← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
Proton66 Campaign Exposes Global Sectors via Mass Scanning and Fresh CVE Exploits
WHITE ESFBSOCTCR 2025-07-22 Modified: 2025-08-21
161
IOCs
HIGH VOLUME
Indicators of Compromise (161)
All CVE domain hostname FileHash-SHA256 URL
TYPEINDICATORDESCRIPTIONCREATED
CVE CVE-2024-10914 — 2025-07-22
CVE CVE-2024-41713 — 2025-07-22
CVE CVE-2024-55591 — 2025-07-22
CVE CVE-2025-0108 — 2025-07-22
CVE CVE-2025-24472 — 2025-07-22
domain playstors-france.com — 2025-07-22
domain us-playmarket.com — 2025-07-22
domain www-kodi.com — 2025-07-22
hostname billing.hostway.ru — 2025-07-22
hostname my.31337.hk — 2025-07-22
hostname my.31337.ru — 2025-07-22
domain ipify.org — 2025-07-22
domain ipinfo.io — 2025-07-22
FileHash-SHA256 40b75aa3c781f89d55ebff1784ff7419083210e01379bea4f5ef7e05a8609c38 — 2025-07-22
FileHash-SHA256 7d1de2f4ab7c35b53154dc490ad3e7ad19ff04cfaa10b1828beba1ffadbaf1ab — 2025-07-22
FileHash-SHA256 7f2319f4e340b3877e34d5a06e09365f6356de5706e7a78e367934b8a58ed0e7 — 2025-07-22
FileHash-SHA256 d682d5afbbbd9689d5f30db8576b02962af3c733bd01b8f220ff344a9c00abfd — 2025-07-22
FileHash-SHA256 ea71175815d4e409a5d5fe6b1977458687c5d0ea39b03aa6c9dc78d9bb4254f9 — 2025-07-22
FileHash-SHA256 f1806e634fa838fa8368f256dae59a0960f3ce5d1bcb7f9ba95589d55ab7d0ac — 2025-07-22
hostname distracted-goldwasser.193-143-1-139.plesk.page — 2025-07-22
domain informatie-update.com — 2025-07-22
hostname spot.informatie-update.com — 2025-07-22
domain web-supportacc.com — 2025-07-22
URL http://193.143.1.139/Ujdu8jjooue — 2025-07-22
URL http://193.143.1.139/Ujdu8jjooue/ — 2025-07-22
URL http://193.143.1.139/Ujdu8jjooue/biweax.php — 2025-07-22
URL http://193.143.1.139/Ujdu8jjooue/biweax.php. — 2025-07-22
URL http://193.143.1.139/Ujdu8jjooue/biweax.phpeight — 2025-07-22
URL https://spot.informatie-update.com/ — 2025-07-22
URL https://web-supportacc.com/ — 2025-07-22
domain 1bnpparibas.com — 2025-07-22
domain 2bnpparibas.com — 2025-07-22
domain activer-macle.com — 2025-07-22
domain coiis-france.com — 2025-07-22
domain comptebnp.com — 2025-07-22
domain distrib-france.com — 2025-07-22
domain etape-macledigitale.com — 2025-07-22
domain mondiairelay-distrib.com — 2025-07-22
domain mufg-customer0.net — 2025-07-22
domain mufg-layout.pro — 2025-07-22
domain mufg-marketresearch.shop — 2025-07-22
domain mufg-motivate.pro — 2025-07-22
domain mufg-policy.com — 2025-07-22
domain mufg-publicity.co — 2025-07-22
domain mufgdirector.vip — 2025-07-22
domain mufgmtryh.vip — 2025-07-22
domain mufgptyhs.pro — 2025-07-22
domain mufgrzazc.pro — 2025-07-22
domain mufgsknzy.vip — 2025-07-22
domain mufgsryab.info — 2025-07-22
domain muxytnqwe.click — 2025-07-22
domain paycustomer1.support — 2025-07-22
domain verision-info.com — 2025-07-22
URL http://193.143.1.205/davwwwroot/182781408328798.dll — 2025-07-22
URL http://193.143.1.205/invoice.php — 2025-07-22
URL http://193.143.1.205/up.php — 2025-07-22
