CYBERRAKSHAK LABS · DAILY GLOBAL THREAT INTELLIGENCE

GTI Feed — 14 October 2026

Name: CyberRakshakLabs Daily Threat Intelligence Feed — 14 October 2026
Creator: CyberRakshakLabs
Published: 2026-10-14

Daily defensive threat intelligence feed containing 100 source-provided, defanged indicators for 14 October 2026.

Table format: IoC · Severity · Confidence · Involved Threat Type · Malware / Family · Brief Attack Description

IoC	Severity	Confidence	Involved Threat Type	Malware / Family	Brief Attack Description
`amanahceria[.]us[.]com`	CRITICAL	100/100	payload_delivery	ClearFake	Associated with ClearFake activity according to the source classification.
`browse-codes-enter[.]beer`	CRITICAL	100/100	payload_delivery	ClickFix	Associated with ClickFix activity according to the source classification.
`01sz1h97[.]cita-top[.]com`	CRITICAL	100/100	payload_delivery	ClearFake	Associated with ClearFake activity according to the source classification.
`alkaleejia[.]wiki`	CRITICAL	100/100	payload_delivery	ClearFake	Associated with ClearFake activity according to the source classification.
`xg1iu5w5[.]asesoriamerenlinea[.]com`	CRITICAL	100/100	payload_delivery	ClearFake	Associated with ClearFake activity according to the source classification.
`alkaleejia[.]com`	CRITICAL	100/100	payload_delivery	ClearFake	Associated with ClearFake activity according to the source classification.
`www[.]solis-srl[.]com`	CRITICAL	90/100	payload_delivery	Unspecified	The source identifies this indicator as compromised infrastructure used for payload delivery; no specific malware family is identified in the supplied row.
`www[.]simonacheli[.]com`	CRITICAL	90/100	payload_delivery	Unspecified	The source identifies this indicator as compromised infrastructure used for payload delivery; no specific malware family is identified in the supplied row.
`importdoortodoor[.]id`	CRITICAL	90/100	payload_delivery	Unspecified	The source identifies this indicator as compromised infrastructure used for payload delivery; no specific malware family is identified in the supplied row.
`lagenteruzafa[.]es`	CRITICAL	90/100	payload_delivery	Unspecified	The source identifies this indicator as compromised infrastructure used for payload delivery; no specific malware family is identified in the supplied row.
`checkvbbrows39[.]cc`	CRITICAL	100/100	payload_delivery	ClickFix	Associated with ClickFix activity according to the source classification.
`hel1uuve[.]asesoriabamk[.]com`	CRITICAL	100/100	payload_delivery	ClearFake	Associated with ClearFake activity according to the source classification.
`agpoferroli1[.]nl`	CRITICAL	100/100	payload_delivery	ClearFake	Associated with ClearFake activity according to the source classification.
`www[.]slighfoxinc[.]com`	CRITICAL	90/100	payload_delivery	Unspecified	The source identifies this indicator as compromised infrastructure used for payload delivery; no specific malware family is identified in the supplied row.
`www[.]stmichaelsway[.]eu`	CRITICAL	90/100	payload_delivery	Unspecified	The source identifies this indicator as compromised infrastructure used for payload delivery; no specific malware family is identified in the supplied row.
`www[.]view360[.]lk`	CRITICAL	90/100	payload_delivery	Unspecified	The source identifies this indicator as compromised infrastructure used for payload delivery; no specific malware family is identified in the supplied row.
`www[.]solevento[.]eu`	CRITICAL	90/100	payload_delivery	Unspecified	The source identifies this indicator as compromised infrastructure used for payload delivery; no specific malware family is identified in the supplied row.
`www[.]sumuttoday[.]com`	CRITICAL	90/100	payload_delivery	Unspecified	The source identifies this indicator as compromised infrastructure used for payload delivery; no specific malware family is identified in the supplied row.
`conceitualalbuns[.]com[.]br`	CRITICAL	90/100	payload_delivery	Unspecified	The source identifies this indicator as compromised infrastructure used for payload delivery; no specific malware family is identified in the supplied row.
