CYBERRAKSHAK LABS · DAILY GLOBAL THREAT INTELLIGENCE
GTI Feed — 5 November 2026
Daily defensive threat intelligence feed containing 100 source-provided, defanged indicators for 5 November 2026.
Table format: IoC · Severity · Confidence · Involved Threat Type · Malware / Family · Brief Attack Description
| IoC | Severity | Confidence | Involved Threat Type | Malware / Family | Brief Attack Description |
|---|---|---|---|---|---|
hxxp://localhost8000[.]fun/new | Critical | 100 | botnet_cc | unknown_stealer | Source classifies this indicator as unknown stealer activity. |
hxxp://glcdn[.]githack[.]com/wiktor1992/4e65-aec6-cf7a960a8485/-/raw/main/8c7176061b4b | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload_delivery. |
hxxp://glcdn[.]githack[.]com/wiktor1992/aca6e8-5b96-4928-8208-945bb4270ad9/-/raw/main/219-9eBd-47c3E74c4Bb6 | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload_delivery. |
hxxp://glcdn[.]githack[.]com/wiktor1992/94c3-90-a6-7b-b58-4c44-3233-8b/-/raw/main/Cc74-2b04D-d0 | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload_delivery. |
hxxp://digitjet[.]top/postback | Critical | 100 | botnet_cc | unknown | Source classification: unknown; source threat type is botnet_cc. |
hxxp://digitjet[.]top/report | Critical | 100 | botnet_cc | unknown | Source classification: unknown; source threat type is botnet_cc. |
hxxps://38[.]14[.]254[.]183/ | Critical | 100 | botnet_cc | unknown | Source classification: unknown; source threat type is botnet_cc. |
hxxps://154[.]94[.]226[.]26/ | Critical | 100 | botnet_cc | unknown | Source classification: unknown; source threat type is botnet_cc. |
hxxps://sc33c[.]com/ | Critical | 100 | botnet_cc | unknown | Source classification: unknown; source threat type is botnet_cc. |
hxxps://69[.]12[.]91[.]69/ | Critical | 100 | botnet_cc | unknown | Source classification: unknown; source threat type is botnet_cc. |
hxxps://www[.]sc33c[.]com/ | Critical | 100 | botnet_cc | unknown | Source classification: unknown; source threat type is botnet_cc. |
hxxps://192[.]255[.]249[.]243/ | Critical | 100 | botnet_cc | unknown | Source classification: unknown; source threat type is botnet_cc. |
hxxps://132[.]226[.]105[.]237/ | Critical | 100 | botnet_cc | unknown | Source classification: unknown; source threat type is botnet_cc. |
hxxps://47[.]254[.]125[.]123/ | Critical | 100 | botnet_cc | unknown | Source classification: unknown; source threat type is botnet_cc. |
hxxps://186[.]241[.]76[.]235/ | Critical | 100 | botnet_cc | unknown | Source classification: unknown; source threat type is botnet_cc. |
hxxps://23[.]140[.]244[.]176/ | Critical | 100 | botnet_cc | unknown | Source classification: unknown; source threat type is botnet_cc. |
hxxps://107[.]173[.]254[.]7/ | Critical | 100 | botnet_cc | unknown | Source classification: unknown; source threat type is botnet_cc. |
hxxps://112[.]213[.]123[.]38/ | Critical | 100 | botnet_cc | unknown | Source classification: unknown; source threat type is botnet_cc. |
hxxps://156[.]224[.]19[.]142/ | Critical | 100 | botnet_cc | unknown | Source classification: unknown; source threat type is botnet_cc. |
hxxps://189[.]105[.]68[.]190/ | Critical | 100 | botnet_cc | unknown | Source classification: unknown; source threat type is botnet_cc. |
hxxps://189[.]105[.]68[.]230/ | Critical | 100 | botnet_cc | unknown | Source classification: unknown; source threat type is botnet_cc. |
hxxps://38[.]244[.]14[.]239/ | Critical | 100 | botnet_cc | unknown | Source classification: unknown; source threat type is botnet_cc. |
hxxps://45[.]114[.]126[.]31/ | Critical | 100 | botnet_cc | unknown | Source classification: unknown; source threat type is botnet_cc. |
hxxps://130[.]94[.]32[.]239/ | Critical | 100 | botnet_cc | unknown | Source classification: unknown; source threat type is botnet_cc. |
