CYBERRAKSHAK LABS · DAILY GLOBAL THREAT INTELLIGENCE

GTI Feed — 3 November 2026

Daily defensive threat intelligence feed containing 100 source-provided, defanged indicators for 3 November 2026.

Table format: IoC · Severity · Confidence · Involved Threat Type · Malware / Family · Brief Attack Description
IoCSeverityConfidenceInvolved Threat TypeMalware / FamilyBrief Attack Description
hxxps://x[.]bola7[.]net/Critical100botnet_ccwin.vidarSource classifies this indicator as botnet command-and-control associated with Vidar activity.
hxxps://rj[.]akuatoto[.]net/Critical100botnet_ccwin.vidarSource classifies this indicator as botnet command-and-control associated with Vidar activity.
hxxps://somrose[.]co/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload delivery.
hxxp://glcdn[.]githack[.]com/Katy7684/220e93A6-f3F3-4B86-91bc-A897F1E3B5eb/-/raw/main/95c9-d39055c0C180Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload delivery.
hxxps://holidayexpertsusa[.]com/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload delivery.
hxxps://gillcrestcavaliers[.]com/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload delivery.
hxxps://man2tidore[.]sch[.]id/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload delivery.
hxxps://prashenterprises[.]com/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload delivery.
hxxps://www[.]ercanmakinabursa[.]com/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload delivery.
hxxps://www[.]contpercontabil[.]com[.]br/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload delivery.
hxxps://mawacollection[.]com/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload delivery.
hxxps://celebritesbiographie[.]fr/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload delivery.
hxxps://elisiumdevelopments[.]co[.]uk/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload delivery.
hxxps://ev99[.]world/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload delivery.
hxxps://educiruped[.]com/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload delivery.
hxxps://m[.]bola7[.]net/z/Critical100botnet_ccwin.vidarSource classifies this indicator as botnet command-and-control associated with Vidar activity.
hxxps://pp88[.]onl/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload delivery.
hxxps://www[.]mslperformance[.]co[.]uk/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload delivery.
hxxps://nivethithaasakthivel[.]com/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload delivery.
hxxps://matrixsignmedia[.]com/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload delivery.
hxxps://masterzdes[.]ru/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload delivery.
hxxps://embossitworld[.]com/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload delivery.
hxxps://pallypattaya[.]net/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload delivery.
hxxps://indianpeakscuisine[.]com/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload delivery.
hxxps://kristof[.]club/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload delivery.
hxxps://www[.]jacobbattista[.]com[.]au/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload delivery.
hxxps://keepexercise[.]com/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload delivery.
hxxps://jualbeliartikel[.]com/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload delivery.
hxxps://a1insulationdfw[.]com/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload delivery.
hxxps://88win[.]store/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload delivery.
hxxps://3mm[.]ma/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload delivery.
hxxps://britmagazine[.]co[.]uk/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload delivery.
hxxps://alfabettradycji[.]pl/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload delivery.
hxxps://3room[.]co[.]uk/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload delivery.
hxxps://123blueslot[.]co/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload delivery.
hxxps://zo88t[.]xyz/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload delivery.
hxxps://usatrendblog[.]com/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload delivery.
hxxps://warisfertilizer[.]com/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload delivery.
hxxps://seafoodnetwork[.]org/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload delivery.
hxxps://capizeats[.]com/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload delivery.