`senturkvincyapi[.]com`	CRITICAL	90/100	payload_delivery	Unspecified	The source identifies this indicator as compromised infrastructure used for payload delivery; no specific malware family is identified in the supplied row.
`www[.]pachamamaroteisland[.]com`	CRITICAL	90/100	payload_delivery	Unspecified	The source identifies this indicator as compromised infrastructure used for payload delivery; no specific malware family is identified in the supplied row.
`www[.]mandarinclassroom[.]hk`	CRITICAL	90/100	payload_delivery	Unspecified	The source identifies this indicator as compromised infrastructure used for payload delivery; no specific malware family is identified in the supplied row.
`www[.]joseluislacasta[.]com`	CRITICAL	90/100	payload_delivery	Unspecified	The source identifies this indicator as compromised infrastructure used for payload delivery; no specific malware family is identified in the supplied row.
`1stmarijuanagrowerspage[.]com`	CRITICAL	100/100	payload_delivery	ClearFake	Associated with ClearFake activity according to the source classification.
`www[.]nicociucci[.]com`	CRITICAL	90/100	payload_delivery	Unspecified	The source identifies this indicator as compromised infrastructure used for payload delivery; no specific malware family is identified in the supplied row.
`www[.]roofmartlk[.]com`	CRITICAL	90/100	payload_delivery	Unspecified	The source identifies this indicator as compromised infrastructure used for payload delivery; no specific malware family is identified in the supplied row.
`regnantitsolutions[.]com`	CRITICAL	90/100	payload_delivery	Unspecified	The source identifies this indicator as compromised infrastructure used for payload delivery; no specific malware family is identified in the supplied row.
`quadhubtrade[.]com`	CRITICAL	90/100	payload_delivery	Unspecified	The source identifies this indicator as compromised infrastructure used for payload delivery; no specific malware family is identified in the supplied row.
`www[.]nahr-iq[.]org`	CRITICAL	90/100	payload_delivery	Unspecified	The source identifies this indicator as compromised infrastructure used for payload delivery; no specific malware family is identified in the supplied row.
`www[.]elpitallerdeflors[.]com`	CRITICAL	90/100	payload_delivery	Unspecified	The source identifies this indicator as compromised infrastructure used for payload delivery; no specific malware family is identified in the supplied row.
`www[.]litoerre[.]com`	CRITICAL	90/100	payload_delivery	Unspecified	The source identifies this indicator as compromised infrastructure used for payload delivery; no specific malware family is identified in the supplied row.
`www[.]ecoflow-shower[.]fr`	CRITICAL	90/100	payload_delivery	Unspecified	The source identifies this indicator as compromised infrastructure used for payload delivery; no specific malware family is identified in the supplied row.
`capchaprotectcs[.]com`	CRITICAL	90/100	payload_delivery	Unspecified	The supplied feed does not identify a specific malware family; source classification is unknown for this payload_delivery indicator.
`kingsrxandwellness[.]com`	CRITICAL	90/100	payload_delivery	Unspecified	The source identifies this indicator as compromised infrastructure used for payload delivery; no specific malware family is identified in the supplied row.
`nicolas3007[.]online`	CRITICAL	90/100	payload_delivery	Unspecified	The source identifies this indicator as compromised infrastructure used for payload delivery; no specific malware family is identified in the supplied row.
`lincolnfinancialservicesllc[.]com`	CRITICAL	90/100	payload_delivery	Unspecified	The source identifies this indicator as compromised infrastructure used for payload delivery; no specific malware family is identified in the supplied row.
`mauricetalton[.]com`	CRITICAL	90/100	payload_delivery	Unspecified	The source identifies this indicator as compromised infrastructure used for payload delivery; no specific malware family is identified in the supplied row.
`webpageclouds[.]online`	CRITICAL	90/100	payload_delivery	Unspecified	The supplied feed does not identify a specific malware family; source classification is unknown for this payload_delivery indicator.
`cloudyredirect[.]online`	CRITICAL	90/100	payload_delivery	Unspecified	The supplied feed does not identify a specific malware family; source classification is unknown for this payload_delivery indicator.
