CYBERRAKSHAK LABS · DAILY GLOBAL THREAT INTELLIGENCE
GTI Feed — 7 October 2026
Daily defensive threat intelligence feed containing 100 source-provided, defanged indicators for 7 October 2026.
Table format: IoC · Severity · Confidence · Involved Threat Type · Malware / Family · Brief Attack Description
| IoC | Severity | Confidence | Involved Threat Type | Malware / Family | Brief Attack Description |
|---|---|---|---|---|---|
ealiy01j[.]kaarenorge[.]com | CRITICAL | 100/100 | payload_delivery | js.clearfake | Associated with js.clearfake activity; source classification: payload_delivery. |
sadis[.]store | CRITICAL | 100/100 | payload_delivery | js.clearfake | Associated with js.clearfake activity; source classification: payload_delivery. |
botsportscanning[.]duckdns[.]org | CRITICAL | 90/100 | botnet_cc | elf.mirai | Associated with elf.mirai activity; source classification: botnet_cc. |
rosemaryballad[.]co | CRITICAL | 100/100 | payload_delivery | js.smartapesg | Associated with js.smartapesg activity; source classification: payload_delivery. |
match[.]sitefulia[.]com | CRITICAL | 100/100 | botnet_cc | js.fakeupdates | Associated with js.fakeupdates activity; source classification: botnet_cc. |
fog[.]blacklabelfremont[.]com | CRITICAL | 100/100 | botnet_cc | js.clearfake | Associated with js.clearfake activity; source classification: botnet_cc. |
ruut[.]store | CRITICAL | 100/100 | payload_delivery | js.clearfake | Associated with js.clearfake activity; source classification: payload_delivery. |
fog[.]blacklabelfremont[.]com | CRITICAL | 100/100 | payload_delivery | js.iclickfix | Associated with js.iclickfix activity; source classification: payload_delivery. |
kpxypqg0[.]kalem[.]store | CRITICAL | 100/100 | payload_delivery | js.clearfake | Associated with js.clearfake activity; source classification: payload_delivery. |
www[.]therapie-zentrum-dortmund[.]de | CRITICAL | 90/100 | payload_delivery | js.clearfake | Associated with js.clearfake activity; source classification: payload_delivery. |
2ell0jzk[.]lacek[.]store | CRITICAL | 100/100 | payload_delivery | js.clearfake | Associated with js.clearfake activity; source classification: payload_delivery. |
cashin24[.]ca | CRITICAL | 90/100 | payload_delivery | js.clearfake | Associated with js.clearfake activity; source classification: payload_delivery. |
rihan[.]store | CRITICAL | 100/100 | payload_delivery | js.clearfake | Associated with js.clearfake activity; source classification: payload_delivery. |
fo[.]3toto[.]com | CRITICAL | 100/100 | botnet_cc | win.vidar | Associated with win.vidar activity; source classification: botnet_cc. |
fo[.]333vip[.]org | CRITICAL | 100/100 | botnet_cc | win.vidar | Associated with win.vidar activity; source classification: botnet_cc. |
tiq3luyb[.]pattysole[.]com | CRITICAL | 100/100 | payload_delivery | js.clearfake | Associated with js.clearfake activity; source classification: payload_delivery. |
reyos[.]store | CRITICAL | 100/100 | payload_delivery | js.clearfake | Associated with js.clearfake activity; source classification: payload_delivery. |
baldreamloans[.]com[.]au | CRITICAL | 100/100 | payload_delivery | js.clearfake | Associated with js.clearfake activity; source classification: payload_delivery. |
zijpestijl[.]nl | CRITICAL | 90/100 | payload_delivery | js.clearfake | Associated with js.clearfake activity; source classification: payload_delivery. |
www[.]wood-fermetures[.]com | CRITICAL | 90/100 | payload_delivery | js.clearfake | Associated with js.clearfake activity; source classification: payload_delivery. |
www[.]yourbestmarriageblog[.]com | CRITICAL | 90/100 | payload_delivery | js.clearfake | Associated with js.clearfake activity; source classification: payload_delivery. |
6pf8j0h7[.]kundu[.]store | CRITICAL | 100/100 | payload_delivery | js.clearfake | Associated with js.clearfake activity; source classification: payload_delivery. |
uahel3js[.]jorda[.]store | CRITICAL | 100/100 | payload_delivery | js.clearfake | Associated with js.clearfake activity; source classification: payload_delivery. |
www[.]waypointagency[.]net | CRITICAL | 90/100 | payload_delivery | js.clearfake | Associated with js.clearfake activity; source classification: payload_delivery. |
