← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
URLHaus data - 18-12-2025 (Part 3)
WHITE CyberHunterAutoFeed 2025-12-19 Modified: 2026-01-18
310
IOCs
HIGH VOLUME
ClearFakeelfgeofencedmiraiua-wgetUSAx8632-bitmipsMozic2-monitor-autodropped-by-amadeyfbf543armshSuperHopendirlnkxml-opendircensysCobaltStrikebackdoorsshdkithajimestealerSVCStealerapkbankerx86-32asciipowershellps1redir-302exeVidarbatbashCVE-2025-55182jsreact2shellAmadeyClickFixDeerStealerCoinMinerzipEncodedGuLoaderratRemcosRATgafgytRondoDoxdonutloadermsiValleyRAT
Indicators of Compromise (310)
All URL hostname domain
TYPEINDICATORDESCRIPTIONCREATED
URL http://115.48.153.168:52218/i — 2025-12-19
URL http://115.50.209.46:56960/i — 2025-12-19
URL https://proof.calculu5eve7y.ru/1dyfazy7 — 2025-12-19
hostname proof.calculu5eve7y.ru — 2025-12-19
URL http://222.140.185.248:39460/i — 2025-12-19
URL https://proof.calculu5eve7y.ru/tjv3gebr — 2025-12-19
URL http://123.190.31.208:37039/i — 2025-12-19
URL http://115.48.147.104:53113/i — 2025-12-19
URL http://115.63.182.240:38593/i — 2025-12-19
URL http://42.228.34.152:43600/i — 2025-12-19
URL http://58.45.56.80:34011/i — 2025-12-19
URL http://42.224.30.249:37587/i — 2025-12-19
URL http://61.54.234.136:36841/i — 2025-12-19
URL http://222.141.82.94:54220/i — 2025-12-19
URL http://42.226.223.134:36351/i — 2025-12-19
URL http://115.61.119.12:58726/i — 2025-12-19
URL https://delta2.calculu5eve7y.ru/kmzc8p1m — 2025-12-19
hostname delta2.calculu5eve7y.ru — 2025-12-19
URL https://delta2.calculu5eve7y.ru/fzqbfm29 — 2025-12-19
URL http://196.251.107.104/8.exe — 2025-12-19
URL https://cap.opetap.com/payload.ps1 — 2025-12-19
hostname cap.opetap.com — 2025-12-19
URL http://78.40.209.164:5506/dk.vbs — 2025-12-19
URL http://113.231.229.227:51081/bin.sh — 2025-12-19
URL http://37.55.197.206:38606/i — 2025-12-19
URL https://www.mediafire.com/file/swsvi3myvazd1qm/Setup.exe — 2025-12-19
URL https://sigma.calculu5eve7y.ru/7uhzz3vm — 2025-12-19
hostname sigma.calculu5eve7y.ru — 2025-12-19
URL http://182.116.15.122:51834/bin.sh — 2025-12-19
URL http://42.58.148.123:49208/i — 2025-12-19
URL https://sigma.calculu5eve7y.ru/3th00cy8 — 2025-12-19
URL http://42.53.242.110:52966/bin.sh — 2025-12-19
URL http://110.38.221.182:59433/bin.sh — 2025-12-19
URL https://lumen.sv0orchond0.ru/roaouhjr — 2025-12-19
hostname lumen.sv0orchond0.ru — 2025-12-19
URL http://39.74.81.179:36456/i — 2025-12-19
URL http://42.226.223.134:36351/bin.sh — 2025-12-19
URL https://comptech.sbs/nw.exe — 2025-12-19
domain comptech.sbs — 2025-12-19
URL https://comptech.sbs/am.exe — 2025-12-19
URL https://synap3.sv0orchond0.ru/z0edhcyb — 2025-12-19
hostname synap3.sv0orchond0.ru — 2025-12-19
URL http://110.37.90.11:44575/bin.sh — 2025-12-19
