CYBERRAKSHAK LABS · DAILY GLOBAL THREAT INTELLIGENCE

GTI Feed — 5 November 2026

Daily defensive threat intelligence feed containing 100 source-provided, defanged indicators for 5 November 2026.

Table format: IoC · Severity · Confidence · Involved Threat Type · Malware / Family · Brief Attack Description
IoCSeverityConfidenceInvolved Threat TypeMalware / FamilyBrief Attack Description
hxxp://localhost8000[.]fun/newCritical100botnet_ccunknown_stealerSource classifies this indicator as unknown stealer activity.
hxxp://glcdn[.]githack[.]com/wiktor1992/4e65-aec6-cf7a960a8485/-/raw/main/8c7176061b4bCritical90payload_deliveryunknownSource classification: unknown; source threat type is payload_delivery.
hxxp://glcdn[.]githack[.]com/wiktor1992/aca6e8-5b96-4928-8208-945bb4270ad9/-/raw/main/219-9eBd-47c3E74c4Bb6Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload_delivery.
hxxp://glcdn[.]githack[.]com/wiktor1992/94c3-90-a6-7b-b58-4c44-3233-8b/-/raw/main/Cc74-2b04D-d0Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload_delivery.
hxxp://digitjet[.]top/postbackCritical100botnet_ccunknownSource classification: unknown; source threat type is botnet_cc.
hxxp://digitjet[.]top/reportCritical100botnet_ccunknownSource classification: unknown; source threat type is botnet_cc.
hxxps://38[.]14[.]254[.]183/Critical100botnet_ccunknownSource classification: unknown; source threat type is botnet_cc.
hxxps://154[.]94[.]226[.]26/Critical100botnet_ccunknownSource classification: unknown; source threat type is botnet_cc.
hxxps://sc33c[.]com/Critical100botnet_ccunknownSource classification: unknown; source threat type is botnet_cc.
hxxps://69[.]12[.]91[.]69/Critical100botnet_ccunknownSource classification: unknown; source threat type is botnet_cc.
hxxps://www[.]sc33c[.]com/Critical100botnet_ccunknownSource classification: unknown; source threat type is botnet_cc.
hxxps://192[.]255[.]249[.]243/Critical100botnet_ccunknownSource classification: unknown; source threat type is botnet_cc.
hxxps://132[.]226[.]105[.]237/Critical100botnet_ccunknownSource classification: unknown; source threat type is botnet_cc.
hxxps://47[.]254[.]125[.]123/Critical100botnet_ccunknownSource classification: unknown; source threat type is botnet_cc.
hxxps://186[.]241[.]76[.]235/Critical100botnet_ccunknownSource classification: unknown; source threat type is botnet_cc.
hxxps://23[.]140[.]244[.]176/Critical100botnet_ccunknownSource classification: unknown; source threat type is botnet_cc.
hxxps://107[.]173[.]254[.]7/Critical100botnet_ccunknownSource classification: unknown; source threat type is botnet_cc.
hxxps://112[.]213[.]123[.]38/Critical100botnet_ccunknownSource classification: unknown; source threat type is botnet_cc.
hxxps://156[.]224[.]19[.]142/Critical100botnet_ccunknownSource classification: unknown; source threat type is botnet_cc.
hxxps://189[.]105[.]68[.]190/Critical100botnet_ccunknownSource classification: unknown; source threat type is botnet_cc.
hxxps://189[.]105[.]68[.]230/Critical100botnet_ccunknownSource classification: unknown; source threat type is botnet_cc.
hxxps://38[.]244[.]14[.]239/Critical100botnet_ccunknownSource classification: unknown; source threat type is botnet_cc.
hxxps://45[.]114[.]126[.]31/Critical100botnet_ccunknownSource classification: unknown; source threat type is botnet_cc.
hxxps://130[.]94[.]32[.]239/Critical100botnet_ccunknownSource classification: unknown; source threat type is botnet_cc.
hxxps://38[.]76[.]167[.]242/Critical100botnet_ccunknownSource classification: unknown; source threat type is botnet_cc.
hxxps://43[.]132[.]227[.]73:9443/Critical100botnet_ccunknownSource classification: unknown; source threat type is botnet_cc.
hxxps://8[.]135[.]30[.]162/Critical100botnet_ccunknownSource classification: unknown; source threat type is botnet_cc.
hxxps://117[.]72[.]206[.]105/Critical100botnet_ccunknownSource classification: unknown; source threat type is botnet_cc.
hxxps://111[.]228[.]25[.]143/Critical100botnet_ccunknownSource classification: unknown; source threat type is botnet_cc.
hxxps://111[.]177[.]63[.]33:28080/Critical100botnet_ccunknownSource classification: unknown; source threat type is botnet_cc.
hxxps://217[.]142[.]243[.]156/Critical100botnet_ccunknownSource classification: unknown; source threat type is botnet_cc.
hxxps://166[.]0[.]22[.]233/Critical100botnet_ccunknownSource classification: unknown; source threat type is botnet_cc.
hxxps://40[.]81[.]203[.]59/Critical100botnet_ccunknownSource classification: unknown; source threat type is botnet_cc.
hxxps://43[.]167[.]177[.]178/Critical100botnet_ccunknownSource classification: unknown; source threat type is botnet_cc.