www[.]wonderfulecuador[.]org | CRITICAL | 90/100 | payload_delivery | js.clearfake | Associated with js.clearfake activity; source classification: payload_delivery. |
www[.]zakazkovestolarstvo[.]sk | CRITICAL | 90/100 | payload_delivery | js.clearfake | Associated with js.clearfake activity; source classification: payload_delivery. |
www[.]tsas-usa[.]org | CRITICAL | 90/100 | payload_delivery | js.clearfake | Associated with js.clearfake activity; source classification: payload_delivery. |
www[.]viniveri[.]net | CRITICAL | 90/100 | payload_delivery | js.clearfake | Associated with js.clearfake activity; source classification: payload_delivery. |
www[.]twiscouter[.]com | CRITICAL | 90/100 | payload_delivery | js.clearfake | Associated with js.clearfake activity; source classification: payload_delivery. |
www[.]villa-gamrang[.]com | CRITICAL | 90/100 | payload_delivery | js.clearfake | Associated with js.clearfake activity; source classification: payload_delivery. |
ncmotores[.]com[.]br | CRITICAL | 90/100 | payload_delivery | js.clearfake | Associated with js.clearfake activity; source classification: payload_delivery. |
www[.]talentr[.]com | CRITICAL | 90/100 | payload_delivery | js.clearfake | Associated with js.clearfake activity; source classification: payload_delivery. |
www[.]tanetting[.]co[.]th | CRITICAL | 90/100 | payload_delivery | js.clearfake | Associated with js.clearfake activity; source classification: payload_delivery. |
www[.]topgunpressurewashing[.]com | CRITICAL | 90/100 | payload_delivery | js.clearfake | Associated with js.clearfake activity; source classification: payload_delivery. |
www[.]techlinksystems[.]com | CRITICAL | 90/100 | payload_delivery | js.clearfake | Associated with js.clearfake activity; source classification: payload_delivery. |
www[.]thalamuscharles[.]com | CRITICAL | 90/100 | payload_delivery | js.clearfake | Associated with js.clearfake activity; source classification: payload_delivery. |
vv[.]3toto[.]com | CRITICAL | 100/100 | botnet_cc | win.vidar | Associated with win.vidar activity; source classification: botnet_cc. |
vv[.]333vip[.]org | CRITICAL | 100/100 | botnet_cc | win.vidar | Associated with win.vidar activity; source classification: botnet_cc. |
www[.]escuelaloca[.]it | CRITICAL | 90/100 | payload_delivery | js.clearfake | Associated with js.clearfake activity; source classification: payload_delivery. |
tofselkenapsetayer[.]com | CRITICAL | 90/100 | payload_delivery | js.clearfake | Associated with js.clearfake activity; source classification: payload_delivery. |
cjwdj7hx[.]roseanne[.]id | CRITICAL | 100/100 | payload_delivery | js.clearfake | Associated with js.clearfake activity; source classification: payload_delivery. |
www[.]spinmovie[.]it | CRITICAL | 90/100 | payload_delivery | js.clearfake | Associated with js.clearfake activity; source classification: payload_delivery. |
www[.]sportveiculoscontagem[.]com[.]br | CRITICAL | 90/100 | payload_delivery | js.clearfake | Associated with js.clearfake activity; source classification: payload_delivery. |
www[.]strongboxsecurityservices[.]com | CRITICAL | 90/100 | payload_delivery | js.clearfake | Associated with js.clearfake activity; source classification: payload_delivery. |
www[.]stromcheckup[.]com | CRITICAL | 90/100 | payload_delivery | js.clearfake | Associated with js.clearfake activity; source classification: payload_delivery. |
www[.]snapplusstudio[.]com | CRITICAL | 90/100 | payload_delivery | js.clearfake | Associated with js.clearfake activity; source classification: payload_delivery. |
www[.]doppio-click[.]it | CRITICAL | 90/100 | payload_delivery | js.clearfake | Associated with js.clearfake activity; source classification: payload_delivery. |
www[.]stychnohumanitarianfoundation[.]com | CRITICAL | 90/100 | payload_delivery | js.clearfake | Associated with js.clearfake activity; source classification: payload_delivery. |
www[.]stv24[.]net | CRITICAL | 90/100 | payload_delivery | js.clearfake | Associated with js.clearfake activity; source classification: payload_delivery. |
