Stealer	Feed-classified payload delivery associated with ACR Stealer. Source tag: abuse_ch.
`k6nlm0707259[.]cfd`	Critical	100/100	Payload Delivery	ACR Stealer	Feed-classified payload delivery associated with ACR Stealer. Source tag: abuse_ch.
`jufhc4ddp020426v55[.]cfd`	Critical	100/100	Payload Delivery	ACR Stealer	Feed-classified payload delivery associated with ACR Stealer. Source tag: abuse_ch.
`j7wu9ixq0e170425ma4[.]cfd`	Critical	100/100	Payload Delivery	ACR Stealer	Feed-classified payload delivery associated with ACR Stealer. Source tag: abuse_ch.
`iwonderifulovemeaswell[.]vg`	Critical	100/100	Botnet / C2	CeCbot	Feed-classified botnet / c2 associated with CeCbot. Source tag: abuse_ch.
`im9ov070725iqu[.]cfd`	Critical	100/100	Payload Delivery	ACR Stealer	Feed-classified payload delivery associated with ACR Stealer. Source tag: abuse_ch.
`iloveuevenifudontlovemeback[.]is`	Critical	100/100	Botnet / C2	CeCbot	Feed-classified botnet / c2 associated with CeCbot. Source tag: abuse_ch.
`i198k0170425m9[.]cfd`	Critical	100/100	Payload Delivery	ACR Stealer	Feed-classified payload delivery associated with ACR Stealer. Source tag: abuse_ch.
`hw91k170425ua[.]cfd`	Critical	100/100	Payload Delivery	ACR Stealer	Feed-classified payload delivery associated with ACR Stealer. Source tag: abuse_ch.
`hxxps://zoomai[.]online/`	Critical	100/100	Botnet / C2	Overlord	Feed-classified botnet / c2 associated with Overlord. Source tag: abuse_ch.
`hxxps://www[.]wibbyzap[.]xyz/`	Critical	100/100	Botnet / C2	Overlord	Feed-classified botnet / c2 associated with Overlord. Source tag: abuse_ch.
`hxxps://www[.]skillsworks[.]top/`	Critical	100/100	Botnet / C2	Overlord	Feed-classified botnet / c2 associated with Overlord. Source tag: abuse_ch.
`hxxps://www[.]signindat[.]com/`	Critical	100/100	Botnet / C2	Overlord	Feed-classified botnet / c2 associated with Overlord. Source tag: abuse_ch.
`hxxps://www[.]shadowteam[.]fun/`	Critical	100/100	Botnet / C2	Overlord	Feed-classified botnet / c2 associated with Overlord. Source tag: abuse_ch.
`hxxps://www[.]recordsupdate[.]com/`	Critical	100/100	Botnet / C2	Overlord	Feed-classified botnet / c2 associated with Overlord. Source tag: abuse_ch.
`hxxps://www[.]larpingcarpet[.]xyz/`	Critical	100/100	Botnet / C2	Overlord	Feed-classified botnet / c2 associated with Overlord. Source tag: abuse_ch.
`hxxps://www[.]ifclmarkets[.]com/`	Critical	100/100	Botnet / C2	Overlord	Feed-classified botnet / c2 associated with Overlord. Source tag: abuse_ch.
`hxxps://www[.]hugopanel[.]life/`	Critical	100/100	Botnet / C2	Overlord	Feed-classified botnet / c2 associated with Overlord. Source tag: abuse_ch.
`hxxps://www[.]googleworkapp[.]com/`	Critical	100/100	Botnet / C2	Overlord	Feed-classified botnet / c2 associated with Overlord. Source tag: abuse_ch.
`hxxps://www[.]globaldatatest[.]sbs/`	Critical	100/100	Botnet / C2	Overlord	Feed-classified botnet / c2 associated with Overlord. Source tag: abuse_ch.
`hxxps://www[.]esrpalco[.]com/`	Critical	100/100	Botnet / C2	Overlord	Feed-classified botnet / c2 associated with Overlord. Source tag: abuse_ch.
`hxxps://www[.]eclypse-system-pc[.]co/`	Critical	100/100	Botnet / C2	Overlord	Feed-classified botnet / c2 associated with Overlord. Source tag: abuse_ch.
`hxxps://www[.]cdn-support[.]com/`	Critical	100/100	Botnet / C2	Overlord	Feed-classified botnet / c2 associated with Overlord. Source tag: abuse_ch.
`hxxps://windevalien[.]ddns[.]net/`	Critical	100/100	Botnet / C2	Overlord	Feed-classified botnet / c2 associated with Overlord. Source tag: abuse_ch.
`hxxps://wibbyzap[.]xyz/`	Critical	100/100	Botnet / C2	Overlord	Feed-classified botnet / c2 associated with Overlord. Source tag: abuse_ch.