URL https://comptech.sbs/xmrig-6.22.3-msvc-win64.zip — 2025-12-19
URL https://chord.sv0orchond0.ru/djcrmqg4 — 2025-12-19
hostname chord.sv0orchond0.ru — 2025-12-19
URL https://organ.sv0orchond0.ru/gx5xi9u8 — 2025-12-19
hostname organ.sv0orchond0.ru — 2025-12-19
URL http://124.94.198.199:36245/i — 2025-12-19
URL https://organ.sv0orchond0.ru/gkf1c0lx — 2025-12-19
URL http://42.85.209.178:33301/bin.sh — 2025-12-19
URL http://115.52.188.93:49765/i — 2025-12-19
URL http://62.60.135.5/lmceuo — 2025-12-19
URL https://rampart.obor1shwron8.ru/zl9ghv8z — 2025-12-19
hostname rampart.obor1shwron8.ru — 2025-12-19
URL http://196.191.104.40:37960/i — 2025-12-19
URL https://rampart.obor1shwron8.ru/zjfz3bg4 — 2025-12-19
URL http://125.40.8.140:40382/i — 2025-12-19
URL https://drive.google.com/uc?export=download&id=1t3a96sD_NQ0DaW_8e8uonSXeJru3qFG3 — 2025-12-19
URL http://196.251.107.104/86.exe — 2025-12-19
URL http://196.251.107.104/97.exe — 2025-12-19
URL http://196.251.107.104/95.exe — 2025-12-19
URL http://196.251.107.104/94.exe — 2025-12-19
URL http://196.251.107.104/89.exe — 2025-12-19
URL http://196.251.107.104/96.exe — 2025-12-19
URL http://196.251.107.104/99.exe — 2025-12-19
URL http://196.251.107.104/100.exe — 2025-12-19
URL http://196.251.107.104/91.exe — 2025-12-19
URL http://196.251.107.104/83.exe — 2025-12-19
URL http://196.251.107.104/84.exe — 2025-12-19
URL http://196.251.107.104/92.exe — 2025-12-19
URL http://196.251.107.104/90.exe — 2025-12-19
URL http://196.251.107.104/93.exe — 2025-12-19
URL http://196.251.107.104/85.exe — 2025-12-19
URL http://196.251.107.104/98.exe — 2025-12-19
URL http://196.251.107.104/81.exe — 2025-12-19
URL http://196.251.107.104/87.exe — 2025-12-19
URL http://196.251.107.104/82.exe — 2025-12-19
URL http://196.251.107.104/88.exe — 2025-12-19
URL https://sentry5.obor1shwron8.ru/4ylkytvt — 2025-12-19
hostname sentry5.obor1shwron8.ru — 2025-12-19
URL http://182.127.153.201:51042/bin.sh — 2025-12-19
URL https://sentry5.obor1shwron8.ru/hcjndsi6 — 2025-12-19
URL https://ward.obor1shwron8.ru/1pi162st — 2025-12-19
hostname ward.obor1shwron8.ru — 2025-12-19
URL http://188.149.206.91:48117/bin.sh — 2025-12-19
URL http://115.52.188.93:49765/bin.sh — 2025-12-19
URL http://196.191.104.40:37960/bin.sh — 2025-12-19
URL https://muster.b2ckymembe7.ru/3i5u6ulw — 2025-12-19
hostname muster.b2ckymembe7.ru — 2025-12-19
URL http://41.231.37.153/rondo.armv7l — 2025-12-19
URL http://41.231.37.153/rondo.armebhf — 2025-12-19
URL http://41.231.37.153/rondo.mipsel — 2025-12-19
URL http://41.231.37.153/rondo.armv6l — 2025-12-19
URL http://41.231.37.153/rondo.sparc — 2025-12-19
URL http://41.231.37.153/rondo.armeb — 2025-12-19
