CYBERRAKSHAK LABS ยท DAILY GLOBAL THREAT INTELLIGENCE
GTI Feed โ 2 October 2026
Daily defensive threat intelligence feed containing 100 source-provided, defanged indicators for 2 October 2026.
Table format: IoC ยท Severity ยท Confidence ยท Involved Threat Type ยท Malware / Family ยท Brief Attack Description
| IoC | Severity | Confidence | Involved Threat Type | Malware / Family | Brief Attack Description |
|---|---|---|---|---|---|
| 8f990f1e541560dfd73f07bd44965c7855e62ef7b5631962a36ee211945b8ef8 | CRITICAL | 95/100 | payload | py.blankgrabber | Associated with py.blankgrabber activity; source classification: payload. |
| hxxp://103[.]59[.]134[.]98/Photo[.]scr | CRITICAL | 100/100 | payload_delivery | win.coinminer | Associated with win.coinminer activity; source classification: payload_delivery. |
| frontline-coating[.]pl | CRITICAL | 90/100 | payload_delivery | js.clearfake | Associated with js.clearfake activity; source classification: payload_delivery. |
| cd239429[.]hwgrouppik[.]com | CRITICAL | 90/100 | payload_delivery | js.clearfake | Associated with js.clearfake activity; source classification: payload_delivery. |
| 638e8adb[.]hwgrouppik[.]com | CRITICAL | 90/100 | payload_delivery | js.clearfake | Associated with js.clearfake activity; source classification: payload_delivery. |
| s2aqpx7u[.]succeswithpaul[.]com | CRITICAL | 100/100 | payload_delivery | js.clearfake | Associated with js.clearfake activity; source classification: payload_delivery. |
| 148[.]66[.]17[.]125:60001 | CRITICAL | 100/100 | botnet_cc | win.vshell | Associated with win.vshell activity; source classification: botnet_cc. |
| 148[.]66[.]17[.]123:60001 | CRITICAL | 100/100 | botnet_cc | win.vshell | Associated with win.vshell activity; source classification: botnet_cc. |
| 148[.]66[.]17[.]124:60001 | CRITICAL | 100/100 | botnet_cc | win.vshell | Associated with win.vshell activity; source classification: botnet_cc. |
| 134[.]175[.]125[.]204:8084 | CRITICAL | 100/100 | botnet_cc | win.vshell | Associated with win.vshell activity; source classification: botnet_cc. |
| hxxps://physio-benecke[.]de/ | CRITICAL | 90/100 | payload_delivery | โ | Source classification: payload_delivery. |
| hxxps://kyosotechltd[.]co[.]uk/ | CRITICAL | 90/100 | payload_delivery | โ | Source classification: payload_delivery. |
| f833rk27[.]techvigilante[.]com | CRITICAL | 100/100 | payload_delivery | js.clearfake | Associated with js.clearfake activity; source classification: payload_delivery. |
| ce2d762121198452681f234593138c8e75a415c9756c993ee53541d35298bd1d | CRITICAL | 95/100 | payload | win.vshell | Associated with win.vshell activity; source classification: payload. |
| h0pjwrll[.]wignalllindor[.]wiki | CRITICAL | 100/100 | payload_delivery | js.clearfake | Associated with js.clearfake activity; source classification: payload_delivery. |
| hxxps://cgageauthor[.]com/ | CRITICAL | 90/100 | payload_delivery | โ | Source classification: payload_delivery. |
| hxxps://idyeahcentral[.]com/ | CRITICAL | 90/100 | payload_delivery | โ | Source classification: payload_delivery. |
| 45[.]136[.]14[.]91:110 | CRITICAL | 100/100 | botnet_cc | win.vshell | Associated with win.vshell activity; source classification: botnet_cc. |
| hxxps://yameneekhalta[.]com/ | CRITICAL | 90/100 | payload_delivery | โ | Source classification: payload_delivery. |
| hxxps://zumio[.]pl/ | CRITICAL | 90/100 | payload_delivery | โ | Source classification: payload_delivery. |
| hxxps://yegoyogarwanda[.]com/ | CRITICAL | 90/100 | payload_delivery | โ | Source classification: payload_delivery. |
| 1dc53faeebe25b41fe88b757a07190842e58369eb2c95cddd95eccb90183d2a7 | CRITICAL | 95/100 | payload | elf.mirai | Associated with elf.mirai activity; source classification: payload. |
| f0b55c610b42dfe509e5f4adb17e2505c13e732a903cec6bfecff19d11a088b8 | CRITICAL | 100/100 | payload | elf.mirai | Associated with elf.mirai activity; source classification: payload. |
| f866fcae6a7bd70de5d52d1c798c566e8ba4ae4319f475ccd4f22f08741efdd5 | CRITICAL | 100/100 | payload | elf.mirai | Associated with elf.mirai activity; source classification: payload. |
