CYBERRAKSHAK LABS · DAILY GLOBAL THREAT INTELLIGENCE

GTI Feed — 19 October 2026

Name: CyberRakshakLabs Daily Threat Intelligence Feed — 19 October 2026
Creator: CyberRakshakLabs
Published: 2026-10-19

Daily defensive threat intelligence feed containing 100 source-provided, defanged indicators for 19 October 2026.

Table format: IoC · Severity · Confidence · Involved Threat Type · Malware / Family · Brief Attack Description

IoC	Severity	Confidence	Involved Threat Type	Malware / Family	Brief Attack Description
`j[.]9kio[.]org`	critical	100/100	botnet_cc	Vidar	Associated with Vidar activity according to the source classification.
`chineseadoptee[.]com`	critical	100/100	payload_delivery	ClearFake	Associated with ClearFake activity according to the source classification.
`mfc7lcz8[.]bociljp[.]id`	critical	100/100	payload_delivery	ClearFake	Associated with ClearFake activity according to the source classification.
`j7[.]88idr[.]org`	critical	100/100	botnet_cc	Vidar	Associated with Vidar activity according to the source classification.
`f[.]88qr[.]org`	critical	100/100	botnet_cc	Vidar	Associated with Vidar activity according to the source classification.
`zen-ignore-tree-include[.]xyz`	critical	90/100	payload_delivery	ClearFake	Associated with ClearFake activity according to the source classification.
`zttrych[.]icu`	critical	90/100	payload_delivery	ClearFake	Associated with ClearFake activity according to the source classification.
`a2bfc593[.]cerridwen[.]shop`	critical	90/100	payload_delivery	ClearFake	Associated with ClearFake activity according to the source classification.
`cerridwen[.]shop`	critical	100/100	payload_delivery	ClearFake	Associated with ClearFake activity according to the source classification.
`leafdraft18[.]com`	critical	100/100	payload_delivery	AMOS	Associated with AMOS activity according to the source classification.
`xx5m70m0[.]beyonce[.]id`	critical	100/100	payload_delivery	ClearFake	Associated with ClearFake activity according to the source classification.
`bankruptcyrhodeisland[.]com`	critical	100/100	payload_delivery	MacSync	Associated with MacSync activity according to the source classification.
`caveresorts[.]com`	critical	100/100	payload_delivery	ClearFake	Associated with ClearFake activity according to the source classification.
`e[.]88idr[.]org`	critical	100/100	botnet_cc	Vidar	Associated with Vidar activity according to the source classification.
`cacote[.]com`	critical	100/100	payload_delivery	ClearFake	Associated with ClearFake activity according to the source classification.
`efesg5[.]space`	critical	90/100	payload_delivery	ClearFake	Associated with ClearFake activity according to the source classification.
`o7[.]9kio[.]org`	critical	100/100	botnet_cc	Vidar	Associated with Vidar activity according to the source classification.
`bulkcompressimages[.]com`	critical	100/100	payload_delivery	ClearFake	Associated with ClearFake activity according to the source classification.
`ezn9tfkz[.]bewiseimmunize[.]com`	critical	100/100	payload_delivery	ClearFake	Associated with ClearFake activity according to the source classification.
`t7[.]88idn[.]net`	critical	100/100	botnet_cc	Vidar	Associated with Vidar activity according to the source classification.
`bonecaambalabu[.]com`	critical	100/100	payload_delivery	ClearFake	Associated with ClearFake activity according to the source classification.
`vvrs-info[.]be`	critical	100/100	payload_delivery	Unknown Loader	Source classifies this indicator as unknown loader activity.
`xetaai[.]io`	critical	100/100	payload_delivery	Unknown Loader	Source classifies this indicator as unknown loader activity.
`xftdc[.]cn`	critical	100/100	payload_delivery	Unknown Loader	Source classifies this indicator as unknown loader activity.
`zdorovyeglaz[.]ru`	critical	100/100	payload_delivery	Unknown Loader	Source classifies this indicator as unknown loader activity.
`aestech[.]al`	critical	100/100	payload_delivery	Unknown Loader	Source classifies this indicator as unknown loader activity.
`akarhotel[.]com[.]tr`	critical	100/100	payload_delivery	Unknown Loader	Source classifies this indicator as unknown loader activity.
`btpwa[.]org`	critical	100/100	payload_delivery	Unknown Loader	Source classifies this indicator as unknown loader activity.
`cwsasoccer[.]org`	critical	100/100	payload_delivery	Unknown Loader	Source classifies this indicator as unknown loader activity.
`elektronbv[.]com`	critical	100/100	payload_delivery	Unknown Loader	Source classifies this indicator as unknown loader activity.
`finamiza[.]com`	critical	100/100	payload_delivery	Unknown Loader	Source classifies this indicator as unknown loader activity.
`holzideen[.]org`	critical	100/100	payload_delivery	Unknown Loader	Source classifies this indicator as unknown loader activity.