`funktionflooring[.]co[.]za`	CRITICAL	90/100	payload_delivery	Unspecified	The source identifies this indicator as compromised infrastructure used for payload delivery; no specific malware family is identified in the supplied row.
`www[.]danieldewaldgreyfeathers[.]com`	CRITICAL	90/100	payload_delivery	Unspecified	The source identifies this indicator as compromised infrastructure used for payload delivery; no specific malware family is identified in the supplied row.
`fitneszgoals[.]com`	CRITICAL	90/100	payload_delivery	Unspecified	The source identifies this indicator as compromised infrastructure used for payload delivery; no specific malware family is identified in the supplied row.
`glosamarina[.]com`	CRITICAL	90/100	payload_delivery	Unspecified	The source identifies this indicator as compromised infrastructure used for payload delivery; no specific malware family is identified in the supplied row.
`www[.]greenwellhealthcare[.]com`	CRITICAL	90/100	payload_delivery	Unspecified	The source identifies this indicator as compromised infrastructure used for payload delivery; no specific malware family is identified in the supplied row.
`www[.]essexprestigebuildingservicesltd[.]co[.]uk`	CRITICAL	90/100	payload_delivery	Unspecified	The source identifies this indicator as compromised infrastructure used for payload delivery; no specific malware family is identified in the supplied row.
`www[.]antonicelliformazione[.]it`	CRITICAL	90/100	payload_delivery	Unspecified	The source identifies this indicator as compromised infrastructure used for payload delivery; no specific malware family is identified in the supplied row.
`www[.]centrovertiginitorino[.]it`	CRITICAL	90/100	payload_delivery	Unspecified	The source identifies this indicator as compromised infrastructure used for payload delivery; no specific malware family is identified in the supplied row.
`www[.]3ob[.]fr`	CRITICAL	90/100	payload_delivery	Unspecified	The source identifies this indicator as compromised infrastructure used for payload delivery; no specific malware family is identified in the supplied row.
`forteprecatorios[.]com[.]br`	CRITICAL	90/100	payload_delivery	Unspecified	The source identifies this indicator as compromised infrastructure used for payload delivery; no specific malware family is identified in the supplied row.
`www[.]asturigin[.]com`	CRITICAL	90/100	payload_delivery	Unspecified	The source identifies this indicator as compromised infrastructure used for payload delivery; no specific malware family is identified in the supplied row.
`beyondphotography[.]vn`	CRITICAL	90/100	payload_delivery	Unspecified	The source identifies this indicator as compromised infrastructure used for payload delivery; no specific malware family is identified in the supplied row.
`btltrimsaccessories[.]com`	CRITICAL	90/100	payload_delivery	Unspecified	The source identifies this indicator as compromised infrastructure used for payload delivery; no specific malware family is identified in the supplied row.
`algherocar[.]com`	CRITICAL	90/100	payload_delivery	Unspecified	The source identifies this indicator as compromised infrastructure used for payload delivery; no specific malware family is identified in the supplied row.
`adonaicleaningservices[.]co[.]za`	CRITICAL	90/100	payload_delivery	Unspecified	The source identifies this indicator as compromised infrastructure used for payload delivery; no specific malware family is identified in the supplied row.
`almonjid[.]com`	CRITICAL	90/100	payload_delivery	Unspecified	The source identifies this indicator as compromised infrastructure used for payload delivery; no specific malware family is identified in the supplied row.
`bewustconsulting[.]com`	CRITICAL	90/100	payload_delivery	Unspecified	The source identifies this indicator as compromised infrastructure used for payload delivery; no specific malware family is identified in the supplied row.
`a2a-mednet[.]com`	CRITICAL	90/100	payload_delivery	Unspecified	The source identifies this indicator as compromised infrastructure used for payload delivery; no specific malware family is identified in the supplied row.
`chrismooneysingh[.]com`	CRITICAL	90/100	payload_delivery	Unspecified	The source identifies this indicator as compromised infrastructure used for payload delivery; no specific malware family is identified in the supplied row.
`beerbalco[.]com`	CRITICAL	90/100	payload_delivery	Unspecified	The source identifies this indicator as compromised infrastructure used for payload delivery; no specific malware family is identified in the supplied row.