`hxxps://walmagua[.]cc/connect`	Critical	100/100	Botnet / C2	—	Feed-classified botnet / c2 indicator. Source tag: abuse_ch.
`hxxps://walmagua[.]cc/complete`	Critical	100/100	Botnet / C2	—	Feed-classified botnet / c2 indicator. Source tag: abuse_ch.
`hxxps://walmagua[.]cc/chunk`	Critical	100/100	Botnet / C2	—	Feed-classified botnet / c2 indicator. Source tag: abuse_ch.
`hxxps://walmagua[.]cc/api/client-tasks`	Critical	100/100	Botnet / C2	—	Feed-classified botnet / c2 indicator. Source tag: abuse_ch.
`hxxps://voltexa[.]win/`	Critical	100/100	Botnet / C2	Overlord	Feed-classified botnet / c2 associated with Overlord. Source tag: abuse_ch.
`hxxps://vmi3554101[.]contaboserver[.]net/d4ndocs/gateway[.]php`	Critical	100/100	Payload Delivery	Grandoreiro	Feed-classified payload delivery associated with Grandoreiro. Source tag: abuse_ch.
`hxxps://vantyx[.]vip/`	Critical	100/100	Botnet / C2	Overlord	Feed-classified botnet / c2 associated with Overlord. Source tag: abuse_ch.
`hxxps://v61182[.]php-friends[.]de/`	Critical	100/100	Botnet / C2	Overlord	Feed-classified botnet / c2 associated with Overlord. Source tag: abuse_ch.
`hxxps://v46403[.]php-friends[.]de/`	Critical	100/100	Botnet / C2	Overlord	Feed-classified botnet / c2 associated with Overlord. Source tag: abuse_ch.
`hxxps://trataloratolo[.]lol/`	Critical	100/100	Botnet / C2	Overlord	Feed-classified botnet / c2 associated with Overlord. Source tag: abuse_ch.
`hxxps://tndr-panel[.]online/api[.]php`	Critical	100/100	Botnet / C2	—	Feed-classified botnet / c2 indicator. Source tag: abuse_ch.
`hxxps://telegram[.]me/nag0a`	Critical	100/100	Botnet / C2	Vidar	Feed-classified botnet / c2 associated with Vidar. Source tag: abuse_ch.
`hxxps://tapsend[.]city/`	Critical	100/100	Botnet / C2	Overlord	Feed-classified botnet / c2 associated with Overlord. Source tag: abuse_ch.
`hxxps://skillsworks[.]top/`	Critical	100/100	Botnet / C2	Overlord	Feed-classified botnet / c2 associated with Overlord. Source tag: abuse_ch.
`hxxps://signindat[.]com/`	Critical	100/100	Botnet / C2	Overlord	Feed-classified botnet / c2 associated with Overlord. Source tag: abuse_ch.
`hxxps://shadowteam[.]fun/`	Critical	100/100	Botnet / C2	Overlord	Feed-classified botnet / c2 associated with Overlord. Source tag: abuse_ch.
`hxxps://secure[.]cbtrust[.]su/`	Critical	100/100	Botnet / C2	Overlord	Feed-classified botnet / c2 associated with Overlord. Source tag: abuse_ch.
`hxxps://recordsupdate[.]com/`	Critical	100/100	Botnet / C2	Overlord	Feed-classified botnet / c2 associated with Overlord. Source tag: abuse_ch.
`hxxps://ratatwista[.]com:50051/agent-control/upload`	Critical	100/100	Botnet / C2	—	Feed-classified botnet / c2 indicator. Source tag: abuse_ch.
`hxxps://pullout[.]ezgateway[.]net:7443/hype/ws`	Critical	100/100	Botnet / C2	Hype Agent	Feed-classified botnet / c2 associated with Hype Agent. Source tag: abuse_ch.
`hxxps://pullout[.]ezgateway[.]net:587/userinfo`	Critical	100/100	Botnet / C2	PureLogs	Feed-classified botnet / c2 associated with PureLogs. Source tag: abuse_ch.
`hxxps://pullout[.]ezgateway[.]net:587/plugin`	Critical	100/100	Botnet / C2	PureLogs	Feed-classified botnet / c2 associated with PureLogs. Source tag: abuse_ch.
`hxxps://pullout[.]ezgateway[.]net:587/ping`	Critical	100/100	Botnet / C2	PureLogs	Feed-classified botnet / c2 associated with PureLogs. Source tag: abuse_ch.
`hxxps://pullout[.]ezgateway[.]net:587/finish`	Critical	100/100	Botnet / C2	PureLogs	Feed-classified botnet / c2 associated with PureLogs. Source tag: abuse_ch.
