CYBERRAKSHAK LABS · DAILY GLOBAL THREAT INTELLIGENCE
GTI Feed — 3 November 2026
Daily defensive threat intelligence feed containing 100 source-provided, defanged indicators for 3 November 2026.
Table format: IoC · Severity · Confidence · Involved Threat Type · Malware / Family · Brief Attack Description
| IoC | Severity | Confidence | Involved Threat Type | Malware / Family | Brief Attack Description |
|---|---|---|---|---|---|
hxxps://x[.]bola7[.]net/ | Critical | 100 | botnet_cc | win.vidar | Source classifies this indicator as botnet command-and-control associated with Vidar activity. |
hxxps://rj[.]akuatoto[.]net/ | Critical | 100 | botnet_cc | win.vidar | Source classifies this indicator as botnet command-and-control associated with Vidar activity. |
hxxps://somrose[.]co/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload delivery. |
hxxp://glcdn[.]githack[.]com/Katy7684/220e93A6-f3F3-4B86-91bc-A897F1E3B5eb/-/raw/main/95c9-d39055c0C180 | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload delivery. |
hxxps://holidayexpertsusa[.]com/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload delivery. |
hxxps://gillcrestcavaliers[.]com/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload delivery. |
hxxps://man2tidore[.]sch[.]id/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload delivery. |
hxxps://prashenterprises[.]com/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload delivery. |
hxxps://www[.]ercanmakinabursa[.]com/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload delivery. |
hxxps://www[.]contpercontabil[.]com[.]br/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload delivery. |
hxxps://mawacollection[.]com/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload delivery. |
hxxps://celebritesbiographie[.]fr/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload delivery. |
hxxps://elisiumdevelopments[.]co[.]uk/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload delivery. |
hxxps://ev99[.]world/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload delivery. |
hxxps://educiruped[.]com/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload delivery. |
hxxps://m[.]bola7[.]net/z/ | Critical | 100 | botnet_cc | win.vidar | Source classifies this indicator as botnet command-and-control associated with Vidar activity. |
hxxps://pp88[.]onl/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload delivery. |
hxxps://www[.]mslperformance[.]co[.]uk/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload delivery. |
hxxps://nivethithaasakthivel[.]com/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload delivery. |
hxxps://matrixsignmedia[.]com/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload delivery. |
hxxps://masterzdes[.]ru/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload delivery. |
hxxps://embossitworld[.]com/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload delivery. |
hxxps://pallypattaya[.]net/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload delivery. |
hxxps://indianpeakscuisine[.]com/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload delivery. |
hxxps://kristof[.]club/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload delivery. |
hxxps://www[.]jacobbattista[.]com[.]au/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload delivery. |
hxxps://keepexercise[.]com/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload delivery. |
hxxps://jualbeliartikel[.]com/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload delivery. |
hxxps://a1insulationdfw[.]com/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload delivery. |
hxxps://88win[.]store/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload delivery. |
hxxps://3mm[.]ma/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload delivery. |
hxxps://britmagazine[.]co[.]uk/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload delivery. |
hxxps://alfabettradycji[.]pl/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload delivery. |
hxxps://3room[.]co[.]uk/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload delivery. |
hxxps://123blueslot[.]co/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload delivery. |
hxxps://zo88t[.]xyz/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload delivery. |
hxxps://usatrendblog[.]com/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload delivery. |
hxxps://warisfertilizer[.]com/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload delivery. |
hxxps://seafoodnetwork[.]org/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload delivery. |
hxxps://capizeats[.]com/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload delivery. |
hxxps://www[.]stlghana[.]com/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload delivery. |