`compujuank[.]com`	CRITICAL	90/100	payload_delivery	Unspecified	The source identifies this indicator as compromised infrastructure used for payload delivery; no specific malware family is identified in the supplied row.
`chessplus[.]edu[.]vn`	CRITICAL	90/100	payload_delivery	Unspecified	The source identifies this indicator as compromised infrastructure used for payload delivery; no specific malware family is identified in the supplied row.
`danialterations[.]com`	CRITICAL	90/100	payload_delivery	Unspecified	The source identifies this indicator as compromised infrastructure used for payload delivery; no specific malware family is identified in the supplied row.
`ahhs[.]edu[.]bd`	CRITICAL	90/100	payload_delivery	Unspecified	The source identifies this indicator as compromised infrastructure used for payload delivery; no specific malware family is identified in the supplied row.
`ajudaai[.]app[.]br`	CRITICAL	90/100	payload_delivery	Unspecified	The source identifies this indicator as compromised infrastructure used for payload delivery; no specific malware family is identified in the supplied row.
`e-mobilitysearch[.]com`	CRITICAL	90/100	payload_delivery	Unspecified	The source identifies this indicator as compromised infrastructure used for payload delivery; no specific malware family is identified in the supplied row.
`alamoxsreal[.]com`	CRITICAL	90/100	payload_delivery	Unspecified	The source identifies this indicator as compromised infrastructure used for payload delivery; no specific malware family is identified in the supplied row.
`afforestintl[.]com`	CRITICAL	90/100	payload_delivery	Unspecified	The source identifies this indicator as compromised infrastructure used for payload delivery; no specific malware family is identified in the supplied row.
`ararchoir[.]com`	CRITICAL	90/100	payload_delivery	Unspecified	The source identifies this indicator as compromised infrastructure used for payload delivery; no specific malware family is identified in the supplied row.
`cinnalogy[.]com`	CRITICAL	90/100	payload_delivery	Unspecified	The source identifies this indicator as compromised infrastructure used for payload delivery; no specific malware family is identified in the supplied row.
`bj66bet[.]com`	CRITICAL	90/100	payload_delivery	Unspecified	The source identifies this indicator as compromised infrastructure used for payload delivery; no specific malware family is identified in the supplied row.
`autoescolavallecar[.]com`	CRITICAL	90/100	payload_delivery	Unspecified	The source identifies this indicator as compromised infrastructure used for payload delivery; no specific malware family is identified in the supplied row.
`cctonami[.]jp`	CRITICAL	90/100	payload_delivery	Unspecified	The source identifies this indicator as compromised infrastructure used for payload delivery; no specific malware family is identified in the supplied row.
`andrestaedele[.]com`	CRITICAL	90/100	payload_delivery	Unspecified	The source identifies this indicator as compromised infrastructure used for payload delivery; no specific malware family is identified in the supplied row.
`dunlapconstructionllc[.]com`	CRITICAL	90/100	payload_delivery	Unspecified	The source identifies this indicator as compromised infrastructure used for payload delivery; no specific malware family is identified in the supplied row.
`2legendsnyc[.]com`	CRITICAL	90/100	payload_delivery	Unspecified	The source identifies this indicator as compromised infrastructure used for payload delivery; no specific malware family is identified in the supplied row.
`988wan[.]me`	CRITICAL	90/100	payload_delivery	Unspecified	The source identifies this indicator as compromised infrastructure used for payload delivery; no specific malware family is identified in the supplied row.
`cleancorebaltimore[.]com`	CRITICAL	90/100	payload_delivery	Unspecified	The source identifies this indicator as compromised infrastructure used for payload delivery; no specific malware family is identified in the supplied row.
`chanjohnsonmusic[.]com`	CRITICAL	90/100	payload_delivery	Unspecified	The source identifies this indicator as compromised infrastructure used for payload delivery; no specific malware family is identified in the supplied row.
`afrogarnics[.]us`	CRITICAL	90/100	payload_delivery	Unspecified	The source identifies this indicator as compromised infrastructure used for payload delivery; no specific malware family is identified in the supplied row.