www[.]spachmelnice[.]cz | CRITICAL | 90/100 | payload_delivery | js.clearfake | Associated with js.clearfake activity; source classification: payload_delivery. |
www[.]socrateinlove[.]com | CRITICAL | 90/100 | payload_delivery | js.clearfake | Associated with js.clearfake activity; source classification: payload_delivery. |
www[.]skylarfinserv[.]com | CRITICAL | 90/100 | payload_delivery | js.clearfake | Associated with js.clearfake activity; source classification: payload_delivery. |
www[.]styleamakaco[.]com | CRITICAL | 90/100 | payload_delivery | js.clearfake | Associated with js.clearfake activity; source classification: payload_delivery. |
djbpmstudio[.]com | CRITICAL | 100/100 | payload_delivery | js.clearfake | Associated with js.clearfake activity; source classification: payload_delivery. |
gwfsiev0[.]kubis[.]store | CRITICAL | 100/100 | payload_delivery | js.clearfake | Associated with js.clearfake activity; source classification: payload_delivery. |
luofix[.]com | CRITICAL | 90/100 | payload_delivery | js.clearfake | Associated with js.clearfake activity; source classification: payload_delivery. |
www[.]seelectricdesign[.]com | CRITICAL | 90/100 | payload_delivery | js.clearfake | Associated with js.clearfake activity; source classification: payload_delivery. |
www[.]rosalbafranco[.]it | CRITICAL | 90/100 | payload_delivery | js.clearfake | Associated with js.clearfake activity; source classification: payload_delivery. |
www[.]serrurierlux[.]fr | CRITICAL | 90/100 | payload_delivery | js.clearfake | Associated with js.clearfake activity; source classification: payload_delivery. |
www[.]segway-ninebot[.]com[.]ar | CRITICAL | 90/100 | payload_delivery | js.clearfake | Associated with js.clearfake activity; source classification: payload_delivery. |
www[.]scmlogistics-bf[.]com | CRITICAL | 90/100 | payload_delivery | js.clearfake | Associated with js.clearfake activity; source classification: payload_delivery. |
www[.]safetywares[.]qa | CRITICAL | 90/100 | payload_delivery | js.clearfake | Associated with js.clearfake activity; source classification: payload_delivery. |
www[.]san-ed[.]com | CRITICAL | 90/100 | payload_delivery | js.clearfake | Associated with js.clearfake activity; source classification: payload_delivery. |
www[.]sdfrigerio[.]it | CRITICAL | 90/100 | payload_delivery | js.clearfake | Associated with js.clearfake activity; source classification: payload_delivery. |
www[.]reyesmartialarts[.]com | CRITICAL | 90/100 | payload_delivery | js.clearfake | Associated with js.clearfake activity; source classification: payload_delivery. |
voegeli-beck[.]ch | CRITICAL | 90/100 | payload_delivery | js.clearfake | Associated with js.clearfake activity; source classification: payload_delivery. |
www[.]proentecsas[.]com | CRITICAL | 90/100 | payload_delivery | js.clearfake | Associated with js.clearfake activity; source classification: payload_delivery. |
www[.]sportcom[.]ch | CRITICAL | 90/100 | payload_delivery | js.clearfake | Associated with js.clearfake activity; source classification: payload_delivery. |
up[.]3toto[.]com | CRITICAL | 100/100 | botnet_cc | win.vidar | Associated with win.vidar activity; source classification: botnet_cc. |
www[.]renzograciemexico[.]com | CRITICAL | 90/100 | payload_delivery | js.clearfake | Associated with js.clearfake activity; source classification: payload_delivery. |
www[.]promoshops[.]eu | CRITICAL | 90/100 | payload_delivery | js.clearfake | Associated with js.clearfake activity; source classification: payload_delivery. |
www[.]reathlefitcenter[.]com | CRITICAL | 90/100 | payload_delivery | js.clearfake | Associated with js.clearfake activity; source classification: payload_delivery. |
www[.]qualeilmiglior[.]it | CRITICAL | 90/100 | payload_delivery | js.clearfake | Associated with js.clearfake activity; source classification: payload_delivery. |
fjallnascastle[.]se | CRITICAL | 90/100 | payload_delivery | js.clearfake | Associated with js.clearfake activity; source classification: payload_delivery. |
www[.]premierfitnesscamp[.]com | CRITICAL | 90/100 | payload_delivery | js.clearfake | Associated with js.clearfake activity; source classification: payload_delivery. |
