CYBERRAKSHAK LABS · DAILY GLOBAL THREAT INTELLIGENCE
GTI Feed — 2 November 2026
Daily defensive threat intelligence feed containing 100 source-provided, defanged indicators for 2 November 2026.
Table format: IoC · Severity · Confidence · Involved Threat Type · Malware / Family · Brief Attack Description
| IoC | Severity | Confidence | Involved Threat Type | Malware / Family | Brief Attack Description |
|---|---|---|---|---|---|
hxxps://ai[.]akuatoto[.]net/ | Critical | 100 | botnet_cc | win.vidar | Source classifies this indicator as botnet command-and-control associated with Vidar activity. |
hxxps://s[.]bok13[.]org/ | Critical | 100 | botnet_cc | win.vidar | Source classifies this indicator as botnet command-and-control associated with Vidar activity. |
hxxps://hi[.]afterbet88[.]org/ | Critical | 100 | botnet_cc | win.vidar | Source classifies this indicator as botnet command-and-control associated with Vidar activity. |
hxxps://www[.]steadmanrealestate[.]com/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload_delivery. |
hxxps://z[.]bok13[.]org/ | Critical | 100 | botnet_cc | win.vidar | Source classifies this indicator as botnet command-and-control associated with Vidar activity. |
hxxps://c[.]afterbet88[.]org/ | Critical | 100 | botnet_cc | win.vidar | Source classifies this indicator as botnet command-and-control associated with Vidar activity. |
hxxps://j[.]bok13[.]org/ | Critical | 100 | botnet_cc | win.vidar | Source classifies this indicator as botnet command-and-control associated with Vidar activity. |
hxxps://f2[.]afterbet88[.]org/ | Critical | 100 | botnet_cc | win.vidar | Source classifies this indicator as botnet command-and-control associated with Vidar activity. |
hxxp://144[.]31[.]53[.]142:8093/chunks/p_cd2f8d7fd6dbd230/v3/manifest.json | Critical | 100 | botnet_cc | win.hermes_stealer | Source classifies this indicator as botnet command-and-control associated with Hermes Stealer activity. |
hxxp://144[.]31[.]53[.]142:8093/files/bld_C6h67XDjY-FEeNPOAEDhElF9.exe | Critical | 100 | botnet_cc | win.hermes_stealer | Source classifies this indicator as botnet command-and-control associated with Hermes Stealer activity. |
hxxp://144[.]31[.]53[.]142:8787/api/client/report | Critical | 100 | botnet_cc | win.hermes_stealer | Source classifies this indicator as botnet command-and-control associated with Hermes Stealer activity. |
hxxp://144[.]31[.]53[.]142:8080/ws/publisher | Critical | 100 | botnet_cc | win.hermes_stealer | Source classifies this indicator as botnet command-and-control associated with Hermes Stealer activity. |
hxxp://158[.]94[.]211[.]124:8093/chunks/p_269a7a0a541c348d/v3/manifest.json | Critical | 100 | botnet_cc | win.hermes_stealer | Source classifies this indicator as botnet command-and-control associated with Hermes Stealer activity. |
hxxp://158[.]94[.]211[.]124:8093/files/bld_dDXGepIlKOZeWWMcNkG2aVIk.exe | Critical | 100 | botnet_cc | win.hermes_stealer | Source classifies this indicator as botnet command-and-control associated with Hermes Stealer activity. |
hxxp://216[.]158[.]95[.]183:8093/chunks/p_3e3b1bbfab33ca78/v3/manifest.json | Critical | 100 | botnet_cc | win.hermes_stealer | Source classifies this indicator as botnet command-and-control associated with Hermes Stealer activity. |
hxxp://216[.]158[.]95[.]183:8093/files/bld_WrhPmSV4V4TJSTXsDdtCrIh2.exe | Critical | 100 | botnet_cc | win.hermes_stealer | Source classifies this indicator as botnet command-and-control associated with Hermes Stealer activity. |
hxxps://beritaupdate360[.]com/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload_delivery. |
hxxps://tuaulaalamedida[.]com/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload_delivery. |
hxxps://www[.]asserwis[.]com[.]pl/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload_delivery. |
hxxps://youtogs[.]com/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload_delivery. |
hxxps://ihoturismo[.]com[.]br/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload_delivery. |
hxxps://vantrexindustries[.]com/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload_delivery. |
hxxps://xn--c3cucdalccd2b6beddeb7a4ep9c3dhfh4ed3exquhsdra[.]com/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload_delivery. |
hxxps://xanthron[.]com/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload_delivery. |
hxxps://ytheyemenicoffeeco[.]co[.]uk/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload_delivery. |