| 6f5ac28130a03271154d0b88267d835bb4ccbbf7a3009111d2d5c78d7043aac8 | CRITICAL | 100/100 | payload | elf.mirai | Associated with elf.mirai activity; source classification: payload. |
| b187acf97f1b6920f2831caff4e4f3ede02cfeec6d67751788b48258d92dd6a6 | CRITICAL | 100/100 | payload | elf.mirai | Associated with elf.mirai activity; source classification: payload. |
| hxxp://111[.]235[.]143[.]155:8080/info[.]zip | CRITICAL | 95/100 | payload_delivery | win.coinminer | Associated with win.coinminer activity; source classification: payload_delivery. |
| hxxps://vivianreyes[.]com/ | CRITICAL | 90/100 | payload_delivery | โ | Source classification: payload_delivery. |
| hxxps://www[.]udruzenjetekstilnihskola[.]org[.]rs/ | CRITICAL | 90/100 | payload_delivery | โ | Source classification: payload_delivery. |
| 26a0ed72[.]finowfurt[.]com | CRITICAL | 90/100 | payload_delivery | js.clearfake | Associated with js.clearfake activity; source classification: payload_delivery. |
| 3d5108a1[.]finowfurt[.]com | CRITICAL | 90/100 | payload_delivery | js.clearfake | Associated with js.clearfake activity; source classification: payload_delivery. |
| www[.]alicias-beauty[.]ch | CRITICAL | 90/100 | payload_delivery | js.clearfake | Associated with js.clearfake activity; source classification: payload_delivery. |
| www[.]jtcblenders[.]com | CRITICAL | 90/100 | payload_delivery | js.clearfake | Associated with js.clearfake activity; source classification: payload_delivery. |
| hxxps://tampabaylawnservice[.]com/ | CRITICAL | 90/100 | payload_delivery | โ | Source classification: payload_delivery. |
| hxxps://www[.]szoketiszahe[.]hu/ | CRITICAL | 90/100 | payload_delivery | โ | Source classification: payload_delivery. |
| hxxps://tomowell2020[.]com/ | CRITICAL | 90/100 | payload_delivery | โ | Source classification: payload_delivery. |
| hxxps://studio-salazar[.]com/ | CRITICAL | 90/100 | payload_delivery | โ | Source classification: payload_delivery. |
| hxxps://sundasaziz[.]com/ | CRITICAL | 90/100 | payload_delivery | โ | Source classification: payload_delivery. |
| wemovetucson[.]com | CRITICAL | 90/100 | payload_delivery | js.clearfake | Associated with js.clearfake activity; source classification: payload_delivery. |
| website[.]smaywka[.]sch[.]id | CRITICAL | 100/100 | payload_delivery | js.iclickfix | Associated with js.iclickfix activity; source classification: payload_delivery. |
| williamliggett[.]com | CRITICAL | 100/100 | payload_delivery | js.iclickfix | Associated with js.iclickfix activity; source classification: payload_delivery. |
| zomabeauty[.]com[.]au | CRITICAL | 100/100 | payload_delivery | js.iclickfix | Associated with js.iclickfix activity; source classification: payload_delivery. |
| incele[.]web[.]tr | CRITICAL | 100/100 | payload_delivery | js.iclickfix | Associated with js.iclickfix activity; source classification: payload_delivery. |
| irricampo[.]com[.]br | CRITICAL | 100/100 | payload_delivery | js.iclickfix | Associated with js.iclickfix activity; source classification: payload_delivery. |
| istanablock[.]com | CRITICAL | 100/100 | payload_delivery | js.iclickfix | Associated with js.iclickfix activity; source classification: payload_delivery. |
| lifechampionmastery[.]com | CRITICAL | 100/100 | payload_delivery | js.iclickfix | Associated with js.iclickfix activity; source classification: payload_delivery. |
| luidemorais[.]com | CRITICAL | 100/100 | payload_delivery | js.iclickfix | Associated with js.iclickfix activity; source classification: payload_delivery. |
| matikconsulting[.]com | CRITICAL | 100/100 | payload_delivery | js.iclickfix | Associated with js.iclickfix activity; source classification: payload_delivery. |
| mifalliterasi[.]com | CRITICAL | 100/100 | payload_delivery | js.iclickfix | Associated with js.iclickfix activity; source classification: payload_delivery. |
| newswiregujarat[.]com | CRITICAL | 100/100 | payload_delivery | js.iclickfix | Associated with js.iclickfix activity; source classification: payload_delivery. |