URL http://41.231.37.153/rondo.i486 — 2025-12-19
URL http://41.231.37.153/rondo.armv4l — 2025-12-19
URL http://41.231.37.153/rondo.mips — 2025-12-19
URL http://41.231.37.153/rondo.x86_64 — 2025-12-19
URL http://41.231.37.153/rondo.i586 — 2025-12-19
URL http://41.231.37.153/rondo.armv5l — 2025-12-19
URL http://41.231.37.153/rondo.m68k — 2025-12-19
URL http://41.231.37.153/rondo.powerpc — 2025-12-19
URL http://41.231.37.153/rondo.sh4 — 2025-12-19
URL http://41.231.37.153/rondo.aqu.sh — 2025-12-19
URL http://41.231.37.153/rondo.i686 — 2025-12-19
URL http://41.231.37.153/rondo.arc700 — 2025-12-19
URL https://muster.b2ckymembe7.ru/kdc5zeon — 2025-12-19
URL http://175.167.236.94:53344/i — 2025-12-19
URL http://119.117.105.51:50652/i — 2025-12-19
URL http://kpq.at/d — 2025-12-19
domain kpq.at — 2025-12-19
URL http://kpq.at/f — 2025-12-19
URL http://117.209.25.252:45810/i — 2025-12-19
URL https://roll.b2ckymembe7.ru/5cw4h9ng — 2025-12-19
hostname roll.b2ckymembe7.ru — 2025-12-19
URL http://125.41.224.98:52569/i — 2025-12-19
URL https://roll.b2ckymembe7.ru/f2mwnvbd — 2025-12-19
URL http://78.40.209.164:5506/JFEXKAKW.msi — 2025-12-19
URL http://198.144.189.90/kvariant.spc — 2025-12-19
URL http://198.144.189.90/arm5.b — 2025-12-19
URL http://198.144.189.90/mpsl.b — 2025-12-19
URL http://198.144.189.90/arm.b — 2025-12-19
URL http://198.144.189.90/arm7.b — 2025-12-19
URL http://198.144.189.90/ssh — 2025-12-19
URL https://guild2.b2ckymembe7.ru/6dgrs51t — 2025-12-19
hostname guild2.b2ckymembe7.ru — 2025-12-19
URL http://113.228.85.133:56245/i — 2025-12-19
URL https://badge.b2ckymembe7.ru/cvk2xhiq — 2025-12-19
hostname badge.b2ckymembe7.ru — 2025-12-19
URL http://198.144.189.90/sh — 2025-12-19
URL http://198.144.189.90/kvariant.m68k — 2025-12-19
URL http://198.144.189.90/kvariant.x86 — 2025-12-19
URL http://198.144.189.90/kvariant.arm — 2025-12-19
URL http://198.144.189.90/kvariant.arm7 — 2025-12-19
URL http://198.144.189.90/kvariant.mips — 2025-12-19
URL http://198.144.189.90/kvariant.mpsl — 2025-12-19
URL http://198.144.189.90/kvariant.arm6 — 2025-12-19
URL http://198.144.189.90/kvariant.sh4 — 2025-12-19
URL http://198.144.189.90/zgp — 2025-12-19
URL http://198.144.189.90/kvariant.ppc — 2025-12-19
URL http://198.144.189.90/kvariant.arm5 — 2025-12-19
URL http://198.144.189.90/kvariant.i686 — 2025-12-19
URL http://198.144.189.90/kvariant.i586 — 2025-12-19
URL https://egepefr.ru/api/loader/download_loader — 2025-12-19
domain egepefr.ru — 2025-12-19
URL https://pepgauge.com/api/loader/download_loader — 2025-12-19
domain pepgauge.com — 2025-12-19
URL http://69.169.102.38:8080/HWID-SPOOFER.zip — 2025-12-19
URL https://pegasustour.ru/api/loader/download_loader — 2025-12-19
domain pegasustour.ru — 2025-12-19
