CYBERRAKSHAK LABS · DAILY GLOBAL THREAT INTELLIGENCE

GTI Feed — 17 October 2026

Daily defensive threat intelligence feed containing 100 source-provided, defanged indicators for 17 October 2026.

Table format: IoC · Severity · Confidence · Involved Threat Type · Malware / Family · Brief Attack Description
IoCSeverityConfidenceInvolved Threat TypeMalware / FamilyBrief Attack Description
hxxps://r[.]88bravo[.]com/CRITICAL100/100botnet_ccVidarAssociated with Vidar activity according to the source classification.
hxxps://r[.]88bravo[.]comCRITICAL100/100botnet_ccVidarAssociated with Vidar activity according to the source classification.
hxxps://ah[.]88bravo[.]com/CRITICAL100/100botnet_ccVidarAssociated with Vidar activity according to the source classification.
hxxps://ah[.]88bravo[.]comCRITICAL100/100botnet_ccVidarAssociated with Vidar activity according to the source classification.
hxxps://l[.]7sot[.]orgCRITICAL100/100botnet_ccVidarAssociated with Vidar activity according to the source classification.
hxxps://cdn[.]jsdelivr[.]net/gh/werd19327/a33fa0a-3d04-45ee-ad11-3026ed95372/a7ea-ee73049399cCRITICAL100/100payload_deliveryClearFakeAssociated with ClearFake activity according to the source classification.
hxxps://www[.]diginas[.]fr/CRITICAL90/100payload_delivery—Source classification: payload delivery.
hxxps://www[.]cloudguild[.]tn/CRITICAL90/100payload_delivery—Source classification: payload delivery.
hxxps://nova-75[.]com/curl/waxeqrf1w/56d7vzaivvpne4fbqg.jsonCRITICAL100/100payload_deliveryAMOS (source label)Associated with AMOS (source label) activity according to the source classification.
hxxps://nova-75[.]com/f/vrhqljbnscwhbyhltuwmsq/t2990cmjCRITICAL100/100payload_deliveryAMOS (source label)Associated with AMOS (source label) activity according to the source classification.
hxxps://bhumivista[.]com/CRITICAL90/100payload_delivery—Source classification: payload delivery.
hxxps://xi[.]88bravo[.]com/CRITICAL100/100botnet_ccVidarAssociated with Vidar activity according to the source classification.
hxxps://xi[.]88bravo[.]comCRITICAL100/100botnet_ccVidarAssociated with Vidar activity according to the source classification.
hxxps://admin[.]msxfweb[.]net/CRITICAL90/100payload_delivery—Source classification: payload delivery.
hxxps://tools[.]lumma[.]cy/WindowsActivatorV5CRITICAL90/100payload_delivery—Source classification: payload delivery.
hxxps://pro[.]jasperwater[.]info/auth/role-asset.jsCRITICAL100/100payload_deliverySmartApeSG (source label)Associated with SmartApeSG (source label) activity according to the source classification.
hxxps://seleniteatrium[.]org/middleware/oauth-effect.jsCRITICAL100/100payload_deliverySmartApeSG (source label)Associated with SmartApeSG (source label) activity according to the source classification.
hxxps://d6[.]76k[.]orgCRITICAL100/100botnet_ccVidarAssociated with Vidar activity according to the source classification.
hxxps://v01[.]88bravo[.]comCRITICAL100/100botnet_ccVidarAssociated with Vidar activity according to the source classification.
hxxps://v01[.]88bravo[.]com/CRITICAL100/100botnet_ccVidarAssociated with Vidar activity according to the source classification.
hxxps://ntrw[.]nl/CRITICAL90/100payload_delivery—Source classification: payload delivery.
hxxps://clevershop[.]nl/CRITICAL90/100payload_delivery—Source classification: payload delivery.
hxxps://seleniteatrium[.]org/middleware/endpoint-xmlCRITICAL100/100payload_deliverySmartApeSG (source label)Associated with SmartApeSG (source label) activity according to the source classification.