hxxps://38[.]76[.]167[.]242/ | Critical | 100 | botnet_cc | unknown | Source classification: unknown; source threat type is botnet_cc. |
hxxps://43[.]132[.]227[.]73:9443/ | Critical | 100 | botnet_cc | unknown | Source classification: unknown; source threat type is botnet_cc. |
hxxps://8[.]135[.]30[.]162/ | Critical | 100 | botnet_cc | unknown | Source classification: unknown; source threat type is botnet_cc. |
hxxps://117[.]72[.]206[.]105/ | Critical | 100 | botnet_cc | unknown | Source classification: unknown; source threat type is botnet_cc. |
hxxps://111[.]228[.]25[.]143/ | Critical | 100 | botnet_cc | unknown | Source classification: unknown; source threat type is botnet_cc. |
hxxps://111[.]177[.]63[.]33:28080/ | Critical | 100 | botnet_cc | unknown | Source classification: unknown; source threat type is botnet_cc. |
hxxps://217[.]142[.]243[.]156/ | Critical | 100 | botnet_cc | unknown | Source classification: unknown; source threat type is botnet_cc. |
hxxps://166[.]0[.]22[.]233/ | Critical | 100 | botnet_cc | unknown | Source classification: unknown; source threat type is botnet_cc. |
hxxps://40[.]81[.]203[.]59/ | Critical | 100 | botnet_cc | unknown | Source classification: unknown; source threat type is botnet_cc. |
hxxps://43[.]167[.]177[.]178/ | Critical | 100 | botnet_cc | unknown | Source classification: unknown; source threat type is botnet_cc. |
hxxps://161[.]118[.]218[.]114/ | Critical | 100 | botnet_cc | unknown | Source classification: unknown; source threat type is botnet_cc. |
hxxps://192[.]206[.]117[.]21/ | Critical | 100 | botnet_cc | unknown | Source classification: unknown; source threat type is botnet_cc. |
hxxps://158[.]220[.]107[.]65/ | Critical | 100 | botnet_cc | unknown | Source classification: unknown; source threat type is botnet_cc. |
hxxps://169[.]58[.]113[.]148/ | Critical | 100 | botnet_cc | unknown | Source classification: unknown; source threat type is botnet_cc. |
hxxps://45[.]11[.]57[.]79/ | Critical | 100 | botnet_cc | unknown | Source classification: unknown; source threat type is botnet_cc. |
hxxps://45[.]11[.]57[.]93/ | Critical | 100 | botnet_cc | unknown | Source classification: unknown; source threat type is botnet_cc. |
hxxps://45[.]11[.]57[.]88/ | Critical | 100 | botnet_cc | unknown | Source classification: unknown; source threat type is botnet_cc. |
hxxps://45[.]11[.]57[.]90/ | Critical | 100 | botnet_cc | unknown | Source classification: unknown; source threat type is botnet_cc. |
hxxps://107[.]172[.]15[.]180/ | Critical | 100 | botnet_cc | unknown | Source classification: unknown; source threat type is botnet_cc. |
hxxps://139[.]84[.]215[.]68:8787/ | Critical | 100 | botnet_cc | unknown | Source classification: unknown; source threat type is botnet_cc. |
hxxps://38[.]76[.]219[.]251/ | Critical | 100 | botnet_cc | unknown | Source classification: unknown; source threat type is botnet_cc. |
hxxps://65[.]20[.]92[.]170/ | Critical | 100 | botnet_cc | unknown | Source classification: unknown; source threat type is botnet_cc. |
hxxps://152[.]53[.]129[.]174/ | Critical | 100 | botnet_cc | unknown | Source classification: unknown; source threat type is botnet_cc. |
hxxps://91[.]98[.]45[.]233:8787/ | Critical | 100 | botnet_cc | unknown | Source classification: unknown; source threat type is botnet_cc. |
hxxps://artex[.]daydream[.]click/ | Critical | 100 | botnet_cc | unknown | Source classification: unknown; source threat type is botnet_cc. |
hxxps://codes[.]browse-cdn[.]beer | Critical | 100 | payload_delivery | unknown | Source classification: unknown; source threat type is payload_delivery. |
hxxps://biterdigit[.]top | Critical | 100 | payload_delivery | win.lumma | Source classifies this indicator as payload delivery associated with Lumma activity. |