URL https://online.dps-detector.ru/files/%D0%94%D0%9F%D0%A1%20%D0%94%D0%B5%D1%82%D0%B5%D0%BA%D1%82%D0%BE%D1%80%20%20%D0%90%D0%BD%D1%82%D0%B8%D1%80%D0%B0%D0%B4%D0%B0%D1%80%20%D0%93%D0%90%D0%98.apk — 2025-12-19
hostname online.dps-detector.ru — 2025-12-19
URL https://dpshelp.shop/assets/%D0%A0%D0%B0%D0%B4%D0%B0%D1%80%20%D0%94%D0%9F%D0%A1.apk — 2025-12-19
domain dpshelp.shop — 2025-12-19
URL http://178.16.55.189/files/7693449169/LeCuJNa.exe — 2025-12-19
URL http://124.238.116.41:54859/i — 2025-12-19
URL https://badge.b2ckymembe7.ru/5aagzizm — 2025-12-19
URL http://125.41.224.98:52569/bin.sh — 2025-12-19
URL http://198.144.189.90/bins/telnet.i586 — 2025-12-19
URL http://175.167.236.94:53344/bin.sh — 2025-12-19
URL https://cohort.b2ckymembe7.ru/0o48tghd — 2025-12-19
hostname cohort.b2ckymembe7.ru — 2025-12-19
URL http://198.144.189.90/bins/telnet.i686 — 2025-12-19
URL http://59.184.254.173:51815/bin.sh — 2025-12-19
URL https://simmer.s0uponwe2ther.ru/if4eeax0 — 2025-12-19
hostname simmer.s0uponwe2ther.ru — 2025-12-19
URL http://175.167.184.131:45787/i — 2025-12-19
URL https://simmer.s0uponwe2ther.ru/vckdea5b — 2025-12-19
URL http://117.223.22.15:60913/i — 2025-12-19
URL https://stir3.s0uponwe2ther.ru/uc2b9sgv — 2025-12-19
hostname stir3.s0uponwe2ther.ru — 2025-12-19
URL http://60.18.103.79:41892/i — 2025-12-19
URL http://31.173.12.36:47969/bin.sh — 2025-12-19
URL http://110.39.225.86:49522/i — 2025-12-19
URL http://42.239.227.236:33535/bin.sh — 2025-12-19
URL https://stir3.s0uponwe2ther.ru/13dkih2s — 2025-12-19
URL http://222.140.159.11:55422/i — 2025-12-19
URL https://ladle.s0uponwe2ther.ru/8kqp6o89 — 2025-12-19
hostname ladle.s0uponwe2ther.ru — 2025-12-19
URL http://117.223.22.15:60913/bin.sh — 2025-12-19
URL https://ladle.s0uponwe2ther.ru/rtiebclz — 2025-12-19
URL http://58.174.48.169:43308/bin.sh — 2025-12-19
URL http://42.235.60.82:60271/i — 2025-12-19
URL http://175.167.184.131:45787/bin.sh — 2025-12-19
URL https://broth.s0uponwe2ther.ru/rf23ug68 — 2025-12-19
hostname broth.s0uponwe2ther.ru — 2025-12-19
URL https://broth.s0uponwe2ther.ru/18isq188 — 2025-12-19
URL http://42.231.248.130:35484/i — 2025-12-19
URL http://124.238.116.41:54859/bin.sh — 2025-12-19
URL https://pfad.c2tt1eschlen.ru/p3y315k5 — 2025-12-19
hostname pfad.c2tt1eschlen.ru — 2025-12-19
URL http://196.188.76.254:36213/i — 2025-12-19
URL https://pfad.c2tt1eschlen.ru/zp2sheua — 2025-12-19
URL http://123.5.187.37:58399/i — 2025-12-19
URL http://178.16.55.189/files/8411322355/7X7EgCn.exe — 2025-12-19
URL https://feld2.c2tt1eschlen.ru/h6h3xigx — 2025-12-19
hostname feld2.c2tt1eschlen.ru — 2025-12-19
URL http://115.55.132.55:59799/i — 2025-12-19
URL http://219.155.228.158:46010/i — 2025-12-19
