PULSE NAME
Oz Batch: 50 IOCs (avg BDE: 85)
WHITE pduggusa 2026-02-12 Modified: 2026-03-14
15
IOCs
MEDIUM VOLUME
**OTX Pulse Description:** This pulse identifies 50 indicators comprising both domains and IPs associated with a variety of malware families, including ClearFake, AsyncRAT, and Xtreme RAT. The average BDE (Big Data analytics Energy) score is a concerning 85, suggesting high malicious intent. While no specific countries are noted, the presence of these C2 frameworks indicates potential ties to actors operating from regions known for cyber threats, such as China or Russia. BDE Score: 85, detection timestamp: [insert timestamp here].
Indicators of Compromise (15)
All hostname domain
TYPEINDICATORDESCRIPTIONCREATED
hostname ember.quicksavings.coupons BDE: 85 2026-02-12
domain moodleuni.com BDE: 85 2026-02-12
hostname www.polarroute.com BDE: 85 2026-02-12
hostname a13.auaacc2.vip BDE: 85 2026-02-12
hostname a13.auaadd1.vip BDE: 85 2026-02-12
domain gateway001kir.com BDE: 85 2026-02-12
domain mymexico.social BDE: 85 2026-02-12
domain api-gateway-prod.com BDE: 85 2026-02-12
domain mbml-writer-info.info BDE: 85 2026-02-12
domain mmdis-worls.com BDE: 85 2026-02-12
domain sslgateway001.com BDE: 85 2026-02-12
domain microsoft-tools.com BDE: 85 2026-02-12
domain sistemablackatz.com BDE: 85 2026-02-12
domain jariosos.com BDE: 85 2026-02-12
domain darkisq.cyou BDE: 85 2026-02-12