hxxps://fonebusters[.]com | Critical | 100 | payload_delivery | win.lumma | Source classifies this indicator as payload delivery associated with Lumma activity. |
hxxp://144[.]172[.]118[.]80:443/systemd-journal-resolver | Critical | 100 | payload_delivery | unknown | Source classification: unknown; source threat type is payload_delivery. |
hxxp://104[.]194[.]141[.]26:8080/cache.php | Critical | 100 | payload_delivery | unknown | Source classification: unknown; source threat type is payload_delivery. |
hxxps://docsign[.]blog/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload_delivery. |
hxxps://claudeearlyaccess-fable[.]cfd/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload_delivery. |
hxxps://onchaindocfile[.]com/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload_delivery. |
hxxp://garcon[.]wtf/L1nc0In.php | Critical | 100 | botnet_cc | win.dcrat | Source classifies this indicator as botnet command-and-control associated with Dcrat activity. |
hxxps://medlarportcullis[.]org/proxy/beta-schema | Critical | 100 | payload_delivery | js.smartapesg | Source classifies this indicator as payload delivery associated with Smartapesg activity. |
hxxps://medlarportcullis[.]org/proxy/token-response.js | Critical | 100 | payload_delivery | js.smartapesg | Source classifies this indicator as payload delivery associated with Smartapesg activity. |
hxxps://support[.]grovecityelectrician[.]com/ZtoCkR34YfgC+DijUe0usxWzZrNc6DKlUuozqEr4cLNc+Gf9DLZv8gG2erMb | Critical | 100 | payload_delivery | js.fakeupdates | Source classifies this indicator as payload delivery associated with Fakeupdates activity. |
hxxps://45[.]195[.]76[.]159/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload_delivery. |
hxxps://www[.]tdkder[.]org/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload_delivery. |
hxxps://154[.]222[.]16[.]220/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload_delivery. |
hxxps://jdaram[.]com/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload_delivery. |
hxxps://191[.]217[.]250[.]228/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload_delivery. |
hxxps://156[.]238[.]245[.]115/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload_delivery. |
hxxps://nrhfmg[.]top/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload_delivery. |
hxxps://cshsus[.]top/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload_delivery. |
hxxps://bsoozasyoudao[.]top/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload_delivery. |
hxxps://mceahn[.]top/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload_delivery. |
hxxps://xsadcasyiwaiwai[.]top/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload_delivery. |
hxxps://daraleilm[.]com/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload_delivery. |
hxxps://relay-3f9c71[.]kartohaantoha36-6a9[.]workers[.]dev/report | Critical | 100 | botnet_cc | unknown | Source classification: unknown; source threat type is botnet_cc. |
hxxps://relay-3f9c71[.]kartohaantoha36-6a9[.]workers[.]dev/config | Critical | 100 | botnet_cc | unknown | Source classification: unknown; source threat type is botnet_cc. |
hxxps://relay-3f9c71[.]kartohaantoha36-6a9[.]workers[.]dev/api/hlam/files/4001 | Critical | 100 | botnet_cc | unknown | Source classification: unknown; source threat type is botnet_cc. |
hxxps://relay-mirror[.]kartohaantoha36-6a9[.]workers[.]dev/api/hlam/files/4001 | Critical | 100 | botnet_cc | unknown | Source classification: unknown; source threat type is botnet_cc. |
hxxps://atttowing[.]com[.]au/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload_delivery. |
hxxps://microsofttelemetryservices[.]st/api/bundle | Critical | 100 | botnet_cc | unknown | Source classification: unknown; source threat type is botnet_cc. |
hxxps://duuacmc[.]top/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload_delivery. |
