CYBERRAKSHAK LABS · DAILY GLOBAL THREAT INTELLIGENCE

GTI Feed — 2 November 2026

Daily defensive threat intelligence feed containing 100 source-provided, defanged indicators for 2 November 2026.

Table format: IoC · Severity · Confidence · Involved Threat Type · Malware / Family · Brief Attack Description
IoCSeverityConfidenceInvolved Threat TypeMalware / FamilyBrief Attack Description
hxxps://ai[.]akuatoto[.]net/Critical100botnet_ccwin.vidarSource classifies this indicator as botnet command-and-control associated with Vidar activity.
hxxps://s[.]bok13[.]org/Critical100botnet_ccwin.vidarSource classifies this indicator as botnet command-and-control associated with Vidar activity.
hxxps://hi[.]afterbet88[.]org/Critical100botnet_ccwin.vidarSource classifies this indicator as botnet command-and-control associated with Vidar activity.
hxxps://www[.]steadmanrealestate[.]com/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload_delivery.
hxxps://z[.]bok13[.]org/Critical100botnet_ccwin.vidarSource classifies this indicator as botnet command-and-control associated with Vidar activity.
hxxps://c[.]afterbet88[.]org/Critical100botnet_ccwin.vidarSource classifies this indicator as botnet command-and-control associated with Vidar activity.
hxxps://j[.]bok13[.]org/Critical100botnet_ccwin.vidarSource classifies this indicator as botnet command-and-control associated with Vidar activity.
hxxps://f2[.]afterbet88[.]org/Critical100botnet_ccwin.vidarSource classifies this indicator as botnet command-and-control associated with Vidar activity.
hxxp://144[.]31[.]53[.]142:8093/chunks/p_cd2f8d7fd6dbd230/v3/manifest.jsonCritical100botnet_ccwin.hermes_stealerSource classifies this indicator as botnet command-and-control associated with Hermes Stealer activity.
hxxp://144[.]31[.]53[.]142:8093/files/bld_C6h67XDjY-FEeNPOAEDhElF9.exeCritical100botnet_ccwin.hermes_stealerSource classifies this indicator as botnet command-and-control associated with Hermes Stealer activity.
hxxp://144[.]31[.]53[.]142:8787/api/client/reportCritical100botnet_ccwin.hermes_stealerSource classifies this indicator as botnet command-and-control associated with Hermes Stealer activity.
hxxp://144[.]31[.]53[.]142:8080/ws/publisherCritical100botnet_ccwin.hermes_stealerSource classifies this indicator as botnet command-and-control associated with Hermes Stealer activity.
hxxp://158[.]94[.]211[.]124:8093/chunks/p_269a7a0a541c348d/v3/manifest.jsonCritical100botnet_ccwin.hermes_stealerSource classifies this indicator as botnet command-and-control associated with Hermes Stealer activity.
hxxp://158[.]94[.]211[.]124:8093/files/bld_dDXGepIlKOZeWWMcNkG2aVIk.exeCritical100botnet_ccwin.hermes_stealerSource classifies this indicator as botnet command-and-control associated with Hermes Stealer activity.
hxxp://216[.]158[.]95[.]183:8093/chunks/p_3e3b1bbfab33ca78/v3/manifest.jsonCritical100botnet_ccwin.hermes_stealerSource classifies this indicator as botnet command-and-control associated with Hermes Stealer activity.
hxxp://216[.]158[.]95[.]183:8093/files/bld_WrhPmSV4V4TJSTXsDdtCrIh2.exeCritical100botnet_ccwin.hermes_stealerSource classifies this indicator as botnet command-and-control associated with Hermes Stealer activity.
hxxps://beritaupdate360[.]com/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload_delivery.
hxxps://tuaulaalamedida[.]com/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload_delivery.
hxxps://www[.]asserwis[.]com[.]pl/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload_delivery.
hxxps://youtogs[.]com/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload_delivery.
hxxps://ihoturismo[.]com[.]br/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload_delivery.
hxxps://vantrexindustries[.]com/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload_delivery.
hxxps://xn--c3cucdalccd2b6beddeb7a4ep9c3dhfh4ed3exquhsdra[.]com/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload_delivery.
hxxps://xanthron[.]com/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload_delivery.
hxxps://ytheyemenicoffeeco[.]co[.]uk/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload_delivery.
hxxps://mapendomining[.]com/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload_delivery.
hxxps://ourkarigar[.]in/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload_delivery.
hxxps://www[.]liftingbarriers[.]org/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload_delivery.
hxxps://gillzmentortest[.]com/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload_delivery.
hxxps://hebronlifestyles[.]com/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload_delivery.
hxxps://health-revival-survival[.]com/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload_delivery.
hxxps://hotelboyacaplaza[.]co/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload_delivery.
hxxps://idealinvestimmobilier[.]com/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload_delivery.
hxxps://hilla-k[.]com/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload_delivery.
hxxps://tarot-siono[.]com/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload_delivery.
hxxps://sbimarketingco[.]com/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload_delivery.
hxxps://solutias[.]se/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload_delivery.
hxxps://www[.]passionsecurity[.]co[.]uk/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload_delivery.
hxxps://telnet[.]com[.]mx/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload_delivery.
hxxps://www[.]thesit[.]eu/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload_delivery.
hxxps://www[.]playfool[.]com/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload_delivery.
hxxps://www[.]tradecap[.]dk/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload_delivery.
hxxps://perucio[.]com/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload_delivery.
hxxps://plexiptv[.]net/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload_delivery.
hxxps://prestigioushomecare[.]net/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload_delivery.
hxxps://www[.]whihost[.]com/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload_delivery.
hxxps://www[.]tradecap[.]se/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload_delivery.
hxxps://royalflushblc[.]com/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload_delivery.