hxxps://st666[.]show/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload delivery. |
hxxps://semijoiasbr[.]com/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload delivery. |
hxxps://todayeggprice[.]in/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload delivery. |
hxxps://www[.]tawazon[.]in/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload delivery. |
hxxps://ridomovies[.]co[.]uk/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload delivery. |
hxxps://solylunaestudio[.]com/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload delivery. |
hxxps://outfithub4you[.]com/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload delivery. |
hxxps://gneisskeep[.]info/trace/logout-bundle.js | Critical | 100 | payload_delivery | js.smartapesg | Source classifies this indicator as payload delivery associated with SmartApeSG activity. |
hxxps://pumicebarrow[.]info/proxy/acl-parser.js | Critical | 100 | payload_delivery | js.smartapesg | Source classifies this indicator as payload delivery associated with SmartApeSG activity. |
hxxps://travertinekurgans[.]info/signin/reset-thread.js | Critical | 100 | payload_delivery | js.smartapesg | Source classifies this indicator as payload delivery associated with SmartApeSG activity. |
hxxps://tuffcromlech[.]info/verify/realm-render.js | Critical | 100 | payload_delivery | js.smartapesg | Source classifies this indicator as payload delivery associated with SmartApeSG activity. |
hxxps://pawpawrath[.]org/policy/signup-ajax.js | Critical | 100 | payload_delivery | js.smartapesg | Source classifies this indicator as payload delivery associated with SmartApeSG activity. |
hxxps://redbudliss[.]org/trace/logout-bundle.js | Critical | 100 | payload_delivery | js.smartapesg | Source classifies this indicator as payload delivery associated with SmartApeSG activity. |
hxxps://m[.]bola7[.]net/ | Critical | 100 | botnet_cc | win.vidar | Source classifies this indicator as botnet command-and-control associated with Vidar activity. |
hxxps://hm[.]akuatoto[.]net/ | Critical | 100 | botnet_cc | win.vidar | Source classifies this indicator as botnet command-and-control associated with Vidar activity. |
hxxps://livingspaze[.]com/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload delivery. |
hxxps://n[.]bola7[.]net/ | Critical | 100 | botnet_cc | win.vidar | Source classifies this indicator as botnet command-and-control associated with Vidar activity. |
hxxps://n[.]akuatoto[.]net/ | Critical | 100 | botnet_cc | win.vidar | Source classifies this indicator as botnet command-and-control associated with Vidar activity. |
hxxps://gneisskeep[.]info/trace/middleware-pipeline | Critical | 100 | payload_delivery | js.smartapesg | Source classifies this indicator as payload delivery associated with SmartApeSG activity. |
hxxps://gneisskeep[.]info/trace/session-script.js | Critical | 100 | payload_delivery | js.smartapesg | Source classifies this indicator as payload delivery associated with SmartApeSG activity. |
hxxps://o[.]bola7[.]net/ | Critical | 100 | botnet_cc | win.vidar | Source classifies this indicator as botnet command-and-control associated with Vidar activity. |
hxxps://ui[.]akuatoto[.]net/ | Critical | 100 | botnet_cc | win.vidar | Source classifies this indicator as botnet command-and-control associated with Vidar activity. |
hxxp://5[.]149[.]250[.]44 | Critical | 90 | botnet_cc | win.stealc | Source classifies this indicator as botnet command-and-control associated with Stealc activity. |
hxxp://2[.]27[.]154[.]146/bins/kla.sh | Critical | 90 | payload_delivery | elf.mirai | Source classifies this indicator as payload delivery associated with Mirai activity. |
hxxp://162[.]35[.]243[.]151 | Critical | 90 | botnet_cc | win.stealc | Source classifies this indicator as botnet command-and-control associated with Stealc activity. |
hxxp://138[.]226[.]237[.]113 | Critical | 90 | botnet_cc | win.stealc | Source classifies this indicator as botnet command-and-control associated with Stealc activity. |
hxxps://l[.]bola7[.]net/ | Critical | 100 | botnet_cc | win.vidar | Source classifies this indicator as botnet command-and-control associated with Vidar activity. |
hxxps://v[.]akuatoto[.]net/ | Critical | 100 | botnet_cc | win.vidar | Source classifies this indicator as botnet command-and-control associated with Vidar activity. |
hxxps://x[.]bok13[.]org/d/ | Critical | 100 | botnet_cc | win.vidar | Source classifies this indicator as botnet command-and-control associated with Vidar activity. |
hxxps://thegrowthifyagency[.]com/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload delivery. |
hxxps://nurf[.]io/vi-vn/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload delivery. |
hxxps://my-baby-days[.]testua[.]xyz/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload delivery. |