hxxps://almarsagroup[.]ae/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload_delivery. |
hxxps://cube-60[.]com/f/3ouaaio6tobacvyfqoejza/sul9ec1i | Critical | 100 | payload_delivery | osx.amos | Source classifies this indicator as payload delivery associated with Amos activity. |
hxxps://cube-60[.]com/curl/f39ks7h9j63/dcz317k2f1l85zbtwoe271.json | Critical | 100 | payload_delivery | osx.amos | Source classifies this indicator as payload delivery associated with Amos activity. |
hxxps://gate-air[.]com/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload_delivery. |
hxxps://sunstatehvac[.]com/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload_delivery. |
hxxps://www[.]dannycasey[.]ie/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload_delivery. |
hxxps://nandhini-pearl[.]in/ | Critical | 90 | payload_delivery | unknown | Source classification: unknown; source threat type is payload_delivery. |
hxxps://fern46[.]com/curl/1to6141b0p/lgk1rfayfis7z0qtqtrp.json | Critical | 100 | payload_delivery | osx.amos | Source classifies this indicator as payload delivery associated with Amos activity. |
hxxps://fern46[.]com/f/vrhqljbnscwhbyhltuwmsq/t2990cmj | Critical | 100 | payload_delivery | osx.amos | Source classifies this indicator as payload delivery associated with Amos activity. |
hxxps://2[.]29[.]151[.]245/ | Critical | 100 | botnet_cc | win.vidar | Source classifies this indicator as botnet command-and-control associated with Vidar activity. |
hxxps://95[.]216[.]197[.]0/ | Critical | 100 | botnet_cc | win.vidar | Source classifies this indicator as botnet command-and-control associated with Vidar activity. |
hxxps://2[.]29[.]145[.]248/ | Critical | 100 | botnet_cc | win.vidar | Source classifies this indicator as botnet command-and-control associated with Vidar activity. |
hxxps://2[.]29[.]159[.]106/ | Critical | 100 | botnet_cc | win.vidar | Source classifies this indicator as botnet command-and-control associated with Vidar activity. |
hxxps://2[.]29[.]157[.]217/ | Critical | 100 | botnet_cc | win.vidar | Source classifies this indicator as botnet command-and-control associated with Vidar activity. |
hxxps://159[.]69[.]176[.]1/ | Critical | 100 | botnet_cc | win.vidar | Source classifies this indicator as botnet command-and-control associated with Vidar activity. |
hxxps://2[.]29[.]152[.]8/ | Critical | 100 | botnet_cc | win.vidar | Source classifies this indicator as botnet command-and-control associated with Vidar activity. |
hxxps://cr1ymiykt1zwu345wf[.]pages[.]dev/win/index.php?vq=WJp2R4rq8ulFJ6pLHdRutVREVDZ1aVVwa1AwM2ptd053aGpIZjZ4Y3ZVdjEveW9DcDBCejRKaW4wcEU5a1VVdlUwQTFVVmdxYlBjN21TSFBqZXpPVU8zbWtLcmdCMlVKdG9nOEJmWVp4TzI4T1F6empmdTI3dStTbHUxMmFQZHBLd2E5U2dLVkwzTGpFWTI2L1l4am9TQ0pqVnpFcm5qWURzUEZubDVMNzBMb05aQ1NZbHBNTnJYNlRjblgyTU9ValgrUkxvOHo4Q1JPQXczRg== | Critical | 100 | payload_delivery | win.strelastealer | Source classifies this indicator as payload delivery associated with Strelastealer activity. |
hxxp://ci797165[.]tw1[.]ru/L1nc0In.php | Critical | 100 | botnet_cc | win.dcrat | Source classifies this indicator as botnet command-and-control associated with Dcrat activity. |
hxxps://k9[.]alien203[.]org/w/ | Critical | 100 | botnet_cc | win.vidar | Source classifies this indicator as botnet command-and-control associated with Vidar activity. |
hxxps://k9[.]alien203[.]org/mk/ | Critical | 100 | botnet_cc | win.vidar | Source classifies this indicator as botnet command-and-control associated with Vidar activity. |
Source: User-provided IOC feed export dated 5 November 2026. Threat Score is the source-provided confidence value, not an independently calculated CyberRakshakLabs score. IOCs are defanged for safe publication.
Threat Score values are source-provided confidence values, not independently calculated by CyberRakshakLabs. Indicators are defanged for safe publication.