| nicoledonnellyspeaks[.]com | CRITICAL | 100/100 | payload_delivery | js.iclickfix | Associated with js.iclickfix activity; source classification: payload_delivery. |
| prazofinal[.]com | CRITICAL | 100/100 | payload_delivery | js.iclickfix | Associated with js.iclickfix activity; source classification: payload_delivery. |
| ptgrandprincipalmandiri[.]net | CRITICAL | 100/100 | payload_delivery | js.iclickfix | Associated with js.iclickfix activity; source classification: payload_delivery. |
| rapidservices[.]es | CRITICAL | 100/100 | payload_delivery | js.iclickfix | Associated with js.iclickfix activity; source classification: payload_delivery. |
| reclaimmypcpclaim[.]co[.]uk | CRITICAL | 100/100 | payload_delivery | js.iclickfix | Associated with js.iclickfix activity; source classification: payload_delivery. |
| rubbercompressionrepair[.]com | CRITICAL | 100/100 | payload_delivery | js.iclickfix | Associated with js.iclickfix activity; source classification: payload_delivery. |
| serviciotecnicograncanaria[.]es | CRITICAL | 100/100 | payload_delivery | js.iclickfix | Associated with js.iclickfix activity; source classification: payload_delivery. |
| smkdbcld28[.]sch[.]id | CRITICAL | 100/100 | payload_delivery | js.iclickfix | Associated with js.iclickfix activity; source classification: payload_delivery. |
| spirakiservice[.]gr | CRITICAL | 100/100 | payload_delivery | js.iclickfix | Associated with js.iclickfix activity; source classification: payload_delivery. |
| sweetdreamreborn[.]store | CRITICAL | 100/100 | payload_delivery | js.iclickfix | Associated with js.iclickfix activity; source classification: payload_delivery. |
| vosgi[.]in | CRITICAL | 100/100 | payload_delivery | js.iclickfix | Associated with js.iclickfix activity; source classification: payload_delivery. |
| wavetek[.]fr | CRITICAL | 100/100 | payload_delivery | js.iclickfix | Associated with js.iclickfix activity; source classification: payload_delivery. |
| webfeenix[.]com | CRITICAL | 100/100 | payload_delivery | js.iclickfix | Associated with js.iclickfix activity; source classification: payload_delivery. |
| 24x7remediation[.]com | CRITICAL | 100/100 | payload_delivery | js.iclickfix | Associated with js.iclickfix activity; source classification: payload_delivery. |
| acceltalentgroup[.]com | CRITICAL | 100/100 | payload_delivery | js.iclickfix | Associated with js.iclickfix activity; source classification: payload_delivery. |
| aderent[.]ro | CRITICAL | 100/100 | payload_delivery | js.iclickfix | Associated with js.iclickfix activity; source classification: payload_delivery. |
| agrosefac[.]com[.]ar | CRITICAL | 100/100 | payload_delivery | js.iclickfix | Associated with js.iclickfix activity; source classification: payload_delivery. |
| argagordyn[.]com | CRITICAL | 100/100 | payload_delivery | js.iclickfix | Associated with js.iclickfix activity; source classification: payload_delivery. |
| bikinjingle[.]com | CRITICAL | 100/100 | payload_delivery | js.iclickfix | Associated with js.iclickfix activity; source classification: payload_delivery. |
| claycowanbooks[.]com | CRITICAL | 100/100 | payload_delivery | js.iclickfix | Associated with js.iclickfix activity; source classification: payload_delivery. |
| comfortcareconsultants[.]org | CRITICAL | 100/100 | payload_delivery | js.iclickfix | Associated with js.iclickfix activity; source classification: payload_delivery. |
| dermaglowla[.]com | CRITICAL | 100/100 | payload_delivery | js.iclickfix | Associated with js.iclickfix activity; source classification: payload_delivery. |
| dwsdumpsters[.]com | CRITICAL | 100/100 | payload_delivery | js.iclickfix | Associated with js.iclickfix activity; source classification: payload_delivery. |
| fatbirdnyc[.]com | CRITICAL | 100/100 | payload_delivery | js.iclickfix | Associated with js.iclickfix activity; source classification: payload_delivery. |
| forteristorante[.]com | CRITICAL | 100/100 | payload_delivery | js.iclickfix | Associated with js.iclickfix activity; source classification: payload_delivery. |