`ingridalmeida[.]adv[.]br`	critical	100/100	payload_delivery	Unknown Loader	Source classifies this indicator as unknown loader activity.
`loampsi[.]com`	critical	100/100	payload_delivery	Unknown Loader	Source classifies this indicator as unknown loader activity.
`lotvend[.]com`	critical	100/100	payload_delivery	Unknown Loader	Source classifies this indicator as unknown loader activity.
`mrcz[.]com[.]br`	critical	100/100	payload_delivery	Unknown Loader	Source classifies this indicator as unknown loader activity.
`nilehotel[.]co[.]ug`	critical	100/100	payload_delivery	Unknown Loader	Source classifies this indicator as unknown loader activity.
`simbaenergy[.]co[.]ke`	critical	100/100	payload_delivery	Unknown Loader	Source classifies this indicator as unknown loader activity.
`sureshakittur[.]com`	critical	100/100	payload_delivery	Unknown Loader	Source classifies this indicator as unknown loader activity.
`tab-consultancy[.]com`	critical	100/100	payload_delivery	Unknown Loader	Source classifies this indicator as unknown loader activity.
`taxiharnosand[.]se`	critical	100/100	payload_delivery	Unknown Loader	Source classifies this indicator as unknown loader activity.
`virzicarburanti[.]it`	critical	100/100	payload_delivery	Unknown Loader	Source classifies this indicator as unknown loader activity.
`vine-linen[.]com`	critical	100/100	payload_delivery	AMOS	Associated with AMOS activity according to the source classification.
`nova-49[.]com`	critical	100/100	botnet_cc	AMOS	Associated with AMOS activity according to the source classification.
`visadubai[.]com[.]vn`	critical	100/100	payload_delivery	ClickFix	Associated with ClickFix activity according to the source classification.
`warpfins[.]com`	critical	100/100	payload_delivery	ClickFix	Associated with ClickFix activity according to the source classification.
`webfischerei[.]de`	critical	100/100	payload_delivery	ClickFix	Associated with ClickFix activity according to the source classification.
`weddart[.]it`	critical	100/100	payload_delivery	ClickFix	Associated with ClickFix activity according to the source classification.
`winwincookware[.]com`	critical	100/100	payload_delivery	ClickFix	Associated with ClickFix activity according to the source classification.
`woraset-partners[.]co[.]th`	critical	100/100	payload_delivery	ClickFix	Associated with ClickFix activity according to the source classification.
`xinlin[.]tw`	critical	100/100	payload_delivery	ClickFix	Associated with ClickFix activity according to the source classification.
`xocdiapro[.]co`	critical	100/100	payload_delivery	ClickFix	Associated with ClickFix activity according to the source classification.
`yumweb[.]com`	critical	100/100	payload_delivery	ClickFix	Associated with ClickFix activity according to the source classification.
`zenithcomputers[.]com`	critical	100/100	payload_delivery	ClickFix	Associated with ClickFix activity according to the source classification.
`zmops[.]io`	critical	100/100	payload_delivery	ClickFix	Associated with ClickFix activity according to the source classification.
`sandandgarden[.]com[.]mx`	critical	100/100	payload_delivery	ClickFix	Associated with ClickFix activity according to the source classification.
`sapir-eng[.]com`	critical	100/100	payload_delivery	ClickFix	Associated with ClickFix activity according to the source classification.
`sexstories[.]beauty`	critical	100/100	payload_delivery	ClickFix	Associated with ClickFix activity according to the source classification.
`skydomedesigns[.]com`	critical	100/100	payload_delivery	ClickFix	Associated with ClickFix activity according to the source classification.
`socolive[.]cash`	critical	100/100	payload_delivery	ClickFix	Associated with ClickFix activity according to the source classification.
`somachurch[.]net`	critical	100/100	payload_delivery	ClickFix	Associated with ClickFix activity according to the source classification.
`squamishadventure[.]com`	critical	100/100	payload_delivery	ClickFix	Associated with ClickFix activity according to the source classification.
`standardnewsworld[.]com`	critical	100/100	payload_delivery	ClickFix	Associated with ClickFix activity according to the source classification.
`stiltzfranchise[.]com`	critical	100/100	payload_delivery	ClickFix	Associated with ClickFix activity according to the source classification.
`strappete[.]it`	critical	100/100	payload_delivery	ClickFix	Associated with ClickFix activity according to the source classification.
`sutienda[.]es`	critical	100/100	payload_delivery	ClickFix	Associated with ClickFix activity according to the source classification.
`techcrumz[.]com`	critical	100/100	payload_delivery	ClickFix	Associated with ClickFix activity according to the source classification.
`temdetudoecommerce[.]com`	critical	100/100	payload_delivery	ClickFix	Associated with ClickFix activity according to the source classification.