`hxxps://pullout[.]ezgateway[.]net:587/filesearch/req`	Critical	100/100	Botnet / C2	PureLogs	Feed-classified botnet / c2 associated with PureLogs. Source tag: abuse_ch.
`hxxps://pullout[.]ezgateway[.]net:587/discord`	Critical	100/100	Botnet / C2	PureLogs	Feed-classified botnet / c2 associated with PureLogs. Source tag: abuse_ch.
`hxxps://pullout[.]ezgateway[.]net:587/browser`	Critical	100/100	Botnet / C2	PureLogs	Feed-classified botnet / c2 associated with PureLogs. Source tag: abuse_ch.
`hxxps://policy[.]igc-technologies[.]com/`	Critical	100/100	Botnet / C2	Overlord	Feed-classified botnet / c2 associated with Overlord. Source tag: abuse_ch.
`hxxps://peakoverlord[.]duckdns[.]org/`	Critical	100/100	Botnet / C2	Overlord	Feed-classified botnet / c2 associated with Overlord. Source tag: abuse_ch.
`hxxps://panel[.]tberat-vac[.]com/`	Critical	100/100	Botnet / C2	Overlord	Feed-classified botnet / c2 associated with Overlord. Source tag: abuse_ch.
`hxxps://panel[.]ipv6app[.]bar/`	Critical	100/100	Botnet / C2	Overlord	Feed-classified botnet / c2 associated with Overlord. Source tag: abuse_ch.
`hxxps://overlord[.]milky1337[.]ru/`	Critical	100/100	Botnet / C2	Overlord	Feed-classified botnet / c2 associated with Overlord. Source tag: abuse_ch.
`hxxps://overlord[.]emmi[.]zip/`	Critical	100/100	Botnet / C2	Overlord	Feed-classified botnet / c2 associated with Overlord. Source tag: abuse_ch.
`hxxps://over[.]casacam[.]net/`	Critical	100/100	Botnet / C2	Overlord	Feed-classified botnet / c2 associated with Overlord. Source tag: abuse_ch.
`hxxps://nttsw[.]cdn-support[.]com/`	Critical	100/100	Botnet / C2	Overlord	Feed-classified botnet / c2 associated with Overlord. Source tag: abuse_ch.
`hxxps://memesensecracked[.]xyz/`	Critical	100/100	Botnet / C2	Overlord	Feed-classified botnet / c2 associated with Overlord. Source tag: abuse_ch.
`hxxps://mail[.]strawxom[.]org/`	Critical	100/100	Botnet / C2	Overlord	Feed-classified botnet / c2 associated with Overlord. Source tag: abuse_ch.
`hxxps://larpingcarpet[.]xyz/`	Critical	100/100	Botnet / C2	Overlord	Feed-classified botnet / c2 associated with Overlord. Source tag: abuse_ch.
`hxxps://krem[.]mesoptik[.]com/ws/stealer`	Critical	100/100	Botnet / C2	TelePuz	Feed-classified botnet / c2 associated with TelePuz. Source tag: abuse_ch.
`hxxps://krem[.]mesoptik[.]com/v3/telemetry`	Critical	100/100	Botnet / C2	TelePuz	Feed-classified botnet / c2 associated with TelePuz. Source tag: abuse_ch.
`hxxps://krem[.]mesoptik[.]com/v3/report`	Critical	100/100	Botnet / C2	TelePuz	Feed-classified botnet / c2 associated with TelePuz. Source tag: abuse_ch.
`hxxps://ifclmarkets[.]com/`	Critical	100/100	Botnet / C2	Overlord	Feed-classified botnet / c2 associated with Overlord. Source tag: abuse_ch.
`hxxps://hugopanel[.]life/`	Critical	100/100	Botnet / C2	Overlord	Feed-classified botnet / c2 associated with Overlord. Source tag: abuse_ch.
`hxxps://googleworkapp[.]com/`	Critical	100/100	Botnet / C2	Overlord	Feed-classified botnet / c2 associated with Overlord. Source tag: abuse_ch.
`hxxps://globaldatatest[.]sbs/`	Critical	100/100	Botnet / C2	Overlord	Feed-classified botnet / c2 associated with Overlord. Source tag: abuse_ch.
`hxxps://esrpalco[.]com/`	Critical	100/100	Botnet / C2	Overlord	Feed-classified botnet / c2 associated with Overlord. Source tag: abuse_ch.
`hxxps://dilumara[.]fun/`	Critical	100/100	Botnet / C2	Overlord	Feed-classified botnet / c2 associated with Overlord. Source tag: abuse_ch.
`hxxps://checkdomfilellc[.]us/`	Critical	100/100	Botnet / C2	Overlord	Feed-classified botnet / c2 associated with Overlord. Source tag: abuse_ch.