hxxps://www[.]stlghana[.]com/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload delivery.
hxxps://st666[.]show/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload delivery.
hxxps://semijoiasbr[.]com/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload delivery.
hxxps://todayeggprice[.]in/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload delivery.
hxxps://www[.]tawazon[.]in/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload delivery.
hxxps://ridomovies[.]co[.]uk/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload delivery.
hxxps://solylunaestudio[.]com/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload delivery.
hxxps://outfithub4you[.]com/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload delivery.
hxxps://gneisskeep[.]info/trace/logout-bundle.jsCritical100payload_deliveryjs.smartapesgSource classifies this indicator as payload delivery associated with SmartApeSG activity.
hxxps://pumicebarrow[.]info/proxy/acl-parser.jsCritical100payload_deliveryjs.smartapesgSource classifies this indicator as payload delivery associated with SmartApeSG activity.
hxxps://travertinekurgans[.]info/signin/reset-thread.jsCritical100payload_deliveryjs.smartapesgSource classifies this indicator as payload delivery associated with SmartApeSG activity.
hxxps://tuffcromlech[.]info/verify/realm-render.jsCritical100payload_deliveryjs.smartapesgSource classifies this indicator as payload delivery associated with SmartApeSG activity.
hxxps://pawpawrath[.]org/policy/signup-ajax.jsCritical100payload_deliveryjs.smartapesgSource classifies this indicator as payload delivery associated with SmartApeSG activity.
hxxps://redbudliss[.]org/trace/logout-bundle.jsCritical100payload_deliveryjs.smartapesgSource classifies this indicator as payload delivery associated with SmartApeSG activity.
hxxps://m[.]bola7[.]net/Critical100botnet_ccwin.vidarSource classifies this indicator as botnet command-and-control associated with Vidar activity.
hxxps://hm[.]akuatoto[.]net/Critical100botnet_ccwin.vidarSource classifies this indicator as botnet command-and-control associated with Vidar activity.
hxxps://livingspaze[.]com/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload delivery.
hxxps://n[.]bola7[.]net/Critical100botnet_ccwin.vidarSource classifies this indicator as botnet command-and-control associated with Vidar activity.
hxxps://n[.]akuatoto[.]net/Critical100botnet_ccwin.vidarSource classifies this indicator as botnet command-and-control associated with Vidar activity.
hxxps://gneisskeep[.]info/trace/middleware-pipelineCritical100payload_deliveryjs.smartapesgSource classifies this indicator as payload delivery associated with SmartApeSG activity.
hxxps://gneisskeep[.]info/trace/session-script.jsCritical100payload_deliveryjs.smartapesgSource classifies this indicator as payload delivery associated with SmartApeSG activity.
hxxps://o[.]bola7[.]net/Critical100botnet_ccwin.vidarSource classifies this indicator as botnet command-and-control associated with Vidar activity.
hxxps://ui[.]akuatoto[.]net/Critical100botnet_ccwin.vidarSource classifies this indicator as botnet command-and-control associated with Vidar activity.
hxxp://5[.]149[.]250[.]44Critical90botnet_ccwin.stealcSource classifies this indicator as botnet command-and-control associated with Stealc activity.
hxxp://2[.]27[.]154[.]146/bins/kla.shCritical90payload_deliveryelf.miraiSource classifies this indicator as payload delivery associated with Mirai activity.
hxxp://162[.]35[.]243[.]151Critical90botnet_ccwin.stealcSource classifies this indicator as botnet command-and-control associated with Stealc activity.
hxxp://138[.]226[.]237[.]113Critical90botnet_ccwin.stealcSource classifies this indicator as botnet command-and-control associated with Stealc activity.
hxxps://l[.]bola7[.]net/Critical100botnet_ccwin.vidarSource classifies this indicator as botnet command-and-control associated with Vidar activity.
hxxps://v[.]akuatoto[.]net/Critical100botnet_ccwin.vidarSource classifies this indicator as botnet command-and-control associated with Vidar activity.
hxxps://x[.]bok13[.]org/d/Critical100botnet_ccwin.vidarSource classifies this indicator as botnet command-and-control associated with Vidar activity.
hxxps://thegrowthifyagency[.]com/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload delivery.
hxxps://nurf[.]io/vi-vn/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload delivery.