URL https://rhein.c2tt1eschlen.ru/072hq7nn — 2025-12-19
hostname rhein.c2tt1eschlen.ru — 2025-12-19
URL https://rhein.c2tt1eschlen.ru/9opxmc03 — 2025-12-19
URL http://110.36.15.184:43465/bin.sh — 2025-12-19
URL http://175.148.3.232:39941/bin.sh — 2025-12-19
URL https://lathe.j1tmech2nic.ru/jshbmrhx — 2025-12-19
hostname lathe.j1tmech2nic.ru — 2025-12-19
URL http://123.189.154.117:37341/bin.sh — 2025-12-19
URL http://123.5.187.37:58399/bin.sh — 2025-12-19
URL https://lathe.j1tmech2nic.ru/nj2h98fj — 2025-12-19
URL http://222.140.159.11:55422/bin.sh — 2025-12-19
URL http://196.188.76.254:36213/bin.sh — 2025-12-19
URL http://42.227.23.153:53390/bin.sh — 2025-12-19
URL http://42.231.208.26:35882/bin.sh — 2025-12-19
URL https://torque.j1tmech2nic.ru/z7pr3hvn — 2025-12-19
hostname torque.j1tmech2nic.ru — 2025-12-19
URL http://123.129.135.167:54266/i — 2025-12-19
URL http://42.224.78.182:34715/bin.sh — 2025-12-19
URL https://torque.j1tmech2nic.ru/31cuug8v — 2025-12-19
URL http://42.234.151.74:56443/i — 2025-12-19
URL http://219.155.228.158:46010/bin.sh — 2025-12-19
URL http://182.113.33.254:48859/i — 2025-12-19
URL https://cam1.j1tmech2nic.ru/8nyustcq — 2025-12-19
hostname cam1.j1tmech2nic.ru — 2025-12-19
URL https://cam1.j1tmech2nic.ru/jqfz5ln7 — 2025-12-19
URL http://123.188.7.207:37335/i — 2025-12-19
URL http://46.200.34.50:47722/i — 2025-12-19
URL http://42.231.248.130:35484/bin.sh — 2025-12-19
URL http://61.52.218.56:57387/bin.sh — 2025-12-19
URL http://2.187.6.236:51400/.i — 2025-12-19
URL http://178.16.55.189/files/1103877553/wyBzFsx.exe — 2025-12-19
URL https://gear.j1tmech2nic.ru/xpokmg0n — 2025-12-19
hostname gear.j1tmech2nic.ru — 2025-12-19
URL http://115.48.149.40:48889/bin.sh — 2025-12-19
URL https://myrmex3.ent0molobo1t.ru/ctjy97ww — 2025-12-19
hostname myrmex3.ent0molobo1t.ru — 2025-12-19
URL http://110.37.25.195:51517/i — 2025-12-19
URL http://123.190.31.208:37039/bin.sh — 2025-12-19
URL http://42.177.211.254:57861/bin.sh — 2025-12-19
URL https://spore.ent0molobo1t.ru/6qpwmrur — 2025-12-19
hostname spore.ent0molobo1t.ru — 2025-12-19
URL http://182.113.33.254:48859/bin.sh — 2025-12-19
URL http://45.125.66.56/arm4 — 2025-12-19
URL https://larva.ent0molobo1t.ru/omwccffb — 2025-12-19
hostname larva.ent0molobo1t.ru — 2025-12-19
URL http://194.106.197.80:49207/i — 2025-12-19
URL https://prion5.ent0molobo1t.ru/9lkcec6r — 2025-12-19
hostname prion5.ent0molobo1t.ru — 2025-12-19
URL http://39.74.246.35:35826/i — 2025-12-19
URL http://37.55.197.206:38606/bin.sh — 2025-12-19
URL https://prion5.ent0molobo1t.ru/br7hqtkv — 2025-12-19
URL http://117.205.166.149:45859/bin.sh — 2025-12-19
URL https://thorax.ent0molobo1t.ru/7ijmzr0p — 2025-12-19
hostname thorax.ent0molobo1t.ru — 2025-12-19