| givinghandstanzania[.]com | CRITICAL | 100/100 | payload_delivery | js.iclickfix | Associated with js.iclickfix activity; source classification: payload_delivery. |
| healthandwellnesssport[.]com | CRITICAL | 100/100 | payload_delivery | js.iclickfix | Associated with js.iclickfix activity; source classification: payload_delivery. |
| henfactory[.]com | CRITICAL | 100/100 | payload_delivery | js.iclickfix | Associated with js.iclickfix activity; source classification: payload_delivery. |
| hoteldianajogja[.]com | CRITICAL | 100/100 | payload_delivery | js.iclickfix | Associated with js.iclickfix activity; source classification: payload_delivery. |
| houstonacrepairservice[.]com | CRITICAL | 100/100 | payload_delivery | js.iclickfix | Associated with js.iclickfix activity; source classification: payload_delivery. |
| 9d98dcaafcafd8b68104b162d22b33a6acade533fed7b1f62b1717f7421378fa | CRITICAL | 95/100 | payload | elf.mirai | Associated with elf.mirai activity; source classification: payload. |
| f8c6f2a0e5078faa6d2d85b14a7eed161dafdf32ffe47819aab715b6fb90f3b8 | CRITICAL | 95/100 | payload | elf.mirai | Associated with elf.mirai activity; source classification: payload. |
| 9d94a59e168170c07ef8217d980da3652b0c8b611ebe10e7ea47274017008f89 | CRITICAL | 95/100 | payload | elf.mirai | Associated with elf.mirai activity; source classification: payload. |
| f9e554febbe32d19e39a23a163e331ca5828f697c60ff17a30282daf855ffea2 | CRITICAL | 95/100 | payload | elf.mirai | Associated with elf.mirai activity; source classification: payload. |
| hxxps://www[.]shackbd[.]com/ | CRITICAL | 90/100 | payload_delivery | โ | Source classification: payload_delivery. |
| hxxps://silverstonerealty[.]in/ | CRITICAL | 90/100 | payload_delivery | โ | Source classification: payload_delivery. |
| hxxps://sofography[.]com/ | CRITICAL | 90/100 | payload_delivery | โ | Source classification: payload_delivery. |
| hxxps://www[.]servapool[.]ca/ | CRITICAL | 90/100 | payload_delivery | โ | Source classification: payload_delivery. |
| hxxps://shepherdsbushmobiletyrefitting[.]co[.]uk/ | CRITICAL | 90/100 | payload_delivery | โ | Source classification: payload_delivery. |
| noasdoastrien[.]top | CRITICAL | 100/100 | payload_delivery | js.iclickfix | Associated with js.iclickfix activity; source classification: payload_delivery. |
| amber-weave-otter-luor[.]pro | CRITICAL | 100/100 | payload_delivery | js.iclickfix | Associated with js.iclickfix activity; source classification: payload_delivery. |
| solar-glide-moss-luon[.]top | CRITICAL | 100/100 | payload_delivery | js.iclickfix | Associated with js.iclickfix activity; source classification: payload_delivery. |
| hxxps://miyagi[.]group/ | CRITICAL | 90/100 | payload_delivery | โ | Source classification: payload_delivery. |
| jorgealderete[.]com | CRITICAL | 100/100 | payload_delivery | js.iclickfix | Associated with js.iclickfix activity; source classification: payload_delivery. |
| junkcarscafe[.]com | CRITICAL | 100/100 | payload_delivery | js.iclickfix | Associated with js.iclickfix activity; source classification: payload_delivery. |
| kavemeres[.]hu | CRITICAL | 100/100 | payload_delivery | js.iclickfix | Associated with js.iclickfix activity; source classification: payload_delivery. |
| kyosotechltd[.]co[.]uk | CRITICAL | 100/100 | payload_delivery | js.iclickfix | Associated with js.iclickfix activity; source classification: payload_delivery. |
| loyaltyaviation[.]com | CRITICAL | 100/100 | payload_delivery | js.iclickfix | Associated with js.iclickfix activity; source classification: payload_delivery. |
| mahongrentalmotor[.]com | CRITICAL | 100/100 | payload_delivery | js.iclickfix | Associated with js.iclickfix activity; source classification: payload_delivery. |
| megahavalandirma[.]com | CRITICAL | 100/100 | payload_delivery | js.iclickfix | Associated with js.iclickfix activity; source classification: payload_delivery. |
Source: User-provided IOC feed export dated 26 September 2026. The supplied feed identifies the 100 values as source-provided confidence; IOCs are defanged for safe publication.