hxxps://my-baby-days[.]testua[.]xyz/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload delivery.
hxxps://onebox63[.]vip/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload delivery.
hxxps://wvw[.]akuatoto[.]net/Critical100botnet_ccwin.vidarSource classifies this indicator as botnet command-and-control associated with Vidar activity.
hxxp://65[.]21[.]182[.]74/gateCritical100botnet_ccwin.vidarSource classifies this indicator as botnet command-and-control associated with Vidar activity.
hxxp://65[.]21[.]182[.]74/Critical100botnet_ccwin.vidarSource classifies this indicator as botnet command-and-control associated with Vidar activity.
hxxp://78[.]159[.]131[.]254/281Critical100payload_deliverywin.satacomSource classifies this indicator as payload delivery associated with Satacom activity.
hxxp://78[.]159[.]131[.]254/yrjrs/ver.paCritical100payload_deliverywin.satacomSource classifies this indicator as payload delivery associated with Satacom activity.
hxxps://aksara87[.]org/Critical100botnet_ccwin.vidarSource classifies this indicator as botnet command-and-control associated with Vidar activity.
hxxps://aksara44d[.]org/Critical100botnet_ccwin.vidarSource classifies this indicator as botnet command-and-control associated with Vidar activity.
hxxps://x[.]aksara44d[.]org/Critical100botnet_ccwin.vidarSource classifies this indicator as botnet command-and-control associated with Vidar activity.
hxxps://bnn69[.]org/Critical100botnet_ccwin.vidarSource classifies this indicator as botnet command-and-control associated with Vidar activity.
hxxps://m[.]bnn69[.]org/Critical100botnet_ccwin.vidarSource classifies this indicator as botnet command-and-control associated with Vidar activity.
hxxps://pu[.]aksara87[.]org/Critical100botnet_ccwin.vidarSource classifies this indicator as botnet command-and-control associated with Vidar activity.
hxxps://pu[.]aksara87[.]org/zm/gateCritical100botnet_ccwin.vidarSource classifies this indicator as botnet command-and-control associated with Vidar activity.
hxxps://x[.]aksara44d[.]org/km/gateCritical100botnet_ccwin.vidarSource classifies this indicator as botnet command-and-control associated with Vidar activity.
hxxp://158[.]94[.]209[.]8/dataCritical100botnet_ccunknown_stealerSource classifies this indicator as unknown stealer activity.
hxxp://z59ux9[.]he2o9t[.]com:30003/jeYeB3/Critical100botnet_ccapk.triadaSource classifies this indicator as botnet command-and-control associated with Triada activity.
hxxps://www[.]runeliteplus[.]net/downloads/RuneLitePlus.exeCritical100payload_deliveryunknown_loaderSource classifies this indicator as unknown loader activity.
hxxps://www[.]runeliteplus[.]net/downloads/RuneLite.jarCritical100payload_deliveryunknown_stealerSource classifies this indicator as unknown stealer activity.
hxxps://yau[.]aksara87[.]org/Critical100botnet_ccwin.vidarSource classifies this indicator as botnet command-and-control associated with Vidar activity.
hxxps://ai[.]akuatoto[.]net/Critical100botnet_ccwin.vidarSource classifies this indicator as botnet command-and-control associated with Vidar activity.
hxxps://s[.]bok13[.]org/Critical100botnet_ccwin.vidarSource classifies this indicator as botnet command-and-control associated with Vidar activity.
hxxps://hi[.]afterbet88[.]org/Critical100botnet_ccwin.vidarSource classifies this indicator as botnet command-and-control associated with Vidar activity.
hxxps://www[.]steadmanrealestate[.]com/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload delivery.
hxxps://z[.]bok13[.]org/Critical100botnet_ccwin.vidarSource classifies this indicator as botnet command-and-control associated with Vidar activity.
hxxps://c[.]afterbet88[.]org/Critical100botnet_ccwin.vidarSource classifies this indicator as botnet command-and-control associated with Vidar activity.
hxxps://j[.]bok13[.]org/Critical100botnet_ccwin.vidarSource classifies this indicator as botnet command-and-control associated with Vidar activity.
hxxps://f2[.]afterbet88[.]org/Critical100botnet_ccwin.vidarSource classifies this indicator as botnet command-and-control associated with Vidar activity.

Source: User-provided IOC feed export dated 3 November 2026. Threat Score is the source-provided confidence value, not an independently calculated CyberRakshakLabs score. IOCs are defanged for safe publication.

Threat Score values are source-provided confidence values, not independently calculated by CyberRakshakLabs. Indicators are defanged for safe publication.