www[.]portovecchio-corse[.]com | CRITICAL | 90/100 | payload_delivery | js.clearfake | Associated with js.clearfake activity; source classification: payload_delivery. |
www[.]pradelli[.]biz | CRITICAL | 90/100 | payload_delivery | js.clearfake | Associated with js.clearfake activity; source classification: payload_delivery. |
www[.]porcelli[.]eu | CRITICAL | 90/100 | payload_delivery | js.clearfake | Associated with js.clearfake activity; source classification: payload_delivery. |
www[.]pharmakeys[.]com | CRITICAL | 90/100 | payload_delivery | js.clearfake | Associated with js.clearfake activity; source classification: payload_delivery. |
www[.]pixelmedya[.]com[.]tr | CRITICAL | 90/100 | payload_delivery | js.clearfake | Associated with js.clearfake activity; source classification: payload_delivery. |
www[.]polokofuneralservices[.]co[.]za | CRITICAL | 90/100 | payload_delivery | js.clearfake | Associated with js.clearfake activity; source classification: payload_delivery. |
www[.]pintossi-flli[.]it | CRITICAL | 90/100 | payload_delivery | js.clearfake | Associated with js.clearfake activity; source classification: payload_delivery. |
www[.]palermocityblog[.]com | CRITICAL | 90/100 | payload_delivery | js.clearfake | Associated with js.clearfake activity; source classification: payload_delivery. |
up[.]333vip[.]org | CRITICAL | 100/100 | botnet_cc | win.vidar | Associated with win.vidar activity; source classification: botnet_cc. |
04ue33gt[.]truenarrator[.]com | CRITICAL | 100/100 | payload_delivery | js.clearfake | Associated with js.clearfake activity; source classification: payload_delivery. |
spbmmschool[.]ru | CRITICAL | 90/100 | payload_delivery | js.clearfake | Associated with js.clearfake activity; source classification: payload_delivery. |
getsupportonlinenow[.]com | CRITICAL | 100/100 | botnet_cc | unknown_rat | Associated with unknown_rat activity; source classification: botnet_cc. |
0nna1vpc[.]sallysprattstudio[.]com | CRITICAL | 100/100 | payload_delivery | js.clearfake | Associated with js.clearfake activity; source classification: payload_delivery. |
s5goru1r[.]kobet[.]store | CRITICAL | 100/100 | payload_delivery | js.clearfake | Associated with js.clearfake activity; source classification: payload_delivery. |
leaf[.]cafemartinezsa[.]com | CRITICAL | 100/100 | botnet_cc | js.clearfake | Associated with js.clearfake activity; source classification: botnet_cc. |
leaf[.]cafemartinezsa[.]com | CRITICAL | 100/100 | payload_delivery | js.iclickfix | Associated with js.iclickfix activity; source classification: payload_delivery. |
quoalmsiaxpliao[.]pro | CRITICAL | 100/100 | payload_delivery | js.iclickfix | Associated with js.iclickfix activity; source classification: payload_delivery. |
salfleoyn-willow[.]pro | CRITICAL | 100/100 | payload_delivery | js.iclickfix | Associated with js.iclickfix activity; source classification: payload_delivery. |
coral-vale-grialdkeon[.]top | CRITICAL | 100/100 | payload_delivery | js.iclickfix | Associated with js.iclickfix activity; source classification: payload_delivery. |
cuiskceogflayn[.]pro | CRITICAL | 100/100 | payload_delivery | js.iclickfix | Associated with js.iclickfix activity; source classification: payload_delivery. |
dusky-lark-piarnskaeum[.]ink | CRITICAL | 100/100 | payload_delivery | js.iclickfix | Associated with js.iclickfix activity; source classification: payload_delivery. |
indigocraelmtoaix[.]top | CRITICAL | 100/100 | payload_delivery | js.iclickfix | Associated with js.iclickfix activity; source classification: payload_delivery. |
lofsloatkioa[.]pro | CRITICAL | 100/100 | payload_delivery | js.iclickfix | Associated with js.iclickfix activity; source classification: payload_delivery. |
hi[.]3toto[.]com | CRITICAL | 100/100 | botnet_cc | win.vidar | Associated with win.vidar activity; source classification: botnet_cc. |
pixel-ninjas[.]de | CRITICAL | 90/100 | payload_delivery | js.clearfake | Associated with js.clearfake activity; source classification: payload_delivery. |
Source: User-provided IOC feed export dated 26 September 2026. The supplied feed identifies the 100 values as source-provided confidence; IOCs are defanged for safe publication.