hxxps://161[.]118[.]218[.]114/Critical100botnet_ccunknownSource classification: unknown; source threat type is botnet_cc.
hxxps://192[.]206[.]117[.]21/Critical100botnet_ccunknownSource classification: unknown; source threat type is botnet_cc.
hxxps://158[.]220[.]107[.]65/Critical100botnet_ccunknownSource classification: unknown; source threat type is botnet_cc.
hxxps://169[.]58[.]113[.]148/Critical100botnet_ccunknownSource classification: unknown; source threat type is botnet_cc.
hxxps://45[.]11[.]57[.]79/Critical100botnet_ccunknownSource classification: unknown; source threat type is botnet_cc.
hxxps://45[.]11[.]57[.]93/Critical100botnet_ccunknownSource classification: unknown; source threat type is botnet_cc.
hxxps://45[.]11[.]57[.]88/Critical100botnet_ccunknownSource classification: unknown; source threat type is botnet_cc.
hxxps://45[.]11[.]57[.]90/Critical100botnet_ccunknownSource classification: unknown; source threat type is botnet_cc.
hxxps://107[.]172[.]15[.]180/Critical100botnet_ccunknownSource classification: unknown; source threat type is botnet_cc.
hxxps://139[.]84[.]215[.]68:8787/Critical100botnet_ccunknownSource classification: unknown; source threat type is botnet_cc.
hxxps://38[.]76[.]219[.]251/Critical100botnet_ccunknownSource classification: unknown; source threat type is botnet_cc.
hxxps://65[.]20[.]92[.]170/Critical100botnet_ccunknownSource classification: unknown; source threat type is botnet_cc.
hxxps://152[.]53[.]129[.]174/Critical100botnet_ccunknownSource classification: unknown; source threat type is botnet_cc.
hxxps://91[.]98[.]45[.]233:8787/Critical100botnet_ccunknownSource classification: unknown; source threat type is botnet_cc.
hxxps://artex[.]daydream[.]click/Critical100botnet_ccunknownSource classification: unknown; source threat type is botnet_cc.
hxxps://codes[.]browse-cdn[.]beerCritical100payload_deliveryunknownSource classification: unknown; source threat type is payload_delivery.
hxxps://biterdigit[.]topCritical100payload_deliverywin.lummaSource classifies this indicator as payload delivery associated with Lumma activity.
hxxps://fonebusters[.]comCritical100payload_deliverywin.lummaSource classifies this indicator as payload delivery associated with Lumma activity.
hxxp://144[.]172[.]118[.]80:443/systemd-journal-resolverCritical100payload_deliveryunknownSource classification: unknown; source threat type is payload_delivery.
hxxp://104[.]194[.]141[.]26:8080/cache.phpCritical100payload_deliveryunknownSource classification: unknown; source threat type is payload_delivery.
hxxps://docsign[.]blog/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload_delivery.
hxxps://claudeearlyaccess-fable[.]cfd/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload_delivery.
hxxps://onchaindocfile[.]com/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload_delivery.
hxxp://garcon[.]wtf/L1nc0In.phpCritical100botnet_ccwin.dcratSource classifies this indicator as botnet command-and-control associated with Dcrat activity.
hxxps://medlarportcullis[.]org/proxy/beta-schemaCritical100payload_deliveryjs.smartapesgSource classifies this indicator as payload delivery associated with Smartapesg activity.
hxxps://medlarportcullis[.]org/proxy/token-response.jsCritical100payload_deliveryjs.smartapesgSource classifies this indicator as payload delivery associated with Smartapesg activity.
hxxps://support[.]grovecityelectrician[.]com/ZtoCkR34YfgC+DijUe0usxWzZrNc6DKlUuozqEr4cLNc+Gf9DLZv8gG2erMbCritical100payload_deliveryjs.fakeupdatesSource classifies this indicator as payload delivery associated with Fakeupdates activity.
hxxps://45[.]195[.]76[.]159/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload_delivery.
hxxps://www[.]tdkder[.]org/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload_delivery.
hxxps://154[.]222[.]16[.]220/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload_delivery.
hxxps://jdaram[.]com/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload_delivery.
hxxps://191[.]217[.]250[.]228/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload_delivery.
hxxps://156[.]238[.]245[.]115/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload_delivery.
hxxps://nrhfmg[.]top/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload_delivery.
hxxps://cshsus[.]top/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload_delivery.
hxxps://bsoozasyoudao[.]top/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload_delivery.
hxxps://mceahn[.]top/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload_delivery.
hxxps://xsadcasyiwaiwai[.]top/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload_delivery.