hxxps://mapendomining[.]com/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload_delivery. |
hxxps://ourkarigar[.]in/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload_delivery. |
hxxps://www[.]liftingbarriers[.]org/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload_delivery. |
hxxps://gillzmentortest[.]com/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload_delivery. |
hxxps://hebronlifestyles[.]com/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload_delivery. |
hxxps://health-revival-survival[.]com/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload_delivery. |
hxxps://hotelboyacaplaza[.]co/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload_delivery. |
hxxps://idealinvestimmobilier[.]com/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload_delivery. |
hxxps://hilla-k[.]com/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload_delivery. |
hxxps://tarot-siono[.]com/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload_delivery. |
hxxps://sbimarketingco[.]com/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload_delivery. |
hxxps://solutias[.]se/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload_delivery. |
hxxps://www[.]passionsecurity[.]co[.]uk/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload_delivery. |
hxxps://telnet[.]com[.]mx/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload_delivery. |
hxxps://www[.]thesit[.]eu/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload_delivery. |
hxxps://www[.]playfool[.]com/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload_delivery. |
hxxps://www[.]tradecap[.]dk/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload_delivery. |
hxxps://perucio[.]com/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload_delivery. |
hxxps://plexiptv[.]net/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload_delivery. |
hxxps://prestigioushomecare[.]net/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload_delivery. |
hxxps://www[.]whihost[.]com/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload_delivery. |
hxxps://www[.]tradecap[.]se/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload_delivery. |
hxxps://royalflushblc[.]com/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload_delivery. |
hxxps://restrodesign[.]com/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload_delivery. |
hxxps://riosantohotel[.]com[.]br/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload_delivery. |
hxxps://io[.]abad777[.]org/le/ | Critical | 100 | botnet_cc | win.vidar | Source classifies this indicator as botnet command-and-control associated with Vidar activity. |
hxxps://t0[.]afktogel[.]org/d/ | Critical | 100 | botnet_cc | win.vidar | Source classifies this indicator as botnet command-and-control associated with Vidar activity. |
hxxps://bridgelimited[.]com[.]hk/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload_delivery. |
hxxps://www[.]callbharat[.]com/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload_delivery. |
hxxps://fabricsuniverse[.]com/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload_delivery. |
hxxps://bigcitycaraudio[.]com/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload_delivery. |
hxxps://beaufitness[.]co[.]uk/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload_delivery. |
hxxps://www[.]diewachic[.]com/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload_delivery. |
hxxps://www[.]claritek[.]se/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload_delivery. |
hxxps://calmbee-usa[.]com/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload_delivery. |
hxxps://cnggroup[.]in/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload_delivery. |
hxxps://casadeescola[.]com[.]br/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload_delivery. |
hxxps://www[.]coppertreepartners[.]com/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload_delivery. |
hxxps://damaiceria[.]net/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload_delivery. |
hxxps://dugemranjang[.]com/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload_delivery. |
hxxps://dulux[.]tj/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload_delivery. |
hxxps://companiesintheuks[.]co[.]uk/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload_delivery. |
hxxps://eddysdinerfrommalden[.]com/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload_delivery. |