URL http://193.143.1.205/up.php. — 2025-07-22
URL http://index.paycustomer1.support/cgi-sys/defaultwebpage.cgi — 2025-07-22
URL http://mufg-customer0.net/cgi-sys/defaultwebpage.cgi — 2025-07-22
URL http://mufg-policy.com/cgi-sys/defaultwebpage.cgi — 2025-07-22
URL http://mufgsknzy.vip/cgi-sys/defaultwebpage.cgi — 2025-07-22
URL http://muxytnqwe.click/ — 2025-07-22
URL http://paycustomer1.support/cgi-sys/defaultwebpage.cgi — 2025-07-22
URL https://distrib-france.com/ — 2025-07-22
URL https://mondiairelay-distrib.com/ — 2025-07-22
URL https://mondiairelay-distrib.com/pac/ — 2025-07-22
URL https://mondiairelay-distrib.com/pac/calcul.php — 2025-07-22
URL https://mufg-customer0.net/ — 2025-07-22
URL https://mufgsknzy.vip/ — 2025-07-22
URL https://muxytnqwe.click — 2025-07-22
URL https://paycustomer1.support/ — 2025-07-22
FileHash-SHA256 c470f90fe5869d75f5fd5c61186b308fe7ce1726a1ef26c4beed6c48b97ede3c — 2025-07-22
FileHash-SHA256 1c60cdf89c0fe7148e3e52ccfa320f3d98ee41fdcb1b46051e583efe1b968e5c — 2025-07-22
domain adst2.com — 2025-07-22
domain fordclientslogin.com — 2025-07-22
domain shawbrookapplication.com — 2025-07-22
domain shawbrooksaving.com — 2025-07-22
URL http://91.212.166.86/base64.txt — 2025-07-22
URL http://91.212.166.86/base64.txt/ — 2025-07-22
URL http://91.212.166.86/htdocs.zip — 2025-07-22
URL http://91.212.166.86/htdocs.zip. — 2025-07-22
URL http://informatie-update.com/ — 2025-07-22
URL http://shawbrooksaving.com/ — 2025-07-22
URL https://informatie-update.com/ — 2025-07-22
domain cdn-fr-store.icu — 2025-07-22
domain empressas-bbva-es.com — 2025-07-22
domain es-appplaystore.com — 2025-07-22
domain es-playmarket.com — 2025-07-22
domain eu-playmarket.com — 2025-07-22
domain eu-playstore.com — 2025-07-22
domain france-eu-update.com — 2025-07-22
domain france-playmarket.com — 2025-07-22
domain frenchmerketplace.com — 2025-07-22
domain itsme247.network — 2025-07-22
domain my-tasjeel-ae.com — 2025-07-22
domain my-wpenglne.com — 2025-07-22
domain orion-manegewp.com — 2025-07-22
domain playmarket-es.com — 2025-07-22
domain playstore-fr.com — 2025-07-22
domain playstore-spain.com — 2025-07-22
domain playstores-france.com — 2025-07-22
domain playstores-spain.com — 2025-07-22
domain spain-playmarket.com — 2025-07-22
domain storefix-fr.com — 2025-07-22
domain topuplfow.com — 2025-07-22
domain trustedcloudmarket.com — 2025-07-22
domain updatestore-spain.com — 2025-07-22
URL http://empressas-bbva-es.com — 2025-07-22
URL http://es-playmarket.com — 2025-07-22
URL http://eu-playstore.com — 2025-07-22
URL http://itsme247.network — 2025-07-22
URL http://my-wpenglne.com — 2025-07-22
URL http://storefix-fr.com/ — 2025-07-22
URL http://topuplfow.com/ — 2025-07-22
URL http://www-kodi.com/ — 2025-07-22
URL http://www-kodi.com/getupd.js — 2025-07-22
URL https://empressas-bbva-es.com — 2025-07-22
URL https://es-playmarket.com — 2025-07-22
URL https://eu-playstore.com — 2025-07-22
URL https://itsme247.network — 2025-07-22