URL http://182.127.68.104:54480/bin.sh — 2025-12-19
URL http://115.55.10.92:51604/i — 2025-12-19
URL http://110.38.222.159:57858/i — 2025-12-19
URL https://9x.windl1nk.ru/du0q1tz3 — 2025-12-19
hostname 9x.windl1nk.ru — 2025-12-19
URL https://9x.windl1nk.ru/qylpb804 — 2025-12-19
URL http://42.176.248.199:44200/i — 2025-12-19
URL https://puf0.windl1nk.ru/hoskwsno — 2025-12-19
hostname puf0.windl1nk.ru — 2025-12-19
URL https://puf0.windl1nk.ru/drp7xppb — 2025-12-19
URL http://27.207.1.247:50213/i — 2025-12-19
URL http://194.106.197.80:49207/bin.sh — 2025-12-19
URL http://60.18.105.70:40289/i — 2025-12-19
URL https://copper.windl1nk.ru/iblgksgy — 2025-12-19
hostname copper.windl1nk.ru — 2025-12-19
URL http://125.44.245.40:54393/bin.sh — 2025-12-19
URL http://39.74.246.35:35826/bin.sh — 2025-12-19
URL https://copper.windl1nk.ru/3bvama3i — 2025-12-19
URL http://221.202.185.252:46520/bin.sh — 2025-12-19
URL http://220.201.155.131:49861/i — 2025-12-19
URL http://60.22.8.56:51142/i — 2025-12-19
URL https://hth5.windl1nk.ru/ekfsoi5e — 2025-12-19
hostname hth5.windl1nk.ru — 2025-12-19
URL https://hth5.windl1nk.ru/1qas3ro6 — 2025-12-19
URL http://42.234.151.74:56443/bin.sh — 2025-12-19
URL http://42.176.248.199:44200/bin.sh — 2025-12-19
URL http://27.207.1.247:50213/bin.sh — 2025-12-19
URL https://mint.wave5hift.ru/zref5tdz — 2025-12-19
hostname mint.wave5hift.ru — 2025-12-19
URL https://mint.wave5hift.ru/onk3tvvu — 2025-12-19
URL http://182.113.43.105:39838/i — 2025-12-19
URL http://60.18.105.70:40289/bin.sh — 2025-12-19
URL https://flare.wave5hift.ru/0yjzs2cd — 2025-12-19
hostname flare.wave5hift.ru — 2025-12-19
URL https://flare.wave5hift.ru/pcx3ca7s — 2025-12-19
URL http://42.227.23.153:53390/i — 2025-12-19
URL http://110.37.123.210:48466/bin.sh — 2025-12-19
URL https://zbas.wave5hift.ru/fr8w7519 — 2025-12-19
hostname zbas.wave5hift.ru — 2025-12-19
URL http://220.201.155.131:49861/bin.sh — 2025-12-19
URL http://182.127.103.88:45975/i — 2025-12-19
URL https://zbas.wave5hift.ru/iou3kftd — 2025-12-19
URL http://123.8.93.143:41885/i — 2025-12-19
URL https://ahp.wave5hift.ru/xu1dedmy — 2025-12-19
hostname ahp.wave5hift.ru — 2025-12-19
URL http://42.238.136.132:51932/i — 2025-12-19
URL http://110.37.81.8:48961/i — 2025-12-19
URL http://182.113.43.105:39838/bin.sh — 2025-12-19
URL https://lo68g.darkw1re.ru/id63z2v5 — 2025-12-19
hostname lo68g.darkw1re.ru — 2025-12-19
URL https://lo68g.darkw1re.ru/x8fxwkk3 — 2025-12-19
URL http://42.55.7.188:33992/bin.sh — 2025-12-19
URL http://182.127.103.88:45975/bin.sh — 2025-12-19
URL http://124.95.45.192:41858/i — 2025-12-19
URL http://116.138.177.26:44440/i — 2025-12-19
References (1)
↗ https://urlhaus.abuse.ch/browse/