hxxps://engineeringplanet[.]net/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload_delivery. |
hxxps://ekstrabud[.]eu/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload_delivery. |
hxxps://www[.]medicalweedsa[.]com/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload_delivery. |
hxxps://escapetravelco[.]com/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload_delivery. |
hxxps://www[.]ingecolsan[.]com/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload_delivery. |
hxxps://www[.]ferraty[.]sk/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload_delivery. |
hxxps://canteramanagement[.]com/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload_delivery. |
hxxps://fx-prox[.]com/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload_delivery. |
hxxps://jgconstrucaoereforma[.]com[.]br/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload_delivery. |
hxxps://agroferca[.]com/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload_delivery. |
hxxps://lucaplant[.]com/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload_delivery. |
hxxps://jgslaw[.]co[.]ke/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload_delivery. |
hxxps://carolinesmith[.]co[.]za/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload_delivery. |
hxxps://thermoslim[.]com[.]br/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload_delivery. |
hxxps://fastly[.]jsdelivr[.]net/gh/wiktor1992kl/b5b8b4c2-80e5-443b-b47d/a762-95a63ac4c501 | Critical | 100 | payload_delivery | js.clearfake | Source classifies this indicator as payload delivery associated with ClearFake activity. |
hxxps://fastly[.]jsdelivr[.]net/gh/katy7684/1d34ada-114e-43c6-b277-9805448b8df/be5-4532-a7e5-ae1a29 | Critical | 100 | payload_delivery | js.clearfake | Source classifies this indicator as payload delivery associated with ClearFake activity. |
hxxps://c[.]bok13[.]org/ | Critical | 100 | botnet_cc | win.vidar | Source classifies this indicator as botnet command-and-control associated with Vidar activity. |
hxxps://ev[.]afterbet88[.]org/ | Critical | 100 | botnet_cc | win.vidar | Source classifies this indicator as botnet command-and-control associated with Vidar activity. |
hxxps://74[.]0[.]48[.]128/api/ingest/session | Critical | 100 | botnet_cc | unknown | Source classification: unknown; source threat type is botnet_cc. |
hxxps://74[.]0[.]48[.]128/api/ingest/error | Critical | 100 | botnet_cc | unknown | Source classification: unknown; source threat type is botnet_cc. |
hxxps://wrat[.]in/sa1at/ | Critical | 90 | botnet_cc | win.salatstealer | Source classifies this indicator as botnet command-and-control associated with SalatStealer activity. |
hxxp://104[.]238[.]57[.]241/content/slider.png | Critical | 90 | payload_delivery | unknown_loader | Source classifies this indicator as unknown loader activity. |
hxxps://openrouter[.]srv-auth-dlt-msh[.]in[.]net/client2.google.com.cup2key | Critical | 90 | payload_delivery | unknown_loader | Source classifies this indicator as unknown loader activity. |
hxxp://165[.]245[.]199[.]76/bot.py | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload_delivery. |
hxxp://165[.]245[.]199[.]76/botc_386 | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload_delivery. |
hxxp://165[.]245[.]199[.]76/botc_amd64 | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload_delivery. |
hxxp://165[.]245[.]199[.]76/botc_arm | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload_delivery. |
hxxp://165[.]245[.]199[.]76/botc_arm64 | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload_delivery. |
hxxp://165[.]245[.]199[.]76/botc_mips | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload_delivery. |
hxxp://165[.]245[.]199[.]76/botc_mipsle | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload_delivery. |
hxxp://165[.]245[.]199[.]76/payload.sh | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload_delivery. |
hxxps://vanessaauge[.]com/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload_delivery. |
Source: User-provided IOC feed export dated 2 November 2026. Threat Score is the source-provided confidence value, not an independently calculated CyberRakshakLabs score. IOCs are defanged for safe publication.
Threat Score values are source-provided confidence values, not independently calculated by CyberRakshakLabs. Indicators are defanged for safe publication.