hxxps://seleniteatrium[.]org/middleware/tenant-dom.jsCRITICAL100/100payload_deliverySmartApeSG (source label)Associated with SmartApeSG (source label) activity according to the source classification.
hxxps://phv[.]88bravo[.]com/n/CRITICAL100/100botnet_ccVidarAssociated with Vidar activity according to the source classification.
hxxps://conntent[.]s4solar[.]co[.]nz/download.php/Complete_Condition_Assessment_MP4CRITICAL100/100payload_deliveryPureRAT (source label)Associated with PureRAT (source label) activity according to the source classification.
hxxps://phv[.]88bravo[.]com/nCRITICAL100/100botnet_ccVidarAssociated with Vidar activity according to the source classification.
hxxps://phv[.]88bravo[.]com/svCRITICAL100/100botnet_ccVidarAssociated with Vidar activity according to the source classification.
hxxps://phv[.]88bravo[.]com/sv/CRITICAL100/100botnet_ccVidarAssociated with Vidar activity according to the source classification.
hxxps://phv[.]88bravo[.]com/iCRITICAL100/100botnet_ccVidarAssociated with Vidar activity according to the source classification.
hxxps://phv[.]88bravo[.]com/rv6/CRITICAL100/100botnet_ccVidarAssociated with Vidar activity according to the source classification.
hxxps://phv[.]88bravo[.]com/rv6CRITICAL100/100botnet_ccVidarAssociated with Vidar activity according to the source classification.
hxxps://phv[.]88bravo[.]com/pxCRITICAL100/100botnet_ccVidarAssociated with Vidar activity according to the source classification.
hxxps://phv[.]88bravo[.]com/fiCRITICAL100/100botnet_ccVidarAssociated with Vidar activity according to the source classification.
hxxps://phv[.]88bravo[.]com/e9/CRITICAL100/100botnet_ccVidarAssociated with Vidar activity according to the source classification.
hxxps://phv[.]88bravo[.]com/e9CRITICAL100/100botnet_ccVidarAssociated with Vidar activity according to the source classification.
hxxps://phv[.]88bravo[.]com/b8CRITICAL100/100botnet_ccVidarAssociated with Vidar activity according to the source classification.
hxxps://phv[.]88bravo[.]comCRITICAL100/100botnet_ccVidarAssociated with Vidar activity according to the source classification.
hxxps://mooimanmode[.]nl/CRITICAL90/100payload_delivery—Source classification: payload delivery.
hxxps://wb[.]88bravo[.]com/ba/CRITICAL100/100botnet_ccVidarAssociated with Vidar activity according to the source classification.
hxxps://wb[.]88bravo[.]com/baCRITICAL100/100botnet_ccVidarAssociated with Vidar activity according to the source classification.
hxxps://wb[.]88bravo[.]com/zCRITICAL100/100botnet_ccVidarAssociated with Vidar activity according to the source classification.
hxxps://wb[.]88bravo[.]com/olCRITICAL100/100botnet_ccVidarAssociated with Vidar activity according to the source classification.
hxxps://wb[.]88bravo[.]com/bu/CRITICAL100/100botnet_ccVidarAssociated with Vidar activity according to the source classification.
hxxps://wb[.]88bravo[.]com/buCRITICAL100/100botnet_ccVidarAssociated with Vidar activity according to the source classification.
hxxps://wb[.]88bravo[.]com/iftCRITICAL100/100botnet_ccVidarAssociated with Vidar activity according to the source classification.
hxxps://wb[.]88bravo[.]com/k7u/CRITICAL100/100botnet_ccVidarAssociated with Vidar activity according to the source classification.
hxxps://wb[.]88bravo[.]com/k7uCRITICAL100/100botnet_ccVidarAssociated with Vidar activity according to the source classification.
hxxps://wb[.]88bravo[.]com/nfCRITICAL100/100botnet_ccVidarAssociated with Vidar activity according to the source classification.