`hxxps://cheater-scanner[.]com/`	Critical	100/100	Botnet / C2	Overlord	Feed-classified botnet / c2 associated with Overlord. Source tag: abuse_ch.
`hxxps://autoconfig[.]strawxom[.]org/`	Critical	100/100	Botnet / C2	Overlord	Feed-classified botnet / c2 associated with Overlord. Source tag: abuse_ch.
`hxxps://aotools[.]duckdns[.]org/`	Critical	100/100	Botnet / C2	Overlord	Feed-classified botnet / c2 associated with Overlord. Source tag: abuse_ch.
`hxxps://akmuniverstall[.]top/backend/api/app[.]php`	Critical	100/100	Botnet / C2	—	Feed-classified botnet / c2 indicator. Source tag: abuse_ch.
`hxxps://95[.]217[.]196[.]165/`	Critical	100/100	Botnet / C2	Overlord	Feed-classified botnet / c2 associated with Overlord. Source tag: abuse_ch.
`hxxps://95[.]215[.]32[.]3/`	Critical	100/100	Botnet / C2	Overlord	Feed-classified botnet / c2 associated with Overlord. Source tag: abuse_ch.
`hxxps://94[.]26[.]83[.]198/`	Critical	100/100	Botnet / C2	Overlord	Feed-classified botnet / c2 associated with Overlord. Source tag: abuse_ch.
`hxxps://94[.]249[.]230[.]167/`	Critical	100/100	Botnet / C2	Overlord	Feed-classified botnet / c2 associated with Overlord. Source tag: abuse_ch.
`hxxps://91[.]208[.]206[.]83/`	Critical	100/100	Botnet / C2	Overlord	Feed-classified botnet / c2 associated with Overlord. Source tag: abuse_ch.
`hxxps://88[.]87[.]85[.]199/`	Critical	100/100	Botnet / C2	Overlord	Feed-classified botnet / c2 associated with Overlord. Source tag: abuse_ch.
`hxxps://85[.]11[.]167[.]99/`	Critical	100/100	Botnet / C2	Overlord	Feed-classified botnet / c2 associated with Overlord. Source tag: abuse_ch.
`hxxps://80[.]85[.]146[.]244/`	Critical	100/100	Botnet / C2	Overlord	Feed-classified botnet / c2 associated with Overlord. Source tag: abuse_ch.
`hxxps://80[.]71[.]235[.]62/`	Critical	100/100	Botnet / C2	Overlord	Feed-classified botnet / c2 associated with Overlord. Source tag: abuse_ch.
`hxxps://77[.]110[.]110[.]117/`	Critical	100/100	Botnet / C2	Overlord	Feed-classified botnet / c2 associated with Overlord. Source tag: abuse_ch.
`hxxps://74[.]208[.]238[.]224/`	Critical	100/100	Botnet / C2	Overlord	Feed-classified botnet / c2 associated with Overlord. Source tag: abuse_ch.
`hxxps://67[.]9[.]20[.]12/`	Critical	100/100	Botnet / C2	Overlord	Feed-classified botnet / c2 associated with Overlord. Source tag: abuse_ch.
`hxxps://66[.]154[.]103[.]144/`	Critical	100/100	Botnet / C2	Overlord	Feed-classified botnet / c2 associated with Overlord. Source tag: abuse_ch.
`hxxps://46[.]224[.]18[.]6/`	Critical	100/100	Botnet / C2	Overlord	Feed-classified botnet / c2 associated with Overlord. Source tag: abuse_ch.
`hxxps://45[.]90[.]98[.]139/`	Critical	100/100	Botnet / C2	Overlord	Feed-classified botnet / c2 associated with Overlord. Source tag: abuse_ch.
`hxxps://41[.]212[.]28[.]86/`	Critical	100/100	Botnet / C2	Overlord	Feed-classified botnet / c2 associated with Overlord. Source tag: abuse_ch.
`hxxps://37[.]221[.]64[.]248/`	Critical	100/100	Botnet / C2	Overlord	Feed-classified botnet / c2 associated with Overlord. Source tag: abuse_ch.
`hxxps://35[.]222[.]181[.]12/`	Critical	100/100	Botnet / C2	Overlord	Feed-classified botnet / c2 associated with Overlord. Source tag: abuse_ch.
`hxxps://31[.]7[.]63[.]13/`	Critical	100/100	Botnet / C2	Overlord	Feed-classified botnet / c2 associated with Overlord. Source tag: abuse_ch.
`hxxps://31[.]7[.]63[.]12/`	Critical	100/100	Botnet / C2	Overlord	Feed-classified botnet / c2 associated with Overlord. Source tag: abuse_ch.

Source: User-provided IOC feed export. Original source timestamps and source classifications are retained in the GTI data layer for historical search and future detail pages.

← Live GTI Feed GTI Archive →