hxxps://daraleilm[.]com/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload_delivery.
hxxps://relay-3f9c71[.]kartohaantoha36-6a9[.]workers[.]dev/reportCritical100botnet_ccunknownSource classification: unknown; source threat type is botnet_cc.
hxxps://relay-3f9c71[.]kartohaantoha36-6a9[.]workers[.]dev/configCritical100botnet_ccunknownSource classification: unknown; source threat type is botnet_cc.
hxxps://relay-3f9c71[.]kartohaantoha36-6a9[.]workers[.]dev/api/hlam/files/4001Critical100botnet_ccunknownSource classification: unknown; source threat type is botnet_cc.
hxxps://relay-mirror[.]kartohaantoha36-6a9[.]workers[.]dev/api/hlam/files/4001Critical100botnet_ccunknownSource classification: unknown; source threat type is botnet_cc.
hxxps://atttowing[.]com[.]au/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload_delivery.
hxxps://microsofttelemetryservices[.]st/api/bundleCritical100botnet_ccunknownSource classification: unknown; source threat type is botnet_cc.
hxxps://duuacmc[.]top/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload_delivery.
hxxps://almarsagroup[.]ae/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload_delivery.
hxxps://cube-60[.]com/f/3ouaaio6tobacvyfqoejza/sul9ec1iCritical100payload_deliveryosx.amosSource classifies this indicator as payload delivery associated with Amos activity.
hxxps://cube-60[.]com/curl/f39ks7h9j63/dcz317k2f1l85zbtwoe271.jsonCritical100payload_deliveryosx.amosSource classifies this indicator as payload delivery associated with Amos activity.
hxxps://gate-air[.]com/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload_delivery.
hxxps://sunstatehvac[.]com/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload_delivery.
hxxps://www[.]dannycasey[.]ie/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload_delivery.
hxxps://nandhini-pearl[.]in/Critical90payload_deliveryunknownSource classification: unknown; source threat type is payload_delivery.
hxxps://fern46[.]com/curl/1to6141b0p/lgk1rfayfis7z0qtqtrp.jsonCritical100payload_deliveryosx.amosSource classifies this indicator as payload delivery associated with Amos activity.
hxxps://fern46[.]com/f/vrhqljbnscwhbyhltuwmsq/t2990cmjCritical100payload_deliveryosx.amosSource classifies this indicator as payload delivery associated with Amos activity.
hxxps://2[.]29[.]151[.]245/Critical100botnet_ccwin.vidarSource classifies this indicator as botnet command-and-control associated with Vidar activity.
hxxps://95[.]216[.]197[.]0/Critical100botnet_ccwin.vidarSource classifies this indicator as botnet command-and-control associated with Vidar activity.
hxxps://2[.]29[.]145[.]248/Critical100botnet_ccwin.vidarSource classifies this indicator as botnet command-and-control associated with Vidar activity.
hxxps://2[.]29[.]159[.]106/Critical100botnet_ccwin.vidarSource classifies this indicator as botnet command-and-control associated with Vidar activity.
hxxps://2[.]29[.]157[.]217/Critical100botnet_ccwin.vidarSource classifies this indicator as botnet command-and-control associated with Vidar activity.
hxxps://159[.]69[.]176[.]1/Critical100botnet_ccwin.vidarSource classifies this indicator as botnet command-and-control associated with Vidar activity.
hxxps://2[.]29[.]152[.]8/Critical100botnet_ccwin.vidarSource classifies this indicator as botnet command-and-control associated with Vidar activity.
hxxps://cr1ymiykt1zwu345wf[.]pages[.]dev/win/index.php?vq=WJp2R4rq8ulFJ6pLHdRutVREVDZ1aVVwa1AwM2ptd053aGpIZjZ4Y3ZVdjEveW9DcDBCejRKaW4wcEU5a1VVdlUwQTFVVmdxYlBjN21TSFBqZXpPVU8zbWtLcmdCMlVKdG9nOEJmWVp4TzI4T1F6empmdTI3dStTbHUxMmFQZHBLd2E5U2dLVkwzTGpFWTI2L1l4am9TQ0pqVnpFcm5qWURzUEZubDVMNzBMb05aQ1NZbHBNTnJYNlRjblgyTU9ValgrUkxvOHo4Q1JPQXczRg==Critical100payload_deliverywin.strelastealerSource classifies this indicator as payload delivery associated with Strelastealer activity.
hxxp://ci797165[.]tw1[.]ru/L1nc0In.phpCritical100botnet_ccwin.dcratSource classifies this indicator as botnet command-and-control associated with Dcrat activity.
hxxps://k9[.]alien203[.]org/w/Critical100botnet_ccwin.vidarSource classifies this indicator as botnet command-and-control associated with Vidar activity.
hxxps://k9[.]alien203[.]org/mk/Critical100botnet_ccwin.vidarSource classifies this indicator as botnet command-and-control associated with Vidar activity.

Source: User-provided IOC feed export dated 5 November 2026. Threat Score is the source-provided confidence value, not an independently calculated CyberRakshakLabs score. IOCs are defanged for safe publication.

Threat Score values are source-provided confidence values, not independently calculated by CyberRakshakLabs. Indicators are defanged for safe publication.