hxxps://wb[.]88bravo[.]com/ourCRITICAL100/100botnet_ccVidarAssociated with Vidar activity according to the source classification.
hxxps://wb[.]88bravo[.]com/id/CRITICAL100/100botnet_ccVidarAssociated with Vidar activity according to the source classification.
hxxps://wb[.]88bravo[.]com/idCRITICAL100/100botnet_ccVidarAssociated with Vidar activity according to the source classification.
hxxps://wb[.]88bravo[.]com/qoCRITICAL100/100botnet_ccVidarAssociated with Vidar activity according to the source classification.
hxxps://wb[.]88bravo[.]com/asbCRITICAL100/100botnet_ccVidarAssociated with Vidar activity according to the source classification.
hxxps://wb[.]88bravo[.]com/asb/CRITICAL100/100botnet_ccVidarAssociated with Vidar activity according to the source classification.
hxxps://wb[.]88bravo[.]com/jsCRITICAL100/100botnet_ccVidarAssociated with Vidar activity according to the source classification.
hxxps://wb[.]88bravo[.]com/xlCRITICAL100/100botnet_ccVidarAssociated with Vidar activity according to the source classification.
hxxps://wb[.]88bravo[.]com/mp/CRITICAL100/100botnet_ccVidarAssociated with Vidar activity according to the source classification.
hxxps://wb[.]88bravo[.]com/mpCRITICAL100/100botnet_ccVidarAssociated with Vidar activity according to the source classification.
hxxps://wb[.]88bravo[.]com/dCRITICAL100/100botnet_ccVidarAssociated with Vidar activity according to the source classification.
hxxps://googlegemini-earlyaccess[.]com/CRITICAL90/100payload_delivery—Source classification: payload delivery.
hxxps://tradecorp[.]com[.]de/CRITICAL90/100payload_delivery—Source classification: payload delivery.
hxxps://uzickanedelja[.]com/acsgroup/procurementpage/2026.htmlCRITICAL90/100payload_delivery—Source classification: payload delivery.
hxxps://wb[.]88bravo[.]com/k8/CRITICAL100/100botnet_ccVidarAssociated with Vidar activity according to the source classification.
hxxps://wb[.]88bravo[.]com/k8CRITICAL100/100botnet_ccVidarAssociated with Vidar activity according to the source classification.
hxxps://wb[.]88bravo[.]com/lkvCRITICAL100/100botnet_ccVidarAssociated with Vidar activity according to the source classification.
hxxps://wb[.]88bravo[.]com/bpCRITICAL100/100botnet_ccVidarAssociated with Vidar activity according to the source classification.
hxxps://wb[.]88bravo[.]com/u/CRITICAL100/100botnet_ccVidarAssociated with Vidar activity according to the source classification.
hxxps://wb[.]88bravo[.]com/uCRITICAL100/100botnet_ccVidarAssociated with Vidar activity according to the source classification.
hxxps://wb[.]88bravo[.]com/o2CRITICAL100/100botnet_ccVidarAssociated with Vidar activity according to the source classification.
hxxps://wb[.]88bravo[.]com/l4/CRITICAL100/100botnet_ccVidarAssociated with Vidar activity according to the source classification.
hxxps://wb[.]88bravo[.]com/l4CRITICAL100/100botnet_ccVidarAssociated with Vidar activity according to the source classification.
hxxps://wb[.]88bravo[.]com/rnCRITICAL100/100botnet_ccVidarAssociated with Vidar activity according to the source classification.
hxxps://wb[.]88bravo[.]com/x6CRITICAL100/100botnet_ccVidarAssociated with Vidar activity according to the source classification.
hxxps://wb[.]88bravo[.]com/c5/CRITICAL100/100botnet_ccVidarAssociated with Vidar activity according to the source classification.
hxxps://wb[.]88bravo[.]com/c5CRITICAL100/100botnet_ccVidarAssociated with Vidar activity according to the source classification.