hxxps://restrodesign[.]com/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload_delivery.
hxxps://riosantohotel[.]com[.]br/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload_delivery.
hxxps://io[.]abad777[.]org/le/Critical100botnet_ccwin.vidarSource classifies this indicator as botnet command-and-control associated with Vidar activity.
hxxps://t0[.]afktogel[.]org/d/Critical100botnet_ccwin.vidarSource classifies this indicator as botnet command-and-control associated with Vidar activity.
hxxps://bridgelimited[.]com[.]hk/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload_delivery.
hxxps://www[.]callbharat[.]com/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload_delivery.
hxxps://fabricsuniverse[.]com/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload_delivery.
hxxps://bigcitycaraudio[.]com/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload_delivery.
hxxps://beaufitness[.]co[.]uk/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload_delivery.
hxxps://www[.]diewachic[.]com/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload_delivery.
hxxps://www[.]claritek[.]se/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload_delivery.
hxxps://calmbee-usa[.]com/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload_delivery.
hxxps://cnggroup[.]in/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload_delivery.
hxxps://casadeescola[.]com[.]br/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload_delivery.
hxxps://www[.]coppertreepartners[.]com/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload_delivery.
hxxps://damaiceria[.]net/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload_delivery.
hxxps://dugemranjang[.]com/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload_delivery.
hxxps://dulux[.]tj/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload_delivery.
hxxps://companiesintheuks[.]co[.]uk/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload_delivery.
hxxps://eddysdinerfrommalden[.]com/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload_delivery.
hxxps://engineeringplanet[.]net/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload_delivery.
hxxps://ekstrabud[.]eu/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload_delivery.
hxxps://www[.]medicalweedsa[.]com/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload_delivery.
hxxps://escapetravelco[.]com/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload_delivery.
hxxps://www[.]ingecolsan[.]com/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload_delivery.
hxxps://www[.]ferraty[.]sk/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload_delivery.
hxxps://canteramanagement[.]com/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload_delivery.
hxxps://fx-prox[.]com/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload_delivery.
hxxps://jgconstrucaoereforma[.]com[.]br/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload_delivery.
hxxps://agroferca[.]com/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload_delivery.
hxxps://lucaplant[.]com/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload_delivery.
hxxps://jgslaw[.]co[.]ke/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload_delivery.
hxxps://carolinesmith[.]co[.]za/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload_delivery.
hxxps://thermoslim[.]com[.]br/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload_delivery.
hxxps://fastly[.]jsdelivr[.]net/gh/wiktor1992kl/b5b8b4c2-80e5-443b-b47d/a762-95a63ac4c501Critical100payload_deliveryjs.clearfakeSource classifies this indicator as payload delivery associated with ClearFake activity.
hxxps://fastly[.]jsdelivr[.]net/gh/katy7684/1d34ada-114e-43c6-b277-9805448b8df/be5-4532-a7e5-ae1a29Critical100payload_deliveryjs.clearfakeSource classifies this indicator as payload delivery associated with ClearFake activity.
hxxps://c[.]bok13[.]org/Critical100botnet_ccwin.vidarSource classifies this indicator as botnet command-and-control associated with Vidar activity.
hxxps://ev[.]afterbet88[.]org/Critical100botnet_ccwin.vidarSource classifies this indicator as botnet command-and-control associated with Vidar activity.
hxxps://74[.]0[.]48[.]128/api/ingest/sessionCritical100botnet_ccunknownSource classification: unknown; source threat type is botnet_cc.
hxxps://74[.]0[.]48[.]128/api/ingest/errorCritical100botnet_ccunknownSource classification: unknown; source threat type is botnet_cc.
hxxps://wrat[.]in/sa1at/Critical90botnet_ccwin.salatstealerSource classifies this indicator as botnet command-and-control associated with SalatStealer activity.
hxxp://104[.]238[.]57[.]241/content/slider.pngCritical90payload_deliveryunknown_loaderSource classifies this indicator as unknown loader activity.
hxxps://openrouter[.]srv-auth-dlt-msh[.]in[.]net/client2.google.com.cup2keyCritical90payload_deliveryunknown_loaderSource classifies this indicator as unknown loader activity.
hxxp://165[.]245[.]199[.]76/bot.pyCritical90payload_deliveryunknownSource classification: unknown; source threat type is payload_delivery.
hxxp://165[.]245[.]199[.]76/botc_386Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload_delivery.
hxxp://165[.]245[.]199[.]76/botc_amd64Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload_delivery.
hxxp://165[.]245[.]199[.]76/botc_armCritical90payload_deliveryunknownSource classification: unknown; source threat type is payload_delivery.
hxxp://165[.]245[.]199[.]76/botc_arm64Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload_delivery.
hxxp://165[.]245[.]199[.]76/botc_mipsCritical90payload_deliveryunknownSource classification: unknown; source threat type is payload_delivery.
hxxp://165[.]245[.]199[.]76/botc_mipsleCritical90payload_deliveryunknownSource classification: unknown; source threat type is payload_delivery.
hxxp://165[.]245[.]199[.]76/payload.shCritical90payload_deliveryunknownSource classification: unknown; source threat type is payload_delivery.
hxxps://vanessaauge[.]com/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload_delivery.

Source: User-provided IOC feed export dated 2 November 2026. Threat Score is the source-provided confidence value, not an independently calculated CyberRakshakLabs score. IOCs are defanged for safe publication.

Threat Score values are source-provided confidence values, not independently calculated by CyberRakshakLabs. Indicators are defanged for safe publication.