hxxps://onebox63[.]vip/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload delivery. |
hxxps://wvw[.]akuatoto[.]net/ | Critical | 100 | botnet_cc | win.vidar | Source classifies this indicator as botnet command-and-control associated with Vidar activity. |
hxxp://65[.]21[.]182[.]74/gate | Critical | 100 | botnet_cc | win.vidar | Source classifies this indicator as botnet command-and-control associated with Vidar activity. |
hxxp://65[.]21[.]182[.]74/ | Critical | 100 | botnet_cc | win.vidar | Source classifies this indicator as botnet command-and-control associated with Vidar activity. |
hxxp://78[.]159[.]131[.]254/281 | Critical | 100 | payload_delivery | win.satacom | Source classifies this indicator as payload delivery associated with Satacom activity. |
hxxp://78[.]159[.]131[.]254/yrjrs/ver.pa | Critical | 100 | payload_delivery | win.satacom | Source classifies this indicator as payload delivery associated with Satacom activity. |
hxxps://aksara87[.]org/ | Critical | 100 | botnet_cc | win.vidar | Source classifies this indicator as botnet command-and-control associated with Vidar activity. |
hxxps://aksara44d[.]org/ | Critical | 100 | botnet_cc | win.vidar | Source classifies this indicator as botnet command-and-control associated with Vidar activity. |
hxxps://x[.]aksara44d[.]org/ | Critical | 100 | botnet_cc | win.vidar | Source classifies this indicator as botnet command-and-control associated with Vidar activity. |
hxxps://bnn69[.]org/ | Critical | 100 | botnet_cc | win.vidar | Source classifies this indicator as botnet command-and-control associated with Vidar activity. |
hxxps://m[.]bnn69[.]org/ | Critical | 100 | botnet_cc | win.vidar | Source classifies this indicator as botnet command-and-control associated with Vidar activity. |
hxxps://pu[.]aksara87[.]org/ | Critical | 100 | botnet_cc | win.vidar | Source classifies this indicator as botnet command-and-control associated with Vidar activity. |
hxxps://pu[.]aksara87[.]org/zm/gate | Critical | 100 | botnet_cc | win.vidar | Source classifies this indicator as botnet command-and-control associated with Vidar activity. |
hxxps://x[.]aksara44d[.]org/km/gate | Critical | 100 | botnet_cc | win.vidar | Source classifies this indicator as botnet command-and-control associated with Vidar activity. |
hxxp://158[.]94[.]209[.]8/data | Critical | 100 | botnet_cc | unknown_stealer | Source classifies this indicator as unknown stealer activity. |
hxxp://z59ux9[.]he2o9t[.]com:30003/jeYeB3/ | Critical | 100 | botnet_cc | apk.triada | Source classifies this indicator as botnet command-and-control associated with Triada activity. |
hxxps://www[.]runeliteplus[.]net/downloads/RuneLitePlus.exe | Critical | 100 | payload_delivery | unknown_loader | Source classifies this indicator as unknown loader activity. |
hxxps://www[.]runeliteplus[.]net/downloads/RuneLite.jar | Critical | 100 | payload_delivery | unknown_stealer | Source classifies this indicator as unknown stealer activity. |
hxxps://yau[.]aksara87[.]org/ | Critical | 100 | botnet_cc | win.vidar | Source classifies this indicator as botnet command-and-control associated with Vidar activity. |
hxxps://ai[.]akuatoto[.]net/ | Critical | 100 | botnet_cc | win.vidar | Source classifies this indicator as botnet command-and-control associated with Vidar activity. |
hxxps://s[.]bok13[.]org/ | Critical | 100 | botnet_cc | win.vidar | Source classifies this indicator as botnet command-and-control associated with Vidar activity. |
hxxps://hi[.]afterbet88[.]org/ | Critical | 100 | botnet_cc | win.vidar | Source classifies this indicator as botnet command-and-control associated with Vidar activity. |
hxxps://www[.]steadmanrealestate[.]com/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload delivery. |
hxxps://z[.]bok13[.]org/ | Critical | 100 | botnet_cc | win.vidar | Source classifies this indicator as botnet command-and-control associated with Vidar activity. |
hxxps://c[.]afterbet88[.]org/ | Critical | 100 | botnet_cc | win.vidar | Source classifies this indicator as botnet command-and-control associated with Vidar activity. |
hxxps://j[.]bok13[.]org/ | Critical | 100 | botnet_cc | win.vidar | Source classifies this indicator as botnet command-and-control associated with Vidar activity. |
hxxps://f2[.]afterbet88[.]org/ | Critical | 100 | botnet_cc | win.vidar | Source classifies this indicator as botnet command-and-control associated with Vidar activity. |
Source: User-provided IOC feed export dated 3 November 2026. Threat Score is the source-provided confidence value, not an independently calculated CyberRakshakLabs score. IOCs are defanged for safe publication.
Threat Score values are source-provided confidence values, not independently calculated by CyberRakshakLabs. Indicators are defanged for safe publication.