hxxps://wb[.]88bravo[.]com/xcCRITICAL100/100botnet_ccVidarAssociated with Vidar activity according to the source classification.
hxxps://wb[.]88bravo[.]com/r/CRITICAL100/100botnet_ccVidarAssociated with Vidar activity according to the source classification.
hxxps://wb[.]88bravo[.]com/rCRITICAL100/100botnet_ccVidarAssociated with Vidar activity according to the source classification.
hxxps://wb[.]88bravo[.]com/pmkCRITICAL100/100botnet_ccVidarAssociated with Vidar activity according to the source classification.
hxxps://wb[.]88bravo[.]com/xuCRITICAL100/100botnet_ccVidarAssociated with Vidar activity according to the source classification.
hxxps://wb[.]88bravo[.]com/eu/CRITICAL100/100botnet_ccVidarAssociated with Vidar activity according to the source classification.
hxxps://wb[.]88bravo[.]com/euCRITICAL100/100botnet_ccVidarAssociated with Vidar activity according to the source classification.
hxxps://dg[.]888idrcatchy[.]org/khCRITICAL100/100botnet_ccVidarAssociated with Vidar activity according to the source classification.
hxxps://wb[.]88bravo[.]comCRITICAL100/100botnet_ccVidarAssociated with Vidar activity according to the source classification.
hxxps://dg[.]888idrcatchy[.]org/a1/CRITICAL100/100botnet_ccVidarAssociated with Vidar activity according to the source classification.
hxxps://dg[.]888idrcatchy[.]org/a1CRITICAL100/100botnet_ccVidarAssociated with Vidar activity according to the source classification.
hxxps://dg[.]888idrcatchy[.]org/uvCRITICAL100/100botnet_ccVidarAssociated with Vidar activity according to the source classification.
hxxps://dg[.]888idrcatchy[.]org/liCRITICAL100/100botnet_ccVidarAssociated with Vidar activity according to the source classification.
hxxps://dg[.]888idrcatchy[.]org/we7/CRITICAL100/100botnet_ccVidarAssociated with Vidar activity according to the source classification.
hxxps://dg[.]888idrcatchy[.]org/we7CRITICAL100/100botnet_ccVidarAssociated with Vidar activity according to the source classification.
hxxps://dg[.]888idrcatchy[.]org/vnCRITICAL100/100botnet_ccVidarAssociated with Vidar activity according to the source classification.
hxxps://dg[.]888idrcatchy[.]org/n1/CRITICAL100/100botnet_ccVidarAssociated with Vidar activity according to the source classification.
hxxps://cdn[.]jsdelivr[.]net/gh/48ac-825/9196390c-caeb-4a56-bea8-b229b60d0f1/bc6e-8af110e523CRITICAL100/100payload_deliveryClearFakeAssociated with ClearFake activity according to the source classification.
hxxps://dg[.]888idrcatchy[.]org/n1CRITICAL100/100botnet_ccVidarAssociated with Vidar activity according to the source classification.
hxxps://dg[.]888idrcatchy[.]org/w7CRITICAL100/100botnet_ccVidarAssociated with Vidar activity according to the source classification.
hxxps://dg[.]888idrcatchy[.]org/oCRITICAL100/100botnet_ccVidarAssociated with Vidar activity according to the source classification.
hxxps://dg[.]888idrcatchy[.]org/rr/CRITICAL100/100botnet_ccVidarAssociated with Vidar activity according to the source classification.
hxxps://dg[.]888idrcatchy[.]org/rrCRITICAL100/100botnet_ccVidarAssociated with Vidar activity according to the source classification.
hxxps://dg[.]888idrcatchy[.]org/utCRITICAL100/100botnet_ccVidarAssociated with Vidar activity according to the source classification.

Source: User-provided IOC feed export dated 17 October 2026. Confidence values are source-provided, not independently calculated by CyberRakshakLabs; IOCs are defanged for safe publication. Malware/family labels are normalized from source activity names and are not independently validated. First-seen timestamps are preserved in historical data but omitted from this table by design.