URL https://my-wpenglne.com — 2025-07-22
URL https://storefix-fr.com/ — 2025-07-22
URL https://www-kodi.com/droid.js — 2025-07-22
URL https://www-kodi.com/getfr.js — 2025-07-22
URL https://www.my-tasjeel-ae.com — 2025-07-22
URL https://www.topuplfow.com — 2025-07-22
domain hostway.ru — 2025-07-22
URL http://www-kodi.com/droid.js — 2025-07-22
URL http://www-kodi.com/getfr.js — 2025-07-22
URL http://www.www-kodi.com — 2025-07-22
URL https://www-kodi.com/download.php — 2025-07-22
URL https://www.www-kodi.com — 2025-07-22
domain 31337.hk — 2025-07-22
domain 31337.ru — 2025-07-22
FileHash-SHA256 1318b2216af28fa2131c0a2159f693203000c87068ecc4e0701b843b34cd5112 — 2025-07-22
FileHash-SHA256 18210027c4b69aedd7466baf6d5867a8cfbbd1ee273017087691008019b7a5cc — 2025-07-22
FileHash-SHA256 2e1b0b94fc9331c199bb92f06367156ba713b94f5a84d314d7bfb0b5347a428c — 2025-07-22
FileHash-SHA256 39a84d15fac0e8e00ec7241bb1da1ecb208017170a5ae8fd5fb72e55d1832cbd — 2025-07-22
FileHash-SHA256 3b318def9719835bd266f3c67413b707e25652b4c3231eb0abbce27855fa1a9b — 2025-07-22
FileHash-SHA256 3b9bfaa6fb597118799425462f0e0c336e04f2866291e70a9b52151fedd8f02c — 2025-07-22
FileHash-SHA256 464fb11364e8c716e19584fe9cb1e64ab1bf5324ddf6e3932bccff3cf91d03d7 — 2025-07-22
FileHash-SHA256 46fd4d83c9117940844962238e7f6c9f6b4f5ba2d977d351e313a7d237a75aa3 — 2025-07-22
FileHash-SHA256 4c898ac2a0626b824e99df56d16d200253495e49748d760640dbb7c05e2f8fdb — 2025-07-22
FileHash-SHA256 83b82149830bb6abb490f060acdc7b82f29572b3d6e674ab93177a83be5aa850 — 2025-07-22
FileHash-SHA256 8865f39ad6d630fffe4a669929a7d25c67218e2500fcd9175c12901391e97578 — 2025-07-22
FileHash-SHA256 8a77f8eafa7bac5de12147e1ea591a090ee7798deb8284965a1d70ff6dbe76b6 — 2025-07-22
FileHash-SHA256 93a6ee2096f5188465fdbb9da1c005307c4064c6c7d0ff071eb6bdce744ed0ed — 2025-07-22
FileHash-SHA256 98072aacfb8bf82cbb53f10c1616c2cc3382cc08dc4c6fc398b4dfcd45d6b4f0 — 2025-07-22
FileHash-SHA256 9aff90edb1345eb33c4ddfbf5f14e90793cfebdaaa7f2b696bf0dd531858fa01 — 2025-07-22
FileHash-SHA256 a981b7c950ddbd8c3a904a351a686607a8237ca41c29e0ba0f53ce38ba25f34b — 2025-07-22
FileHash-SHA256 afd5bf310ba0d24489e7263db1360d2afbaaa6a70806472a9182be35967e2a21 — 2025-07-22
FileHash-SHA256 b1a6052b68a92aa0310f458d5f8a3c809e99d2570c6921b49dcf00e0e875c0b6 — 2025-07-22
FileHash-SHA256 db1d02bb6ecc1a143b42a214749ffd01afeda2cd4bbadd9f011f5b85e323be2f — 2025-07-22
FileHash-SHA256 e86019f1752c3f813de0904a5b5dbdaeb7ff94d8cabe50c1ead9b4c2f706c38b — 2025-07-22
domain plesk.page — 2025-07-22
hostname web.informatie-update.com — 2025-07-22
URL http://spot.informatie-update.com — 2025-07-22
URL http://spot.informatie-update.com/ — 2025-07-22
URL http://web.informatie-update.com/ — 2025-07-22
URL https://spot.informatie-update.com — 2025-07-22
URL https://web.informatie-update.com/ — 2025-07-22
References (1)
↗ Cyber Threat Advisory - Update 2 Proton66 Campaign Exposes Global Sectors via Mass Scanning and Fresh CVE Exploits.pdf