`bj66khuyenmai[.]com`	CRITICAL	90/100	payload_delivery	Unspecified	The source identifies this indicator as compromised infrastructure used for payload delivery; no specific malware family is identified in the supplied row.
`bj66c1[.]com`	CRITICAL	90/100	payload_delivery	Unspecified	The source identifies this indicator as compromised infrastructure used for payload delivery; no specific malware family is identified in the supplied row.
`arusmrtech[.]com`	CRITICAL	90/100	payload_delivery	Unspecified	The source identifies this indicator as compromised infrastructure used for payload delivery; no specific malware family is identified in the supplied row.
`al-loaloah[.]com`	CRITICAL	90/100	payload_delivery	Unspecified	The source identifies this indicator as compromised infrastructure used for payload delivery; no specific malware family is identified in the supplied row.
`balconyinspectionlosangeles[.]com`	CRITICAL	90/100	payload_delivery	Unspecified	The source identifies this indicator as compromised infrastructure used for payload delivery; no specific malware family is identified in the supplied row.
`bj66[.]bet`	CRITICAL	90/100	payload_delivery	Unspecified	The source identifies this indicator as compromised infrastructure used for payload delivery; no specific malware family is identified in the supplied row.
`ava-group[.]fr`	CRITICAL	90/100	payload_delivery	Unspecified	The source identifies this indicator as compromised infrastructure used for payload delivery; no specific malware family is identified in the supplied row.
`brandbunch[.]pk`	CRITICAL	90/100	payload_delivery	Unspecified	The source identifies this indicator as compromised infrastructure used for payload delivery; no specific malware family is identified in the supplied row.
`explain-it-simple[.]net`	CRITICAL	90/100	payload_delivery	Unspecified	The source identifies this indicator as compromised infrastructure used for payload delivery; no specific malware family is identified in the supplied row.
`afconstruc[.]com`	CRITICAL	90/100	payload_delivery	Unspecified	The source identifies this indicator as compromised infrastructure used for payload delivery; no specific malware family is identified in the supplied row.
`eneractenergy[.]com`	CRITICAL	90/100	payload_delivery	Unspecified	The source identifies this indicator as compromised infrastructure used for payload delivery; no specific malware family is identified in the supplied row.
`serviciosgonzalezmx[.]com`	CRITICAL	100/100	payload_delivery	ClearFake	Associated with ClearFake activity according to the source classification.
`raster-87[.]com`	CRITICAL	100/100	botnet_cc	AMOS	Associated with AMOS activity according to the source classification.
`www[.]aperce[.]com[.]co`	CRITICAL	90/100	payload_delivery	Unspecified	The source identifies this indicator as compromised infrastructure used for payload delivery; no specific malware family is identified in the supplied row.
`0zj2voyo[.]roseanne[.]id`	CRITICAL	100/100	payload_delivery	ClearFake	Associated with ClearFake activity according to the source classification.
`new[.]sunstonewell[.]info`	CRITICAL	100/100	payload_delivery	SmartApeSG	Associated with SmartApeSG activity according to the source classification.
`motherotters[.]com`	CRITICAL	100/100	botnet_cc	Unknown Stealer	Associated with Unknown Stealer activity according to the source classification.
`healskills[.]com`	CRITICAL	100/100	botnet_cc	Unknown Stealer	Associated with Unknown Stealer activity according to the source classification.
`stormfangridge[.]top`	CRITICAL	100/100	cc_skimming	Magecart	Associated with Magecart activity according to the source classification.
`paleanchor[.]com`	CRITICAL	100/100	cc_skimming	Magecart	Associated with Magecart activity according to the source classification.
`stormwraith[.]com`	CRITICAL	100/100	cc_skimming	Magecart	Associated with Magecart activity according to the source classification.

Source: User-provided IOC feed export dated 14 October 2026. Confidence values are source-provided, not independently calculated by CyberRakshakLabs; IOCs are defanged for safe publication. Malware/family labels are normalized from source activity names and are not independently validated. First-seen timestamps are preserved in historical data but omitted from this table by design.

← Live GTI Feed GTI Archive →