`thefencecompanyonline[.]com`	critical	100/100	payload_delivery	ClickFix	Associated with ClickFix activity according to the source classification.
`thegurubarber[.]com[.]au`	critical	100/100	payload_delivery	ClickFix	Associated with ClickFix activity according to the source classification.
`theonedigital[.]com[.]br`	critical	100/100	payload_delivery	ClickFix	Associated with ClickFix activity according to the source classification.
`tuasesorcontable[.]com[.]co`	critical	100/100	payload_delivery	ClickFix	Associated with ClickFix activity according to the source classification.
`ufa365[.]academy`	critical	100/100	payload_delivery	ClickFix	Associated with ClickFix activity according to the source classification.
`ufakick[.]group`	critical	100/100	payload_delivery	ClickFix	Associated with ClickFix activity according to the source classification.
`umbilicals[.]com`	critical	100/100	payload_delivery	ClickFix	Associated with ClickFix activity according to the source classification.
`unipicase[.]com`	critical	100/100	payload_delivery	ClickFix	Associated with ClickFix activity according to the source classification.
`v2[.]bulwarrestauracja[.]pl`	critical	100/100	payload_delivery	ClickFix	Associated with ClickFix activity according to the source classification.
`viralcag[.]com`	critical	100/100	payload_delivery	ClickFix	Associated with ClickFix activity according to the source classification.
`naturaclinics[.]com[.]au`	critical	100/100	payload_delivery	ClickFix	Associated with ClickFix activity according to the source classification.
`ngob[.]co[.]za`	critical	100/100	payload_delivery	ClickFix	Associated with ClickFix activity according to the source classification.
`nurmas[.]com[.]tr`	critical	100/100	payload_delivery	ClickFix	Associated with ClickFix activity according to the source classification.
`nwfc[.]io`	critical	100/100	payload_delivery	ClickFix	Associated with ClickFix activity according to the source classification.
`okxxx[.]cam`	critical	100/100	payload_delivery	ClickFix	Associated with ClickFix activity according to the source classification.
`parkcitydentalspa[.]com`	critical	100/100	payload_delivery	ClickFix	Associated with ClickFix activity according to the source classification.
`passeiosinesqueciveis[.]com[.]br`	critical	100/100	payload_delivery	ClickFix	Associated with ClickFix activity according to the source classification.
`peoplefortheplanet[.]world`	critical	100/100	payload_delivery	ClickFix	Associated with ClickFix activity according to the source classification.
`photographicmemories[.]uk[.]com`	critical	100/100	payload_delivery	ClickFix	Associated with ClickFix activity according to the source classification.
`pickabagelnyc[.]com`	critical	100/100	payload_delivery	ClickFix	Associated with ClickFix activity according to the source classification.
`piscinachivasso[.]it`	critical	100/100	payload_delivery	ClickFix	Associated with ClickFix activity according to the source classification.
`pofcolombia[.]com[.]co`	critical	100/100	payload_delivery	ClickFix	Associated with ClickFix activity according to the source classification.
`ponte[.]tv`	critical	100/100	payload_delivery	ClickFix	Associated with ClickFix activity according to the source classification.
`prefirobh[.]com[.]br`	critical	100/100	payload_delivery	ClickFix	Associated with ClickFix activity according to the source classification.
`produtecnicaagro[.]com[.]br`	critical	100/100	payload_delivery	ClickFix	Associated with ClickFix activity according to the source classification.
`qualicost[.]com`	critical	100/100	payload_delivery	ClickFix	Associated with ClickFix activity according to the source classification.
`quickwech[.]com`	critical	100/100	payload_delivery	ClickFix	Associated with ClickFix activity according to the source classification.
`raiz[.]ai`	critical	100/100	payload_delivery	ClickFix	Associated with ClickFix activity according to the source classification.
`raptors[.]pt`	critical	100/100	payload_delivery	ClickFix	Associated with ClickFix activity according to the source classification.
`reketepizza[.]com`	critical	100/100	payload_delivery	ClickFix	Associated with ClickFix activity according to the source classification.
`restaurantespelomundo[.]com[.]br`	critical	100/100	payload_delivery	ClickFix	Associated with ClickFix activity according to the source classification.
`roadracerx[.]com`	critical	100/100	payload_delivery	ClickFix	Associated with ClickFix activity according to the source classification.

Source: User-provided IOC feed export dated 19 October 2026. Confidence values are source-provided, not independently calculated by CyberRakshakLabs; IOCs are defanged for safe publication. Malware/family labels are normalized from source activity names and are not independently validated. First-seen timestamps are preserved in historical data but omitted from this table by design.

← Live GTI Feed GTI Archive →